last executing test programs: 2m51.93075746s ago: executing program 1 (id=155): r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(0xffffffffffffffff, 0x0, 0x10d2) write$cgroup_devices(r1, 0x0, 0xffdd) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchdir(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usbip_server_init(0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000080)=""/133, &(0x7f0000000180)=0x85) capset(&(0x7f00000100c0)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x78f4}) 2m49.297666004s ago: executing program 1 (id=164): open$dir(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f00000001c0)='nilfs2\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0xed, 0x5, 0x2}) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x20) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) 2m44.986996488s ago: executing program 1 (id=173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r2) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf251d00000008000100", @ANYRES32=0x0, @ANYBLOB="08001e00090000001d00980000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4004001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x48, 0x2, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000045}, 0x20000088) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="190026bd7000fbdbdf401300000008000300", @ANYRES32=r14], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x14) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r15) ioctl$sock_SIOCGIFINDEX_802154(r15, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x40, r16, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x74, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r17}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r18}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004010}, 0x21000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m43.754200696s ago: executing program 1 (id=175): r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x30, 0x7f, 0x4, 0xfefff00c}, {0x6, 0x40, 0x7, 0x2002}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socket$kcm(0x2, 0x3, 0x2) write$tun(0xffffffffffffffff, 0x0, 0x10d2) write$cgroup_devices(r1, 0x0, 0xffdd) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fchdir(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usbip_server_init(0x2) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) getsockopt$bt_sco_SCO_CONNINFO(r5, 0x11, 0x2, &(0x7f0000000080)=""/133, &(0x7f0000000180)=0x85) capset(&(0x7f00000100c0)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x78f4}) 2m41.379108583s ago: executing program 1 (id=180): getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x112}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={r0, @in6={{0xa, 0x4e20, 0xffffffce, @local, 0x6}}}, &(0x7f00000002c0)=0x84) syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x408b4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) bind$tipc(r1, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x1, @remote}, 0xa, 0x0, 0x3}}, 0x26) sendmmsg$inet(r5, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="1152b79e469c1fd84e815ca74a1e0bb90de75dba842e8ddb7ca162b50773d924f9ac53fde104d2913c4b999ebb5db96a03de3f5172f7346f30a21065614fb854b46dd975c829bfde5272305973ff8c74d27ea4d5316029d0dd7fe2719303228c05c3af05b9d6f767e73b7861096cc2f47771dbd5a58b835af250fef68de90656fcdc407f2d8763bc6b6b243a7f1b", 0x8e}], 0x1}}], 0x1, 0x8040) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r6 = socket(0x1d, 0x2, 0x6) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x6a, 0x10, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x71f) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) 2m39.857414345s ago: executing program 1 (id=185): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x5f69) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000001c0)=0xffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000780)={{0xffffffffffffffff, &(0x7f0000000100)='%\x00', 0x54f000, &(0x7f0000000180)={@_ha_fsid={[0x400, 0x5]}, {0x9, 0x1a4, 0x2, 0x5}}, 0x0, &(0x7f00000001c0), &(0x7f0000000280)=0x3d763990}, 0x3, &(0x7f0000000700)=[{0x3, 0x6, &(0x7f0000000300)='@\x00', &(0x7f0000000340)="c314ec0a11366a43a1aa618e596fbf00c9418ffdf2daf4c46860deea06718e5b4c118807457f2f9d38513eb74dffacd62c2e9947a59f332039ec0b52173bfda9c5c0a9c5", 0x44, 0x10}, {0x2, 0x3, &(0x7f0000000400)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000440)}, {0x3, 0x1, &(0x7f0000000500)='LED\x00', &(0x7f0000000540)="79b52929e00545afaa031b4060295920612312c75a0019c884f51e11e71346d59731c7636ce1bb14f74511c04585273944d41a4ab04cbcf66757d7160d31b606d8bc446b49483dc5239e97fa34440423", 0x50, 0x10}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xd1) fstat(0xffffffffffffffff, 0x0) syz_io_uring_setup(0xf3f, &(0x7f0000000000)={0x0, 0x7ad8, 0x80, 0x2, 0x19e}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 2m24.744095872s ago: executing program 32 (id=185): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) truncate(&(0x7f0000000200)='./file0\x00', 0x5f69) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000001c0)=0xffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000780)={{0xffffffffffffffff, &(0x7f0000000100)='%\x00', 0x54f000, &(0x7f0000000180)={@_ha_fsid={[0x400, 0x5]}, {0x9, 0x1a4, 0x2, 0x5}}, 0x0, &(0x7f00000001c0), &(0x7f0000000280)=0x3d763990}, 0x3, &(0x7f0000000700)=[{0x3, 0x6, &(0x7f0000000300)='@\x00', &(0x7f0000000340)="c314ec0a11366a43a1aa618e596fbf00c9418ffdf2daf4c46860deea06718e5b4c118807457f2f9d38513eb74dffacd62c2e9947a59f332039ec0b52173bfda9c5c0a9c5", 0x44, 0x10}, {0x2, 0x3, &(0x7f0000000400)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000440)}, {0x3, 0x1, &(0x7f0000000500)='LED\x00', &(0x7f0000000540)="79b52929e00545afaa031b4060295920612312c75a0019c884f51e11e71346d59731c7636ce1bb14f74511c04585273944d41a4ab04cbcf66757d7160d31b606d8bc446b49483dc5239e97fa34440423", 0x50, 0x10}]}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000cc0)={{{@in=@multicast1, @in=@broadcast}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000440)=0xd1) fstat(0xffffffffffffffff, 0x0) syz_io_uring_setup(0xf3f, &(0x7f0000000000)={0x0, 0x7ad8, 0x80, 0x2, 0x19e}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) 22.553418757s ago: executing program 2 (id=522): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) r4 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = mq_open(&(0x7f0000000480)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_notify(r6, &(0x7f0000000040)={0x0, 0x29}) mq_timedsend(r6, 0x0, 0x0, 0x6, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r5, &(0x7f0000001b00), 0xfffffd9d) r7 = socket(0x10, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, 0x0, &(0x7f00000001c0)=0x9800) 20.086921006s ago: executing program 2 (id=524): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000640)=r0}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)=0x0) ptrace(0x10, r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0xbd40e29ba7ced94, 0x7800, 0x259, 0x100, {{0x15, 0x4, 0x0, 0x27, 0x54, 0x65, 0x0, 0xd, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010102, {[@lsrr={0x83, 0x27, 0x3d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0xde, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x6, 0x10, "04c022ae236f7ed92e05b6642768"}]}]}}}}}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000540)={r7}, &(0x7f0000000740)=0x8) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000480)={'erspan0\x00', &(0x7f0000000440)={'erspan0\x00', r5, 0x40, 0x10, 0x10, 0xfffffff7, {{0x5, 0x4, 0x0, 0x1c, 0x14, 0x67, 0x0, 0xb, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000280)}, 0x20) 17.87458775s ago: executing program 5 (id=526): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="cf9f7037e87f244e847ce0890a"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x4c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8084) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvfrom$unix(0xffffffffffffffff, &(0x7f00000006c0)=""/166, 0xa6, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x161) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) io_pgetevents(0x0, 0x6, 0x4, &(0x7f0000000540)=[{}, {}, {}, {}], &(0x7f00000005c0), 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, 0x0, 0x4080) 17.642095305s ago: executing program 2 (id=528): setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mount$afs(0x0, 0x0, 0x0, 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB]) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004805) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) epoll_create1(0x80000) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180), 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448db}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x8000000000000000, 0x400000) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000440)=""/209) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, 0x0, 0x0) setgroups(0x0, 0x0) setuid(0xee01) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) 15.701562663s ago: executing program 2 (id=533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200"], 0x14}}, 0x44014) recvmmsg(r6, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) 13.540701034s ago: executing program 5 (id=538): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x3, r2, 0x230d}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r3 = add_key$user(&(0x7f00000036c0), &(0x7f0000003700)={'syz', 0x1}, &(0x7f0000003740)="84", 0x1, 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x1010) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000000)=0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b1fa, 0xc574450d1af334b4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004085}, 0x4044) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000380)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) r8 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002980)=""/4112, 0x1010}], 0x1, 0x0, 0x0, 0x800}, 0x4000080) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 10.442055358s ago: executing program 3 (id=541): syz_open_dev$swradio(&(0x7f0000003b00), 0x1, 0x2) pipe(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) socket$kcm(0x10, 0x2, 0x0) 10.315885593s ago: executing program 5 (id=542): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x20280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001400)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {0xff}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x19, "ca7cfb3e2d5a024c88a5da5be8fb418c67e87b7888680941313e9eaa0fb2"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x1c) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8005}, 0x0) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) connect$unix(r2, &(0x7f0000000280)=@file={0x1, './bus\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@uuid_null}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 10.128350684s ago: executing program 4 (id=544): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'rti802\x00', [0x4fa7, 0x105, 0x2, 0x6c, 0x8, 0x9, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x1, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) socket$kcm(0x11, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r4, 0x40087446, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, r5}, 0x10) 9.060114018s ago: executing program 3 (id=545): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, 0x0, 0x0, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) read$fb(r5, 0x0, 0x0) r6 = socket(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x2003, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socket$inet6_sctp(0xa, 0x801, 0x84) 8.681447495s ago: executing program 2 (id=546): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x40904, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) lsm_get_self_attr(0x66, 0x0, &(0x7f00000012c0), 0x0) io_uring_setup(0x49c6, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x0, 0x0, 0x0, 0x4000007}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x250, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {}, 0xff84}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04fc6d0c0112cdd0d2c06bbd7142f040db7e4c44351c6decee41a13586126544f4556344e96c898c174009ee4b80734a2dba5ac0d350c1377fb0b556beeee15f8df74beafd1005e8b0fd20cd8bf780f4ee73e1b0c6cba8cdf7aff265b8f34bb9fab77e3d30598cfdfbaad41cdfee2ded2174fa9840885e572edcb3c8ed5ba7c121b12062aa99e835812e69dd69100f52a81eb3370710e7c90b387ce35e73e3d5252ba78e2c"], 0xa0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000100)={@local, 0x5dd}) 6.284424584s ago: executing program 3 (id=547): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x449) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a0000000300000000000000000000000000000000000000000000edffffff00"/272], 0x110) shutdown(0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) socket(0x40000000015, 0x5, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xb, 0x0, @val=0x80}}}}}}}}, 0x0) 6.215147447s ago: executing program 5 (id=548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="cf9f7037e87f244e847ce0890a"], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x4c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r2, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8084) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvfrom$unix(0xffffffffffffffff, &(0x7f00000006c0)=""/166, 0xa6, 0x2, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x161) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r2, 0x0, 0x0, 0x0) sendto(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) io_pgetevents(0x0, 0x6, 0x4, &(0x7f0000000540)=[{}, {}, {}, {}], &(0x7f00000005c0), 0x0) sendmsg$TIPC_CMD_GET_NODES(r1, 0x0, 0x4080) 5.462977187s ago: executing program 4 (id=549): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = fsopen(&(0x7f00000003c0)='tmpfs\x00', 0x1) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000007, 0x32, 0xffffffffffffffff, 0x10000000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0xf) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180)=0x1, 0x4) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r6 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000ffdbdf2431000000050035000700000008000200", @ANYRES32=r10, @ANYBLOB="0500330004ffe400050036"], 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x0) 4.424672322s ago: executing program 0 (id=553): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000280)}, 0x20) 4.366476746s ago: executing program 4 (id=554): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) r2 = socket(0x21, 0x2, 0x5) socket(0xa, 0x5, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x9, 0x8, 0x8001, 0x0, 0x4, 0x6, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000580)={0x8003ff, 0x7, 0x23e654d4, 0xa, 0x1000, 0x0, 0x18, 0x0, 0x200, 0x100, 0x0, 0xfffffdfffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x6, 0x0, 0x3}) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f00000000c0)=""/144, 0x90, 0x2f) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) ioctl$PTP_EXTTS_REQUEST2(r8, 0x40603d10, 0x0) fanotify_init(0x200, 0x0) recvfrom(r7, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r3, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) ioctl$IOMMU_VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x1) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 4.194666194s ago: executing program 0 (id=555): syz_open_dev$swradio(&(0x7f0000003b00), 0x1, 0x2) pipe(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x14) socket$kcm(0x10, 0x2, 0x0) 3.207637946s ago: executing program 0 (id=556): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xffffeffffffffffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000003c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000020c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x8080) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'netdevsim0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000004200"], 0x14}}, 0x44014) recvmmsg(r6, &(0x7f0000000e00)=[{{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, 0x0}, 0x800}, {{&(0x7f0000000900)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000980)=""/255, 0xff}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/18, 0x12}], 0x3, &(0x7f0000000ac0)=""/34, 0x22}, 0x81}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/32, 0x20}, {&(0x7f00000010c0)=""/133, 0x85}], 0x2}, 0x3}], 0x3, 0x2, 0x0) 3.159125458s ago: executing program 3 (id=557): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001400), r2) sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf251d00000008000100", @ANYRES32=0x0, @ANYBLOB="08001e00090000001d00980000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r5, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x4004001) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x48, 0x2, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x48, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x4}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}, @IEEE802154_ATTR_CCA_MODE={0x5, 0x23, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000045}, 0x20000088) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r9) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x1c, r10, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="190026bd7000fbdbdf40130000000800", @ANYRES32=r15], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x14) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r16) ioctl$sock_SIOCGIFINDEX_802154(r16, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r16, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x40, r17, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r18}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)={0x74, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r18}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r19}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004010}, 0x21000) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x6, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.597744259s ago: executing program 3 (id=558): r0 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf90800000053"], 0xfebc) 2.480909139s ago: executing program 5 (id=559): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0x2, 0x80007, 0xa000af7}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000090024206d041cc140000000000109022400010000"], 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x400000}}) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x820, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r0, &(0x7f0000010540)=[{0x0}, {&(0x7f0000000100)=""/127, 0x7f}, {0x0}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f00000105c0)=""/229, 0xe5}, {&(0x7f0000010440)=""/186, 0xba}], 0x6, 0xe, 0x0) 2.334773442s ago: executing program 3 (id=560): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'veth0_to_bond\x00', {0x2, 0x0, @empty}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f0000000440)={0x8000000200000000, 0x4, 0x0, 0x3, 0xfffffffffffffff7, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x2, 0x73, &(0x7f0000000640)=ANY=[@ANYBLOB="12011003020000202505a1a440000102030109026100020100307f0904000001020d00000a24060001a8a1d37f3f05240007000d240f0100020000060003000006241a07001c09058103ff0301010b0904010000020d00000904010102020d000009058202400004014009050302080007000809de1591b8617652fa102fe56585eb07d6e112a09ae43a05712f30aae234ba818643ec3681cf177833c6cd36e007d3b9f53dcfb04eaae055770d6f3aa1fc1160eff14157e412254fc93759b0d6d2d656c4182c354b6ca92be98ceee32c228ed8e8a07ab105022ef0d1"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) syz_usb_control_io(r0, 0x0, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x0) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/177, 0xb1}], 0x1) dup(r3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0xd, 0x28, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x1, 0x0, 0x1, 0xb, 0xa, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0x7, 0x8, 0x1, 0x0, 0x4}, @alu={0x4, 0x1, 0x8, 0x7, 0x8, 0xfffffffffffffff0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa1}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) 2.187954957s ago: executing program 4 (id=561): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$SNDCTL_SYNTH_ID(r0, 0xc08c5114, &(0x7f00000003c0)={"637bf629b5896eeb77e137c6e7f24b7891d6f012acc9fe23b2a34566bb56", 0x2, 0x1, 0x0, 0x101, 0x81, 0x5, 0x1, 0x6, [0x5, 0x4, 0x1, 0x401, 0x3, 0x2ab9, 0x4e2edc8b, 0x80000001, 0x8, 0x7, 0x3, 0x4, 0x7ef, 0xc, 0xffff0000, 0x2, 0x6, 0x7, 0x6]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r3) flistxattr(r3, &(0x7f0000000040)=""/4, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x25dfdbfb, {{@in6=@empty, @in=@rand_addr=0x64010100, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x200000000}, {0xfffffffffffffffc, 0xa00, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffc, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000006, 0x4, 0x1, 0x0, 0x10, 0x0, 0x1000}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001240)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x2c}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xd678, 0xfff}}}}}}, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000640)=0x5) sendmsg$kcm(r7, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYRES64=r1], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r8 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r0, 0x36, 0x0, 0x1, &(0x7f00000001c0)=[0x0], 0x1, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r5, r0, 0x36, 0x0, 0x0, @void, @value=r0, @void, @void, r9}, 0x20) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a", @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1.785137897s ago: executing program 0 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000640)=r0}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)=0x0) ptrace(0x10, r4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0xbd40e29ba7ced94, 0x7800, 0x259, 0x100, {{0x15, 0x4, 0x0, 0x27, 0x54, 0x65, 0x0, 0xd, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010102, {[@lsrr={0x83, 0x27, 0x3d, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0xde, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x16, 0xffffffffffffffff, [{0x6, 0x10, "04c022ae236f7ed92e05b6642768"}]}]}}}}}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000540)={r6}, &(0x7f0000000740)=0x8) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1e8}, 0x1, 0x0, 0x0, 0x40040814}, 0x40004) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000280)}, 0x20) 955.117654ms ago: executing program 0 (id=563): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="14000000260001000000000000"], 0x14}], 0x1}, 0x0) 846.429092ms ago: executing program 0 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6(0xa, 0x80003, 0x6) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000140)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000840)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000300)="de1819ca71e318f6f09ab386e23dd09e430d2048bb522cd640f6e1d020a5a9c5c82c7b85c247fea4d774387ea819fcea3ae4f57b099ac95b74a60f54fe198128c9240352815ef1e3a16c33f2354dae0d32a0f93d1268e9ef7789e8704e2dbe6e4c26d2d9907c464676ca41aea35c35572229df953a8db940f9b57a01b44cb703243b2e11043908b507c6f59a968903e05a09fa057e9fb8b333464e3874af32ed089796271d01eaabc38c6e9b566b32500c3eb9b644df48e4d044c033efc4706da57c7c0ae2bd6c894754d3713fb87713677d47"}, {&(0x7f0000000440)="d6e96e4bf6f532ed2b1c8d073c9850b181cc33c712d0706e2e570415c31b204be0c4260896985eb66dcabc7273d4996941b78f165743b81301d7a2a1fb738762a12d58eacbed4df2f58892758c1cf0ee22f9986dccd9ecf7bd599103af2718117ed42e7be381"}, {&(0x7f00000004c0)="98bbf754761f0d487923745cd7a5fb916fae6d96c47cb55c408359a5aff1b3747a9a01849645c82e8c"}, {&(0x7f0000000500)="bf"}, {&(0x7f0000000540)="12d22bcb652e039696110eadfe377817409954a5d532059034ad51dc41635305a297bbac37afd47389b6c747cf77c62ee1fc29c030602f8d5636fa9d7bb5f98e73ae549a9d757a446960cba5e561c5873aaa7d56617ab1b78cfcd6bd48b9ad35ea55af8bb26a158b9e70ae71d15a0e9fa7f068fc94b348a64a0a8caa81622625de7ade6a3527cf165b54fbb608393b105fad8d5164f291ceb65292aa54fae9385711f28e"}, {&(0x7f0000000600)="2d6b3194bd134933a529aa2750d2657d5aad00f69157f325f9557927f998c01d84955051cbbbb7b7df47abc53afec1f1491cee5de7fa730cc80284861d0a7e9ae8ed83507f282669ce6f88c73807a895ab4cda37df88edc151b887ba4a40e9729e6f838e012164a0aa6d3f4eb08dac2ca76d0a4a8c5517346252248fcfaf70fb6105dbbca5da5ae57bcec69a0d2d96a1b815f6eab97c1d26d46082f566d3984a1f04e01e6aeca97467da99812e2b1abbc0bb34a1794941971da9638a1390ee33f1b04177d771"}, {&(0x7f0000000700)="592583c090eb72ca93656549075a5eeffab1eb6d7a346bfbd99058c41e3094132d7611058737117ad9e7c3970c746c8b1c9d664396433a759efb13c69a186a56ddd48dfd708c295075c00405fdcbc1460da7f182d0393b66c8f9f6ebc4451e42875db6c0494a42e9b75d62223b29e60fe45d6fe15b4aa1b5702484f646b1e0d68474f85ab673c0517803da93383c27417111843ac06a4ac20437a5242d7ae24ae32e14d73a2e0b6c37dc4f67ed1922f93b"}], 0x0, 0x0, 0x0, 0x4000041}}], 0x22f, 0x881) 839.020296ms ago: executing program 4 (id=565): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000280)}, 0x20) 462.300917ms ago: executing program 4 (id=566): syz_open_dev$sg(0x0, 0x0, 0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14bb42, 0x8c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20742, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 2.323063ms ago: executing program 5 (id=567): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000440)='.\x00', 0x449) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x1a) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000740)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000000c0)={r5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a004e2000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a0000000300000000000000000000000000000000000000000000edffffff00"/272], 0x110) shutdown(0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) socket(0x40000000015, 0x5, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x10, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xb, 0x0, @val=0x80}}}}}}}}, 0x0) 0s ago: executing program 2 (id=568): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r1, 0x0, 0x0, 0x800) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RXATTRCREATE(r2, &(0x7f0000000340)={0x7, 0x21, 0x1}, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, 0x26, 0x9, 0x70bd26, 0x25dfdbfd, {0x8}, [@typed={0xb, 0x1, 0x0, 0x0, @str='autofs\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) kernel console output (not intermixed with test programs): 30.150259][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.158468][ T9] usb 2-1: Product: syz [ 130.162752][ T9] usb 2-1: Manufacturer: Б [ 130.167543][ T9] usb 2-1: SerialNumber: syz [ 130.195370][ T5737] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 130.205984][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.138'. [ 130.286953][ T1571] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 130.297221][ T1571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.320227][ T1571] usb 4-1: config 0 descriptor?? [ 130.325471][ T5737] usb 1-1: device descriptor read/64, error -71 [ 130.437081][ T5737] usb usb1-port1: attempt power cycle [ 130.587601][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.604939][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 130.716903][ T9] usb 2-1: USB disconnect, device number 12 [ 130.796096][ T5737] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.817773][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.855649][ T5737] usb 1-1: device descriptor read/8, error -71 [ 131.144020][ T5737] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 131.206477][ T6380] netlink: 36 bytes leftover after parsing attributes in process `syz.2.139'. [ 131.304835][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 131.318689][ T5630] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 131.338104][ T5737] usb 1-1: device descriptor read/8, error -71 [ 131.374161][ T1571] ath6kl: Failed to submit usb control message: -71 [ 131.396084][ T1571] ath6kl: unable to send the bmi data to the device: -71 [ 131.422509][ T1571] ath6kl: Unable to send get target info: -71 [ 131.441803][ T1571] ath6kl: Failed to init ath6kl core: -71 [ 131.460629][ T5737] usb usb1-port1: unable to enumerate USB device [ 131.473007][ T1571] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 131.498999][ T1571] usb 4-1: USB disconnect, device number 5 [ 132.448757][ T6400] No such timeout policy "syz0" [ 133.338880][ T50] Bluetooth: hci4: unexpected cc 0x0c6d length: 154 > 1 [ 134.033412][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 134.206135][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 134.221021][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.249444][ T9] usb 1-1: config 0 descriptor?? [ 134.264518][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 134.291052][ T5630] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 135.525992][ T6419] pim6reg: entered allmulticast mode [ 135.635943][ T6419] team0: entered allmulticast mode [ 135.644079][ T6419] team_slave_0: entered allmulticast mode [ 135.649866][ T6419] team_slave_1: entered allmulticast mode [ 137.586373][ T6428] pim6reg: entered allmulticast mode [ 137.667416][ T6428] team0: left allmulticast mode [ 137.672474][ T6428] team_slave_0: left allmulticast mode [ 137.678236][ T6428] team_slave_1: left allmulticast mode [ 137.684409][ T6428] pim6reg: left allmulticast mode [ 138.104537][ T6431] No such timeout policy "syz0" [ 138.857474][ T6444] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'. [ 139.538382][ T6446] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 139.545010][ T6446] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 139.584644][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.159'. [ 139.614628][ T6446] vhci_hcd vhci_hcd.0: Device attached [ 139.790818][ T5737] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 139.860757][ T5737] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 139.946198][ T6447] vhci_hcd: connection reset by peer [ 139.955263][ T1163] vhci_hcd vhci_hcd.1: stop threads [ 139.975914][ T1163] vhci_hcd vhci_hcd.1: release socket [ 139.999193][ T1163] vhci_hcd vhci_hcd.1: disconnect device [ 140.215600][ T6464] pim6reg: entered allmulticast mode [ 140.698265][ T6462] team0: left allmulticast mode [ 140.703186][ T6462] team_slave_0: left allmulticast mode [ 140.708686][ T6462] team_slave_1: left allmulticast mode [ 140.714315][ T6462] pim6reg: left allmulticast mode [ 141.402883][ T6478] pim6reg: entered allmulticast mode [ 141.478926][ T6478] team0: left allmulticast mode [ 141.484009][ T6478] team_slave_0: left allmulticast mode [ 141.489634][ T6478] team_slave_1: left allmulticast mode [ 141.495796][ T6478] pim6reg: left allmulticast mode [ 142.209374][ T6484] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 142.216008][ T6484] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 142.528548][ T6484] vhci_hcd vhci_hcd.0: Device attached [ 142.999008][ T5712] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 143.059349][ T5712] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 143.070401][ T6489] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 143.082193][ T12] vhci_hcd vhci_hcd.3: stop threads [ 143.089028][ T12] vhci_hcd vhci_hcd.3: release socket [ 143.150939][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 143.229648][ T1571] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.421330][ T1571] usb 5-1: Using ep0 maxpacket: 8 [ 143.674359][ T1571] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.705966][ T1571] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.747503][ T1571] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.796393][ T1571] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.914751][ T1571] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.007793][ T1571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.029359][ T6503] team0: entered allmulticast mode [ 144.045443][ T6503] team_slave_0: entered allmulticast mode [ 144.072853][ T6503] team_slave_1: entered allmulticast mode [ 144.327827][ T1571] usb 5-1: GET_CAPABILITIES returned 0 [ 144.367632][ T1571] usbtmc 5-1:16.0: can't read capabilities [ 144.397731][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.172'. [ 144.593295][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.602396][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.611459][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.620521][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.629661][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.638701][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.647770][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.656849][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.860255][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.943132][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.952235][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.961315][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.970370][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.979421][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.988529][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 144.997578][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 145.136800][ T5737] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 145.218741][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.227824][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.236884][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.245966][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.255022][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.264066][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.273114][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.491146][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.513854][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 145.531119][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.540233][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.549274][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.558325][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.567368][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.705980][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.715086][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.724136][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 145.842759][ T5810] usb 5-1: USB disconnect, device number 8 [ 147.169676][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 147.237996][ T6525] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 147.244630][ T6525] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 147.280758][ T6525] vhci_hcd vhci_hcd.0: Device attached [ 147.402261][ T6530] vhci_hcd: connection closed [ 147.402543][ T1338] vhci_hcd vhci_hcd.1: stop threads [ 147.472553][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 147.630134][ T1338] vhci_hcd vhci_hcd.1: release socket [ 147.667694][ T1338] vhci_hcd vhci_hcd.1: disconnect device [ 147.755245][ T24] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 147.789021][ T24] usb 35-1: enqueue for inactive port 0 [ 148.247897][ T24] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 148.420332][ T5712] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 149.435547][ T6550] netlink: 28 bytes leftover after parsing attributes in process `syz.0.179'. [ 150.485997][ T5712] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.511880][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.184'. [ 150.594762][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 150.594792][ T29] audit: type=1400 audit(1779851178.391:311): avc: denied { bind } for pid=6555 comm="syz.0.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.663527][ T5737] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 150.946693][ T29] audit: type=1400 audit(1779851178.391:312): avc: denied { write } for pid=6555 comm="syz.0.186" path="socket:[11945]" dev="sockfs" ino=11945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 150.955552][ T5712] usb 4-1: device descriptor read/64, error -71 [ 151.074830][ T5737] usb 2-1: Using ep0 maxpacket: 16 [ 151.089580][ T5737] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 151.124644][ T5737] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.163906][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 151.206073][ T5737] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.244861][ T5737] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.285964][ T5712] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.306211][ T29] audit: type=1400 audit(1779851179.101:313): avc: denied { name_connect } for pid=6563 comm="syz.4.187" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 151.369408][ T5737] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 151.416190][ T5737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.453590][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.187'. [ 151.479725][ T5737] usb 2-1: config 0 descriptor?? [ 151.504965][ T5712] usb 4-1: device descriptor read/64, error -71 [ 151.515629][ T6560] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 151.589159][ T29] audit: type=1400 audit(1779851179.391:314): avc: denied { bind } for pid=6563 comm="syz.4.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 151.624841][ T5712] usb usb4-port1: attempt power cycle [ 151.639454][ T5737] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 152.035349][ T5712] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 152.166038][ T5712] usb 4-1: device descriptor read/8, error -71 [ 152.426453][ T5712] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.478422][ T5712] usb 4-1: device descriptor read/8, error -71 [ 152.607291][ T5712] usb usb4-port1: unable to enumerate USB device [ 152.744039][ T5630] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 152.751895][ T5630] Bluetooth: hci2: command 0x0401 tx timeout [ 152.798259][ T29] audit: type=1400 audit(1779851180.602:315): avc: denied { read write } for pid=5611 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.918840][ T29] audit: type=1400 audit(1779851180.602:316): avc: denied { open } for pid=5611 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 153.024562][ T29] audit: type=1400 audit(1779851180.602:317): avc: denied { ioctl } for pid=5611 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 155.103160][ T6603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.196'. [ 155.504197][ T6607] pim6reg: entered allmulticast mode [ 155.572170][ T6607] pim6reg: left allmulticast mode [ 157.245218][ T5810] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 157.381820][ T5742] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 157.411667][ T5810] usb 5-1: Using ep0 maxpacket: 8 [ 157.434951][ T5810] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 157.473406][ T5810] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 157.506222][ T5810] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 157.527700][ T5810] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 157.548621][ T5810] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 157.550805][ T5742] usb 4-1: not running at top speed; connect to a high speed hub [ 157.559346][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.649228][ T6622] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 157.658905][ T5630] Bluetooth: hci1: unexpected cc 0x0c6d length: 154 > 1 [ 158.332695][ T5742] usb 4-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 158.341813][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.360113][ T5742] usb 4-1: Product: 㠊 [ 158.372172][ T5810] usb 5-1: GET_CAPABILITIES returned 0 [ 158.380341][ T5742] usb 4-1: Manufacturer: 䙢텝呠㴸㰱ꀮ희휅親鬸ⶈ崆㱦닩䎡륑䴆蝴쬄萄閭脇㚇鄏ի轅⵮茏㳝爉䰿췳ᾷ苚᱂քᡉ⾾ᜨ㨃俘陫냈杳ꇳ墇ꃮ丷╜ῆꮍ뻻ﾵ༝弟谎␡蝯狽椻魚襎摍 [ 158.451382][ T5742] usb 4-1: SerialNumber: 䀊 [ 158.457896][ T5810] usbtmc 5-1:16.0: can't read capabilities [ 158.599224][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.608346][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.617427][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.626505][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.635617][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.656001][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.692185][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.701306][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.710400][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.719451][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.728584][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.792862][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.801980][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.811076][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.820161][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.829225][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 158.896024][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.936782][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.946714][ T5737] usb 5-1: USB disconnect, device number 9 [ 158.981054][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.035261][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.075239][ T6627] team0: entered allmulticast mode [ 159.088991][ T6627] team_slave_0: entered allmulticast mode [ 159.099116][ T6627] team_slave_1: entered allmulticast mode [ 159.295309][ T5742] usb 4-1: USB disconnect, device number 10 [ 160.025299][ T29] audit: type=1400 audit(1779851699.834:318): avc: denied { accept } for pid=6628 comm="syz.0.204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 162.689711][ T6659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.211'. [ 163.616991][ T6668] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 163.626380][ T5630] Bluetooth: hci0: unexpected cc 0x0c6d length: 154 > 1 [ 165.048411][ T46] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 165.234747][ T46] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 165.260823][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.284511][ T46] usb 3-1: config 0 descriptor?? [ 165.604745][ T6687] team0: entered allmulticast mode [ 165.694177][ T6687] team_slave_0: entered allmulticast mode [ 165.775398][ T6687] team_slave_1: entered allmulticast mode [ 166.052293][ T29] audit: type=1400 audit(1779851705.857:319): avc: denied { write } for pid=6677 comm="syz.4.216" laddr=::ffff:172.20.20.32 lport=20000 faddr=::ffff:172.20.20.32 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 166.417556][ T46] ath6kl: Failed to submit usb control message: -110 [ 166.424722][ T29] audit: type=1400 audit(1779851705.917:320): avc: denied { create } for pid=6677 comm="syz.4.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 166.447759][ T46] ath6kl: unable to send the bmi data to the device: -110 [ 166.461570][ T46] ath6kl: Unable to send get target info: -110 [ 166.519039][ T46] ath6kl: Failed to init ath6kl core: -110 [ 166.534644][ T46] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 166.593360][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.605126][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.614025][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 166.623607][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 166.633509][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 166.728107][ T5630] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 166.728149][ T5625] Bluetooth: hci5: command 0x1003 tx timeout [ 166.752261][ T5779] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 166.851844][ T46] usb 3-1: USB disconnect, device number 8 [ 167.013180][ T5779] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 167.054433][ T5779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.113496][ T5779] usb 5-1: config 0 descriptor?? [ 167.160105][ T5779] cp210x 5-1:0.0: cp210x converter detected [ 167.400990][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 167.410105][ T6704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 167.624775][ T5779] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 167.654949][ T5779] cp210x 5-1:0.0: querying part number failed [ 167.754217][ T5779] usb 5-1: cp210x converter now attached to ttyUSB0 [ 168.072912][ T6681] netlink: 28 bytes leftover after parsing attributes in process `syz.4.216'. [ 168.232389][ T6694] lo speed is unknown, defaulting to 1000 [ 168.396199][ T5779] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 168.576848][ T5779] usb 4-1: Using ep0 maxpacket: 8 [ 168.592847][ T5779] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 168.643761][ T5779] usb 4-1: config 179 has no interface number 0 [ 168.677660][ T5779] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 168.706889][ T5779] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 168.726367][ T5630] Bluetooth: hci6: command tx timeout [ 168.777645][ T5779] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 168.844483][ T5779] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 168.916063][ T5779] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.000742][ T5779] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 169.033729][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.193145][ T29] audit: type=1400 audit(1779851708.999:321): avc: denied { listen } for pid=6723 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 169.247440][ T6715] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 169.602147][ T29] audit: type=1400 audit(1779851708.999:322): avc: denied { name_connect } for pid=6723 comm="syz.0.223" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 169.650278][ T5742] usb 5-1: USB disconnect, device number 10 [ 169.693634][ T5742] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 169.744872][ T5742] cp210x 5-1:0.0: device disconnected [ 170.458000][ T6739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.224'. [ 170.805226][ T5630] Bluetooth: hci6: command tx timeout [ 171.251735][ T46] usb 4-1: USB disconnect, device number 11 [ 171.257908][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 171.257957][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 171.861984][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.934674][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.149311][ T6694] bridge_slave_0: entered allmulticast mode [ 172.245535][ T6694] bridge_slave_0: entered promiscuous mode [ 172.274834][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.304723][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.333424][ T6694] bridge_slave_1: entered allmulticast mode [ 172.350438][ T6694] bridge_slave_1: entered promiscuous mode [ 172.424804][ T6757] pim6reg: entered allmulticast mode [ 172.432637][ T6759] pim6reg: left allmulticast mode [ 172.638317][ T6694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.940243][ T5630] Bluetooth: hci6: command tx timeout [ 173.014916][ T6694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.098232][ T6694] team0: Port device team_slave_0 added [ 173.107507][ T6694] team0: Port device team_slave_1 added [ 173.444807][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.479998][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.531972][ T29] audit: type=1400 audit(1779851713.341:323): avc: denied { create } for pid=6769 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 173.552364][ T6694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.563491][ T29] audit: type=1400 audit(1779851713.341:324): avc: denied { setopt } for pid=6769 comm="syz.4.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 173.586955][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.723675][ T5742] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.784199][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.845868][ T6770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.907062][ T6694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.934601][ T5742] usb 3-1: Using ep0 maxpacket: 8 [ 174.009944][ T5742] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 174.055795][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.093423][ T5742] usb 3-1: Product: syz [ 174.103133][ T5742] usb 3-1: Manufacturer: syz [ 174.158146][ T5742] usb 3-1: SerialNumber: syz [ 174.266931][ T5742] usb 3-1: config 0 descriptor?? [ 174.314792][ T6694] hsr_slave_0: entered promiscuous mode [ 174.338180][ T6694] hsr_slave_1: entered promiscuous mode [ 174.408527][ T6694] debugfs: 'hsr0' already exists in 'hsr' [ 174.457713][ T6694] Cannot create hsr debugfs directory [ 174.503499][ T5742] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 174.871487][ T29] audit: type=1400 audit(1779851714.672:325): avc: denied { bind } for pid=6776 comm="syz.0.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 174.964914][ T29] audit: type=1400 audit(1779851714.672:326): avc: denied { node_bind } for pid=6776 comm="syz.0.234" saddr=fe80::aa scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 174.972901][ T5630] Bluetooth: hci6: command tx timeout [ 175.159489][ T5720] Process accounting resumed [ 175.757808][ T5742] usb write operation failed. (-71) [ 175.877333][ T5742] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 176.044596][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.235'. [ 176.194160][ T5742] dvbdev: DVB: registering new adapter (Terratec H7) [ 176.225257][ T5742] usb 3-1: media controller created [ 176.256365][ T5742] usb read operation failed. (-71) [ 176.270635][ T6694] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 176.284171][ T5742] usb write operation failed. (-71) [ 176.333575][ T5742] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 176.397995][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 176.425808][ T5742] usb 3-1: USB disconnect, device number 9 [ 176.469534][ T6694] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 176.537461][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 176.587648][ T6694] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 176.661942][ T6786] FAULT_INJECTION: forcing a failure. [ 176.661942][ T6786] name failslab, interval 1, probability 0, space 0, times 0 [ 176.665251][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 176.710015][ T6786] CPU: 0 UID: 0 PID: 6786 Comm: syz.4.237 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.710042][ T6786] Tainted: [L]=SOFTLOCKUP [ 176.710047][ T6786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.710056][ T6786] Call Trace: [ 176.710062][ T6786] [ 176.710068][ T6786] dump_stack_lvl+0x100/0x190 [ 176.710095][ T6786] should_fail_ex.cold+0x5/0xa [ 176.710118][ T6786] ? tomoyo_realpath_from_path+0xb6/0x690 [ 176.710143][ T6786] should_failslab+0xc2/0x120 [ 176.710162][ T6786] __kmalloc_noprof+0xe0/0x850 [ 176.710187][ T6786] ? kfree+0x1dd/0x6c0 [ 176.710213][ T6786] tomoyo_realpath_from_path+0xb6/0x690 [ 176.710243][ T6786] tomoyo_path_number_perm+0x23c/0x580 [ 176.710263][ T6786] ? tomoyo_path_number_perm+0x22e/0x580 [ 176.710284][ T6786] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.710330][ T6786] ? find_held_lock+0x2b/0x80 [ 176.710346][ T6786] ? __fget_files+0x215/0x3d0 [ 176.710367][ T6786] ? hook_file_ioctl_common+0x149/0x410 [ 176.710384][ T6786] ? __fget_files+0x215/0x3d0 [ 176.710409][ T6786] ? __fget_files+0x21f/0x3d0 [ 176.710433][ T6786] security_file_ioctl+0xd3/0x230 [ 176.710455][ T6786] __x64_sys_ioctl+0xb7/0x210 [ 176.710476][ T6786] do_syscall_64+0x10b/0x860 [ 176.710499][ T6786] ? clear_bhb_loop+0x40/0x90 [ 176.710519][ T6786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.710534][ T6786] RIP: 0033:0x7fe88a59ce59 [ 176.710547][ T6786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.710561][ T6786] RSP: 002b:00007fe88b50b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.710578][ T6786] RAX: ffffffffffffffda RBX: 00007fe88a815fa0 RCX: 00007fe88a59ce59 [ 176.710588][ T6786] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 176.710598][ T6786] RBP: 00007fe88b50b090 R08: 0000000000000000 R09: 0000000000000000 [ 176.710607][ T6786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.710617][ T6786] R13: 00007fe88a816038 R14: 00007fe88a815fa0 R15: 00007fff7ba27718 [ 176.710639][ T6786] [ 176.710645][ T6786] ERROR: Out of memory at tomoyo_realpath_from_path. [ 176.987731][ T6694] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 177.055057][ T6694] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 177.477494][ T6694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.565788][ T6694] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.610255][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.617411][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.664229][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.671378][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.119667][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.245'. [ 181.730988][ T6694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.718582][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 182.826670][ T6694] veth0_vlan: entered promiscuous mode [ 182.875727][ T6694] veth1_vlan: entered promiscuous mode [ 182.909849][ T29] audit: type=1400 audit(1779851978.727:327): avc: denied { connect } for pid=6874 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.020982][ T6694] veth0_macvtap: entered promiscuous mode [ 183.038336][ T6874] block nbd3: shutting down sockets [ 183.067031][ T6694] veth1_macvtap: entered promiscuous mode [ 183.152566][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.218583][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.307547][ T5861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.309379][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 183.489884][ T5861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.526104][ T5861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.544272][ T5861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.550948][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888079c06800: rx timeout, send abort [ 183.564620][ T29] audit: type=1400 audit(1779851979.387:328): avc: denied { read } for pid=4962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 183.686490][ T29] audit: type=1400 audit(1779851979.387:329): avc: denied { search } for pid=4962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.768996][ T29] audit: type=1400 audit(1779851979.387:330): avc: denied { write search } for pid=4962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.863812][ T29] audit: type=1400 audit(1779851979.387:331): avc: denied { add_name } for pid=4962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.945388][ T29] audit: type=1400 audit(1779851979.387:332): avc: denied { create } for pid=4962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.023864][ T29] audit: type=1400 audit(1779851979.387:333): avc: denied { append open } for pid=4962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.183576][ T29] audit: type=1400 audit(1779851979.387:334): avc: denied { getattr } for pid=4962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 184.459732][ T6893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6893 comm=syz.4.256 [ 184.512948][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.565975][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.679378][ T6893] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.713612][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.743024][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.868157][ T29] audit: type=1400 audit(1779851980.678:335): avc: denied { mounton } for pid=6694 comm="syz-executor" path="/root/syzkaller.XKe26R/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 185.020844][ T29] audit: type=1400 audit(1779851980.718:336): avc: denied { unmount } for pid=6694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 185.528130][ T5779] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 186.237352][ T5779] usb 5-1: Using ep0 maxpacket: 8 [ 186.249472][ T5779] usb 5-1: descriptor type invalid, skip [ 186.264501][ T5779] usb 5-1: config 118 has an invalid interface number: 23 but max is 1 [ 186.273500][ T5779] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 186.292846][ T5779] usb 5-1: config 118 has 1 interface, different from the descriptor's value: 2 [ 186.304925][ T5779] usb 5-1: config 118 has no interface number 0 [ 186.324346][ T5779] usb 5-1: config 118 interface 23 altsetting 16 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 186.353875][ T5779] usb 5-1: config 118 interface 23 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 186.380673][ T5779] usb 5-1: config 118 interface 23 altsetting 16 has a duplicate endpoint with address 0xC, skipping [ 186.393284][ T5720] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 186.406929][ T5779] usb 5-1: config 118 interface 23 altsetting 16 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 186.436099][ T5779] usb 5-1: config 118 interface 23 has no altsetting 0 [ 186.466198][ T5779] usb 5-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=4f.26 [ 186.494563][ T5779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.517967][ T5779] usb 5-1: Product: ࠧ [ 186.531403][ T5779] usb 5-1: Manufacturer: ї [ 186.548724][ T5779] usb 5-1: SerialNumber: 좯엇﷊魎红풆 [ 186.570336][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 186.627141][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 186.667171][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.707157][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.733610][ T6911] No control pipe specified [ 186.739656][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.799020][ T5720] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 186.810307][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.891286][ T5779] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 186.915661][ T5720] usb 3-1: Product: syz [ 186.928478][ T5720] usb 3-1: Manufacturer: syz [ 186.997809][ T5779] gspca_vc032x: reg_r err -71 [ 187.004576][ T5720] usb 3-1: SerialNumber: syz [ 187.045200][ T5779] vc032x 5-1:118.23: probe with driver vc032x failed with error -71 [ 187.215639][ T5720] usb 3-1: config 0 descriptor?? [ 187.215710][ T5779] usb 5-1: USB disconnect, device number 11 [ 187.259934][ T5720] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 187.444029][ T6919] FAULT_INJECTION: forcing a failure. [ 187.444029][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 187.458631][ T6919] CPU: 1 UID: 0 PID: 6919 Comm: syz.3.262 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.458660][ T6919] Tainted: [L]=SOFTLOCKUP [ 187.458666][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.458675][ T6919] Call Trace: [ 187.458680][ T6919] [ 187.458685][ T6919] dump_stack_lvl+0x100/0x190 [ 187.458709][ T6919] should_fail_ex.cold+0x5/0xa [ 187.458727][ T6919] ? tomoyo_encode2+0xfb/0x3c0 [ 187.458748][ T6919] should_failslab+0xc2/0x120 [ 187.458764][ T6919] __kmalloc_noprof+0xe0/0x850 [ 187.458784][ T6919] ? d_absolute_path+0x136/0x1b0 [ 187.458804][ T6919] tomoyo_encode2+0xfb/0x3c0 [ 187.458827][ T6919] tomoyo_encode+0x29/0x50 [ 187.458846][ T6919] tomoyo_realpath_from_path+0x18c/0x690 [ 187.458871][ T6919] tomoyo_path_number_perm+0x23c/0x580 [ 187.458891][ T6919] ? tomoyo_path_number_perm+0x22e/0x580 [ 187.458910][ T6919] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.458948][ T6919] ? find_held_lock+0x2b/0x80 [ 187.458962][ T6919] ? __fget_files+0x215/0x3d0 [ 187.458981][ T6919] ? hook_file_ioctl_common+0x149/0x410 [ 187.458994][ T6919] ? __fget_files+0x215/0x3d0 [ 187.459015][ T6919] ? __fget_files+0x21f/0x3d0 [ 187.459036][ T6919] security_file_ioctl+0xd3/0x230 [ 187.459056][ T6919] __x64_sys_ioctl+0xb7/0x210 [ 187.459073][ T6919] do_syscall_64+0x10b/0x860 [ 187.459095][ T6919] ? clear_bhb_loop+0x40/0x90 [ 187.459112][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.459126][ T6919] RIP: 0033:0x7f7929f9ce59 [ 187.459138][ T6919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.459151][ T6919] RSP: 002b:00007f792af3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.459165][ T6919] RAX: ffffffffffffffda RBX: 00007f792a215fa0 RCX: 00007f7929f9ce59 [ 187.459174][ T6919] RDX: 0000200000000040 RSI: 00000000c010640c RDI: 0000000000000003 [ 187.459182][ T6919] RBP: 00007f792af3e090 R08: 0000000000000000 R09: 0000000000000000 [ 187.459190][ T6919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.459198][ T6919] R13: 00007f792a216038 R14: 00007f792a215fa0 R15: 00007ffe497110d8 [ 187.459217][ T6919] [ 187.459235][ T6919] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.694838][ T5810] usb 3-1: USB disconnect, device number 10 [ 188.719288][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 188.725679][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.789629][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.268'. [ 189.066988][ T5779] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 189.321407][ T5779] usb 4-1: Using ep0 maxpacket: 32 [ 189.503741][ T5779] usb 4-1: config 0 has an invalid interface number: 151 but max is 0 [ 189.543875][ T5779] usb 4-1: config 0 has no interface number 0 [ 189.577421][ T5779] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 189.649277][ T5779] usb 4-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 189.667786][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.734002][ T5779] usb 4-1: Product: syz [ 189.753987][ T5779] usb 4-1: Manufacturer: syz [ 189.836933][ T5779] usb 4-1: SerialNumber: syz [ 189.881126][ T5779] usb 4-1: config 0 descriptor?? [ 189.918008][ T6951] FAULT_INJECTION: forcing a failure. [ 189.918008][ T6951] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 189.966473][ T6951] CPU: 0 UID: 0 PID: 6951 Comm: syz.0.271 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.966515][ T6951] Tainted: [L]=SOFTLOCKUP [ 189.966521][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 189.966531][ T6951] Call Trace: [ 189.966536][ T6951] [ 189.966544][ T6951] dump_stack_lvl+0x100/0x190 [ 189.966569][ T6951] should_fail_ex.cold+0x5/0xa [ 189.966593][ T6951] _copy_from_user+0x2e/0xd0 [ 189.966620][ T6951] io_register_rsrc+0xb8/0x215 [ 189.966638][ T6951] ? __pfx_io_register_rsrc+0x10/0x10 [ 189.966665][ T6951] __do_sys_io_uring_register+0x116d/0x1bd0 [ 189.966692][ T6951] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 189.966714][ T6951] ? __fget_files+0x21f/0x3d0 [ 189.966741][ T6951] ? fput+0x79/0x100 [ 189.966771][ T6951] ? ksys_write+0x1ac/0x250 [ 189.966789][ T6951] ? __pfx_ksys_write+0x10/0x10 [ 189.966810][ T6951] ? rcu_is_watching+0x12/0xc0 [ 189.966839][ T6951] do_syscall_64+0x10b/0x860 [ 189.966865][ T6951] ? clear_bhb_loop+0x40/0x90 [ 189.966888][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.966906][ T6951] RIP: 0033:0x7f3a71b9ce59 [ 189.966921][ T6951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.966938][ T6951] RSP: 002b:00007f3a72a80028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 189.966956][ T6951] RAX: ffffffffffffffda RBX: 00007f3a71e15fa0 RCX: 00007f3a71b9ce59 [ 189.966967][ T6951] RDX: 0000200000000240 RSI: 000000000000000d RDI: 0000000000000003 [ 189.966977][ T6951] RBP: 00007f3a72a80090 R08: 0000000000000000 R09: 0000000000000000 [ 189.966987][ T6951] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 189.966997][ T6951] R13: 00007f3a71e16038 R14: 00007f3a71e15fa0 R15: 00007ffe39c8b4f8 [ 189.967020][ T6951] [ 190.351864][ T5720] hid-generic 0000:0004:261D.0001: unknown main item tag 0x0 [ 190.380984][ T5720] hid-generic 0000:0004:261D.0001: unknown main item tag 0x0 [ 190.446380][ T5720] hid-generic 0000:0004:261D.0001: unknown main item tag 0x0 [ 190.511087][ T5720] hid-generic 0000:0004:261D.0001: unknown main item tag 0x0 [ 190.554641][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.565449][ T5720] hid-generic 0000:0004:261D.0001: unknown main item tag 0x0 [ 190.565491][ T5720] hid-generic 0000:0004:261D.0001: unknown main item tag 0x0 [ 190.565510][ T5720] hid-generic 0000:0004:261D.0001: unknown main item tag 0x0 [ 190.565529][ T5720] hid-generic 0000:0004:261D.0001: unknown main item tag 0x0 [ 190.565548][ T5720] hid-generic 0000:0004:261D.0001: unknown main item tag 0x0 [ 190.668342][ T5720] hid-generic 0000:0004:261D.0001: hidraw0: HID v0.03 Device [syz1] on syz0 [ 191.077739][ T5779] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 191.255593][ T5779] usb 6-1: Using ep0 maxpacket: 16 [ 191.281805][ T5779] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.327244][ T5779] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 191.354056][ T5779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.387433][ T5779] usb 6-1: Product: syz [ 191.404917][ T5779] usb 6-1: Manufacturer: Б [ 191.415701][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 191.415715][ T29] audit: type=1400 audit(1779851987.231:343): avc: denied { read } for pid=6966 comm="syz.2.275" name="event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 191.470308][ T5779] usb 6-1: SerialNumber: syz [ 191.516985][ T29] audit: type=1400 audit(1779851987.271:344): avc: denied { open } for pid=6966 comm="syz.2.275" path="/dev/input/event0" dev="devtmpfs" ino=918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 191.694557][ T5810] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 191.841077][ T5779] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.857656][ T5779] usb 6-1: MIDIStreaming interface descriptor not found [ 191.878971][ T5810] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 191.899061][ T5810] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 191.914532][ T5712] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 191.935467][ T5810] usb 5-1: Product: syz [ 191.951733][ T5810] usb 5-1: Manufacturer: syz [ 191.959016][ T5779] usb 6-1: USB disconnect, device number 2 [ 191.970110][ T5810] usb 5-1: SerialNumber: syz [ 191.993658][ T5810] usb 5-1: config 0 descriptor?? [ 192.075856][ T5712] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.117398][ T5712] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 192.157290][ T5712] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 192.188383][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 192.205037][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.257746][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 192.273765][ T5712] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 192.286602][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 192.300675][ T5810] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 192.512250][ T5810] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 192.552289][ T5810] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 192.572916][ T5779] usb 3-1: USB disconnect, device number 11 [ 192.587986][ T5810] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 192.696429][ T5810] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 192.715777][ T29] audit: type=1400 audit(1779851988.541:345): avc: denied { listen } for pid=6948 comm="syz.4.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.813229][ T5742] usb 4-1: USB disconnect, device number 12 [ 192.833097][ T5810] usb 5-1: USB disconnect, device number 12 [ 193.231856][ T6981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.278'. [ 193.654000][ T5742] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 193.851418][ T5742] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.887072][ T5742] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 193.920558][ T5742] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.969972][ T5742] usb 3-1: config 0 descriptor?? [ 193.990050][ T5742] pwc: Askey VC010 type 2 USB webcam detected. [ 194.387709][ T29] audit: type=1400 audit(1779851990.202:346): avc: denied { block_suspend } for pid=6990 comm="syz.4.281" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.432258][ T5742] pwc: recv_control_msg error -32 req 02 val 2b00 [ 194.461591][ T6994] netlink: 132 bytes leftover after parsing attributes in process `syz.4.281'. [ 194.464539][ T5742] pwc: recv_control_msg error -32 req 02 val 2700 [ 194.519609][ T5742] pwc: recv_control_msg error -32 req 02 val 2c00 [ 194.548723][ T6997] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 194.549544][ T5742] pwc: recv_control_msg error -32 req 04 val 1000 [ 194.603934][ T5742] pwc: recv_control_msg error -32 req 04 val 1300 [ 194.625252][ T5742] pwc: recv_control_msg error -32 req 04 val 1400 [ 194.652587][ T5742] pwc: recv_control_msg error -32 req 02 val 2000 [ 194.673001][ T5742] pwc: recv_control_msg error -32 req 02 val 2100 [ 194.709281][ T5742] pwc: recv_control_msg error -32 req 04 val 1500 [ 194.720293][ T5628] Bluetooth: hci0: unexpected cc 0x0c6d length: 154 > 1 [ 194.729962][ T5628] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 194.739383][ T5742] pwc: recv_control_msg error -32 req 02 val 2500 [ 194.799297][ T5742] pwc: recv_control_msg error -32 req 02 val 2400 [ 195.096272][ T6998] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 195.155942][ T6998] CPU: 0 UID: 0 PID: 6998 Comm: syz.2.279 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.155960][ T6998] Tainted: [L]=SOFTLOCKUP [ 195.155964][ T6998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 195.155970][ T6998] Call Trace: [ 195.155974][ T6998] [ 195.155978][ T6998] dump_stack_lvl+0x100/0x190 [ 195.155998][ T6998] sysfs_warn_dup.cold+0x1c/0x28 [ 195.156014][ T6998] sysfs_create_dir_ns+0x24b/0x2b0 [ 195.156028][ T6998] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 195.156040][ T6998] ? find_held_lock+0x2b/0x80 [ 195.156051][ T6998] ? kobject_add_internal+0x25f/0x930 [ 195.156063][ T6998] ? kobject_add_internal+0x25f/0x930 [ 195.156076][ T6998] ? class_dir_child_ns_type+0xd/0x60 [ 195.156090][ T6998] kobject_add_internal+0x2c8/0x930 [ 195.156104][ T6998] kobject_add+0x16a/0x1e0 [ 195.156116][ T6998] ? __pfx_kobject_add+0x10/0x10 [ 195.156130][ T6998] ? kobject_put+0xb9/0x640 [ 195.156141][ T6998] ? device_add+0xc48/0x1950 [ 195.156157][ T6998] device_add+0x294/0x1950 [ 195.156171][ T6998] ? lockdep_init_map_type+0x5c/0x250 [ 195.156185][ T6998] ? __pfx_device_add+0x10/0x10 [ 195.156198][ T6998] ? lockdep_init_map_type+0x5c/0x250 [ 195.156215][ T6998] ? __init_waitqueue_head+0xca/0x150 [ 195.156235][ T6998] tty_register_device_attr+0x388/0x7f0 [ 195.156251][ T6998] ? lockdep_init_map_type+0x5c/0x250 [ 195.156266][ T6998] ? __pfx_tty_register_device_attr+0x10/0x10 [ 195.156284][ T6998] ? tty_port_init+0x156/0x1c0 [ 195.156302][ T6998] gsm_activate_mux+0x155/0x2a0 [ 195.156318][ T6998] gsmld_ioctl+0xbbc/0x15c0 [ 195.156333][ T6998] ? __pfx_gsmld_ioctl+0x10/0x10 [ 195.156345][ T6998] ? __ldsem_down_read_nested+0xf3/0x890 [ 195.156366][ T6998] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 195.156381][ T6998] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 195.156395][ T6998] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 195.156409][ T6998] ? __pfx_gsmld_ioctl+0x10/0x10 [ 195.156419][ T6998] tty_ioctl+0x11c2/0x1640 [ 195.156434][ T6998] ? __pfx_tty_ioctl+0x10/0x10 [ 195.156450][ T6998] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 195.156470][ T6998] ? __fget_files+0x215/0x3d0 [ 195.156484][ T6998] ? hook_file_ioctl_common+0x149/0x410 [ 195.156498][ T6998] ? selinux_file_ioctl+0x13b/0x290 [ 195.156513][ T6998] ? selinux_file_ioctl+0xb6/0x290 [ 195.156528][ T6998] ? __pfx_tty_ioctl+0x10/0x10 [ 195.156543][ T6998] __x64_sys_ioctl+0x18e/0x210 [ 195.156557][ T6998] do_syscall_64+0x10b/0x860 [ 195.156573][ T6998] ? clear_bhb_loop+0x40/0x90 [ 195.156586][ T6998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.156597][ T6998] RIP: 0033:0x7f964f19ce59 [ 195.156607][ T6998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.156617][ T6998] RSP: 002b:00007f9650063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.156628][ T6998] RAX: ffffffffffffffda RBX: 00007f964f416090 RCX: 00007f964f19ce59 [ 195.156635][ T6998] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000005 [ 195.156641][ T6998] RBP: 00007f964f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 195.156647][ T6998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.156653][ T6998] R13: 00007f964f416128 R14: 00007f964f416090 R15: 00007ffd45acf098 [ 195.156667][ T6998] [ 195.156692][ T6998] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 195.927170][ T4932] Bluetooth: hci3: command 0x0406 tx timeout [ 195.933321][ T4932] Bluetooth: hci2: command 0x0401 tx timeout [ 195.939375][ T5631] Bluetooth: hci4: command 0x0406 tx timeout [ 195.945786][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 196.312254][ T24] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 196.571870][ T24] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 196.637484][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.845264][ T7015] pim6reg: entered allmulticast mode [ 196.987515][ T24] usb 5-1: config 0 descriptor?? [ 197.043583][ T24] cp210x 5-1:0.0: cp210x converter detected [ 197.135582][ T29] audit: type=1400 audit(1779851992.964:347): avc: denied { read } for pid=7017 comm="syz.5.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 197.206538][ T7013] team0: left allmulticast mode [ 197.211440][ T7013] team_slave_0: left allmulticast mode [ 197.216957][ T7013] team_slave_1: left allmulticast mode [ 197.222575][ T7013] pim6reg: left allmulticast mode [ 197.301416][ T24] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 197.327512][ T24] cp210x 5-1:0.0: querying part number failed [ 197.403847][ T24] usb 5-1: cp210x converter now attached to ttyUSB0 [ 197.964767][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.282'. [ 197.993862][ T5742] pwc: recv_control_msg error -71 req 02 val 2800 [ 198.016906][ T5742] pwc: recv_control_msg error -71 req 04 val 1100 [ 198.096934][ T5742] pwc: recv_control_msg error -71 req 04 val 1200 [ 198.148645][ T5742] pwc: Registered as video103. [ 198.182975][ T5742] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 198.270916][ T5742] usb 3-1: USB disconnect, device number 12 [ 198.664008][ T29] audit: type=1400 audit(1779851994.494:348): avc: denied { setopt } for pid=7025 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 198.807957][ T29] audit: type=1400 audit(1779851994.635:349): avc: denied { mounton } for pid=7030 comm="syz.3.288" path="/64/file0" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 199.080953][ T29] audit: type=1400 audit(1779851994.905:350): avc: denied { write } for pid=7035 comm="syz.5.289" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 199.560754][ T5720] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 199.859139][ T5720] usb 6-1: Using ep0 maxpacket: 8 [ 199.930214][ T5742] usb 5-1: USB disconnect, device number 13 [ 199.972393][ T5720] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.157394][ T5720] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.318211][ T5720] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.434991][ T5720] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.513619][ T5742] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 200.572579][ T5742] cp210x 5-1:0.0: device disconnected [ 200.581230][ T5720] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.657864][ T5720] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.934402][ T5720] usb 6-1: GET_CAPABILITIES returned 0 [ 200.940953][ T5720] usbtmc 6-1:16.0: can't read capabilities [ 201.046556][ T7052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.293'. [ 201.138188][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.147301][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.156389][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.165546][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.174607][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.183704][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.192806][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.201888][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.211003][ C0] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.232253][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.241398][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.250480][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.259569][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.268660][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.296347][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.305461][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 201.361210][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.370331][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.379399][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.388454][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.397781][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.443142][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.444182][ T7061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.296'. [ 201.452272][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.452315][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.452352][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.452387][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.454186][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.507909][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.517013][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.526124][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.545722][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.556748][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 201.611576][ T1226] usb 6-1: USB disconnect, device number 3 [ 202.930536][ T29] audit: type=1326 audit(1779851998.757:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.5.298" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f028c99ce59 code=0x0 [ 203.266875][ T29] audit: type=1400 audit(1779851999.087:352): avc: denied { create } for pid=7075 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 203.719274][ T1226] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 203.838587][ T5742] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 203.867806][ T29] audit: type=1400 audit(1779851999.687:353): avc: denied { create } for pid=7088 comm="syz.5.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 203.928960][ T1226] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 203.941043][ T29] audit: type=1400 audit(1779851999.717:354): avc: denied { setopt } for pid=7088 comm="syz.5.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 203.963541][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.995754][ T1226] usb 4-1: config 0 descriptor?? [ 204.008445][ T5742] usb 5-1: Using ep0 maxpacket: 8 [ 204.028715][ T29] audit: type=1400 audit(1779851999.737:355): avc: denied { bind } for pid=7088 comm="syz.5.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 204.028796][ T5742] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 204.218084][ T5742] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.287674][ T5742] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.340267][ T5742] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.397097][ T5742] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.118356][ T1226] ath6kl: Failed to submit usb control message: -110 [ 205.383958][ T1226] ath6kl: unable to send the bmi data to the device: -110 [ 205.397821][ T1226] ath6kl: Unable to send get target info: -110 [ 205.421731][ T29] audit: type=1400 audit(1779852000.898:356): avc: denied { name_bind } for pid=7098 comm="syz.5.305" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 205.438255][ T5742] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 205.456180][ T5620] Bluetooth: hci5: command 0x1003 tx timeout [ 205.463472][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 205.506206][ T29] audit: type=1400 audit(1779852000.908:357): avc: denied { node_bind } for pid=7098 comm="syz.5.305" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 205.510759][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.536881][ T1226] ath6kl: Failed to init ath6kl core: -110 [ 205.545657][ T1226] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 205.566372][ T1226] usb 4-1: USB disconnect, device number 13 [ 205.894133][ T7084] FAULT_INJECTION: forcing a failure. [ 205.894133][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 205.947623][ T7084] CPU: 0 UID: 0 PID: 7084 Comm: syz.4.302 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.947653][ T7084] Tainted: [L]=SOFTLOCKUP [ 205.947659][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.947672][ T7084] Call Trace: [ 205.947678][ T7084] [ 205.947686][ T7084] dump_stack_lvl+0x100/0x190 [ 205.947714][ T7084] should_fail_ex.cold+0x5/0xa [ 205.947738][ T7084] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 205.947768][ T7084] should_failslab+0xc2/0x120 [ 205.947789][ T7084] __kmalloc_noprof+0xe0/0x850 [ 205.947821][ T7084] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 205.947857][ T7084] genl_family_rcv_msg_doit+0xc7/0x300 [ 205.947877][ T7084] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 205.947904][ T7084] ? bpf_lsm_capable+0x9/0x10 [ 205.947933][ T7084] ? security_capable+0x80/0x260 [ 205.947954][ T7084] ? ns_capable+0xd2/0xf0 [ 205.947983][ T7084] genl_rcv_msg+0x560/0x800 [ 205.948003][ T7084] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.948021][ T7084] ? __pfx_wg_set_device_doit+0x10/0x10 [ 205.948051][ T7084] netlink_rcv_skb+0x159/0x420 [ 205.948082][ T7084] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.948101][ T7084] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.948137][ T7084] ? netlink_deliver_tap+0x1ae/0xcc0 [ 205.948164][ T7084] genl_rcv+0x28/0x40 [ 205.948189][ T7084] netlink_unicast+0x585/0x850 [ 205.948216][ T7084] ? __pfx_netlink_unicast+0x10/0x10 [ 205.948249][ T7084] netlink_sendmsg+0x8b0/0xda0 [ 205.948279][ T7084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.948303][ T7084] ? __might_fault+0x80/0x140 [ 205.948339][ T7084] ____sys_sendmsg+0x9e1/0xb70 [ 205.948363][ T7084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.948391][ T7084] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.948427][ T7084] ___sys_sendmsg+0x190/0x1e0 [ 205.948455][ T7084] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.948513][ T7084] __sys_sendmsg+0x170/0x220 [ 205.948534][ T7084] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.948565][ T7084] ? rcu_is_watching+0x12/0xc0 [ 205.948596][ T7084] do_syscall_64+0x10b/0x860 [ 205.948622][ T7084] ? clear_bhb_loop+0x40/0x90 [ 205.948644][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.948662][ T7084] RIP: 0033:0x7fe88a59ce59 [ 205.948678][ T7084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.948694][ T7084] RSP: 002b:00007fe88b50b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.948712][ T7084] RAX: ffffffffffffffda RBX: 00007fe88a815fa0 RCX: 00007fe88a59ce59 [ 205.948723][ T7084] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 205.948734][ T7084] RBP: 00007fe88b50b090 R08: 0000000000000000 R09: 0000000000000000 [ 205.948744][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.948754][ T7084] R13: 00007fe88a816038 R14: 00007fe88a815fa0 R15: 00007fff7ba27718 [ 205.948780][ T7084] [ 206.469585][ T1226] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 207.097061][ T5742] usb 5-1: usb_control_msg returned -71 [ 207.121912][ T5742] usbtmc 5-1:16.0: can't read capabilities [ 207.178534][ T5742] usb 5-1: USB disconnect, device number 14 [ 207.198222][ T1226] usb 6-1: Using ep0 maxpacket: 8 [ 207.217696][ T1226] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 207.249221][ T1226] usb 6-1: config 179 has no interface number 0 [ 207.282856][ T1226] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 207.311195][ T1226] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 207.344877][ T1226] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 207.375283][ T1226] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 207.418637][ T1226] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 207.460234][ T29] audit: type=1400 audit(1779852003.279:358): avc: denied { sqpoll } for pid=7110 comm="syz.2.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 207.484886][ T1226] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 207.508229][ T1226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.527692][ T5737] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 207.531997][ T7105] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 207.646830][ T5742] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 207.696595][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 207.713642][ T5737] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 207.738110][ T5737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.767765][ T5737] usb 4-1: Product: syz [ 207.782321][ T5737] usb 4-1: Manufacturer: syz [ 207.814590][ T5737] usb 4-1: SerialNumber: syz [ 207.819361][ T5742] usb 5-1: Using ep0 maxpacket: 8 [ 207.837733][ T5737] usb 4-1: config 0 descriptor?? [ 207.946347][ T5810] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 208.145285][ T5742] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.164218][ T5810] usb 3-1: Using ep0 maxpacket: 32 [ 208.177052][ T5742] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.179777][ T5810] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.199760][ T5810] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.208358][ T5742] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.212416][ T5810] usb 3-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 208.231927][ T5810] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.244844][ T5742] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.251054][ T5810] usb 3-1: config 0 descriptor?? [ 208.288850][ T5742] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.326411][ T5742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.368151][ T5737] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 208.573969][ T5742] usb 5-1: GET_CAPABILITIES returned 0 [ 208.601190][ T5742] usbtmc 5-1:16.0: can't read capabilities [ 208.620690][ T5810] usb 3-1: USB disconnect, device number 13 [ 208.795959][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.805093][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.814194][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.823379][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.835302][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.844413][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.853501][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.862590][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.876241][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.885358][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.894452][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.903618][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.954572][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.963760][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.973024][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 208.986195][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 209.028890][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.038006][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.047551][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.105993][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.115126][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.124234][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.134629][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.143769][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.152868][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.162459][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.171556][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.184661][ T5742] Process accounting resumed [ 209.221019][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.230136][ C1] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.314602][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.323745][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.332843][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 209.344472][ T5742] usb 6-1: USB disconnect, device number 4 [ 209.344521][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 209.358647][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 209.714617][ T7129] netlink: 18 bytes leftover after parsing attributes in process `syz.5.312'. [ 209.765378][ T7131] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 209.809894][ T7131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 209.817316][ T7131] IPv6: NLM_F_CREATE should be set when creating new route [ 209.901737][ T7133] netlink: 'syz.2.313': attribute type 1 has an invalid length. [ 209.939298][ T7133] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.000710][ T5742] usb 5-1: USB disconnect, device number 15 [ 210.011737][ T5737] usb write operation failed. (-71) [ 210.072367][ T5737] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 210.118251][ T5737] dvbdev: DVB: registering new adapter (Terratec H7) [ 210.145532][ T5737] usb 4-1: media controller created [ 210.163870][ T5737] usb read operation failed. (-71) [ 210.178817][ T5737] usb write operation failed. (-71) [ 210.211740][ T5737] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 210.248429][ T5737] usb 4-1: USB disconnect, device number 14 [ 210.463872][ T7137] loop5: detected capacity change from 0 to 7 [ 210.474748][ T7137] Dev loop5: unable to read RDB block 7 [ 210.480438][ T7137] loop5: unable to read partition table [ 210.486190][ T7137] loop5: partition table beyond EOD, truncated [ 210.492321][ T7137] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 210.514673][ T7137] binder: 7136:7137 ioctl c0285840 200000000000 returned -22 [ 210.576330][ T29] audit: type=1400 audit(1779852006.410:359): avc: denied { load_policy } for pid=7136 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 210.608271][ T7140] SELinux: policydb table sizes (4,0) do not match mine (8,7) [ 210.677656][ T7140] SELinux: failed to load policy [ 211.430377][ T29] audit: type=1400 audit(1779852007.261:360): avc: denied { bind } for pid=7146 comm="syz.2.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 211.586756][ T29] audit: type=1400 audit(1779852007.421:361): avc: denied { read write } for pid=7150 comm="syz.2.319" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 211.611471][ T7151] ucma_write: process 234 (syz.2.319) changed security contexts after opening file descriptor, this is not allowed. [ 211.631752][ T7151] FAULT_INJECTION: forcing a failure. [ 211.631752][ T7151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.676248][ T29] audit: type=1400 audit(1779852007.421:362): avc: denied { open } for pid=7150 comm="syz.2.319" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 211.708216][ T7151] CPU: 1 UID: 0 PID: 7151 Comm: syz.2.319 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.708244][ T7151] Tainted: [L]=SOFTLOCKUP [ 211.708250][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 211.708261][ T7151] Call Trace: [ 211.708267][ T7151] [ 211.708274][ T7151] dump_stack_lvl+0x100/0x190 [ 211.708301][ T7151] should_fail_ex.cold+0x5/0xa [ 211.708326][ T7151] _copy_to_user+0x32/0xd0 [ 211.708356][ T7151] simple_read_from_buffer+0xcb/0x170 [ 211.708382][ T7151] proc_fail_nth_read+0x1af/0x230 [ 211.708403][ T7151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.708426][ T7151] ? rw_verify_area+0xce/0x6d0 [ 211.708443][ T7151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 211.708463][ T7151] vfs_read+0x1e4/0xb30 [ 211.708486][ T7151] ? __pfx_vfs_read+0x10/0x10 [ 211.708505][ T7151] ? __fget_files+0x215/0x3d0 [ 211.708533][ T7151] ? __fget_files+0x21f/0x3d0 [ 211.708563][ T7151] ksys_read+0x12a/0x250 [ 211.708583][ T7151] ? __pfx_ksys_read+0x10/0x10 [ 211.708604][ T7151] ? rcu_is_watching+0x12/0xc0 [ 211.708635][ T7151] do_syscall_64+0x10b/0x860 [ 211.708661][ T7151] ? clear_bhb_loop+0x40/0x90 [ 211.708683][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.708706][ T7151] RIP: 0033:0x7f964f15d68e [ 211.708720][ T7151] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 211.708737][ T7151] RSP: 002b:00007f9650083fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 211.708754][ T7151] RAX: ffffffffffffffda RBX: 00007f96500846c0 RCX: 00007f964f15d68e [ 211.708765][ T7151] RDX: 000000000000000f RSI: 00007f96500840a0 RDI: 0000000000000004 [ 211.708775][ T7151] RBP: 00007f9650084090 R08: 0000000000000000 R09: 0000000000000000 [ 211.708785][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.708795][ T7151] R13: 00007f964f416038 R14: 00007f964f415fa0 R15: 00007ffd45acf098 [ 211.708820][ T7151] [ 212.374354][ T5737] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 212.450574][ T7158] netlink: 28 bytes leftover after parsing attributes in process `syz.2.321'. [ 212.534173][ T5737] usb 4-1: Using ep0 maxpacket: 8 [ 212.551886][ T5737] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 212.560454][ T5737] usb 4-1: config 179 has no interface number 0 [ 212.568155][ T5737] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 212.608827][ T5737] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 212.648805][ T5737] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 212.689972][ T5737] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 212.727990][ T5737] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 212.770249][ T5737] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 212.801061][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.839441][ T7154] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 213.203830][ T1226] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 213.400837][ T1226] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 213.444354][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.482554][ T1226] usb 5-1: config 0 descriptor?? [ 213.519398][ T1226] cp210x 5-1:0.0: cp210x converter detected [ 213.725844][ T1226] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 213.754998][ T1226] cp210x 5-1:0.0: querying part number failed [ 213.799484][ T1226] usb 5-1: cp210x converter now attached to ttyUSB0 [ 214.133987][ T7159] netlink: 28 bytes leftover after parsing attributes in process `syz.4.320'. [ 215.131716][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 215.140022][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 215.204085][ T5742] usb 4-1: USB disconnect, device number 15 [ 215.380840][ T5779] usb 5-1: USB disconnect, device number 16 [ 215.446768][ T5779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 215.489658][ T5779] cp210x 5-1:0.0: device disconnected [ 216.036929][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 216.082508][ T1226] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 216.266884][ T29] audit: type=1400 audit(1779852268.104:363): avc: denied { bind } for pid=7185 comm="syz.0.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 216.345302][ T1226] usb 3-1: Using ep0 maxpacket: 8 [ 216.447706][ T1226] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 216.535032][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.557500][ T1226] usb 3-1: Product: syz [ 216.569693][ T1226] usb 3-1: Manufacturer: syz [ 216.580828][ T1226] usb 3-1: SerialNumber: syz [ 216.611456][ T1226] usb 3-1: config 0 descriptor?? [ 216.846101][ T1226] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 216.901640][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 217.823132][ T5720] Process accounting resumed [ 218.492671][ T1226] usb write operation failed. (-71) [ 218.881924][ T1226] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 218.895020][ T1226] dvbdev: DVB: registering new adapter (Terratec H7) [ 218.901987][ T1226] usb 3-1: media controller created [ 218.907495][ T1226] usb read operation failed. (-71) [ 218.913002][ T1226] usb write operation failed. (-71) [ 218.922409][ T1226] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 219.080700][ T7207] netlink: 'syz.5.334': attribute type 4 has an invalid length. [ 219.374430][ T1226] usb 3-1: USB disconnect, device number 14 [ 220.102363][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.335'. [ 220.257642][ T24] Process accounting resumed [ 221.660544][ T29] audit: type=1400 audit(1779852273.486:364): avc: denied { getopt } for pid=7228 comm="syz.0.342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 221.941596][ T7232] xt_connbytes: Forcing CT accounting to be enabled [ 221.978579][ T7232] x_tables: ip_tables: sctp match: only valid for protocol 132 [ 222.839017][ T5742] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 222.889245][ T1226] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 223.054821][ T7250] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.081137][ T5742] usb 3-1: unable to get BOS descriptor or descriptor too short [ 223.139019][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 223.172287][ T5742] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 223.233342][ T5742] usb 3-1: config 1 interface 0 has no altsetting 0 [ 223.293680][ T5742] usb 3-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.40 [ 223.361631][ T1226] usb 6-1: Using ep0 maxpacket: 8 [ 223.382837][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.486770][ T5742] usb 3-1: Product: 坦㽍级뙎胥耲䉥﮳⡹䤌펲옪㍌짵鰹নۺȤἽ꽑栶앛讷饐焆䣣⊜臨濝퀈趩졢﵉躿ꉫ셄꧿璵ꖮ礞䍑폠탹䱒䢮돥ꋟΎ胈켮툂뫦脄⹀閣᭡᧏๩沛ꟊ볮뤃㘔౱쑂僷牟ꈴ磙뜥뀂疭∕ᆠﲁ莺ྐྵ锓䘗⇽⌅͕岢 [ 223.900120][ T5742] usb 3-1: Manufacturer: ᐄ [ 223.950943][ T5742] usb 3-1: SerialNumber: ꊹ芠킾뙄롱橫璘礿첄祕╁퇠Ꝕឺ锊擉⵼읜Ǚ홎ჳ䙂풘촊峮绹ꃸ힖㌝ˬ赈ꑷ赿迅ﯭ梖⻿饷閇㟋啲䣂὜쟘䢡뚆婊ੜ䱈킏쓐ᨵ㻄쳍䪹㮄ꪃ䛇힟 [ 224.055455][ T1226] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 224.066467][ T1226] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.078471][ T1226] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.088311][ T1226] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.098221][ T1226] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.113994][ T7241] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 224.116672][ T1226] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 224.366267][ T1226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.631068][ T1226] usb 6-1: GET_CAPABILITIES returned 0 [ 224.636807][ T1226] usbtmc 6-1:16.0: can't read capabilities [ 224.703667][ T5742] usbhid 3-1:1.0: can't add hid device: -71 [ 224.709761][ T5742] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 224.763939][ T5742] usb 3-1: USB disconnect, device number 15 [ 224.844744][ T5743] usb 6-1: USB disconnect, device number 5 [ 225.681009][ T7267] No such timeout policy "syz0" [ 227.130113][ T7264] team0: left allmulticast mode [ 227.216926][ T7264] team_slave_0: left allmulticast mode [ 227.280995][ T7264] team_slave_1: left allmulticast mode [ 228.131181][ T29] audit: type=1400 audit(1779852279.950:365): avc: denied { mounton } for pid=7275 comm="syz.5.356" path="/proc/89/task" dev="proc" ino=15979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 228.326400][ T29] audit: type=1400 audit(1779852280.150:366): avc: denied { read } for pid=7275 comm="syz.5.356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 229.576755][ T7296] fuse: Bad value for 'group_id' [ 229.595578][ T1226] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 229.616055][ T7296] fuse: Bad value for 'group_id' [ 229.697773][ T29] audit: type=1400 audit(1779852281.540:367): avc: denied { getopt } for pid=7301 comm="syz.5.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 229.892088][ T1226] usb 5-1: Using ep0 maxpacket: 8 [ 230.426200][ T29] audit: type=1400 audit(1779852281.881:368): avc: denied { shutdown } for pid=7301 comm="syz.5.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.452683][ T7307] ceph: No mds server is up or the cluster is laggy [ 230.461259][ T1226] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 230.499187][ T1226] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 230.513492][ T46] libceph: connect (1)[c::]:6789 error -101 [ 230.578216][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 230.612457][ T1226] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.309519][ T1226] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.333462][ T1226] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.344512][ T1226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.579746][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 232.315395][ T7327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.472694][ T1226] usb 5-1: can't set config #16, error -71 [ 232.699825][ T1226] usb 5-1: USB disconnect, device number 17 [ 232.919338][ T7342] pim6reg: entered allmulticast mode [ 232.932583][ T7342] team0: entered allmulticast mode [ 232.937819][ T7342] team_slave_0: entered allmulticast mode [ 232.943541][ T7342] team_slave_1: entered allmulticast mode [ 232.953162][ T7342] team0: left allmulticast mode [ 232.958120][ T7342] team_slave_0: left allmulticast mode [ 232.963562][ T7342] team_slave_1: left allmulticast mode [ 232.969156][ T7342] pim6reg: left allmulticast mode [ 233.731930][ T7357] netlink: 12 bytes leftover after parsing attributes in process `syz.5.374'. [ 233.781906][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.374'. [ 233.807915][ T7357] netlink: 20 bytes leftover after parsing attributes in process `syz.5.374'. [ 233.990453][ T7358] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 234.748360][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.376'. [ 236.177647][ T7387] netlink: 28 bytes leftover after parsing attributes in process `syz.4.382'. [ 236.902934][ T1226] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 237.154911][ T1226] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 237.251098][ T1226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.351526][ T1226] usb 6-1: config 0 descriptor?? [ 237.540595][ T7395] netlink: 'syz.4.386': attribute type 10 has an invalid length. [ 237.729226][ T7395] team0: Port device dummy0 added [ 238.311814][ T5743] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 238.351227][ T5810] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 238.451563][ T1226] ath6kl: Failed to submit usb control message: -110 [ 238.461253][ T5743] usb 3-1: device descriptor read/64, error -71 [ 238.474711][ T1226] ath6kl: unable to send the bmi data to the device: -110 [ 238.503446][ T1226] ath6kl: Unable to send get target info: -110 [ 238.534769][ T1226] ath6kl: Failed to init ath6kl core: -110 [ 238.548787][ T5630] Bluetooth: hci5: command 0x1003 tx timeout [ 238.551590][ T50] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 238.571823][ T5810] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 238.588019][ T1226] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 238.604250][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.622881][ T1226] usb 6-1: USB disconnect, device number 6 [ 238.635988][ T5810] usb 5-1: config 0 descriptor?? [ 238.723465][ T5743] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 238.882669][ T5743] usb 3-1: device descriptor read/64, error -71 [ 239.252940][ T5743] usb usb3-port1: attempt power cycle [ 239.730656][ T5810] ath6kl: Failed to submit usb control message: -110 [ 239.753031][ T5743] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 239.780622][ T5810] ath6kl: unable to send the bmi data to the device: -110 [ 239.803076][ T5743] usb 3-1: device descriptor read/8, error -71 [ 239.809320][ T5810] ath6kl: Unable to send get target info: -110 [ 239.837547][ T5810] ath6kl: Failed to init ath6kl core: -110 [ 240.051963][ T5620] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 240.158472][ T5810] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 240.178635][ T5742] usb 5-1: USB disconnect, device number 18 [ 240.202770][ T5743] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 240.262262][ T5743] usb 3-1: device descriptor read/8, error -71 [ 240.390793][ T5743] usb usb3-port1: unable to enumerate USB device [ 240.470013][ T7433] netlink: 'syz.0.398': attribute type 39 has an invalid length. [ 242.442095][ T7437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.397'. [ 243.430859][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.407'. [ 243.588829][ T5743] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 243.594035][ T29] audit: type=1326 audit(1779852295.437:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.2.411" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f964f19ce59 code=0x0 [ 243.756343][ T5743] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 243.789666][ T5743] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.829050][ T5743] usb 5-1: config 0 descriptor?? [ 244.102874][ T29] audit: type=1400 audit(1779852295.948:370): avc: denied { shutdown } for pid=7490 comm="syz.5.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 244.127445][ T7492] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35217 sclass=netlink_route_socket pid=7492 comm=syz.5.412 [ 244.475823][ T29] audit: type=1400 audit(1779852296.318:371): avc: denied { create } for pid=7495 comm="syz.5.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 244.558578][ T29] audit: type=1400 audit(1779852296.408:372): avc: denied { setopt } for pid=7495 comm="syz.5.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 244.928213][ T5743] ath6kl: Failed to submit usb control message: -110 [ 244.960219][ T5743] ath6kl: unable to send the bmi data to the device: -110 [ 244.997485][ T5743] ath6kl: Unable to send get target info: -110 [ 245.045463][ T5743] ath6kl: Failed to init ath6kl core: -110 [ 245.084439][ T5743] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 245.328232][ T50] Bluetooth: hci5: command 0x1003 tx timeout [ 245.329778][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 245.363954][ T5743] usb 5-1: USB disconnect, device number 19 [ 245.739521][ T7515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 245.779633][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 246.117316][ T7517] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 246.155393][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.419'. [ 248.045923][ T7524] openvswitch: netlink: Unknown key attributes 2 [ 248.119355][ T7526] team0: entered allmulticast mode [ 248.125225][ T7526] team_slave_0: entered allmulticast mode [ 248.131091][ T7526] team_slave_1: entered allmulticast mode [ 248.136836][ T7526] dummy0: entered allmulticast mode [ 248.282350][ T29] audit: type=1400 audit(1779852300.130:373): avc: denied { read write } for pid=7531 comm="syz.2.424" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.430826][ T29] audit: type=1400 audit(1779852300.130:374): avc: denied { open } for pid=7531 comm="syz.2.424" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.512190][ T29] audit: type=1400 audit(1779852300.180:375): avc: denied { connect } for pid=7532 comm="syz.3.420" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 248.606773][ T1226] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 248.666038][ T46] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 248.712601][ T7541] comedi comedi3: rti802: I/O base address or length out of range [ 248.806663][ T1226] usb 4-1: Using ep0 maxpacket: 8 [ 248.903857][ T29] audit: type=1400 audit(1779852300.740:376): avc: denied { read } for pid=7540 comm="syz.0.427" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 249.107509][ T46] usb 6-1: Using ep0 maxpacket: 16 [ 249.171410][ T29] audit: type=1400 audit(1779852300.740:377): avc: denied { open } for pid=7540 comm="syz.0.427" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 249.398610][ T29] audit: type=1400 audit(1779852300.790:378): avc: denied { ioctl } for pid=7540 comm="syz.0.427" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 249.903567][ T46] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 249.916383][ T1226] usb 4-1: config 0 has an invalid interface number: 32 but max is 0 [ 249.924687][ T1226] usb 4-1: config 0 has no interface number 0 [ 249.931885][ T1226] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 249.941099][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.955764][ T46] usb 6-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 249.968184][ T46] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.976429][ T46] usb 6-1: Product: syz [ 249.980759][ T46] usb 6-1: Manufacturer: Б [ 249.986788][ T1226] usb 4-1: config 0 descriptor?? [ 249.992330][ T46] usb 6-1: SerialNumber: syz [ 250.175820][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.183501][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.254417][ T1226] usb-storage 4-1:0.32: USB Mass Storage device detected [ 250.276232][ T7535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.420'. [ 250.332283][ T1226] usb-storage 4-1:0.32: device ignored [ 250.378770][ T29] audit: type=1400 audit(1779852302.231:379): avc: denied { read write } for pid=7531 comm="syz.2.424" name="mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 250.378915][ T7554] FAULT_INJECTION: forcing a failure. [ 250.378915][ T7554] name failslab, interval 1, probability 0, space 0, times 0 [ 250.419958][ T7554] CPU: 1 UID: 0 PID: 7554 Comm: syz.4.430 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.419987][ T7554] Tainted: [L]=SOFTLOCKUP [ 250.419993][ T7554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.420003][ T7554] Call Trace: [ 250.420008][ T7554] [ 250.420015][ T7554] dump_stack_lvl+0x100/0x190 [ 250.420046][ T7554] should_fail_ex.cold+0x5/0xa [ 250.420076][ T7554] ? tomoyo_realpath_from_path+0xb6/0x690 [ 250.420104][ T7554] should_failslab+0xc2/0x120 [ 250.420124][ T7554] __kmalloc_noprof+0xe0/0x850 [ 250.420150][ T7554] ? kfree+0x1dd/0x6c0 [ 250.420178][ T7554] tomoyo_realpath_from_path+0xb6/0x690 [ 250.420210][ T7554] tomoyo_path_number_perm+0x23c/0x580 [ 250.420231][ T7554] ? tomoyo_path_number_perm+0x22e/0x580 [ 250.420255][ T7554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 250.420303][ T7554] ? find_held_lock+0x2b/0x80 [ 250.420320][ T7554] ? __fget_files+0x215/0x3d0 [ 250.420342][ T7554] ? hook_file_ioctl_common+0x149/0x410 [ 250.420358][ T7554] ? __fget_files+0x215/0x3d0 [ 250.420385][ T7554] ? __fget_files+0x21f/0x3d0 [ 250.420411][ T7554] security_file_ioctl+0xd3/0x230 [ 250.420437][ T7554] __x64_sys_ioctl+0xb7/0x210 [ 250.420459][ T7554] do_syscall_64+0x10b/0x860 [ 250.420485][ T7554] ? clear_bhb_loop+0x40/0x90 [ 250.420507][ T7554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.420523][ T7554] RIP: 0033:0x7fe88a59ce59 [ 250.420539][ T7554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.420555][ T7554] RSP: 002b:00007fe88b50b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.420572][ T7554] RAX: ffffffffffffffda RBX: 00007fe88a815fa0 RCX: 00007fe88a59ce59 [ 250.420583][ T7554] RDX: 0000200000000080 RSI: 00000000c1105517 RDI: 0000000000000003 [ 250.420594][ T7554] RBP: 00007fe88b50b090 R08: 0000000000000000 R09: 0000000000000000 [ 250.420603][ T7554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.420612][ T7554] R13: 00007fe88a816038 R14: 00007fe88a815fa0 R15: 00007fff7ba27718 [ 250.420636][ T7554] [ 250.421326][ T7554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 250.464569][ T29] audit: type=1400 audit(1779852302.261:380): avc: denied { open } for pid=7531 comm="syz.2.424" path="/dev/input/mouse0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 250.513895][ T46] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 250.728372][ T5743] usb 4-1: USB disconnect, device number 16 [ 250.733685][ T7559] : renamed from vlan0 (while UP) [ 250.779735][ T7560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7560 comm=syz.4.432 [ 250.802964][ T29] audit: type=1400 audit(1779852302.651:381): avc: denied { read } for pid=7558 comm="syz.0.431" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 250.849338][ T7560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.081466][ T46] usb 6-1: MIDIStreaming interface descriptor not found [ 251.175638][ T29] audit: type=1400 audit(1779852302.651:382): avc: denied { open } for pid=7558 comm="syz.0.431" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 251.606760][ T46] usb 6-1: USB disconnect, device number 7 [ 251.813694][ T29] audit: type=1400 audit(1779852303.621:383): avc: denied { read } for pid=7573 comm="syz.3.435" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 252.145870][ T29] audit: type=1400 audit(1779852303.712:384): avc: denied { open } for pid=7573 comm="syz.3.435" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 252.237773][ T7585] team0: entered allmulticast mode [ 252.242978][ T7585] team_slave_0: entered allmulticast mode [ 252.248859][ T7585] team_slave_1: entered allmulticast mode [ 252.337981][ T6018] udevd[6018]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.708469][ T7590] netlink: 28 bytes leftover after parsing attributes in process `syz.2.437'. [ 252.711364][ T7597] comedi comedi3: rti802: I/O base address or length out of range [ 254.253389][ T7606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7606 comm=syz.0.443 [ 254.347228][ T7606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.354480][ T7606] IPv6: NLM_F_CREATE should be set when creating new route [ 255.645292][ T29] audit: type=1400 audit(1779852563.502:385): avc: denied { ioctl } for pid=7626 comm="syz.2.449" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 256.248190][ T5620] Bluetooth: hci3: unexpected cc 0x0c6d length: 154 > 1 [ 256.255259][ T5620] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 256.619982][ T29] audit: type=1400 audit(1779852820.474:386): avc: denied { open } for pid=7636 comm="syz.4.451" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 257.684731][ T7641] syzkaller0: entered promiscuous mode [ 257.727095][ T7641] syzkaller0: entered allmulticast mode [ 257.891804][ T7649] netlink: 'syz.5.453': attribute type 4 has an invalid length. [ 257.969759][ T29] audit: type=1400 audit(1779852821.814:387): avc: denied { bind } for pid=7644 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 258.048576][ T29] audit: type=1400 audit(1779852821.814:388): avc: denied { name_bind } for pid=7644 comm="syz.5.453" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 258.128964][ T29] audit: type=1400 audit(1779852821.814:389): avc: denied { node_bind } for pid=7644 comm="syz.5.453" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 258.327819][ T7657] comedi comedi3: rti802: I/O base address or length out of range [ 258.698744][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 259.899790][ T7674] syz.0.459 uses obsolete (PF_INET,SOCK_PACKET) [ 260.599252][ T7680] lo speed is unknown, defaulting to 1000 [ 261.522454][ T29] audit: type=1400 audit(1779853081.366:390): avc: denied { accept } for pid=7676 comm="syz.5.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 262.239462][ T7694] team0: entered allmulticast mode [ 262.266532][ T7694] team_slave_0: entered allmulticast mode [ 262.290505][ T7694] team_slave_1: entered allmulticast mode [ 262.620910][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 263.340619][ T7702] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 263.350974][ T29] audit: type=1400 audit(1779853083.187:391): avc: denied { read write } for pid=7699 comm="syz.4.465" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 263.749390][ T29] audit: type=1400 audit(1779853083.187:392): avc: denied { open } for pid=7699 comm="syz.4.465" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 263.827464][ T7704] netlink: 9 bytes leftover after parsing attributes in process `syz.2.466'. [ 263.852184][ T29] audit: type=1400 audit(1779853083.197:393): avc: denied { ioctl } for pid=7699 comm="syz.4.465" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 263.983349][ T7704] netlink: 9 bytes leftover after parsing attributes in process `syz.2.466'. [ 264.058157][ T7707] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 264.090457][ T7707] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 264.411427][ T7711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.468'. [ 264.660922][ T46] Process accounting resumed [ 265.216537][ T29] audit: type=1400 audit(1779853085.068:394): avc: denied { getopt } for pid=7718 comm="syz.5.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 265.317773][ T7720] pim6reg: entered allmulticast mode [ 265.422427][ T7720] team0: entered allmulticast mode [ 265.444901][ T7720] team_slave_0: entered allmulticast mode [ 265.445836][ T7725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7725 comm=syz.5.474 [ 265.467085][ T7720] team_slave_1: entered allmulticast mode [ 265.590639][ T7723] team0: left allmulticast mode [ 265.602502][ T7725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.609783][ T7725] IPv6: NLM_F_CREATE should be set when creating new route [ 265.628463][ T7723] team_slave_0: left allmulticast mode [ 265.662713][ T7723] team_slave_1: left allmulticast mode [ 265.690918][ T7723] pim6reg: left allmulticast mode [ 266.106241][ T7738] netlink: 8 bytes leftover after parsing attributes in process `syz.5.478'. [ 267.695316][ T7743] syzkaller0: entered promiscuous mode [ 267.707810][ T7743] syzkaller0: entered allmulticast mode [ 267.727204][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 268.047999][ T29] audit: type=1400 audit(1779853343.904:395): avc: denied { connect } for pid=7752 comm="syz.2.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.077889][ T7753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.480'. [ 269.603040][ T29] audit: type=1400 audit(1779853601.279:396): avc: denied { bind } for pid=7756 comm="syz.2.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 270.695029][ T5720] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 271.174855][ T5720] usb 5-1: Using ep0 maxpacket: 8 [ 271.235141][ T5720] usb 5-1: too many endpoints for config 0 interface 0 altsetting 8: 41, using maximum allowed: 30 [ 271.245968][ T5720] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.280312][ T5720] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 41 [ 271.322140][ T5720] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.343287][ T5720] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 271.371706][ T5720] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.390716][ T5779] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 271.411446][ T5720] usb 5-1: config 0 descriptor?? [ 271.569384][ T5779] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.582699][ T5779] usb 3-1: config 0 interface 0 has no altsetting 0 [ 271.592157][ T5779] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 271.601822][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.648220][ T5779] usb 3-1: config 0 descriptor?? [ 271.898692][ T5720] kye 0003:0458:5016.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 271.919496][ T5720] kye 0003:0458:5016.0002: unknown main item tag 0x0 [ 271.940294][ T5720] kye 0003:0458:5016.0002: unknown main item tag 0x0 [ 271.961828][ T5720] kye 0003:0458:5016.0002: unknown main item tag 0x0 [ 271.991136][ T5720] kye 0003:0458:5016.0002: unknown main item tag 0x0 [ 272.012666][ T5720] kye 0003:0458:5016.0002: unknown main item tag 0x0 [ 272.035414][ T5720] kye 0003:0458:5016.0002: unknown main item tag 0x0 [ 272.062701][ T5720] kye 0003:0458:5016.0002: unknown main item tag 0x0 [ 272.083170][ T5720] kye 0003:0458:5016.0002: unknown main item tag 0x0 [ 272.106870][ T5720] kye 0003:0458:5016.0002: unknown main item tag 0x0 [ 272.131491][ T5779] zeroplus 0003:0C12:0005.0003: unknown main item tag 0x0 [ 272.178156][ T5779] zeroplus 0003:0C12:0005.0003: unbalanced collection at end of report description [ 272.197601][ T5779] zeroplus 0003:0C12:0005.0003: parse failed [ 272.208204][ T5779] zeroplus 0003:0C12:0005.0003: probe with driver zeroplus failed with error -22 [ 272.218259][ T5720] kye 0003:0458:5016.0002: hidraw0: USB HID v0.03 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 272.272015][ T5720] kye 0003:0458:5016.0002: tablet-enabling feature report not found [ 272.298672][ T5720] kye 0003:0458:5016.0002: tablet enabling failed [ 272.372714][ T5720] usb 5-1: USB disconnect, device number 20 [ 272.557433][ T7783] fido_id[7783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 272.595718][ T5779] usb 3-1: USB disconnect, device number 20 [ 275.586248][ T7810] tipc: Started in network mode [ 275.614306][ T7810] tipc: Node identity 080211, cluster identity 4711 [ 275.641737][ T7810] tipc: Enabled bearer , priority 0 [ 276.132005][ T7821] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7821 comm=syz.0.502 [ 276.405502][ T7820] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.978750][ T5779] tipc: Node number set to 134353152 [ 278.547653][ T29] audit: type=1400 audit(1779853866.412:397): avc: denied { ioctl } for pid=7831 comm="syz.4.504" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 278.611651][ T29] audit: type=1400 audit(1779853866.482:398): avc: denied { connect } for pid=7837 comm="syz.5.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 278.619637][ T7832] input: syz1 as /devices/virtual/input/input10 [ 279.120888][ T5779] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 279.356096][ T5779] usb 6-1: not running at top speed; connect to a high speed hub [ 279.409475][ T5779] usb 6-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 279.448562][ T5779] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.473875][ T5779] usb 6-1: Product: 㠊 [ 279.489717][ T5779] usb 6-1: Manufacturer: 䙢텝呠㴸㰱ꀮ희휅親鬸ⶈ崆㱦닩䎡륑䴆蝴쬄萄閭脇㚇鄏ի轅⵮茏㳝爉䰿췳ᾷ苚᱂քᡉ⾾ᜨ㨃俘陫냈杳ꇳ墇ꃮ丷╜ῆꮍ뻻ﾵ༝弟谎␡蝯狽椻魚襎摍 [ 279.552477][ T5779] usb 6-1: SerialNumber: 䀊 [ 279.854876][ T7848] sctp: [Deprecated]: syz.3.510 (pid 7848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 279.854876][ T7848] Use struct sctp_sack_info instead [ 280.067567][ T7841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.190550][ T7841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.233136][ T7841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.283552][ T7841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.999284][ T5779] usb 6-1: USB disconnect, device number 8 [ 281.220213][ T5810] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 281.432277][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 281.527446][ T7859] syzkaller0: entered promiscuous mode [ 281.533128][ T7859] syzkaller0: entered allmulticast mode [ 281.600689][ T5810] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 281.622509][ T5810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 281.647418][ T5810] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 281.694893][ T5810] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 281.721431][ T5810] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.287650][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.840393][ T5810] usb 4-1: usb_control_msg returned -71 [ 282.882720][ T5810] usbtmc 4-1:16.0: can't read capabilities [ 282.959628][ T5810] usb 4-1: USB disconnect, device number 17 [ 283.278937][ T46] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 284.477319][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 284.543706][ T46] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 284.604172][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.781345][ T46] usb 3-1: Product: syz [ 284.884556][ T7884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.518'. [ 285.269926][ T46] usb 3-1: Manufacturer: syz [ 285.283642][ T46] usb 3-1: SerialNumber: syz [ 285.316251][ T46] usb 3-1: config 0 descriptor?? [ 285.540660][ T46] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 286.383114][ T5810] Process accounting resumed [ 286.979437][ T46] usb write operation failed. (-71) [ 287.035690][ T46] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 287.089155][ T46] dvbdev: DVB: registering new adapter (Terratec H7) [ 287.115562][ T46] usb 3-1: media controller created [ 287.140341][ T46] usb read operation failed. (-71) [ 287.166094][ T46] usb write operation failed. (-71) [ 287.194996][ T46] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 287.203629][ T29] audit: type=1400 audit(1779853875.066:399): avc: denied { write } for pid=7886 comm="syz.4.520" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 287.244420][ T46] usb 3-1: USB disconnect, device number 21 [ 287.704593][ T7898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7898 comm=syz.4.521 [ 287.718441][ T7899] netlink: 28 bytes leftover after parsing attributes in process `syz.5.519'. [ 289.557913][ T29] audit: type=1400 audit(1779853877.407:400): avc: denied { unlink } for pid=7900 comm="syz.2.522" name="#1" dev="tmpfs" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 289.647431][ T29] audit: type=1400 audit(1779853877.497:401): avc: denied { mount } for pid=7900 comm="syz.2.522" name="/" dev="overlay" ino=577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 292.422248][ T7920] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.508190][ T7927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7927 comm=syz.4.529 [ 293.148706][ T50] Bluetooth: hci6: command 0x0405 tx timeout [ 293.163477][ T7927] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 293.364372][ T7927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.756232][ T7935] bond1: (slave vlan2): making interface the new active one [ 293.780350][ T7935] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 294.455467][ T7946] pim6reg: entered allmulticast mode [ 294.488191][ T7947] team0: entered allmulticast mode [ 294.543892][ T7947] team_slave_0: entered allmulticast mode [ 294.679768][ T7947] team_slave_1: entered allmulticast mode [ 294.708303][ T7952] team0: left allmulticast mode [ 294.775049][ T7956] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 294.800863][ T5620] Bluetooth: hci0: unexpected cc 0x0c6d length: 154 > 1 [ 294.808156][ T5620] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 295.707335][ T7952] team_slave_0: left allmulticast mode [ 295.893170][ T7952] team_slave_1: left allmulticast mode [ 295.916992][ T7952] pim6reg: left allmulticast mode [ 296.420564][ T7974] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 297.286711][ T7978] pim6reg: entered allmulticast mode [ 297.318772][ T7978] team0: left allmulticast mode [ 297.323723][ T7978] team_slave_0: left allmulticast mode [ 297.329200][ T7978] team_slave_1: left allmulticast mode [ 297.334765][ T7978] pim6reg: left allmulticast mode [ 300.403918][ T8000] futex_wake_op: syz.5.542 tries to shift op by 144; fix this program [ 300.516017][ T8001] xt_hashlimit: size too large, truncated to 1048576 [ 300.972119][ T29] audit: type=1400 audit(1779854144.366:402): avc: denied { mount } for pid=7993 comm="syz.5.542" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 301.110848][ T8004] overlayfs: conflicting lowerdir path [ 301.677816][ T8006] comedi comedi3: rti802: I/O base address or length out of range [ 304.280008][ T8018] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 304.363153][ T29] audit: type=1400 audit(1779854147.898:403): avc: denied { unmount } for pid=6694 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 304.376873][ T5620] Bluetooth: hci1: unexpected cc 0x0c6d length: 154 > 1 [ 304.390319][ T5620] Bluetooth: hci1: unexpected event for opcode 0x0c6d [ 305.150769][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.4.549'. [ 305.434153][ T8040] FAULT_INJECTION: forcing a failure. [ 305.434153][ T8040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.491168][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz.0.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.491199][ T8040] Tainted: [L]=SOFTLOCKUP [ 305.491206][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 305.491216][ T8040] Call Trace: [ 305.491224][ T8040] [ 305.491231][ T8040] dump_stack_lvl+0x100/0x190 [ 305.491258][ T8040] should_fail_ex.cold+0x5/0xa [ 305.491280][ T8040] strncpy_from_user+0x3b/0x2d0 [ 305.491294][ T8040] do_getname+0x78/0x390 [ 305.491305][ T8040] do_fchownat+0xc6/0x1f0 [ 305.491321][ T8040] ? __pfx_do_fchownat+0x10/0x10 [ 305.491341][ T8040] ? __pfx_ksys_write+0x10/0x10 [ 305.491355][ T8040] __x64_sys_fchownat+0xbd/0x160 [ 305.491369][ T8040] ? do_syscall_64+0x90/0x860 [ 305.491387][ T8040] ? lockdep_hardirqs_on+0x78/0x100 [ 305.491410][ T8040] do_syscall_64+0x10b/0x860 [ 305.491425][ T8040] ? clear_bhb_loop+0x40/0x90 [ 305.491438][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.491449][ T8040] RIP: 0033:0x7f3a71b9ce59 [ 305.491458][ T8040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.491469][ T8040] RSP: 002b:00007f3a72a5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 305.491480][ T8040] RAX: ffffffffffffffda RBX: 00007f3a71e16090 RCX: 00007f3a71b9ce59 [ 305.491486][ T8040] RDX: 000000000000ee00 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 305.491493][ T8040] RBP: 00007f3a72a5f090 R08: 0000000000001000 R09: 0000000000000000 [ 305.491499][ T8040] R10: 000000000000ee01 R11: 0000000000000246 R12: 0000000000000001 [ 305.491505][ T8040] R13: 00007f3a71e16128 R14: 00007f3a71e16090 R15: 00007ffe39c8b4f8 [ 305.491519][ T8040] [ 305.685222][ T29] audit: type=1400 audit(1779854149.559:404): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 307.029524][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 308.036487][ T46] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 308.046316][ T5743] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 308.206751][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 308.247425][ T46] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 308.286934][ T46] usb 4-1: config 0 has no interface number 0 [ 308.331109][ T46] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.404325][ T46] usb 4-1: config 0 interface 85 has no altsetting 0 [ 308.471653][ T46] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 308.545659][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.597851][ T46] usb 4-1: Product: syz [ 308.630097][ T46] usb 4-1: Manufacturer: syz [ 308.660947][ T46] usb 4-1: SerialNumber: syz [ 308.748414][ T5743] usb 6-1: Using ep0 maxpacket: 32 [ 308.749031][ T46] usb 4-1: config 0 descriptor?? [ 309.082151][ T5743] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 309.107776][ T5743] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 309.135866][ T5743] usb 6-1: New USB device found, idVendor=046d, idProduct=c11c, bcdDevice= 0.40 [ 309.165835][ T5743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.214633][ T5743] usb 6-1: config 0 descriptor?? [ 309.329768][ T8066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.341589][ T8066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.498739][ T5743] usb 6-1: USB disconnect, device number 9 [ 309.609830][ T46] appletouch 4-1:0.85: Geyser mode initialized. [ 309.630570][ T46] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input11 [ 309.753619][ T8084] Bluetooth: MGMT ver 1.23 [ 309.776760][ T8084] Bluetooth: hci0: unsupported parameter 255 [ 309.801442][ T8084] Bluetooth: hci0: unsupported parameter 255 [ 309.938652][ T5779] usb 4-1: USB disconnect, device number 18 [ 310.125707][ T5779] appletouch 4-1:0.85: input: appletouch disconnected [ 310.255773][ T30] INFO: task syz.1.185:6560 blocked for more than 143 seconds. [ 310.269125][ T30] Tainted: G L syzkaller #0 [ 310.288301][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 310.315556][ T30] task:syz.1.185 state:D stack:28792 pid:6560 tgid:6557 ppid:5610 task_flags:0x400040 flags:0x00080002 [ 310.364945][ T30] Call Trace: [ 310.370626][ T30] [ 310.385263][ T30] __schedule+0x1295/0x67a0 [ 310.405167][ T30] ? __pfx___schedule+0x10/0x10 [ 310.412368][ T30] ? find_held_lock+0x2b/0x80 [ 310.427582][ T30] ? schedule+0x2bf/0x390 [ 310.445071][ T30] schedule+0xdd/0x390 [ 310.455400][ T30] schedule_preempt_disabled+0x13/0x30 [ 310.475163][ T30] __mutex_lock+0xced/0x1b10 [ 310.495398][ T30] ? usbdev_open+0x1b6/0x870 [ 310.502451][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 310.525193][ T30] ? _raw_spin_unlock+0x28/0x50 [ 310.532415][ T30] ? kobject_put+0xb9/0x640 [ 310.548060][ T30] ? __pfx_device_match_devt+0x10/0x10 [ 310.567395][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 310.585004][ T30] ? usbdev_open+0x1b6/0x870 [ 310.597986][ T30] usbdev_open+0x1b6/0x870 [ 310.615280][ T30] ? do_raw_spin_lock+0x128/0x260 [ 310.627785][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 310.645313][ T30] ? chrdev_open+0x589/0x6a0 [ 310.665029][ T30] ? chrdev_open+0x589/0x6a0 [ 310.675951][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 310.696578][ T30] chrdev_open+0x234/0x6a0 [ 310.707379][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 310.725102][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 310.749786][ T30] do_dentry_open+0x6d8/0x1660 [ 310.767015][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 310.783828][ T30] vfs_open+0x82/0x3f0 [ 310.795897][ T30] path_openat+0x208c/0x31a0 [ 310.811283][ T30] ? __pfx_path_openat+0x10/0x10 [ 310.825629][ T30] do_file_open+0x20e/0x430 [ 310.841191][ T30] ? __pfx_do_file_open+0x10/0x10 [ 310.859380][ T30] ? alloc_fd+0x476/0x790 [ 310.873172][ T30] ? do_getname+0x191/0x390 [ 310.885001][ T30] do_sys_openat2+0x10d/0x1e0 [ 310.889822][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 310.899922][ T30] ? putname+0xb1/0x110 [ 310.906720][ T30] ? kmem_cache_free+0x127/0x6c0 [ 310.917371][ T30] __x64_sys_openat+0x12d/0x210 [ 310.927930][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 310.939600][ T30] ? __pfx_ksys_truncate+0x10/0x10 [ 310.950617][ T30] ? rcu_is_watching+0x12/0xc0 [ 310.962880][ T30] do_syscall_64+0x10b/0x860 [ 310.978624][ T30] ? clear_bhb_loop+0x40/0x90 [ 310.988895][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.002343][ T30] RIP: 0033:0x7f991875d68e [ 311.012924][ T30] RSP: 002b:00007f991957fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 311.031649][ T30] RAX: ffffffffffffffda RBX: 00007f99195806c0 RCX: 00007f991875d68e [ 311.048138][ T30] RDX: 0000000000101301 RSI: 00007f991957fc00 RDI: ffffffffffffff9c [ 311.073109][ T30] RBP: 00007f991957fc00 R08: 0000000000000000 R09: 0000000000000000 [ 311.091613][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 311.106559][ T30] R13: 00007f9918a16038 R14: 00007f9918a15fa0 R15: 00007ffeb0829bb8 [ 311.122959][ T30] [ 311.136855][ T30] [ 311.136855][ T30] Showing all locks held in the system: [ 311.161758][ T30] 5 locks held by kworker/0:0/9: [ 311.204839][ T30] 1 lock held by khungtaskd/30: [ 311.220184][ T30] #0: ffffffff8e7e5620 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 311.256789][ T30] 2 locks held by getty/5368: [ 311.278813][ T30] #0: ffff8880390960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 311.313376][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 311.333803][ T30] 1 lock held by syz.1.185/6560: [ 311.353348][ T30] #0: ffff88802bc6c1d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x1b6/0x870 [ 311.386204][ T30] 1 lock held by syz.5.567/8089: [ 311.401409][ T30] [ 311.409875][ T30] ============================================= [ 311.409875][ T30] [ 311.441923][ T30] NMI backtrace for cpu 1 [ 311.441945][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 311.441969][ T30] Tainted: [L]=SOFTLOCKUP [ 311.441975][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.441985][ T30] Call Trace: [ 311.441992][ T30] [ 311.441999][ T30] dump_stack_lvl+0x100/0x190 [ 311.442026][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 311.442050][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 311.442072][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 311.442095][ T30] sys_info+0x141/0x190 [ 311.442111][ T30] watchdog+0xcb1/0x1030 [ 311.442137][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 311.442162][ T30] ? __pfx_watchdog+0x10/0x10 [ 311.442184][ T30] ? __kthread_parkme+0x18c/0x230 [ 311.442205][ T30] ? kthread+0x13a/0x450 [ 311.442224][ T30] ? __pfx_watchdog+0x10/0x10 [ 311.442243][ T30] kthread+0x370/0x450 [ 311.442263][ T30] ? __pfx_kthread+0x10/0x10 [ 311.442285][ T30] ret_from_fork+0x72b/0xd50 [ 311.442309][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 311.442338][ T30] ? __switch_to+0x800/0x1100 [ 311.442364][ T30] ? __pfx_kthread+0x10/0x10 [ 311.442386][ T30] ret_from_fork_asm+0x1a/0x30 [ 311.442422][ T30] [ 311.442428][ T30] Sending NMI from CPU 1 to CPUs 0: [ 311.537671][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 311.537741][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 311.594004][ C0] NMI backtrace for cpu 0 [ 311.594022][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.594042][ C0] Tainted: [L]=SOFTLOCKUP [ 311.594047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.594055][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 311.594080][ C0] Code: 36 92 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 31 20 00 fb f4 7c 42 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 311.594093][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 311.594105][ C0] RAX: 00000000010e573b RBX: ffffffff8e4955c0 RCX: ffffffff8b8b60b5 [ 311.594114][ C0] RDX: 0000000000000000 RSI: ffffffff8df2430b RDI: ffffffff8c1c4400 [ 311.594122][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 311.594130][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 311.594139][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d7e850 [ 311.594147][ C0] FS: 0000000000000000(0000) GS:ffff88812436a000(0000) knlGS:0000000000000000 [ 311.594161][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.594170][ C0] CR2: 00007f792a1ea2f8 CR3: 0000000076887000 CR4: 00000000003526f0 [ 311.594179][ C0] Call Trace: [ 311.594183][ C0] [ 311.594188][ C0] default_idle+0x9/0x10 [ 311.594201][ C0] default_idle_call+0x6c/0xb0 [ 311.594214][ C0] do_idle+0x464/0x590 [ 311.594228][ C0] ? __pfx_do_idle+0x10/0x10 [ 311.594243][ C0] cpu_startup_entry+0x4f/0x60 [ 311.594256][ C0] rest_init+0x251/0x260 [ 311.594270][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 311.594286][ C0] start_kernel+0x484/0x490 [ 311.594300][ C0] x86_64_start_reservations+0x24/0x30 [ 311.594313][ C0] x86_64_start_kernel+0x12b/0x130 [ 311.594327][ C0] common_startup_64+0x13e/0x148 [ 311.594350][ C0] [ 311.604724][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 311.604743][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 311.604765][ T30] Tainted: [L]=SOFTLOCKUP [ 311.604775][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 311.604785][ T30] Call Trace: [ 311.604791][ T30] [ 311.604798][ T30] dump_stack_lvl+0x100/0x190 [ 311.604822][ T30] vpanic+0x552/0x970 [ 311.604838][ T30] ? __pfx_vpanic+0x10/0x10 [ 311.604858][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 311.604880][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 311.604902][ T30] panic+0xd1/0xe0 [ 311.604916][ T30] ? __pfx_panic+0x10/0x10 [ 311.604933][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 311.604952][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 311.604971][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 311.604988][ T30] ? watchdog.cold+0x1ec/0x234 [ 311.605005][ T30] ? watchdog+0xcc1/0x1030 [ 311.605026][ T30] watchdog.cold+0x1fd/0x234 [ 311.605047][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 311.605079][ T30] ? __pfx_watchdog+0x10/0x10 [ 311.605098][ T30] ? __kthread_parkme+0x18c/0x230 [ 311.605118][ T30] ? kthread+0x13a/0x450 [ 311.605135][ T30] ? __pfx_watchdog+0x10/0x10 [ 311.605152][ T30] kthread+0x370/0x450 [ 311.605169][ T30] ? __pfx_kthread+0x10/0x10 [ 311.605189][ T30] ret_from_fork+0x72b/0xd50 [ 311.605210][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 311.605231][ T30] ? __switch_to+0x800/0x1100 [ 311.605254][ T30] ? __pfx_kthread+0x10/0x10 [ 311.605274][ T30] ret_from_fork_asm+0x1a/0x30 [ 311.605305][ T30] [ 311.942047][ T30] Kernel Offset: disabled [ 311.946346][ T30] Rebooting in 86400 seconds..