last executing test programs: 11m50.555422092s ago: executing program 0 (id=1347): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x2, 0x6f100f4b, 0xd, 0xfff9, 0xfb, 0x6, 0x0, 0x0, 0x1, 0xffff}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x7}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3f, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000280)={0x400, r7, 0x2}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000180)=0x6) prctl$PR_SET_ENDIAN(0x14, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x1, 0x80, 0x7f, "", [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x4, {{0x5}, {0x5, 0x24, 0x0, 0xd1}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x6, 0x1, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0xc0, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xc, 0x3, 0xe}}}}}]}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 11m47.643021306s ago: executing program 0 (id=1361): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000220000000a0001007770616e30000000050020000000040005002000000000000500200000"], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x44) 11m47.454505985s ago: executing program 0 (id=1363): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e000900270970feff0000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 11m46.991424421s ago: executing program 0 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xdbcd78cf0f854f85}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x804) syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff000900000009050a"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 11m45.064467055s ago: executing program 0 (id=1377): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) getpid() ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) sched_setaffinity(0x0, 0x49, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x5, &(0x7f00000000c0), 0x106, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r1, &(0x7f0000000040), 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffa0}, 0x48) 11m44.5511325s ago: executing program 0 (id=1379): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) write$snapshot(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xd80, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x4002, 0xce, 0xc, 0x32, {0x1, 0xffffffff}, 0xd0, 0x9}}) 10m42.935640473s ago: executing program 32 (id=1379): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) write$snapshot(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xd80, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x4002, 0xce, 0xc, 0x32, {0x1, 0xffffffff}, 0xd0, 0x9}}) 38.160015086s ago: executing program 5 (id=3669): r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x25dfdbff, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7ffffffe, 0x5, 0xfffffffb}, 0x2}}]}, {0x22, 0x6, "7a115e2fbde9bc7bfa473f949b12c09d3e451022b740b76541b898609bcf"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000300)={0x0, 0x9, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000002c0)={0x3, 0x8000, 0xfffffffb, 0x6}, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)={0x1c, 0x52, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c0002800500010000000000470002800500010001000000060006400000000006"], 0xe4}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002400)=@raw={'raw\x00', 0x3c1, 0x3, 0x488, 0x1b8, 0x12, 0x600, 0x1b8, 0x202, 0x3b8, 0x2e8, 0x2e8, 0x3b8, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0000000004000019b5115c2aee68d23a465cd431e150c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baeb8989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b500", 0x8}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xd8, 0x200, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0xc9, 0x11, 0x3}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7ff, 'system_u:object_r:crond_initrc_exec_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) 37.023174488s ago: executing program 5 (id=3673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002b4cabc8d7c2567a4abadc2af6ab1401fa1aff0000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) syz_open_dev$vim2m(0x0, 0x2ffe, 0x2) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'none\x00', 0x0, 0x10002, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x4e24, 0x200000001, 'wrr\x00', 0x9, 0x821}, 0x2c) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r6 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x6a, 0x1, 0x0, &(0x7f0000000640)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f0000000640)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x800000, 0x10, 0x10, 0x0, @in={0x2, 0x4, @multicast1}, @in={0x2, 0x4e21, @remote}}}, 0x118) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000004}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300)=0x18000, 0x4) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 34.603914686s ago: executing program 3 (id=3674): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4}, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$inet(0x10, 0x3, 0x8007fff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x10000022}, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[r3, r3], 0x1}, 0xffffffffffffff23) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000180), &(0x7f0000000280)=0x10) r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000006680), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000006780)={0x0, 0x0, &(0x7f0000006740)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYRES16=r6, @ANYRES32=r7, @ANYRESDEC=r2, @ANYRES8=r0, @ANYRES16=r3, @ANYRES64=r9], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x48000) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r8, 0x0, 0x0) r11 = openat$cgroup_subtree(r10, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) r12 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r12, 0xc0185879, 0x0) 33.882692838s ago: executing program 5 (id=3675): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700fc0008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 33.399421159s ago: executing program 5 (id=3677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8c853}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a0900000000000000000002000a2f0900010073797a30000000000900020073797a310000000008000340000000010800084000000000080004400000000014000000110001"], 0x6c}}, 0x0) r1 = socket(0x1d, 0x2, 0x8) sendmsg$inet_sctp(r1, 0x0, 0x24000052) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_user_confirm_reply={{0x15}, {0x3, @none}}}}, 0xd) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000400)) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x161, 0x40000867, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r4, &(0x7f0000002080)={0x2020}, 0x202d) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000240)=0x2) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x808, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8002}, 0x44040) close(0x3) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xfc, 0x2f, 0x62, 0x40, 0x9c4, 0x11, 0x638, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xf0, 0xe8, 0x2, 0xb5, 0x1c, 0x80, 0x3, [], [{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0xff, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect$midi(0x3, 0xba, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1016, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x1, 0x1, 0x8, 0x60, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x7, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3e, 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x9, 0x1, [{0x3, 0x4}], 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x9, 0xe}, @midi_out_jack={0x19, 0x24, 0x3, 0x1, 0x0, 0x9, [{0x9, 0x40}, {0x5, 0x2}, {0x1, 0x6}, {0x0, 0x5}, {0x3, 0x8}, {0x79, 0x1}, {0x8, 0x44}, {0x8, 0xe}, {0xff, 0x6}], 0x6}], [{{0x9, 0x5, 0x4, 0x0, 0x200, 0x2, 0x4e, 0x2, {0xf, 0x25, 0x1, 0xb, "71d7da04d767b597299240"}}}, {{0x9, 0x5, 0xb, 0x0, 0x0, 0x8, 0x50, 0x7, {0x9, 0x25, 0x1, 0x5, "933c7ca0a2"}}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x3, 0x2, 0x6, {0x12, 0x25, 0x1, 0xe, "fc7f5bf156e302366494f6dcbbf6"}}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x6e, 0x9, 0xc2, {0xc, 0x25, 0x1, 0x8, "e7546ec2ab539984"}}}]}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x340, 0x9a, 0x6, 0x2, 0x40, 0x5}, 0x59, &(0x7f0000000140)={0x5, 0xf, 0x59, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x3, 0xe, 0x5, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0xf, 0xf7, 0x401}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0x10, 0x7f}, @ssp_cap={0x20, 0x10, 0xa, 0xe, 0x5, 0x4, 0x0, 0xcb5, [0xc0, 0xff0030, 0xf, 0xfffff0, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "a92e12c3d0ec529bda2fa4ea957d635b"}]}, 0x3, [{0x1c, &(0x7f00000001c0)=@string={0x1c, 0x3, "9e4f8e23ce443fee9801ffe4c812d6b91f16eeae31a8b3552ac5"}}, {0x22, &(0x7f0000000200)=@string={0x22, 0x3, "6199f2572be975ddcffc279028daed11a2f3187d19767f237c5f4584540012cc"}}, {0xba, &(0x7f0000000240)=@string={0xba, 0x3, "e9fcfab035ba3cc9c783edc90951dc1ea701a993d328d07f2afe7d8c02068ef751badad618815809f67042c04ca2505e2e6e3078b8cc85d3b8b4d4eec2cd6b8d2b32a811ca0d664dd36fb9e46e8a15301736257cec6080a6c08d5d80e5e946ed33162c09e18d86ae7b9d8ec9f7927336ea00893bff4c6352cd3080ea7fc6b1c3013cc4bc0795291ecebd6e6d04433f318f43dcd40af49f45c03575a7069b758bc6905900a249b744967fbdf24423e59212409bc4fa3eab08"}}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000005c0)={0x14, &(0x7f0000000480)={0x0, 0x23, 0x1e, {0x1e, 0x21, "d6813216510729b666313568b4490e87bbeadd8ea61c92ca678fafe1"}}, &(0x7f0000000540)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x20, 0xd, 0x2c, "f1ea8cee016cc33ae140a638db53c6d8794813f0c158199b760efbd9f5fbd4a6cc52ef8689045073a9eb5f42"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000700)={0x20, 0x80, 0x1c, {0x8, 0x7, 0x1, 0xf922, 0x6ad9, 0xd, 0x7, 0x6, 0x4, 0x7fff, 0x31f9, 0xff}}, &(0x7f0000000740)={0x20, 0x85, 0x4, 0x10000}, &(0x7f0000000780)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000007c0)={0x20, 0x87, 0x2, 0x4}, 0x0}) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x40c600, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000380)={0xc}) syz_open_dev$video4linux(&(0x7f0000000340), 0x2, 0x80000) 32.427112404s ago: executing program 3 (id=3683): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$midi(0x6, 0xff, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x944, 0x204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x1, 0x1, 0x0, 0x170, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x9, [@ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x5, 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x87, 0xff}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x62, 0x7}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x5, 0x4, 0x0, {0x13, 0x25, 0x1, 0xf, "bf763b2c68a248e62947f3cf087673"}}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x30, 0x9, 0x82, {0x7, 0x25, 0x1, 0x3, "3b44a1"}}}, {{0x9, 0x5, 0xa, 0x10, 0x3bf, 0x5, 0xd, 0x0, {0x11, 0x25, 0x1, 0xd, "dd4a3a3cbc48634a831886f650"}}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x5, 0xf, 0x14, {0xe, 0x25, 0x1, 0xa, "d8c50eb400fb45b0f752"}}}, {{0x9, 0x5, 0x7, 0x0, 0x220, 0xfb, 0xa, 0x1, {0xc, 0x25, 0x1, 0x8, "6a661c6fd92be004"}}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x7, 0x3, 0x4, {0x11, 0x25, 0x1, 0xd, "5e2e1d5da8a4f82c4ca84e1fc4"}}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xff, 0x14, 0x5e, {0x14, 0x25, 0x1, 0x10, "73a23e6eb7e7f8265d72745ab76d192a"}}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0x9, 0x7, {0x10, 0x25, 0x1, 0xc, "6c8872088a74a99000a40b5f"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x9, 0xef, 0xc0, 0x20, 0x66}, 0x1a, &(0x7f0000000200)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x8, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x2, 0x81, 0xe}]}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @local=@item_4={0x3, 0x2, 0x7, 'c^,-'}]}}, 0x0}, 0x0) 32.041953318s ago: executing program 4 (id=3684): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000240)={0x24, @none={0x0, 0x3}}, 0x14) sendmmsg(r0, 0x0, 0x0, 0x404c010) times(&(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316d", 0xe}], 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0xf06, &(0x7f00000000c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010727bd7000fbdbdf25021000ff"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x20000) 31.859633389s ago: executing program 1 (id=3685): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@weak_handle={0x77682a85, 0x100, 0x2}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x1, 0x26}, @flat=@binder={0x73622a85, 0x1, 0x1, 0x6b10000000000000}}, &(0x7f0000000240)={0x55, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 31.635040192s ago: executing program 1 (id=3686): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410, 0xe7}}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000600)={0x0, 0x1, @start={0xa1, 0x1}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000500)={0x3, 0x6d, "5b1dcdd3cac27245b707b4b0a1e4c0c4899ab76c2ecf67c7f0d0332cdafaba5638c9037009989a46be3008c34e3afd36e9138af46af43a2765414d54d62eb990ca00ebf3f8fe45a05d56a7676cb714ebe5f483b8caed3a2e90b14f83cb41c505968ed2aa58e62190a264c6182f"}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x14b041, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) lsetxattr$security_evm(&(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000300), &(0x7f0000000380)=@v2={0x3, 0x0, 0xa}, 0x9, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="016f08000000000000008dffffffff00000000270000000000000000000000000000000000004615c99c1c738f8ee659ddff2d3e875ee35e7d92a78d595fa71c280267cd93e2652bcb4dd0769ae0cee0", @ANYRES64=r2, @ANYRES32=0x41424344, @ANYRESOCT=r5], 0xfd6c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x2000fb) r8 = open(&(0x7f0000000140)='./file0\x00', 0x20800, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r8, &(0x7f0000000100)='./file1\x00', r8, &(0x7f0000000040)='./file0/file1\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') 31.01084002s ago: executing program 5 (id=3687): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, "16"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000040)={{}, {0x20, 0xfc}, 0x0, 0x4}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a500ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f29e5e77b9615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x4}, 0x50) r2 = syz_usb_connect$uac2(0x4, 0xb9, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x4, 0x0, 0x3, {0x8, 0xb, 0x0, 0x2, 0x1, 0xfd, 0x20, 0xa1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0x9, 0x10, 0x6}, [@multiply_unit={0x7, 0x24, 0xc, 0x4, 0x1, 0x9, 0x3f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x2, 0xb, 0x9, 0x4}, @as_header={0x10, 0x24, 0x1, 0x5, 0x7, 0x3, 0x4, 0xc0, 0x10000, 0x81}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x5, 0x1, 0x79, 0x1, "4b99", "11"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x10, 0x1, 0xf9, 0x10, 0xb}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x8, 0x0, 0x31, {0x8, 0x25, 0x1, 0x1, 0x30, 0x1, 0x28f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1ff, 0x1, 0x52, 0x18}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x9d, 0x8, {0x8, 0x25, 0x1, 0x3, 0x3f, 0x1, 0xf30b}}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x1b, 0x4e, 0x3, 0x20, 0xc}, 0xed, &(0x7f0000000280)={0x5, 0xf, 0xed, 0x1, [@generic={0xe8, 0x10, 0x4, "d7a0d83922b2f47118b9db43e9aac77ff29a3637171c39bacb2135400bd393ed164f2d3f142b172f7c52839c34ab79721b6029c751b8ed679f784c6037ea57602c9a00a32b343fe1642513199056616f574dfafb18fce1c36f720bf5b4cf938da97101084eb86a82c4cd3ff3c2da301634aeccaeab38b41325d3ba3018845b95d93fcb48a76b4046c8365b3e13c673ce83e5fe4e52e99f947be12ce97dc86dcba8a41c9d92d151727e68d66431e8484716772c328d40cc4a0e65c44d999c083e81570171eda18266b76052bc65cab7ef86f9e7fbb2dc50f1fae2da15706ae9133c060353ee"}]}, 0x8, [{0x2e, &(0x7f0000000400)=@string={0x2e, 0x3, "2d7d3b9dcad68113e94ae5e7e123e5224b8ee024384a7164cf0c28ab510a5bf68cfc00aa4557ea723e6ee990"}}, {0xf4, &(0x7f0000000680)=@string={0xf4, 0x3, "e1e8de2d1138750352411441782a44d8050e526f91c54a0f82333e7f15d77330907e0d0b2a18dc99df3cb2b45c3c096b3659ea21ad7977c0b0eb6328143506abad837baecec2ab04fb27f563952e201884c6f8a2ff03ddc91e94bb3a4d5ce2ff307f6b81bc567b7e53636cde23d85e9fc4683a6cd1c4a6499c6978ac32c5661a1afc8d37e9d9a2a6e1f0ac47fcbbb75ad9b8abe82c098cfece90571851731ed378e81e50d5eec6243ed44098f17b8ac3360175d58600499a2a00d27a3a0b2c30eeacdb0ae3c796207cc99640a77d40c53015cb74c24e75e253e56e2cebbd0df6289d6db926bd0c717020d05dc6de12f0339a"}}, {0x56, &(0x7f0000000780)=@string={0x56, 0x3, "5cec93ebbb41c5b2d79f803a7f35c2c120ebc06dce6a55cd692c43a6021a464a963d0bb98512e4fab4f7a87779a7b05df8de85f9b7260b9926ecc1b4544c5a973ddc848d70ad5e615c81935d6ee6b985194ffad3"}}, {0x33, &(0x7f0000000800)=@string={0x33, 0x3, "efe1ef972d432dc05de23c13432f1e615055598f998b9016520b0933bfd36ac9ae669c642ae5f4d8b7a446a41c5a46c350"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x345c}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x41a}}, {0x9b, &(0x7f0000000980)=@string={0x9b, 0x3, "0a6b2ec2508e883f75d67a8e061d49c29a16415dc63bc34e67099d93d2e90df5ac174f45f34f85d16a603f15e3d16b13c10342886f01734fd966ad946fceb235d4235e6dafaede393f6bf29180e6b7bf9f6a26e45a5a85b6013d3538a3fe609ca8d543d73ecc3701b397e65d5d808c3da87c132a5be504372548ba07e7734a1e5b4faf4441b410ec2e83509990f90536f288b9e175e314437e"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x2801}}]}) socketpair(0xb, 0x3, 0xbf4, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000048aaed7f85000000040000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r6}, 0xc) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r5, @ANYBLOB="01000000c0fc000000000100000008000700000000001400020077673000000000000000000000000000900108802c0100801400040002004e207f0000010000000000000000e80009801c000080060001000a00000008000200ac14143205000300000000007c000080060001000200000008000200640101020500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000200000008000200ac1414810500030003000000060001000a00000014000200ff0200000000000000000000000000010500030003000000f2fd0080060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000216fe8000000000000000000000000000bb050003000100000024000100000000000000000000000000000000000000000000000000000000000000000006000500", @ANYRES64=r5], 0x1c0}, 0x1, 0x0, 0x0, 0xc811}, 0x40000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team_slave_0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x40, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x20004800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES8, @ANYRES8], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000001b80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001bc0)=ANY=[@ANYRESDEC=r7, @ANYRES16=r8, @ANYBLOB="000126bd7000fbdbdf258300000008000300", @ANYRES32=r9, @ANYBLOB="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"], 0xd9c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @empty, @empty=0x106}}}], 0x20}, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, "19d5"}, 0x0, 0x0}) 30.93322921s ago: executing program 1 (id=3688): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r0, &(0x7f0000000540)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x11}, 0xa, 0x1}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="e0", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x10}}], 0x2, 0xc8044) ftruncate(r0, 0x9) 30.827494644s ago: executing program 2 (id=3689): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d045800005a90f57f07703aefeef64ebbee07962cfff3f878f5772e11b44e65d76641cb090052e436dd2a6fc3", 0x30}, {&(0x7f0000000180)="530000002412ffa0270c8e5300000d00a2ed18f1e79bfffffffffffffffffb00a55991b8f7d9ea5761cfc05bdc12c22913a248d9fc8fae5638e1588cb3db91fa10748c1427761af70d62f728303bcba70000000000000000", 0x58}], 0x2) 30.764117049s ago: executing program 4 (id=3690): bpf$PROG_LOAD(0x5, &(0x7f00000028c0)={0x10, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300002800000000000000850000001100000085000000a000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.747604043s ago: executing program 1 (id=3691): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x208}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x9aaf, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}], 0x1c) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7200000000003900000008000300", @ANYRES32=0x0, @ANYBLOB="1c005a801800008014006b2e8101ab5cdc140010f9ff90be20000600"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xa}, {}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x488d8}, 0x20004804) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x6}], 0x1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r3 = socket(0x11, 0x3, 0x8000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)={[{@uid={'uid', 0x3d, r4}}]}) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) write$nci(r5, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r5, &(0x7f0000000dc0)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x9, {{}, {0xb5, 0x400, 0x3, 0x400, 0xab, 0x3ff}}}, 0x14) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r6], 0x14) 30.683568875s ago: executing program 2 (id=3692): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d040000005a90f57f07703aefeef64ebbee07962cfff3f878f5772e11b44e65d76641cb090052e436dd2a6fc3", 0x30}, {&(0x7f0000000180)="530000002412ffa0270c8e5300000000a2ed18f1e79bff000003000000000000a55991b8f7d9ea5761cfc05bdc12c22913a248d9fc8fae5638e1588cb3db91fa10748c1427761af70d62f728303bcba70000000000000000", 0x58}], 0x2) 30.631172561s ago: executing program 4 (id=3693): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x0, 0xfb, 0x51, 0xf2, 0x10, 0x1bcf, 0xb40, 0x7885, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x21, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x60, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x28, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x24, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xd, 0x8, 0xf6cc, 0x0, 0x2, r0, 0x7e2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r3, 0x7a5ad5e103b2645, &(0x7f0000000180)={0x9, 0x7}, &(0x7f00000001c0)) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7, 0xffffffffffffffff}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000004b000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000b6000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r9, r8}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) socket$netlink(0x10, 0x3, 0x0) 30.593608888s ago: executing program 2 (id=3694): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fffffffffffffde, 0x161041) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x0, 0x1004, 0x0, 0xa, 0x410, 0xe7}}) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000600)={0x0, 0x1, @start={0xa1, 0x1}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000500)={0x3, 0xa3, "5b1dcdd3cac27245b707b4b0a1e4c0c4899ab76c2ecf67c7f0d0332cdafaba5638c9037009989a46be3008c34e3afd36e9138af46af43a2765414d54d62eb990ca00ebf3f8fe45a05d56a7676cb714ebe5f483b8caed3a2e90b14f83cb41c505968ed2aa58e62190a264c6182f4ab3b715955eb2c9ea74d2992ab7bf89fd441381ee463066c2216bd6247438b4c2cd671495215da2a8deb0f55e3d2c5de724f95a50cd"}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0/file1\x00', 0x14b041, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000440)="5800000014001923060000000000000010ff000000000069d6e580dfee0000004e32f61bcdf1e422676b001000000100800000000000001000aadc28dad12c0d03cf77ce8196c2b228742e6faa000000c600000000000000", 0x58}], 0x1) lsetxattr$security_evm(&(0x7f0000000280)='./file0/file1\x00', &(0x7f0000000300), &(0x7f0000000380)=@v2={0x3, 0x0, 0xa}, 0x9, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000680)=ANY=[@ANYBLOB="016f08000000000000008dffffffff00000000270000000000000000000000000000000000004615c99c1c738f8ee659ddff2d3e875ee35e7d92a78d595fa71c280267cd93e2652bcb4dd0769ae0cee0", @ANYRES64=r2, @ANYRES32=0x41424344, @ANYRESOCT=r5], 0xfd6c) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r7, r7, 0x0, 0x2000fb) r8 = open(&(0x7f0000000140)='./file0\x00', 0x20800, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r8, &(0x7f0000000100)='./file1\x00', r8, &(0x7f0000000040)='./file0/file1\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') 30.326123044s ago: executing program 3 (id=3695): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x82000714) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrandom(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000000104010800000000000000000a00000808000440000000060500010004000000080005400000800008000540000000030500010001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f72"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601030000000000000000010000000500010007000000a54cebfa95a0e9c041"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 30.086808508s ago: executing program 2 (id=3696): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @sk_skb=0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffd0}, 0x3b) epoll_create1(0x0) 30.019073233s ago: executing program 3 (id=3697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x80) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0xfff5, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x78, 0x30, 0x827, 0x1000, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x401, 0x3d3, 0x3, 0x3ff, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x24}}, 0x24000010) 28.671460818s ago: executing program 3 (id=3698): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = inotify_init() r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x40047459, 0xf0ff1f00000000) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x82000714) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrandom(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) socket$netlink(0x10, 0x3, 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000000104010800000000000000000a00000808000440000000060500010004000000080005400000800008000540000000030500010001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 28.670465238s ago: executing program 4 (id=3699): socket$inet(0x2, 0x4000000000000001, 0x0) fsopen(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@gettaction={0x40, 0x32, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) close(r1) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010f40)={0x0, 0x4a, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './bus'}}, 0x10020}}, 0x0) execve(&(0x7f0000019140)='./file0\x00', 0x0, &(0x7f0000000040)={[&(0x7f0000000200)=' ']}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000340)={r5, 0x101, 0x3, 0x0, 0x0, [0x0], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000d0d755c4c9c47528addb243700", @ANYRES16=r8, @ANYBLOB="01002bbd7000fedbdf253e00000008000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r6}) 28.617154415s ago: executing program 2 (id=3700): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b925, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x6, 0xb}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040030}, 0x20004080) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000b00220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 28.185178261s ago: executing program 5 (id=3701): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000300)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000000d090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="002187000000870c7a456c4af16886ad7660a84002c30de426a07248e5d86dd964d09d4cdb8b2ee768a8b833587a56dc1ccabd8bcd5b56d1ac1ebc517ef3eea235b23e54fd131a95239e080d4e818d3e7ed9357d2f1e7fe42ec1111994b9ee33888acd3b1705eb151e43503d0bebdb73929a6dfe6fcdcd2d5f3667d043fff4b5cf83e1d0890d71679c0b2f5feb"], &(0x7f0000000100)=ANY=[@ANYBLOB="0003e700000004031d04"], &(0x7f0000000240)={0x0, 0xf, 0xaa, {0x5, 0xf, 0xaa, 0x5, [@ptm_cap={0x3}, @generic={0x70, 0x10, 0x1, "5b26fc0221e886fb57467251d0c80718946a90c92342e60a231153628f0f85eb7ecd3c41f080460526fe9474c02ba7659f8b8aac157103928db7f85a9753663329be377b7f2aa9b035ce0ff9e7bff8fd820268cce2071ac3abf7fdc4f107e74f88d4d346e0dc178ef2cd21a228"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x8, 0xc}, @wireless={0xb, 0x10, 0x1, 0x0, 0xb7, 0xe, 0x3, 0x2, 0x62}, @ssp_cap={0x20, 0x10, 0xa, 0x78, 0x5, 0x8, 0xff0f, 0x2, [0xc0c0, 0x18, 0x30, 0x30, 0x3f00]}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x0, 0xf, 0x18, "9349f8fc", "606c37a4"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2d, 0x2, 0x1, 0x2, 0x6, 0xfffc, 0xf}}}, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x40, 0x1, 0x7b, "1af016f4f96081d52594a656d19c938152df6c058fd88ab013561f02f348548b2b8b01823b5baf79a9fc3bb062e2b709ea0052e826da0ed18380c032fa95e9d9546c3b1a4058a9f76512e1d96af6bbdc9e95370bf40f1c15a9dd01b9fcbf435859c012df95dcfcb7d0b40f2a0de1cb15ccd38810553e2cabd8c202"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000001c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000680)={0x40, 0xb, 0x2, "62e7"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x1707}, &(0x7f0000000700)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, "288c"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) 28.058251775s ago: executing program 1 (id=3702): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f000090a000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000095c000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000039c000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1a) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x30, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_OPERSTATE={0x5, 0x10, 0xf9}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 27.650559004s ago: executing program 4 (id=3703): bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000004000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000004000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 27.616416137s ago: executing program 2 (id=3704): socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0xf, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES16=r2, @ANYRES64=r1], 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000002}, 0x8) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x1, 0xffffffffffffffff, 0x100}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa8100000086dd6000000000000101fe80000000000000000000000000ff07fe8000000000000200"], 0x0) close(r5) r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x200c0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000180)=0xffff0001) 27.450836487s ago: executing program 1 (id=3705): r0 = socket(0x1, 0x2, 0xfffffffa) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0xfe}, 0x18) madvise(&(0x7f0000116000/0x1000)=nil, 0x1000, 0xc) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) preadv(r2, &(0x7f00000006c0)=[{&(0x7f0000001880)=""/216, 0xd8}], 0x1, 0xcd92, 0x9f) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="040100050000000000e3ff00e1ff00000fcd62da5a1902bff3230bb2bd11674d8d65ef646c5f80dbdfb63d23cd0550ecdfd4049a5973f0fc26aab57f2fbf7e3abc0b20056d8b6ed683153dcb83555a6e5c9c71cb98f67acc1671722229dfb27f8a484427089e4bbc36e4c376c75aff558502914b401b0fef9aec7764e62cb02e15bd302b4d36fa4f44ac322a43004a1259699a5d6af993a09c0ba298244a50a5e567fd528d7efb7b85c448ec4fd7c9b69f6c8af6c0a521819835b85d6280cfca5b02de248d2a8faae73b036682710e5b2681578ad69a9262228a58fbf6c462cd3736c628249afba228"], 0x10) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285629, &(0x7f0000000180)={0x3, @win={{0x0, 0x3, 0x1, 0x300000}, 0x6, 0x7, &(0x7f0000000140)={{0x0, 0x8, 0x5, 0x2}, &(0x7f0000000100)={{0x3, 0xf2, 0x8, 0x7}, &(0x7f00000000c0)={{0xfffffffd, 0x200, 0x2, 0x3}, &(0x7f0000000040)={{0x8, 0x9, 0x83c6, 0xb26}}}}}, 0x8001, &(0x7f00000005c0)="48e2", 0x7}}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x8, 0xffffff02}, 0x100, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xdc, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x2}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x34}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x12}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x400, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xe, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x32, 0x0, 0xa, 0x2, 0x9, 0xd, 0x1, 0xfffffffb, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x20048040) sendto$packet(r10, &(0x7f00000003c0)="fad33075218151db00316f3a277f", 0xe, 0x20000001, &(0x7f0000000080)={0x11, 0x88a8, r13, 0x1, 0xdd, 0x6, @local}, 0x14) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000040)={0x60, 0x31, 0xc, "ddff0899000000000600f5d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 27.450267064s ago: executing program 3 (id=3706): r0 = socket$inet_sctp(0x2, 0x3, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x6, 0x4) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={r1, @multicast1, @multicast2}, 0xc) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) eventfd2(0x0, 0x1) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000280)={0x6, 0x5, 0x200}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000002c0)="32385b2309a927189e50b49c3aff91fa031016f36d81f1b09ffc06391157e0eb88d8009d0fafd7b800a6fedb62ea50a327946ae70ca35911ee16ad144a04579dcf874362264f77882286471c0ab533c2a6ca3a2dce", 0x55) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)) connect(r0, &(0x7f00000003c0)=@ll={0x11, 0x1, r1, 0x1, 0x8, 0x6, @random="925e456d0e4c"}, 0x80) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000440)) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000480)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x5}) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000540)=""/241, 0xf1}, {&(0x7f0000000640)=""/37, 0x25}], 0x2, &(0x7f00000006c0)=""/227, 0xe3}, 0x40000120) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, 0xffffffffffffffff, &(0x7f0000000800)) ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000840)={0xb, 0x1, 0x7}) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000008c0)={0x0, 0x81, 0x400, 0x1}, &(0x7f0000000900)=0x10) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000940), 0x49001, 0x0) writev(r5, &(0x7f0000002cc0)=[{&(0x7f0000000980)="dd1ae923f103a56545a9f47609fc84d17338499a3661ca21d9b0ae940f", 0x1d}, {&(0x7f00000009c0)="007f0679e8dc803b5d24c36842698e5b50bf7f80ff1386a3c74e175d29326cc002cad7fa69cf100a55f3a03ebe84c9a93a3b816c9fa3be2182ea6d7e980a07b9bd8b653ce65ec195ae568cc8bd4a0e676644012bb9bae6f6c356a5275ceca2f6b7997f2f9b5ef53fde127c8919a94b05ed6ce7ada70e75d21064992ce69890b5635645d13354658f8ccb9641cf5294ff0c5d61b8c0adc42a41c7cb3d78330a34077bb79dd6158cecac386d8a015270d85c14b7d287c306ed27cea495ffe932379e4491bc5aa75e4a6c5619d1d960cf4c1e1cee013b2a2280f12b66fe836905327ebbe8ba92043b9eda", 0xe9}, {&(0x7f0000000ac0)="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", 0xe00}, {&(0x7f0000001ac0)="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", 0xfd}, {&(0x7f0000001bc0)="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", 0xf00}, {&(0x7f0000002bc0)="596e3edc0cac76e723709b374fa5c5e8dd4afa63d0312e6eda11224647947613e67c9d444fff60e596916bf28b09f5b8f381b8319aedb3dd3be92f2494a695fcd81a965a18a9c178c20f715a4a6da3d91e28a0038de7e6ecce511a1fe47466dc92bdeb684ee903a45e68fc0ef5182563b23ac0ad2ac1e4ce075104a2ea1f9fcb01a80dbc8a01c1f0d29d2c806c56c02b2336942354b84168f1f0243149969344eed67321168489407a1215b33c9c18e7eb68c07bb27eed57d3363cf0d43c1b984a0cea5526177d57d71b2b87e9ba7b818e815c0c39c07becec9cc62abf51d056aa0f7f3a9fd227cbf6610c300e1b759c644527", 0xf3}], 0x6) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000002e80)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002e40)={&(0x7f0000002dc0)={0x64, r6, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x18}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0xb}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x7}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x14}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0xf7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x4010040}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040052800c00018006000600801c00007c13028078131480731315806f13018074"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 26.045393474s ago: executing program 4 (id=3707): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0004000500000000000072000000000003000000", 0x39}], 0x1) 0s ago: executing program 33 (id=3701): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS32(r0, 0x806c4120, &(0x7f0000000300)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000022bf0000000000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000000d090100000000009500000000000000db003000a0000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="002187000000870c7a456c4af16886ad7660a84002c30de426a07248e5d86dd964d09d4cdb8b2ee768a8b833587a56dc1ccabd8bcd5b56d1ac1ebc517ef3eea235b23e54fd131a95239e080d4e818d3e7ed9357d2f1e7fe42ec1111994b9ee33888acd3b1705eb151e43503d0bebdb73929a6dfe6fcdcd2d5f3667d043fff4b5cf83e1d0890d71679c0b2f5feb"], &(0x7f0000000100)=ANY=[@ANYBLOB="0003e700000004031d04"], &(0x7f0000000240)={0x0, 0xf, 0xaa, {0x5, 0xf, 0xaa, 0x5, [@ptm_cap={0x3}, @generic={0x70, 0x10, 0x1, "5b26fc0221e886fb57467251d0c80718946a90c92342e60a231153628f0f85eb7ecd3c41f080460526fe9474c02ba7659f8b8aac157103928db7f85a9753663329be377b7f2aa9b035ce0ff9e7bff8fd820268cce2071ac3abf7fdc4f107e74f88d4d346e0dc178ef2cd21a228"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x8, 0xc}, @wireless={0xb, 0x10, 0x1, 0x0, 0xb7, 0xe, 0x3, 0x2, 0x62}, @ssp_cap={0x20, 0x10, 0xa, 0x78, 0x5, 0x8, 0xff0f, 0x2, [0xc0c0, 0x18, 0x30, 0x30, 0x3f00]}]}}, &(0x7f0000000380)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf, 0x0, 0xf, 0x18, "9349f8fc", "606c37a4"}}, &(0x7f00000003c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2d, 0x2, 0x1, 0x2, 0x6, 0xfffc, 0xf}}}, &(0x7f0000000900)={0x84, &(0x7f0000000440)={0x40, 0x1, 0x7b, "1af016f4f96081d52594a656d19c938152df6c058fd88ab013561f02f348548b2b8b01823b5baf79a9fc3bb062e2b709ea0052e826da0ed18380c032fa95e9d9546c3b1a4058a9f76512e1d96af6bbdc9e95370bf40f1c15a9dd01b9fcbf435859c012df95dcfcb7d0b40f2a0de1cb15ccd38810553e2cabd8c202"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xc}, &(0x7f00000001c0)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x140, 0x2}}, &(0x7f0000000600)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000680)={0x40, 0xb, 0x2, "62e7"}, &(0x7f00000006c0)={0x40, 0xf, 0x2, 0x1707}, &(0x7f0000000700)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}, &(0x7f0000000740)={0x40, 0x17, 0x6, @local}, &(0x7f0000000780)={0x40, 0x19, 0x2, "288c"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x3}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x3}}) kernel console output (not intermixed with test programs): 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1035.547247][ T5620] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1035.552737][T11161] usb 4-1: Product: syz [ 1035.598574][ T5804] usb 3-1: USB disconnect, device number 110 [ 1035.612694][T11161] usb 4-1: Manufacturer: syz [ 1035.629512][T11161] usb 4-1: SerialNumber: syz [ 1035.636006][ T5620] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1035.646228][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.666822][ T5804] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1035.751426][T17660] netlink: 34 bytes leftover after parsing attributes in process `syz.4.3341'. [ 1035.870879][T17661] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3340'. [ 1035.907940][ T30] kauditd_printk_skb: 286 callbacks suppressed [ 1035.908010][ T30] audit: type=1400 audit(1777871061.051:47027): avc: denied { map_create } for pid=17642 comm="syz.1.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1035.943847][T17632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.952565][T17632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.215510][ T10] usb 2-1: USB disconnect, device number 117 [ 1036.240429][ T30] audit: type=1400 audit(1777871061.051:47028): avc: denied { prog_load } for pid=17642 comm="syz.1.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1036.620919][T17661] Can't find ip_set type hash:ip,por [ 1037.210516][ T30] audit: type=1400 audit(1777871061.051:47029): avc: denied { bpf } for pid=17642 comm="syz.1.3336" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1037.233978][ T30] audit: type=1400 audit(1777871061.051:47030): avc: denied { perfmon } for pid=17642 comm="syz.1.3336" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1037.255862][ T30] audit: type=1400 audit(1777871061.051:47031): avc: denied { ioctl } for pid=17642 comm="syz.1.3336" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1037.267498][T11161] usb 4-1: USB disconnect, device number 3 [ 1037.281939][ T30] audit: type=1400 audit(1777871061.088:47032): avc: denied { read write } for pid=16748 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1037.318052][ T30] audit: type=1400 audit(1777871061.088:47033): avc: denied { open } for pid=16748 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1037.402811][ T30] audit: type=1400 audit(1777871061.088:47035): avc: denied { read write } for pid=17629 comm="syz.3.3333" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1037.428325][T17672] binder: 17668:17672 ioctl c0306201 200000000080 returned -14 [ 1037.444143][T17672] binder: 17668:17672 ioctl c0306201 2000000003c0 returned -14 [ 1037.464148][ T30] audit: type=1400 audit(1777871061.088:47036): avc: denied { read write open } for pid=17629 comm="syz.3.3333" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1037.498787][T10986] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1037.590152][T17678] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3344'. [ 1037.854573][T17677] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3346'. [ 1037.939929][ T10] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1038.242197][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1038.248627][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.259062][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.270247][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1038.296083][ T10] usb 3-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 1038.320660][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.338955][ T10] usb 3-1: config 0 descriptor?? [ 1038.347256][ T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1038.355289][ T5899] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1038.376452][ T10] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 1038.382606][T17685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3350'. [ 1038.527433][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1038.540763][ T5899] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1038.546639][T17691] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 1038.584206][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.620248][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1038.643009][ T5899] usb 6-1: config 0 descriptor?? [ 1038.667256][ T9] usb 2-1: config 5 has an invalid interface number: 29 but max is 0 [ 1038.682995][ T9] usb 2-1: config 5 has no interface number 0 [ 1038.689292][ T9] usb 2-1: config 5 interface 29 has no altsetting 0 [ 1038.701743][ T9] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=57.81 [ 1038.712605][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.724261][ T9] usb 2-1: Product: syz [ 1038.730899][ T9] usb 2-1: Manufacturer: syz [ 1038.740291][ T9] usb 2-1: SerialNumber: syz [ 1038.819812][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 1038.839540][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1038.860546][ T10] usb 3-1: USB disconnect, device number 111 [ 1038.916227][T17696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.936059][T17696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.966957][ T5899] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1038.987227][T17676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1039.011911][ T5899] [drm:udl_init] *ERROR* Selecting channel failed [ 1039.052415][T17676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.135831][ T5899] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1039.147377][ T5899] [drm] Initialized udl on minor 2 [ 1039.201144][ T9] imon_raw 2-1:5.29: IR endpoint missing [ 1039.207395][ T5899] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1039.224071][ T9] usb 2-1: USB disconnect, device number 118 [ 1039.236915][ T5899] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1039.267729][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1039.348495][ T5899] usb 6-1: USB disconnect, device number 56 [ 1039.361352][ T10] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1039.410972][ T10] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1039.526446][T17701] 9p: Bad value for 'rfdno' [ 1039.726890][T17706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1039.738885][ T5804] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1039.741660][T17708] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3357'. [ 1039.954510][T17714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3358'. [ 1039.954689][ T5804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1040.142448][ T5804] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1040.164196][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.238455][ T5804] usb 5-1: config 0 descriptor?? [ 1040.416524][T17717] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3359'. [ 1040.965032][T17725] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3360'. [ 1041.268012][ T30] kauditd_printk_skb: 465 callbacks suppressed [ 1041.268028][ T30] audit: type=1400 audit(1777871066.075:47493): avc: denied { execmem } for pid=17730 comm="syz.3.3364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1041.347496][ T30] audit: type=1400 audit(1777871066.112:47494): avc: denied { read write } for pid=16012 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1041.446970][ T30] audit: type=1400 audit(1777871066.112:47495): avc: denied { read write open } for pid=16012 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1041.992676][ T5804] video4linux radio48: keene_cmd_set failed (-110) [ 1042.012617][ T5804] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 1042.045335][ T30] audit: type=1400 audit(1777871066.112:47496): avc: denied { ioctl } for pid=16012 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1042.073502][ T30] audit: type=1400 audit(1777871066.122:47497): avc: denied { create } for pid=17728 comm="syz.5.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1042.128758][ T30] audit: type=1400 audit(1777871066.122:47498): avc: denied { mount } for pid=17728 comm="syz.5.3363" name="/" dev="overlay" ino=2222 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1042.179079][ T30] audit: type=1400 audit(1777871066.140:47499): avc: denied { bind } for pid=17728 comm="syz.5.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1042.199777][ T30] audit: type=1400 audit(1777871066.206:47500): avc: denied { read write } for pid=17728 comm="syz.5.3363" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1042.258922][ T30] audit: type=1400 audit(1777871066.206:47502): avc: denied { ioctl } for pid=17698 comm="syz.4.3353" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1042.292602][ T30] audit: type=1400 audit(1777871066.206:47501): avc: denied { open } for pid=17728 comm="syz.5.3363" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1042.322863][T17742] FAULT_INJECTION: forcing a failure. [ 1042.322863][T17742] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.355600][T17742] CPU: 0 UID: 0 PID: 17742 Comm: syz.3.3367 Tainted: G L syzkaller #0 PREEMPT(full) [ 1042.355630][T17742] Tainted: [L]=SOFTLOCKUP [ 1042.355637][T17742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1042.355647][T17742] Call Trace: [ 1042.355654][T17742] [ 1042.355662][T17742] dump_stack_lvl+0x100/0x190 [ 1042.355689][T17742] should_fail_ex.cold+0x5/0xa [ 1042.355715][T17742] should_failslab+0xc2/0x120 [ 1042.355735][T17742] __kvmalloc_node_noprof+0xfa/0xa00 [ 1042.355762][T17742] ? xt_alloc_table_info+0x44/0xa0 [ 1042.355792][T17742] xt_alloc_table_info+0x44/0xa0 [ 1042.355815][T17742] do_ipt_set_ctl+0x504/0xb90 [ 1042.355846][T17742] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 1042.355869][T17742] ? sockopt_release_sock+0x57/0x70 [ 1042.355896][T17742] ? __local_bh_enable_ip+0x9e/0x120 [ 1042.355924][T17742] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1042.355960][T17742] ? nf_sockopt_find.isra.0+0x222/0x290 [ 1042.355987][T17742] nf_setsockopt+0x8d/0xf0 [ 1042.356011][T17742] ip_setsockopt+0xcb/0xf0 [ 1042.356035][T17742] udp_setsockopt+0x64/0xb0 [ 1042.356054][T17742] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1042.356074][T17742] do_sock_setsockopt+0xf3/0x1d0 [ 1042.356094][T17742] __sys_setsockopt+0x195/0x220 [ 1042.356122][T17742] __x64_sys_setsockopt+0xbd/0x160 [ 1042.356144][T17742] ? do_syscall_64+0x90/0xf80 [ 1042.356163][T17742] ? lockdep_hardirqs_on+0x78/0x100 [ 1042.356181][T17742] do_syscall_64+0x10b/0xf80 [ 1042.356199][T17742] ? clear_bhb_loop+0x40/0x90 [ 1042.356219][T17742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.356236][T17742] RIP: 0033:0x7f36cd99cdd9 [ 1042.356251][T17742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1042.356266][T17742] RSP: 002b:00007f36ce770028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1042.356285][T17742] RAX: ffffffffffffffda RBX: 00007f36cdc15fa0 RCX: 00007f36cd99cdd9 [ 1042.356296][T17742] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 1042.356306][T17742] RBP: 00007f36ce770090 R08: 0000000000000378 R09: 0000000000000000 [ 1042.356316][T17742] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1042.356326][T17742] R13: 00007f36cdc16038 R14: 00007f36cdc15fa0 R15: 00007ffc87bf40c8 [ 1042.356351][T17742] [ 1042.655217][T17699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.664030][T17699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.752848][ T5807] usb 5-1: USB disconnect, device number 113 [ 1042.898053][T17750] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3368'. [ 1044.135910][T17774] 9p: Bad value for 'rfdno' [ 1044.224928][ T9] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1044.403774][T17779] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3377'. [ 1044.536482][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1044.556873][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.581968][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.611349][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1044.643441][ T9] usb 6-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 1044.677742][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.702839][ T9] usb 6-1: config 0 descriptor?? [ 1044.731423][ T9] usbhid 6-1:0.0: fixing wrong optional hid class descriptors count [ 1044.853126][T17783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.878614][T17783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1044.903332][T17785] syzkaller0: entered promiscuous mode [ 1044.922077][T17785] syzkaller0: entered allmulticast mode [ 1045.162552][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 1045.258980][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1045.295544][ T9] usb 6-1: USB disconnect, device number 57 [ 1046.019309][T17795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=17795 comm=syz.3.3382 [ 1046.062522][T17795] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3382'. [ 1046.615195][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3381'. [ 1046.733498][ T30] kauditd_printk_skb: 309 callbacks suppressed [ 1046.733529][ T30] audit: type=1400 audit(1777871071.164:47813): avc: denied { create } for pid=17799 comm="syz.1.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1046.843842][T17806] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1047.086571][T17796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3381'. [ 1047.118557][T17796] netlink: 'syz.2.3381': attribute type 13 has an invalid length. [ 1047.154493][ T30] audit: type=1326 audit(1777871071.183:47814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17799 comm="syz.1.3383" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4fc559cdd9 code=0x0 [ 1047.219492][T17796] netlink: 'syz.2.3381': attribute type 12 has an invalid length. [ 1047.234393][ T30] audit: type=1400 audit(1777871071.258:47815): avc: denied { setopt } for pid=17799 comm="syz.1.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1047.288406][T17812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3387'. [ 1047.342002][ T30] audit: type=1400 audit(1777871071.286:47816): avc: denied { mounton } for pid=17799 comm="syz.1.3383" path="/71/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1047.533378][ T30] audit: type=1400 audit(1777871071.370:47817): avc: denied { setopt } for pid=17799 comm="syz.1.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1047.543644][T17816] 9p: Bad value for 'rfdno' [ 1047.659415][ T30] audit: type=1400 audit(1777871071.379:47818): avc: denied { create } for pid=17799 comm="syz.1.3383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1047.691701][T17819] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3390'. [ 1047.718973][ T30] audit: type=1400 audit(1777871071.099:47812): avc: denied { execmem } for pid=17802 comm="syz.3.3385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1047.751361][ T30] audit: type=1400 audit(1777871071.529:47819): avc: denied { read } for pid=17802 comm="syz.3.3385" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1047.782517][ T30] audit: type=1400 audit(1777871071.529:47820): avc: denied { open } for pid=17802 comm="syz.3.3385" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1048.296270][ T30] audit: type=1400 audit(1777871071.538:47821): avc: denied { create } for pid=17808 comm="syz.5.3386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1048.887060][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1048.899107][T17831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.104575][T17835] netlink: 'syz.5.3396': attribute type 4 has an invalid length. [ 1049.121335][T17835] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3396'. [ 1049.195405][ T9] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1049.372546][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3397'. [ 1049.381638][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1049.391490][ T9] usb 2-1: config 252 interface 0 has no altsetting 0 [ 1049.398448][ T5899] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 1049.406178][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1049.418158][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.433168][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1049.446728][ T9] pvrusb2: ********** [ 1049.454676][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1049.469131][ T9] pvrusb2: Important functionality might not be entirely working. [ 1049.477513][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1049.489899][ T9] pvrusb2: ********** [ 1049.495495][ T9] usb 2-1: selecting invalid altsetting 0 [ 1049.502132][ T2360] pvrusb2: Invalid write control endpoint [ 1049.590593][ T5899] usb 3-1: Invalid ep0 maxpacket: 32 [ 1049.603947][ T990] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1049.653345][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3393'. [ 1049.694442][T17831] macsec1: entered promiscuous mode [ 1049.711271][T17831] dummy0: entered promiscuous mode [ 1049.738405][ T2360] pvrusb2: Invalid write control endpoint [ 1049.757385][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1049.768682][ T5899] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 1049.777825][ T990] usb 4-1: Using ep0 maxpacket: 16 [ 1049.798754][T17831] macsec1: entered allmulticast mode [ 1049.804378][ T990] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1049.817294][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1049.818166][ T990] usb 4-1: config 0 has no interface number 0 [ 1049.848769][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1049.849112][T17831] dummy0: entered allmulticast mode [ 1049.865827][ T990] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1049.895681][ T990] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1049.899482][ T2360] pvrusb2: Device being rendered inoperable [ 1049.927085][ T990] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1049.940581][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1049.942107][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.950004][ T5899] usb 3-1: Invalid ep0 maxpacket: 32 [ 1049.950347][ T5899] usb usb3-port1: attempt power cycle [ 1049.988203][T17831] dummy0: left allmulticast mode [ 1049.994815][ T990] usb 4-1: Product: syz [ 1049.994852][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1050.011602][ T990] usb 4-1: Manufacturer: syz [ 1050.020399][ T990] usb 4-1: SerialNumber: syz [ 1050.034008][ T5804] dummy0: left promiscuous mode [ 1050.041630][ T990] usb 4-1: config 0 descriptor?? [ 1050.052181][T17843] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1050.061767][T17843] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1050.101701][ T9] usb 2-1: USB disconnect, device number 119 [ 1050.136743][ T2360] pvrusb2: Attached sub-driver cx25840 [ 1050.152404][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1050.179259][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1050.325259][T17843] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1050.347122][T17843] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1050.403006][ T5899] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 1050.439882][ T5899] usb 3-1: Invalid ep0 maxpacket: 32 [ 1050.584739][ T5899] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 1050.617298][ T5899] usb 3-1: Invalid ep0 maxpacket: 32 [ 1050.627003][ T5899] usb usb3-port1: unable to enumerate USB device [ 1050.638186][ T5804] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 1050.819662][ T5804] usb 6-1: config 253 has an invalid interface number: 212 but max is 0 [ 1050.839577][ T5804] usb 6-1: config 253 has no interface number 0 [ 1050.892657][ T5804] usb 6-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 1050.921051][ T5804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.937185][ T5804] usb 6-1: Product: syz [ 1051.121977][ T5804] usb 6-1: Manufacturer: syz [ 1051.134937][ T5804] usb 6-1: SerialNumber: syz [ 1051.223124][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3403'. [ 1051.273473][T17861] 9p: Bad value for 'rfdno' [ 1051.360538][T17859] lo speed is unknown, defaulting to 1000 [ 1051.401682][ T5804] ftdi_sio 6-1:253.212: FTDI USB Serial Device converter detected [ 1051.438941][ T5804] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 1051.461756][ T5804] usb 6-1: USB disconnect, device number 58 [ 1051.490029][ T5804] ftdi_sio 6-1:253.212: device disconnected [ 1051.553479][T17865] erspan0: entered promiscuous mode [ 1051.572525][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3405'. [ 1051.846022][ T5807] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1051.938805][T17870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3406'. [ 1051.948648][T17871] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3406'. [ 1051.981758][ T990] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1052.010705][ T990] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1052.021679][ T5807] usb 5-1: Using ep0 maxpacket: 8 [ 1052.178917][ T5807] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1052.200974][ T990] asix 4-1:0.34: probe with driver asix failed with error -71 [ 1052.303882][ T5807] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1052.318750][ T30] kauditd_printk_skb: 285 callbacks suppressed [ 1052.318767][ T30] audit: type=1400 audit(1777871076.412:48107): avc: denied { read write } for pid=17875 comm="syz.5.3408" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1052.331537][ T990] usb 4-1: USB disconnect, device number 4 [ 1052.363890][ T30] audit: type=1400 audit(1777871076.450:48108): avc: denied { read write open } for pid=17875 comm="syz.5.3408" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1052.391874][ T5807] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1052.402202][ T5807] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1052.430062][ T5807] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1052.465140][ T30] audit: type=1400 audit(1777871076.534:48109): avc: denied { read write } for pid=16012 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1052.475886][ T5807] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1052.534486][T17879] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3408'. [ 1052.560177][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.601961][ T30] audit: type=1400 audit(1777871076.534:48110): avc: denied { read write open } for pid=16012 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1052.630691][ T30] audit: type=1400 audit(1777871076.534:48111): avc: denied { ioctl } for pid=16012 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1052.659913][ T30] audit: type=1400 audit(1777871076.590:48112): avc: denied { create } for pid=17875 comm="syz.5.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1052.680185][ T30] audit: type=1400 audit(1777871076.590:48113): avc: denied { create } for pid=17875 comm="syz.5.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1052.779220][T17883] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 1052.794773][ T30] audit: type=1400 audit(1777871076.599:48114): avc: denied { write } for pid=17875 comm="syz.5.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1052.882980][ T30] audit: type=1400 audit(1777871076.609:48115): avc: denied { write } for pid=17875 comm="syz.5.3408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1052.976781][ T30] audit: type=1400 audit(1777871076.627:48116): avc: denied { prog_load } for pid=17878 comm="syz.2.3409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1053.179237][ T5899] usb 5-1: USB disconnect, device number 114 [ 1053.489517][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1053.533102][T17890] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1054.561878][ T5620] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1054.744937][ T5620] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.792854][ T5620] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1054.809121][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.829055][ T5807] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 1054.840676][ T5620] usb 2-1: config 0 descriptor?? [ 1054.863206][ T5620] ttusbir 2-1:0.0: probe with driver ttusbir failed with error -12 [ 1055.001982][ T5807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.014961][ T5807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1055.031487][ T5807] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1055.042911][ T5807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.070586][ T5807] usb 5-1: config 0 descriptor?? [ 1055.079069][ T5807] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1055.080759][T17900] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3415'. [ 1055.086044][ T5807] dvb-usb: bulk message failed: -22 (3/0) [ 1055.088540][ T5807] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1055.117024][ T5807] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1055.124189][ T5807] usb 5-1: media controller created [ 1055.140272][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1055.178625][ T5807] dvb-usb: bulk message failed: -22 (6/0) [ 1055.187998][ T5620] usb 2-1: USB disconnect, device number 120 [ 1055.196169][ T5807] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1055.241002][T17918] 9p: Bad value for 'rfdno' [ 1055.262566][ T5807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input106 [ 1055.295299][ T5807] dvb-usb: schedule remote query interval to 150 msecs. [ 1055.322915][ T5807] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1055.491086][ T5807] dvb-usb: bulk message failed: -22 (1/0) [ 1055.496852][ T5807] dvb-usb: error while querying for an remote control event. [ 1055.726498][ T5807] dvb-usb: bulk message failed: -22 (1/0) [ 1055.747869][ T5807] dvb-usb: error while querying for an remote control event. [ 1055.905474][T17928] dvb-usb: bulk message failed: -22 (2/0) [ 1056.175269][ T990] dvb-usb: bulk message failed: -22 (1/0) [ 1056.181687][ T990] dvb-usb: error while querying for an remote control event. [ 1056.338626][T17922] sg_write: process 253 (syz.3.3422) changed security contexts after opening file descriptor, this is not allowed. [ 1056.389134][ T5807] dvb-usb: bulk message failed: -22 (1/0) [ 1056.396075][ T5807] dvb-usb: error while querying for an remote control event. [ 1056.431729][ T5620] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1056.570830][ T5807] dvb-usb: bulk message failed: -22 (1/0) [ 1056.576760][ T5807] dvb-usb: error while querying for an remote control event. [ 1056.592060][ T5620] usb 3-1: Using ep0 maxpacket: 16 [ 1056.599892][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.612722][ T5620] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.613511][ T990] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 1056.624583][ T5620] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1056.644815][ T5620] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1056.655605][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.669724][ T5620] usb 3-1: config 0 descriptor?? [ 1056.752510][ T5807] dvb-usb: bulk message failed: -22 (1/0) [ 1056.758329][ T5807] dvb-usb: error while querying for an remote control event. [ 1056.784529][ T990] usb 2-1: device descriptor read/64, error -71 [ 1056.934165][ T5807] dvb-usb: bulk message failed: -22 (1/0) [ 1056.940084][ T5807] dvb-usb: error while querying for an remote control event. [ 1057.041111][ T990] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 1057.185061][ T5620] microsoft 0003:045E:07DA.0026: unknown main item tag 0x0 [ 1057.200986][ T5620] microsoft 0003:045E:07DA.0026: ignoring exceeding usage max [ 1057.219473][ T5807] dvb-usb: bulk message failed: -22 (1/0) [ 1057.220322][ T5620] microsoft 0003:045E:07DA.0026: implement() called with n (56) > 32! (kworker/0:4) [ 1057.252723][ T5807] dvb-usb: error while querying for an remote control event. [ 1057.326700][ T990] usb 2-1: device descriptor read/64, error -71 [ 1057.403073][ T5620] microsoft 0003:045E:07DA.0026: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1057.426128][ T5620] microsoft 0003:045E:07DA.0026: no inputs found [ 1057.436132][ T5620] microsoft 0003:045E:07DA.0026: could not initialize ff, continuing anyway [ 1057.449299][ T990] usb usb2-port1: attempt power cycle [ 1057.464182][ T5620] usb 3-1: USB disconnect, device number 116 [ 1057.661810][ T5807] dvb-usb: bulk message failed: -22 (1/0) [ 1057.669607][ T5807] dvb-usb: error while querying for an remote control event. [ 1057.680733][ T5899] usb 5-1: USB disconnect, device number 115 [ 1057.691940][ T30] kauditd_printk_skb: 237 callbacks suppressed [ 1057.691955][ T30] audit: type=1400 audit(1777871081.436:48354): avc: denied { read write } for pid=16748 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1057.793749][ T30] audit: type=1400 audit(1777871081.436:48355): avc: denied { open } for pid=16748 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1057.849730][ T30] audit: type=1400 audit(1777871081.436:48356): avc: denied { ioctl } for pid=16748 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1057.889233][T17959] support for the xor transformation has been removed. [ 1057.923470][ T30] audit: type=1400 audit(1777871081.520:48357): avc: denied { write } for pid=17952 comm="syz.3.3433" name="mcfilter6" dev="proc" ino=4026534789 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1057.964970][ T5899] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1057.966943][ T990] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 1058.010160][ T30] audit: type=1400 audit(1777871081.520:48358): avc: denied { create } for pid=17952 comm="syz.3.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1058.046980][ T990] usb 2-1: device descriptor read/8, error -71 [ 1058.059166][ T30] audit: type=1400 audit(1777871081.520:48359): avc: denied { shutdown } for pid=17952 comm="syz.3.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1058.101020][ T30] audit: type=1400 audit(1777871081.520:48360): avc: denied { getopt } for pid=17952 comm="syz.3.3433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1058.142778][ T30] audit: type=1400 audit(1777871081.558:48361): avc: denied { read write } for pid=10986 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1058.174051][ T30] audit: type=1400 audit(1777871081.558:48362): avc: denied { open } for pid=10986 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1058.199412][ T30] audit: type=1400 audit(1777871081.558:48363): avc: denied { ioctl } for pid=10986 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1058.302561][ T990] usb 2-1: new low-speed USB device number 124 using dummy_hcd [ 1058.325342][ T990] usb 2-1: device descriptor read/8, error -71 [ 1058.334506][ T5899] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1058.441942][ T990] usb usb2-port1: unable to enumerate USB device [ 1058.526809][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 1058.533835][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1058.545738][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1058.546365][T17968] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3438'. [ 1058.565882][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1058.598210][ T5899] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1058.619795][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.651334][ T5899] usb 5-1: config 0 descriptor?? [ 1058.830545][T17973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3439'. [ 1059.136198][ T5899] microsoft 0003:045E:07DA.0027: unknown main item tag 0x0 [ 1059.156497][ T5899] microsoft 0003:045E:07DA.0027: ignoring exceeding usage max [ 1059.180917][ T5899] microsoft 0003:045E:07DA.0027: implement() called with n (56) > 32! (kworker/0:9) [ 1059.243033][ T5620] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1059.322853][T17978] loop6: detected capacity change from 0 to 2640 [ 1059.344082][ T5899] microsoft 0003:045E:07DA.0027: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1059.371350][ T5899] microsoft 0003:045E:07DA.0027: no inputs found [ 1059.393387][T17978] buffer_io_error: 11 callbacks suppressed [ 1059.393403][T17978] Buffer I/O error on dev loop6, logical block 0, async page read [ 1059.408023][ T5899] microsoft 0003:045E:07DA.0027: could not initialize ff, continuing anyway [ 1059.431362][ T5899] usb 5-1: USB disconnect, device number 116 [ 1059.437267][T17978] Buffer I/O error on dev loop6, logical block 0, async page read [ 1059.463556][ T5620] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1059.465678][T17978] Buffer I/O error on dev loop6, logical block 0, async page read [ 1059.484494][ T5620] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 1059.490792][T17978] Buffer I/O error on dev loop6, logical block 0, async page read [ 1059.528683][T17978] Buffer I/O error on dev loop6, logical block 0, async page read [ 1059.530595][ T5620] usb 4-1: config 114 has no interface number 0 [ 1059.546301][T17978] Buffer I/O error on dev loop6, logical block 0, async page read [ 1059.565771][T17978] Buffer I/O error on dev loop6, logical block 0, async page read [ 1059.574237][T17978] Buffer I/O error on dev loop6, logical block 0, async page read [ 1059.588041][T17978] ldm_validate_partition_table(): Disk read failed. [ 1059.604227][T17978] Buffer I/O error on dev loop6, logical block 0, async page read [ 1059.604248][ T5620] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1059.633878][T17978] Buffer I/O error on dev loop6, logical block 0, async page read [ 1059.650337][T17978] Dev loop6: unable to read RDB block 0 [ 1059.683354][T17978] loop6: unable to read partition table [ 1059.691504][T17978] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1059.707413][ T5620] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1059.749682][ T5620] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1059.783288][ T5620] usb 4-1: config 114 interface 240 has no altsetting 0 [ 1059.824382][T17985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1059.856556][ T5620] usb 4-1: string descriptor 0 read error: -22 [ 1060.800180][ T5620] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1060.816020][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.869287][T17973] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1060.905085][T17973] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1060.948869][ T5620] ir_usb 4-1:114.240: IR Dongle converter detected [ 1061.040803][T17994] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3444'. [ 1061.128106][T17990] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1061.380983][ T990] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1061.491148][T18001] netlink: 'syz.4.3446': attribute type 11 has an invalid length. [ 1061.491635][T17973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.491936][T17973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.620113][ T5620] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 1061.639960][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.670603][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.691989][ T990] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1061.719428][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.748682][ T990] usb 6-1: config 0 descriptor?? [ 1062.212579][ T5899] usb 4-1: USB disconnect, device number 5 [ 1062.224660][ T5899] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1062.240873][ T5899] ir_usb 4-1:114.240: device disconnected [ 1062.388140][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3449'. [ 1062.397586][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3449'. [ 1062.408737][T18009] netlink: 'syz.4.3449': attribute type 13 has an invalid length. [ 1062.419701][T18009] netlink: 'syz.4.3449': attribute type 12 has an invalid length. [ 1062.430395][ T990] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 1062.448904][ T990] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1062.690033][ T990] cp2112 0003:10C4:EA90.0028: error requesting version [ 1062.737560][ T990] cp2112 0003:10C4:EA90.0028: probe with driver cp2112 failed with error -32 [ 1062.762356][ T990] usb 6-1: USB disconnect, device number 59 [ 1062.788196][T18014] binder: 18011:18014 ioctl c0306201 200000000640 returned -22 [ 1062.954332][T18016] 9p: Bad value for 'rfdno' [ 1063.064966][ T30] kauditd_printk_skb: 224 callbacks suppressed [ 1063.064983][ T30] audit: type=1400 audit(1777871086.460:48588): avc: denied { read write } for pid=16012 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1063.158452][ T30] audit: type=1400 audit(1777871086.497:48589): avc: denied { open } for pid=16012 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1063.181242][T18020] 9p: Bad value for 'rfdno' [ 1063.229925][ T30] audit: type=1400 audit(1777871086.497:48590): avc: denied { ioctl } for pid=16012 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1063.355721][ T30] audit: type=1400 audit(1777871086.506:48591): avc: denied { create } for pid=18015 comm="syz.3.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1063.404703][ T30] audit: type=1400 audit(1777871086.506:48592): avc: denied { mount } for pid=18015 comm="syz.3.3451" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1063.446853][T18023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3453'. [ 1063.470205][ T30] audit: type=1400 audit(1777871086.516:48593): avc: denied { prog_load } for pid=18015 comm="syz.3.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1063.518254][ T30] audit: type=1400 audit(1777871086.516:48594): avc: denied { bpf } for pid=18015 comm="syz.3.3451" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1063.567734][ T30] audit: type=1400 audit(1777871086.516:48595): avc: denied { create } for pid=18015 comm="syz.3.3451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1063.600680][ T30] audit: type=1400 audit(1777871086.553:48596): avc: denied { mounton } for pid=18019 comm="syz.2.3452" path="/109/file0" dev="tmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1063.698886][ T30] audit: type=1400 audit(1777871086.684:48597): avc: denied { read write } for pid=10986 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1063.808383][T18037] syzkaller0: entered promiscuous mode [ 1063.828786][T18037] syzkaller0: entered allmulticast mode [ 1063.853054][T18040] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1063.859592][T18040] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1063.874486][T18040] vhci_hcd vhci_hcd.0: Device attached [ 1063.894324][ T10] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1064.215351][T18040] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1064.321643][T11161] usb 44-1: SetAddress Request (2) to port 0 [ 1064.359151][T11161] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1064.748367][T18041] vhci_hcd: connection reset by peer [ 1064.775644][ T48] vhci_hcd vhci_hcd.5: stop threads [ 1064.792280][ T48] vhci_hcd vhci_hcd.5: release socket [ 1064.814867][ T48] vhci_hcd vhci_hcd.5: disconnect device [ 1064.908389][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1064.918228][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1064.960725][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1065.000955][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1065.034730][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1065.045295][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.065201][ T10] usb 5-1: config 0 descriptor?? [ 1065.464201][ T990] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1065.535289][ T10] microsoft 0003:045E:07DA.0029: unknown main item tag 0x0 [ 1065.553001][ T10] microsoft 0003:045E:07DA.0029: ignoring exceeding usage max [ 1065.575539][ T10] microsoft 0003:045E:07DA.0029: implement() called with n (56) > 32! (kworker/0:1) [ 1065.733628][ T990] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.143478][ T990] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1066.156654][ T990] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1066.165912][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.174523][ T990] usb 3-1: Product: syz [ 1066.178715][ T990] usb 3-1: Manufacturer: syz [ 1066.183376][ T990] usb 3-1: SerialNumber: syz [ 1066.201834][ T990] cdc_mbim 3-1:1.0: skipping garbage [ 1066.216568][ T10] microsoft 0003:045E:07DA.0029: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1066.229197][ T10] microsoft 0003:045E:07DA.0029: no inputs found [ 1066.235754][ T10] microsoft 0003:045E:07DA.0029: could not initialize ff, continuing anyway [ 1066.262337][ T10] usb 5-1: USB disconnect, device number 117 [ 1066.382242][T18086] fido_id[18086]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1066.483354][T18067] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1066.608011][ T1219] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 1066.870883][ T1219] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1066.889807][ T1219] usb 2-1: not running at top speed; connect to a high speed hub [ 1066.913495][ T1219] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.938236][ T1219] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1066.967181][ T1219] usb 2-1: string descriptor 0 read error: -22 [ 1066.982122][ T1219] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1067.010662][ T1219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.059798][ T1219] usb 2-1: 0:2 : does not exist [ 1067.187804][T18067] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1067.208881][ T990] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 1067.240750][ T990] wwan wwan0: port wwan0mbim0 attached [ 1068.287063][T18116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3479'. [ 1069.793376][T11161] usb 44-1: device descriptor read/8, error -110 [ 1070.223343][T11161] usb usb44-port1: attempt power cycle [ 1070.781077][T18089] kthread_run failed with err -4 [ 1070.791693][ T990] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, ba:fe:23:fb:17:a0 [ 1070.823754][T11161] usb usb44-port1: unable to enumerate USB device [ 1070.840072][ T1219] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1070.845833][ T30] kauditd_printk_skb: 320 callbacks suppressed [ 1070.845848][ T30] audit: type=1400 audit(1777871093.729:48918): avc: denied { read write } for pid=16408 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1070.861478][ T990] usb 3-1: USB disconnect, device number 117 [ 1070.924522][ T1219] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1070.949502][ T1219] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1070.970363][ T990] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 1071.006663][ T30] audit: type=1400 audit(1777871093.785:48919): avc: denied { read write } for pid=16748 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1071.105974][ T1219] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1071.415569][ T30] audit: type=1400 audit(1777871093.785:48920): avc: denied { open } for pid=16748 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1071.461026][T18124] netlink: 1040 bytes leftover after parsing attributes in process `syz.5.3482'. [ 1071.495232][ T1219] usb 2-1: USB disconnect, device number 125 [ 1071.547231][ T30] audit: type=1400 audit(1777871093.785:48921): avc: denied { ioctl } for pid=16748 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1071.559330][ T990] wwan wwan0: port wwan0mbim0 disconnected [ 1071.611288][T18121] lo speed is unknown, defaulting to 1000 [ 1071.620907][T18132] kernel profiling enabled (shift: 27) [ 1071.660520][ T30] audit: type=1400 audit(1777871093.804:48922): avc: denied { read write open } for pid=16408 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1071.752025][ T30] audit: type=1400 audit(1777871093.804:48923): avc: denied { ioctl } for pid=16408 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1071.789218][ T30] audit: type=1400 audit(1777871093.832:48924): avc: denied { read write } for pid=10986 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1071.790949][T18136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18136 comm=syz.1.3485 [ 1071.821125][ T30] audit: type=1400 audit(1777871093.832:48925): avc: denied { open } for pid=10986 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1071.836251][T18132] syzkaller0: entered promiscuous mode [ 1071.868128][T18136] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3485'. [ 1071.877716][ T30] audit: type=1400 audit(1777871093.832:48926): avc: denied { ioctl } for pid=10986 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1071.884969][T18132] syzkaller0: entered allmulticast mode [ 1071.906025][ T30] audit: type=1400 audit(1777871093.944:48927): avc: denied { read } for pid=5275 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1072.184240][T18139] lo speed is unknown, defaulting to 1000 [ 1072.320358][T18149] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1072.358912][T18149] SET target dimension over the limit! [ 1072.599756][T18156] FAULT_INJECTION: forcing a failure. [ 1072.599756][T18156] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.646186][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1072.695633][T18156] CPU: 1 UID: 0 PID: 18156 Comm: syz.4.3491 Tainted: G L syzkaller #0 PREEMPT(full) [ 1072.695662][T18156] Tainted: [L]=SOFTLOCKUP [ 1072.695669][T18156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1072.695680][T18156] Call Trace: [ 1072.695686][T18156] [ 1072.695693][T18156] dump_stack_lvl+0x100/0x190 [ 1072.695719][T18156] should_fail_ex.cold+0x5/0xa [ 1072.695745][T18156] should_failslab+0xc2/0x120 [ 1072.695764][T18156] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1072.695791][T18156] ? key_alloc+0x423/0x1310 [ 1072.695813][T18156] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1072.695842][T18156] kmemdup_noprof+0x29/0x60 [ 1072.695861][T18156] key_alloc+0x423/0x1310 [ 1072.695893][T18156] ? __pfx_key_alloc+0x10/0x10 [ 1072.695918][T18156] ? hook_cred_prepare+0x17d/0x380 [ 1072.695947][T18156] keyring_alloc+0x44/0xc0 [ 1072.695974][T18156] lookup_user_key+0x9b8/0x1300 [ 1072.695999][T18156] ? __pfx_lookup_user_key+0x10/0x10 [ 1072.696021][T18156] ? irqentry_exit+0x246/0x790 [ 1072.696047][T18156] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1072.696073][T18156] ? rep_movs_alternative+0x4c/0x90 [ 1072.696104][T18156] __do_sys_add_key+0x2a6/0x460 [ 1072.696124][T18156] ? __pfx___do_sys_add_key+0x10/0x10 [ 1072.696139][T18156] ? ksys_write+0x1ac/0x250 [ 1072.696168][T18156] ? rcu_is_watching+0x12/0xc0 [ 1072.696200][T18156] do_syscall_64+0x10b/0xf80 [ 1072.696219][T18156] ? clear_bhb_loop+0x40/0x90 [ 1072.696240][T18156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.696258][T18156] RIP: 0033:0x7fe1ab59cdd9 [ 1072.696273][T18156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.696290][T18156] RSP: 002b:00007fe1ac4f9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1072.696307][T18156] RAX: ffffffffffffffda RBX: 00007fe1ab815fa0 RCX: 00007fe1ab59cdd9 [ 1072.696319][T18156] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000200000000040 [ 1072.696330][T18156] RBP: 00007fe1ac4f9090 R08: ffffffffffffffff R09: 0000000000000000 [ 1072.696341][T18156] R10: 00000000000000d4 R11: 0000000000000246 R12: 0000000000000001 [ 1072.696351][T18156] R13: 00007fe1ab816038 R14: 00007fe1ab815fa0 R15: 00007ffe0f215a38 [ 1072.696379][T18156] [ 1073.245998][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1073.256179][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1073.268950][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 1073.278171][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.286198][ T9] usb 4-1: Product: syz [ 1073.291465][ T9] usb 4-1: Manufacturer: syz [ 1073.296252][ T9] usb 4-1: SerialNumber: syz [ 1073.574628][T18149] SET target dimension over the limit! [ 1073.649858][T18171] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1073.817342][ T9] usb 4-1: USB disconnect, device number 6 [ 1073.951626][ T10] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1074.251224][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1074.327918][T11557] udevd[11557]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1074.334693][ T10] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 1074.370009][ T10] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1074.380991][T18178] No such timeout policy "syz0" [ 1074.383854][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1074.400226][ T10] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.40 [ 1074.449144][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.463885][ T10] usb 2-1: Product: У [ 1074.471573][ T10] usb 2-1: Manufacturer: íŠï¨¼æŸ·ìµ‚蔯킻皴竹隠ᤉ㗄è…飖갪í‹ê­•è…Ÿâ“¶åƒç‡¡ãµ¯ê¾¢åŠ¾è—“旲庣è¶î”¸ã€´ê‘¦ãŠ¬è™¯â¶¹ã¾¾ç•‘ࡧí¾ã¨™ìš ç¢•ë°é£•ä’´æ¾Šì·™á„¸Î¶ã»“ä’ëŽã‘ºè‡Šå¯—ᠵ솫ç¾èž¦æ”Ꭰ[ 1074.507047][ T10] usb 2-1: SerialNumber: ဇ [ 1074.646288][ T9] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1074.777866][T18171] IPVS: length: 120 != 8 [ 1074.833655][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 1074.842438][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1074.856852][ T10] usb 2-1: USB disconnect, device number 126 [ 1074.894516][ T9] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.906253][ T9] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1074.931333][ T9] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1074.943136][ T9] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1074.974739][ T9] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1075.001757][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1075.018622][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.034818][ T9] usb 5-1: Product: syz [ 1075.043123][ T9] usb 5-1: Manufacturer: syz [ 1075.050808][ T9] usb 5-1: SerialNumber: syz [ 1075.076347][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1075.092103][ T9] imon 5-1:155.0: unable to initialize intf0, err -90 [ 1075.099726][ T9] imon:imon_probe: failed to initialize context! [ 1075.113723][ T9] imon 5-1:155.0: unable to register, err -19 [ 1075.318686][T18177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.330826][T18177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.350652][ T9] usb 5-1: USB disconnect, device number 118 [ 1076.195122][ T30] kauditd_printk_skb: 258 callbacks suppressed [ 1076.195140][ T30] audit: type=1400 audit(1777871098.734:49186): avc: denied { read write } for pid=16748 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1076.226788][T18194] netlink: 'syz.5.3505': attribute type 7 has an invalid length. [ 1076.235880][T18194] netlink: 'syz.5.3505': attribute type 8 has an invalid length. [ 1076.255329][ T30] audit: type=1400 audit(1777871098.734:49187): avc: denied { open } for pid=16748 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1076.283709][ T30] audit: type=1400 audit(1777871098.734:49188): avc: denied { ioctl } for pid=16748 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1076.359621][ T30] audit: type=1400 audit(1777871098.799:49189): avc: denied { read } for pid=18193 comm="syz.5.3505" name="qrtr-tun" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.465203][ T30] audit: type=1400 audit(1777871098.799:49190): avc: denied { read open } for pid=18193 comm="syz.5.3505" path="/dev/qrtr-tun" dev="devtmpfs" ino=1313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.565550][ T30] audit: type=1400 audit(1777871098.837:49191): avc: denied { bpf } for pid=18197 comm="syz.1.3506" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1076.687878][ T30] audit: type=1400 audit(1777871098.865:49192): avc: denied { mount } for pid=18197 comm="syz.1.3506" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1076.722213][ T30] audit: type=1400 audit(1777871098.874:49193): avc: denied { create } for pid=18193 comm="syz.5.3505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1076.743649][ T9] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 1076.777166][ T30] audit: type=1400 audit(1777871098.874:49194): avc: denied { create } for pid=18204 comm="syz.2.3508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1076.798287][ T30] audit: type=1400 audit(1777871098.874:49195): avc: denied { create } for pid=18206 comm="syz.4.3509" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1076.836921][T18223] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3514'. [ 1076.871074][T18217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3511'. [ 1076.890739][T18214] netlink: 'syz.4.3512': attribute type 8 has an invalid length. [ 1076.903225][T18214] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.3512'. [ 1076.912713][ T9] usb 3-1: device descriptor read/64, error -71 [ 1077.213647][T18245] lo speed is unknown, defaulting to 1000 [ 1077.275799][ T5807] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1077.275963][ T9] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 1077.439263][ T9] usb 3-1: device descriptor read/64, error -71 [ 1077.473800][ T5807] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.484505][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.498187][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.512353][ T5807] usb 4-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 1077.521505][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.533937][ T5807] usb 4-1: config 0 descriptor?? [ 1077.575835][ T9] usb usb3-port1: attempt power cycle [ 1078.010767][ T5807] wacom 0003:056A:0000.002A: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 1078.018539][ T9] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1078.044551][ T5807] wacom 0003:056A:0000.002A: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.3-1/input0 [ 1078.057447][ T9] usb 3-1: device descriptor read/8, error -71 [ 1078.094766][ T5807] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0000.002A/input/input107 [ 1078.128636][T18260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1078.204124][T18263] netlink: 'syz.1.3526': attribute type 3 has an invalid length. [ 1078.264666][T18263] netlink: 'syz.1.3526': attribute type 3 has an invalid length. [ 1078.307237][T18263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3526'. [ 1078.316492][ T9] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1078.317677][ T5807] usb 4-1: USB disconnect, device number 7 [ 1078.356763][ T9] usb 3-1: device descriptor read/8, error -71 [ 1078.495299][ T9] usb usb3-port1: unable to enumerate USB device [ 1079.014899][T18273] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3531'. [ 1079.399108][T18276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3532'. [ 1079.764424][T18282] 9p: Bad value for 'rfdno' [ 1079.882349][T18283] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3533'. [ 1080.659161][T18299] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1080.826406][T18295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3538'. [ 1080.835736][T18295] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3538'. [ 1081.542979][ T30] kauditd_printk_skb: 526 callbacks suppressed [ 1081.542997][ T30] audit: type=1326 audit(1777871103.739:49722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.4.3544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe1ab59cdd9 code=0x7ffc0000 [ 1081.673982][T18322] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3544'. [ 1081.900076][ T30] audit: type=1400 audit(1777871103.748:49723): avc: denied { ioctl } for pid=18314 comm="syz.4.3544" path="socket:[67052]" dev="sockfs" ino=67052 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1081.939693][T18325] netlink: 'syz.5.3547': attribute type 1 has an invalid length. [ 1081.985879][ T30] audit: type=1326 audit(1777871103.748:49724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.4.3544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab59cdd9 code=0x7ffc0000 [ 1082.052596][T18325] bond3: entered promiscuous mode [ 1082.121402][T18325] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1082.139229][T18329] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1082.148586][ T30] audit: type=1326 audit(1777871103.748:49725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18314 comm="syz.4.3544" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ab59cdd9 code=0x7ffc0000 [ 1082.183427][T18329] audit: audit_lost=230 audit_rate_limit=0 audit_backlog_limit=64 [ 1082.192174][T18329] audit: backlog limit exceeded [ 1082.197500][T18339] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1082.204972][T18337] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1082.205111][T18339] audit: audit_lost=231 audit_rate_limit=0 audit_backlog_limit=64 [ 1082.228034][T18330] bond3: (slave bridge3): making interface the new active one [ 1082.240968][T18330] bridge3: entered promiscuous mode [ 1082.271424][T18330] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1082.651350][T18325] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1082.681506][T18325] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1082.684652][T11161] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1082.798111][T18346] netlink: 'syz.1.3552': attribute type 1 has an invalid length. [ 1082.836939][T18346] bond1: entered promiscuous mode [ 1082.843694][T18346] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1082.973149][T11161] usb 4-1: Using ep0 maxpacket: 32 [ 1082.986941][T11161] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1082.995715][T11161] usb 4-1: config 0 has no interface number 0 [ 1083.001858][T11161] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1083.035698][T11161] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1083.111623][T18351] bond1: (slave bridge2): making interface the new active one [ 1083.131910][T11161] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.198219][T11161] usb 4-1: Product: syz [ 1083.230724][T18351] bridge2: entered promiscuous mode [ 1083.253614][T11161] usb 4-1: Manufacturer: syz [ 1083.278322][T11161] usb 4-1: SerialNumber: syz [ 1083.321221][T18351] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1083.372585][T11161] usb 4-1: config 0 descriptor?? [ 1083.405501][T18346] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1083.433770][T18346] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1083.664563][T18365] netlink: 'syz.4.3556': attribute type 1 has an invalid length. [ 1083.672614][T18365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1083.856799][T18372] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3560'. [ 1084.517632][T11161] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1085.191208][T18399] SET target dimension over the limit! [ 1085.231205][T11161] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1085.262109][T11161] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1085.285845][T11161] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1085.291492][T18401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3568'. [ 1085.316304][T11161] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1085.335783][T11161] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 1085.373411][T11161] usb 4-1: USB disconnect, device number 8 [ 1085.385756][T18397] Bluetooth: hci0: unexpected event for opcode 0x042c [ 1085.796217][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1085.808004][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1086.001563][T18413] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3572'. [ 1086.010577][ T9] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1086.205880][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1086.229842][ T9] usb 5-1: config 114 has an invalid interface number: 240 but max is 0 [ 1086.244624][ T9] usb 5-1: config 114 has no interface number 0 [ 1086.257921][ T9] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1086.273147][ T9] usb 5-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1086.285746][ T9] usb 5-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1086.297452][ T9] usb 5-1: config 114 interface 240 has no altsetting 0 [ 1086.315004][ T9] usb 5-1: string descriptor 0 read error: -22 [ 1086.348628][T18423] netlink: 'syz.1.3575': attribute type 10 has an invalid length. [ 1086.356881][T18423] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 1086.393955][ T9] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1086.403159][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.442259][T18401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1086.469146][T11161] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1086.494966][T18401] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1086.521529][ T9] ir_usb 5-1:114.240: IR Dongle converter detected [ 1086.661172][T11161] usb 3-1: Using ep0 maxpacket: 16 [ 1086.669046][T11161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1086.681793][T11161] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.691781][T11161] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1086.707202][T11161] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1086.717554][T11161] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.914814][T11161] usb 3-1: config 0 descriptor?? [ 1087.483460][ T30] kauditd_printk_skb: 367 callbacks suppressed [ 1087.490229][ T30] audit: type=1400 audit(1777871108.781:50090): avc: denied { ioctl } for pid=18420 comm="syz.2.3574" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.523282][T18401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.540338][ T5620] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1087.549468][ T30] audit: type=1400 audit(1777871109.324:50091): avc: denied { read write } for pid=18400 comm="syz.4.3568" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.573865][ T30] audit: type=1400 audit(1777871109.324:50092): avc: denied { open } for pid=18400 comm="syz.4.3568" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.598132][ T30] audit: type=1400 audit(1777871109.324:50093): avc: denied { ioctl } for pid=18400 comm="syz.4.3568" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.629785][T18401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.654117][ T30] audit: type=1400 audit(1777871109.361:50094): avc: denied { ioctl } for pid=18430 comm="syz.5.3579" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.684051][ T9] usb 5-1: IRDA class descriptor not found, device not bound [ 1087.722747][ T30] audit: type=1400 audit(1777871109.445:50095): avc: denied { ioctl } for pid=18430 comm="syz.5.3579" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.750276][ T30] audit: type=1400 audit(1777871109.502:50096): avc: denied { ioctl } for pid=18400 comm="syz.4.3568" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.778950][ T30] audit: type=1400 audit(1777871109.502:50097): avc: denied { ioctl } for pid=18400 comm="syz.4.3568" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.810916][ T5620] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1087.842145][ T5620] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.859177][ T30] audit: type=1400 audit(1777871109.502:50098): avc: denied { read write } for pid=16552 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1087.873917][ T5620] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1087.883801][ T30] audit: type=1400 audit(1777871109.502:50099): avc: denied { open } for pid=16552 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1087.905752][ T5620] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.936268][T11161] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.002B/input/input110 [ 1087.960201][ T5620] usb 6-1: config 0 descriptor?? [ 1088.015147][T18397] Bluetooth: hci3: command 0x0406 tx timeout [ 1088.048020][T11161] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1088.128467][ T5899] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 1088.209046][T18421] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3574'. [ 1088.225801][ T9] usb 3-1: USB disconnect, device number 122 [ 1088.311222][ T5899] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.321485][ T5899] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1088.330616][ T5899] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1088.340247][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.351377][ T5899] usb 2-1: config 0 descriptor?? [ 1088.360071][ T5899] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1088.367277][ T5899] dvb-usb: bulk message failed: -22 (3/0) [ 1088.375840][ T5899] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1088.385921][ T5899] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1088.394213][ T5899] usb 2-1: media controller created [ 1088.400339][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1088.413587][ T5620] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 1088.426514][ T5899] dvb-usb: bulk message failed: -22 (6/0) [ 1088.434441][ T5620] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1088.449308][ T5899] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1088.470772][ T5899] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input111 [ 1088.504966][ T5899] dvb-usb: schedule remote query interval to 150 msecs. [ 1088.523422][ T5899] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1088.641727][T18448] dvb-usb: bulk message failed: -22 (2/0) [ 1088.684454][ T5620] cp2112 0003:10C4:EA90.002C: error requesting version [ 1088.703964][ T5899] dvb-usb: bulk message failed: -22 (1/0) [ 1088.716734][ T5899] dvb-usb: error while querying for an remote control event. [ 1088.728400][ T5620] cp2112 0003:10C4:EA90.002C: probe with driver cp2112 failed with error -32 [ 1088.730268][T11161] usb 2-1: USB disconnect, device number 127 [ 1088.756576][ T5620] usb 6-1: USB disconnect, device number 60 [ 1088.831340][T11161] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1089.211959][ T1219] usb 5-1: USB disconnect, device number 119 [ 1090.455620][ T5620] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 1090.552222][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3589'. [ 1090.660545][ T5620] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1090.679420][T18474] SET target dimension over the limit! [ 1090.695723][ T5620] usb 2-1: not running at top speed; connect to a high speed hub [ 1090.763177][ T5620] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.917247][ T5620] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1091.051360][ T5620] usb 2-1: string descriptor 0 read error: -22 [ 1091.128735][ T5620] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1091.155823][ T5620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.363142][ T5620] usb 2-1: 0:2 : does not exist [ 1091.374326][T18485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.388585][T18485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1091.421043][T18485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1092.174114][T18486] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1092.529433][ T5899] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1092.540068][ T1219] usb 5-1: new full-speed USB device number 120 using dummy_hcd [ 1092.551026][ T9] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1092.689881][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 1092.696502][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.700889][ T1219] usb 5-1: no configurations [ 1092.707895][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.713478][ T1219] usb 5-1: can't read configurations, error -22 [ 1092.721930][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1092.734394][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1092.752746][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1092.764176][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1092.774350][ T5899] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1092.783761][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1092.797235][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.805808][ T5620] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1092.816052][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1092.826622][ T5620] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1092.834986][ T5899] usb 4-1: config 0 descriptor?? [ 1092.842466][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.854595][ T30] kauditd_printk_skb: 253 callbacks suppressed [ 1092.854611][ T30] audit: type=1400 audit(1777871114.329:50353): avc: denied { ioctl } for pid=18487 comm="syz.3.3594" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1092.871489][T18496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3596'. [ 1092.895196][ T1219] usb 5-1: new full-speed USB device number 121 using dummy_hcd [ 1092.898549][ T5620] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1092.912517][ T30] audit: type=1400 audit(1777871114.338:50354): avc: denied { create } for pid=18495 comm="syz.5.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1092.934539][ T9] usb 3-1: config 0 descriptor?? [ 1092.948075][ T30] audit: type=1400 audit(1777871114.338:50355): avc: denied { write } for pid=18495 comm="syz.5.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1092.972651][ T30] audit: type=1400 audit(1777871114.385:50356): avc: denied { ioctl } for pid=18482 comm="syz.4.3592" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1093.002699][ T30] audit: type=1400 audit(1777871114.394:50357): avc: denied { create } for pid=18495 comm="syz.5.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1093.030013][ T30] audit: type=1400 audit(1777871114.394:50358): avc: denied { read write } for pid=18495 comm="syz.5.3596" name="vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1093.058642][ T30] audit: type=1400 audit(1777871114.394:50359): avc: denied { open } for pid=18495 comm="syz.5.3596" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1093.065159][ T1219] usb 5-1: no configurations [ 1093.085324][ T30] audit: type=1400 audit(1777871114.394:50360): avc: denied { read } for pid=18495 comm="syz.5.3596" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1093.106590][ T1219] usb 5-1: can't read configurations, error -22 [ 1093.112896][ T30] audit: type=1400 audit(1777871114.394:50361): avc: denied { open } for pid=18495 comm="syz.5.3596" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1093.120088][ T1219] usb usb5-port1: attempt power cycle [ 1093.147400][ T30] audit: type=1400 audit(1777871114.404:50362): avc: denied { ioctl } for pid=18495 comm="syz.5.3596" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1093.176917][ T5620] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1093.197720][ T5620] usb 2-1: USB disconnect, device number 2 [ 1093.202928][T11161] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1093.328808][ T5899] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 1093.336171][ T5899] microsoft 0003:045E:07DA.002D: ignoring exceeding usage max [ 1093.347778][ T5899] microsoft 0003:045E:07DA.002D: implement() called with n (56) > 32! (kworker/0:9) [ 1093.376359][T11161] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1093.408576][T11161] usb 6-1: config 114 has an invalid interface number: 240 but max is 0 [ 1093.418316][ T9] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 1093.425637][ T9] microsoft 0003:045E:07DA.002E: ignoring exceeding usage max [ 1093.430216][T11161] usb 6-1: config 114 has no interface number 0 [ 1093.439606][ T9] microsoft 0003:045E:07DA.002E: implement() called with n (56) > 32! (kworker/0:0) [ 1093.440203][T11161] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1093.461898][T11161] usb 6-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1093.474525][T11161] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1093.496185][T11161] usb 6-1: config 114 interface 240 has no altsetting 0 [ 1093.516288][T11161] usb 6-1: string descriptor 0 read error: -22 [ 1093.522943][T11161] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1093.532292][ T1219] usb 5-1: new full-speed USB device number 122 using dummy_hcd [ 1093.541165][T11161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.556633][T18496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1093.564003][T18496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1093.572864][ T1219] usb 5-1: no configurations [ 1093.579169][T11161] ir_usb 6-1:114.240: IR Dongle converter detected [ 1093.580627][ T5899] microsoft 0003:045E:07DA.002D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1093.586798][ T1219] usb 5-1: can't read configurations, error -22 [ 1093.636701][ T9] microsoft 0003:045E:07DA.002E: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1093.671896][ T5899] microsoft 0003:045E:07DA.002D: no inputs found [ 1093.681718][ T9] microsoft 0003:045E:07DA.002E: no inputs found [ 1093.692538][ T5899] microsoft 0003:045E:07DA.002D: could not initialize ff, continuing anyway [ 1093.701777][ T9] microsoft 0003:045E:07DA.002E: could not initialize ff, continuing anyway [ 1093.722162][ T5899] usb 4-1: USB disconnect, device number 9 [ 1093.728418][ T9] usb 3-1: USB disconnect, device number 123 [ 1093.737441][ T1219] usb 5-1: new full-speed USB device number 123 using dummy_hcd [ 1093.772569][T18503] fido_id[18503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1093.795453][T18496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.802959][ T1219] usb 5-1: no configurations [ 1093.809536][ T1219] usb 5-1: can't read configurations, error -22 [ 1093.819177][T18496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.820775][T18506] fido_id[18506]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1093.847083][T11161] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 1093.856476][ T1219] usb usb5-port1: unable to enumerate USB device [ 1094.063816][ T1219] usb 6-1: USB disconnect, device number 61 [ 1094.078556][ T1219] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1094.087463][ T1219] ir_usb 6-1:114.240: device disconnected [ 1094.501936][T18517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.526762][T18517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1094.538924][ T1219] usb 3-1: new full-speed USB device number 124 using dummy_hcd [ 1094.937342][ T1219] usb 3-1: config 151 has an invalid interface number: 212 but max is 0 [ 1094.948061][ T1219] usb 3-1: config 151 has no interface number 0 [ 1094.956362][ T1219] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 1094.966773][ T1219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.974781][ T1219] usb 3-1: Product: syz [ 1094.980376][ T1219] usb 3-1: Manufacturer: syz [ 1094.981689][T18523] ipvlan2: entered allmulticast mode [ 1094.984996][ T1219] usb 3-1: SerialNumber: syz [ 1095.222352][ T1219] ftdi_sio 3-1:151.212: FTDI USB Serial Device converter detected [ 1095.246375][ T1219] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 1095.258043][ T1219] usb 3-1: USB disconnect, device number 124 [ 1095.284891][ T1219] ftdi_sio 3-1:151.212: device disconnected [ 1096.533884][ T5899] usb 5-1: new full-speed USB device number 124 using dummy_hcd [ 1096.712189][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1096.720778][ T5899] usb 5-1: not running at top speed; connect to a high speed hub [ 1096.729620][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.744260][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1096.756376][ T5899] usb 5-1: string descriptor 0 read error: -22 [ 1096.768739][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1096.780553][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.804086][ T5899] usb 5-1: 0:2 : does not exist [ 1096.923710][T18542] binder: 18541:18542 ioctl c0306201 200000000080 returned -14 [ 1097.031067][T18549] binder: 18541:18549 ioctl c0306201 2000000003c0 returned -14 [ 1097.055231][T18542] binder: 18541:18542 ioctl c0306201 200000000000 returned -14 [ 1097.460999][T18557] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1097.930740][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3618'. [ 1098.033472][ T5899] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1098.062311][ T5899] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1098.146430][ T5899] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1098.200871][ T5899] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1098.317329][ T30] kauditd_printk_skb: 278 callbacks suppressed [ 1098.317343][ T30] audit: type=1400 audit(1777871119.343:50641): avc: denied { execmem } for pid=18567 comm="syz.5.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1099.259446][ T5899] usb 5-1: USB disconnect, device number 124 [ 1099.267000][ T30] audit: type=1400 audit(1777871119.540:50642): avc: denied { name_bind } for pid=18567 comm="syz.5.3619" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1099.290041][ T30] audit: type=1400 audit(1777871120.120:50643): avc: denied { create } for pid=18567 comm="syz.5.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1099.482299][ T30] audit: type=1400 audit(1777871120.120:50644): avc: denied { read write } for pid=18567 comm="syz.5.3619" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1099.919474][ T30] audit: type=1400 audit(1777871120.120:50645): avc: denied { open } for pid=18567 comm="syz.5.3619" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1099.967925][T18578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1099.978532][ T30] audit: type=1400 audit(1777871120.120:50646): avc: denied { create } for pid=18567 comm="syz.5.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1100.010203][T18578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1100.035997][T18578] netlink: 'syz.1.3620': attribute type 13 has an invalid length. [ 1100.049538][ T30] audit: type=1400 audit(1777871120.335:50647): avc: denied { read write } for pid=18569 comm="syz.1.3620" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1100.075135][T18578] netlink: 'syz.1.3620': attribute type 12 has an invalid length. [ 1100.144794][T18582] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1100.154992][T18582] audit: audit_lost=233 audit_rate_limit=0 audit_backlog_limit=64 [ 1100.166212][ T30] audit: type=1400 audit(1777871120.335:50648): avc: denied { open } for pid=18569 comm="syz.1.3620" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1100.621106][ T9] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1100.705613][T18590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3625'. [ 1100.805293][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1100.821137][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1100.850518][ T9] usb 5-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 1100.869870][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.893268][ T9] usb 5-1: Product: syz [ 1100.904496][ T9] usb 5-1: Manufacturer: syz [ 1100.922031][ T9] usb 5-1: SerialNumber: syz [ 1101.415745][T18595] xt_TCPMSS: Only works on TCP SYN packets [ 1101.439479][T18599] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1101.493747][T18595] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3626'. [ 1101.709372][T18595] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3626'. [ 1102.048152][T18612] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1102.723585][ T9] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1102.781443][ T9] usb 5-1: USB disconnect, device number 125 [ 1103.736023][ T30] kauditd_printk_skb: 228 callbacks suppressed [ 1103.736034][ T30] audit: type=1400 audit(1777871124.517:50876): avc: denied { read write } for pid=16748 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1103.785407][T18629] input: syz0 as /devices/virtual/input/input112 [ 1103.830051][T11557] udevd[11557]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1103.889393][ T30] audit: type=1400 audit(1777871124.545:50877): avc: denied { open } for pid=16748 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1103.928424][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3635'. [ 1103.997779][ T9925] Bluetooth: hci3: unexpected event for opcode 0x042c [ 1104.003482][ T30] audit: type=1400 audit(1777871124.545:50878): avc: denied { ioctl } for pid=16748 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1104.213793][ T30] audit: type=1400 audit(1777871124.554:50879): avc: denied { read write } for pid=18628 comm="syz.5.3634" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1104.309321][ T30] audit: type=1400 audit(1777871124.554:50880): avc: denied { open } for pid=18628 comm="syz.5.3634" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1104.372841][ T5807] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1104.409146][ T30] audit: type=1400 audit(1777871124.554:50881): avc: denied { ioctl } for pid=18628 comm="syz.5.3634" path="/dev/uinput" dev="devtmpfs" ino=920 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1104.556913][ T30] audit: type=1400 audit(1777871124.573:50882): avc: denied { read write } for pid=16552 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1104.573513][T18641] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1104.593232][T18641] UDF-fs: Scanning with blocksize 512 failed [ 1104.616874][T18641] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1104.624523][T18641] UDF-fs: Scanning with blocksize 1024 failed [ 1104.638458][T18641] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1104.646129][T18641] UDF-fs: Scanning with blocksize 2048 failed [ 1104.658121][T18641] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1104.665848][T18641] UDF-fs: Scanning with blocksize 4096 failed [ 1104.747560][T18641] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1104.755108][T18641] UDF-fs: Scanning with blocksize 512 failed [ 1104.764263][T18641] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1104.772584][T18641] UDF-fs: Scanning with blocksize 1024 failed [ 1104.782577][T18641] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1104.790437][T18641] UDF-fs: Scanning with blocksize 2048 failed [ 1104.800589][T18642] x_tables: duplicate underflow at hook 2 [ 1104.816562][T18641] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 1104.824319][T18641] UDF-fs: Scanning with blocksize 4096 failed [ 1105.000159][ T30] audit: type=1400 audit(1777871124.573:50883): avc: denied { read write open } for pid=16552 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1105.063863][ T5807] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1105.077762][ T30] audit: type=1400 audit(1777871124.573:50884): avc: denied { read } for pid=4964 comm="acpid" name="js0" dev="devtmpfs" ino=4934 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1105.108782][ T5807] usb 4-1: config 114 has an invalid interface number: 240 but max is 0 [ 1105.136247][ T5807] usb 4-1: config 114 has no interface number 0 [ 1105.161326][ T5807] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1105.179208][ T30] audit: type=1400 audit(1777871124.573:50885): avc: denied { open } for pid=4964 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=4934 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1105.213974][ T5807] usb 4-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1105.240255][ T5807] usb 4-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1105.254639][T18644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3639'. [ 1105.265045][ T5807] usb 4-1: config 114 interface 240 has no altsetting 0 [ 1105.280129][ T5807] usb 4-1: string descriptor 0 read error: -22 [ 1105.296589][ T5807] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1105.317109][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.351815][T18634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1105.370591][T18634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1105.407099][ T5807] ir_usb 4-1:114.240: IR Dongle converter detected [ 1105.493594][T18644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3639'. [ 1105.572257][T18644] ip6gretap0: entered promiscuous mode [ 1105.588897][T18644] macvtap1: entered promiscuous mode [ 1105.596156][T18644] macvtap1: entered allmulticast mode [ 1105.601651][T18644] ip6gretap0: entered allmulticast mode [ 1105.713970][T18634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.872297][T18634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.123128][ T5807] usb 4-1: IR Dongle converter now attached to ttyUSB0 [ 1106.472833][T18663] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1106.945506][T16345] usb 4-1: USB disconnect, device number 10 [ 1106.967777][T16345] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1107.012806][T16345] ir_usb 4-1:114.240: device disconnected [ 1107.491285][T18666] ipvlan2: entered allmulticast mode [ 1107.774346][T11161] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1108.033227][T11161] usb 5-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 1108.127400][T11161] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 1108.679501][T11161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.704815][T18681] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1108.895187][T11161] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.929197][T11161] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1108.956034][T11161] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 1108.965716][T18684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.004092][T11161] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1109.027218][T11161] usb 5-1: config 0 descriptor?? [ 1109.043780][T18684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1109.090365][ T30] kauditd_printk_skb: 212 callbacks suppressed [ 1109.090382][ T30] audit: type=1400 audit(1777871129.522:51095): avc: denied { bind } for pid=18686 comm="syz.1.3653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1109.156182][ T30] audit: type=1400 audit(1777871129.522:51096): avc: denied { read append } for pid=18690 comm="syz.5.3655" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1109.221445][ T30] audit: type=1400 audit(1777871129.522:51097): avc: denied { open } for pid=18690 comm="syz.5.3655" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1109.298049][ T30] audit: type=1400 audit(1777871129.522:51098): avc: denied { ioctl } for pid=18690 comm="syz.5.3655" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1109.384604][ T30] audit: type=1400 audit(1777871129.540:51099): avc: denied { read } for pid=18690 comm="syz.5.3655" name="video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1109.475636][ T30] audit: type=1400 audit(1777871129.540:51100): avc: denied { open } for pid=18690 comm="syz.5.3655" path="/dev/video7" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1109.885051][ T30] audit: type=1400 audit(1777871129.540:51101): avc: denied { create } for pid=18690 comm="syz.5.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1109.915672][T11161] usbhid 5-1:0.0: can't add hid device: -71 [ 1109.922209][T11161] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1109.951469][ T30] audit: type=1400 audit(1777871129.540:51102): avc: denied { write } for pid=18690 comm="syz.5.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1109.963250][T11161] usb 5-1: USB disconnect, device number 126 [ 1109.990501][ T30] audit: type=1400 audit(1777871129.550:51103): avc: denied { mount } for pid=18686 comm="syz.1.3653" name="/" dev="overlay" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1110.059760][ T30] audit: type=1400 audit(1777871129.559:51104): avc: denied { allowed } for pid=18690 comm="syz.5.3655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1110.128282][T18704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3660'. [ 1110.434018][T18716] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3664'. [ 1111.600757][T18738] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1112.192419][T11161] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1112.388170][T11161] usb 2-1: Using ep0 maxpacket: 32 [ 1112.483717][T11161] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1112.511223][ T1219] hid-generic 0201:224E:0001.002F: unknown main item tag 0x0 [ 1112.526113][T11161] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1112.560303][ T1219] hid-generic 0201:224E:0001.002F: unknown main item tag 0x0 [ 1112.573689][T11161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.597440][ T1219] hid-generic 0201:224E:0001.002F: unknown main item tag 0x0 [ 1112.641941][ T1219] hid-generic 0201:224E:0001.002F: unknown main item tag 0x0 [ 1112.696809][T11161] usb 2-1: config 0 descriptor?? [ 1112.709198][ T1219] hid-generic 0201:224E:0001.002F: unknown main item tag 0x0 [ 1112.778831][ T1219] hid-generic 0201:224E:0001.002F: unknown main item tag 0x0 [ 1112.884357][ T1219] hid-generic 0201:224E:0001.002F: unknown main item tag 0x0 [ 1112.977431][ T1219] hid-generic 0201:224E:0001.002F: unknown main item tag 0x0 [ 1113.045765][ T1219] hid-generic 0201:224E:0001.002F: unknown main item tag 0x0 [ 1113.167402][ T1219] hid-generic 0201:224E:0001.002F: unknown main item tag 0x0 [ 1113.501833][ T5804] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1114.499275][ T30] kauditd_printk_skb: 215 callbacks suppressed [ 1114.499299][ T30] audit: type=1400 audit(1777871134.499:51320): avc: denied { ioctl } for pid=18739 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1114.565202][ T1219] hid-generic 0201:224E:0001.002F: hidraw0: HID v656e6f.6e Device [syz1] on syz0 [ 1114.689146][T11161] waterforce 0003:1044:7A4D.0030: hidraw1: USB HID v0.04 Device [HID 1044:7a4d] on usb-dummy_hcd.1-1/input0 [ 1114.710937][ T30] audit: type=1400 audit(1777871134.620:51321): avc: denied { ioctl } for pid=18739 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1114.763118][ T30] audit: type=1400 audit(1777871134.658:51322): avc: denied { ioctl } for pid=18739 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1114.796224][ T5804] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1114.805503][ T5804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.817630][T11161] waterforce 0003:1044:7A4D.0030: fw version request failed with -38 [ 1114.853559][ T5804] usb 3-1: Product: syz [ 1114.869066][ T30] audit: type=1400 audit(1777871134.676:51323): avc: denied { write } for pid=18725 comm="syz.4.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1114.910209][ T30] audit: type=1400 audit(1777871134.695:51324): avc: denied { ioctl } for pid=18739 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1114.962815][ T5804] usb 3-1: Manufacturer: syz [ 1115.000001][T18753] fido_id[18753]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1115.025338][ T5804] usb 3-1: SerialNumber: syz [ 1115.032881][T11161] usb 2-1: USB disconnect, device number 3 [ 1115.127480][T18754] fido_id[18754]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1115.173287][ T30] audit: type=1400 audit(1777871134.742:51325): avc: denied { write } for pid=18725 comm="syz.4.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1115.277920][ T30] audit: type=1400 audit(1777871134.751:51326): avc: denied { ioctl } for pid=18739 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1115.310335][ T30] audit: type=1400 audit(1777871134.761:51327): avc: denied { ioctl } for pid=18739 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1115.433799][ T30] audit: type=1400 audit(1777871134.770:51328): avc: denied { ioctl } for pid=18739 comm="syz.2.3672" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1115.464193][ T30] audit: type=1400 audit(1777871134.826:51329): avc: denied { write } for pid=18725 comm="syz.4.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1115.844089][ T5804] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1115.861620][ T5804] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1115.867966][T18762] sctp: [Deprecated]: syz.1.3676 (pid 18762) Use of int in max_burst socket option. [ 1115.867966][T18762] Use struct sctp_assoc_value instead [ 1115.907821][T18763] sctp: [Deprecated]: syz.1.3676 (pid 18763) Use of int in max_burst socket option. [ 1115.907821][T18763] Use struct sctp_assoc_value instead [ 1115.926950][ T5804] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1115.948330][ T5804] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1115.987677][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3677'. [ 1116.057355][ T5804] usb 3-1: USB disconnect, device number 125 [ 1116.200554][T18772] syzkaller0: entered promiscuous mode [ 1116.206561][T18772] syzkaller0: entered allmulticast mode [ 1116.335819][ T5899] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1116.527546][ T5804] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1116.821748][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.903710][ T5899] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1116.905898][ T5804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.913591][ T5899] usb 6-1: config 114 has an invalid interface number: 240 but max is 0 [ 1116.935153][ T5899] usb 6-1: config 114 has no interface number 0 [ 1116.941869][ T5899] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1116.948088][ T5804] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1116.954550][ T5899] usb 6-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 1116.970162][ T5804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.975308][ T5899] usb 6-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 1116.992714][ T5899] usb 6-1: config 114 interface 240 has no altsetting 0 [ 1116.995269][ T5804] usb 3-1: config 0 descriptor?? [ 1117.002945][ T5899] usb 6-1: string descriptor 0 read error: -22 [ 1117.014794][ T5899] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 1117.024106][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.036002][T18767] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1117.043748][T18767] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1117.053735][ T5899] ir_usb 6-1:114.240: IR Dongle converter detected [ 1117.210891][T16345] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1117.287414][T18767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1117.301100][T18767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1117.326390][ T5899] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 1117.392586][T16345] usb 4-1: Using ep0 maxpacket: 16 [ 1117.400825][T16345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1117.422080][T16345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1117.444146][T16345] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1117.468901][T16345] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1117.486863][T16345] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.490823][ T5804] cp2112 0003:10C4:EA90.0031: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1117.506429][T18787] binder: 18786:18787 ioctl c0306201 200000000080 returned -14 [ 1117.538913][T16345] usb 4-1: config 0 descriptor?? [ 1117.563959][T18787] binder: 18786:18787 ioctl c0306201 2000000003c0 returned -14 [ 1117.639179][T11161] usb 6-1: USB disconnect, device number 62 [ 1117.695038][T11161] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1117.730798][T11161] ir_usb 6-1:114.240: device disconnected [ 1117.754457][ T5804] cp2112 0003:10C4:EA90.0031: error requesting version [ 1117.786507][ T5804] cp2112 0003:10C4:EA90.0031: probe with driver cp2112 failed with error -32 [ 1117.822757][ T5804] usb 3-1: USB disconnect, device number 126 [ 1118.039393][T16345] hid_parser_main: 278 callbacks suppressed [ 1118.039415][T16345] microsoft 0003:045E:07DA.0032: unknown main item tag 0x0 [ 1118.065628][T16345] microsoft 0003:045E:07DA.0032: ignoring exceeding usage max [ 1118.090338][T16345] microsoft 0003:045E:07DA.0032: implement() called with n (56) > 32! (kworker/0:3) [ 1118.264278][T16345] microsoft 0003:045E:07DA.0032: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1118.290499][T16345] microsoft 0003:045E:07DA.0032: no inputs found [ 1118.305427][T16345] microsoft 0003:045E:07DA.0032: could not initialize ff, continuing anyway [ 1118.348315][T16345] usb 4-1: USB disconnect, device number 11 [ 1118.469377][T18795] fido_id[18795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1118.600883][T11161] usb 6-1: new full-speed USB device number 63 using dummy_hcd [ 1118.785536][T11161] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1118.804275][T11161] usb 6-1: not running at top speed; connect to a high speed hub [ 1118.813275][T11161] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.824793][T11161] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1118.840882][T11161] usb 6-1: string descriptor 0 read error: -22 [ 1118.850766][T11161] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1118.859942][T11161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.879549][T11161] usb 6-1: 0:2 : does not exist [ 1118.900405][T16345] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1118.953459][ T5899] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1119.094062][T16345] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1119.114381][T16345] usb 2-1: config 0 has no interface number 0 [ 1119.122495][T16345] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1119.135221][T16345] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1119.148052][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 1119.164402][T16345] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1119.175659][T16345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.188589][ T5899] usb 5-1: config 1 has an invalid interface number: 33 but max is 0 [ 1119.198513][ T5899] usb 5-1: config 1 has no interface number 0 [ 1119.211206][ T5899] usb 5-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=78.85 [ 1119.231454][T16345] usb 2-1: Product: syz [ 1119.239837][T16345] usb 2-1: Manufacturer: syz [ 1119.244650][T16345] usb 2-1: SerialNumber: syz [ 1119.249328][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.262798][T16345] usb 2-1: config 0 descriptor?? [ 1119.281696][T18807] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1119.296783][ T5899] uvcvideo 5-1:1.33: Found UVC 0.00 device (1bcf:0b40) [ 1119.311992][T16345] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1119.321670][ T5899] uvcvideo 5-1:1.33: Forcing UVC version to 1.0a [ 1119.340198][ T5899] uvcvideo 5-1:1.33: No valid video chain found. [ 1119.490651][T16345] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1119.740732][T18809] IPv6: NLM_F_CREATE should be specified when creating new route [ 1119.750345][T18809] netlink: 'syz.4.3693': attribute type 1 has an invalid length. [ 1119.938406][T16345] usb 5-1: USB disconnect, device number 127 [ 1119.946565][ T30] kauditd_printk_skb: 455 callbacks suppressed [ 1119.946583][ T30] audit: type=1400 audit(1777871139.560:51785): avc: denied { execmem } for pid=18819 comm="syz.3.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1120.209607][T11161] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1120.218894][T11161] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1120.231807][T11161] usb 6-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 1120.245420][T11161] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1120.274780][T11161] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1120.294180][T18807] devpts: Invalid uid '0x00000000ffffffff' [ 1120.304142][ T30] audit: type=1400 audit(1777871139.644:51786): avc: denied { map_create } for pid=18808 comm="syz.4.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1120.359737][ T30] audit: type=1400 audit(1777871139.663:51787): avc: denied { perfmon } for pid=18808 comm="syz.4.3693" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1120.426694][ T30] audit: type=1400 audit(1777871139.663:51788): avc: denied { map_create } for pid=18808 comm="syz.4.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1120.434337][T11161] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1120.450347][T16345] usb 2-1: USB disconnect, device number 4 [ 1120.501462][T16345] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1120.519483][ T30] audit: type=1400 audit(1777871139.663:51789): avc: denied { map_read map_write } for pid=18808 comm="syz.4.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1120.547072][T16345] cyberjack 2-1:0.69: device disconnected [ 1120.619348][ T30] audit: type=1400 audit(1777871139.663:51790): avc: denied { prog_load } for pid=18808 comm="syz.4.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1120.661522][ T30] audit: type=1400 audit(1777871139.663:51791): avc: denied { bpf } for pid=18808 comm="syz.4.3693" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1120.681335][T11161] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1120.786124][ T30] audit: type=1400 audit(1777871139.663:51792): avc: denied { perfmon } for pid=18808 comm="syz.4.3693" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1121.063657][ T30] audit: type=1400 audit(1777871139.663:51793): avc: denied { prog_run } for pid=18808 comm="syz.4.3693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1121.099988][T18837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1121.117847][ T30] audit: type=1400 audit(1777871139.709:51794): avc: denied { read } for pid=18796 comm="syz.5.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1121.138724][T11161] usb 6-1: USB disconnect, device number 63 [ 1121.318011][T18838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3698'. [ 1121.892782][T11161] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1122.266942][T11161] usb 6-1: Using ep0 maxpacket: 8 [ 1122.296799][T11161] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1122.296829][T11161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.296850][T11161] usb 6-1: Product: syz [ 1122.296865][T11161] usb 6-1: Manufacturer: syz [ 1122.296880][T11161] usb 6-1: SerialNumber: syz [ 1122.348030][T11161] usb 6-1: config 0 descriptor?? [ 1122.511508][ T990] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1122.765037][T11161] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1122.823047][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 1122.825928][ T990] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1122.825955][ T990] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1122.825980][ T990] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1122.878427][ T990] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1122.878459][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.878509][ T990] usb 2-1: Product: syz [ 1122.878525][ T990] usb 2-1: Manufacturer: syz [ 1122.878539][ T990] usb 2-1: SerialNumber: syz [ 1122.881914][ T990] usb 2-1: config 0 descriptor?? [ 1123.125739][T18859] netlink: 'syz.3.3706': attribute type 1 has an invalid length. [ 1123.125775][T18859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.493059][T11161] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1123.580461][T11161] usb 6-1: USB disconnect, device number 64 [ 1128.244486][ T990] gs_usb 2-1:0.0: Couldn't send data format (err=-110) [ 1128.244521][ T990] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -110 [ 1129.033133][ C1] sched: DL replenish lagged too much [ 1151.655263][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.666043][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1217.271481][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1217.282308][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.248021][ T31] INFO: task kworker/0:0:9 blocked for more than 144 seconds. [ 1299.248048][ T31] Tainted: G L syzkaller #0 [ 1299.248061][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1299.248069][ T31] task:kworker/0:0 state:D stack:21992 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1299.248123][ T31] Workqueue: events_power_efficient crda_timeout_work [ 1299.248151][ T31] Call Trace: [ 1299.248159][ T31] [ 1299.248171][ T31] __schedule+0x10e9/0x6820 [ 1299.248192][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 1299.248237][ T31] ? __pfx___schedule+0x10/0x10 [ 1299.248256][ T31] ? find_held_lock+0x2b/0x80 [ 1299.248276][ T31] ? schedule+0x2bf/0x390 [ 1299.248301][ T31] schedule+0xdd/0x390 [ 1299.248321][ T31] schedule_preempt_disabled+0x13/0x30 [ 1299.248342][ T31] __mutex_lock+0xced/0x1b10 [ 1299.248366][ T31] ? crda_timeout_work+0x16/0x70 [ 1299.248394][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1299.248420][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 1299.248461][ T31] ? crda_timeout_work+0x16/0x70 [ 1299.248481][ T31] ? rtnl_lock+0x9/0x20 [ 1299.248503][ T31] crda_timeout_work+0x16/0x70 [ 1299.248524][ T31] process_one_work+0xa0e/0x1980 [ 1299.248562][ T31] ? __pfx_process_one_work+0x10/0x10 [ 1299.248596][ T31] ? __pfx_crda_timeout_work+0x10/0x10 [ 1299.248630][ T31] worker_thread+0x5ef/0xe50 [ 1299.248666][ T31] ? kthread+0x13a/0x450 [ 1299.248688][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1299.248711][ T31] kthread+0x370/0x450 [ 1299.248733][ T31] ? __pfx_kthread+0x10/0x10 [ 1299.248757][ T31] ret_from_fork+0x72b/0xd50 [ 1299.248784][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1299.248811][ T31] ? __switch_to+0x800/0x1100 [ 1299.248840][ T31] ? __pfx_kthread+0x10/0x10 [ 1299.263075][ T31] ret_from_fork_asm+0x1a/0x30 [ 1299.263130][ T31] [ 1299.263295][ T31] INFO: task syz.1.3705:18854 blocked for more than 144 seconds. [ 1299.263313][ T31] Tainted: G L syzkaller #0 [ 1299.263324][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1299.263333][ T31] task:syz.1.3705 state:D stack:28792 pid:18854 tgid:18849 ppid:16408 task_flags:0x400040 flags:0x00080002 [ 1299.263393][ T31] Call Trace: [ 1299.263400][ T31] [ 1299.263412][ T31] __schedule+0x10e9/0x6820 [ 1299.263452][ T31] ? __pfx___schedule+0x10/0x10 [ 1299.263471][ T31] ? find_held_lock+0x2b/0x80 [ 1299.263491][ T31] ? schedule+0x2bf/0x390 [ 1299.263516][ T31] schedule+0xdd/0x390 [ 1299.263537][ T31] schedule_preempt_disabled+0x13/0x30 [ 1299.263558][ T31] __mutex_lock+0xced/0x1b10 [ 1299.263582][ T31] ? tun_chr_close+0x38/0x220 [ 1299.263612][ T31] ? futex_wait+0x11e/0x370 [ 1299.263631][ T31] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1299.263657][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1299.263693][ T31] ? __pfx_locks_remove_file+0x10/0x10 [ 1299.263725][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1299.263749][ T31] ? tun_chr_close+0x38/0x220 [ 1299.263770][ T31] tun_chr_close+0x38/0x220 [ 1299.263793][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1299.263810][ T31] __fput+0x3ff/0xb50 [ 1299.263839][ T31] fput_close_sync+0x118/0x250 [ 1299.263866][ T31] ? __pfx_fput_close_sync+0x10/0x10 [ 1299.263900][ T31] __x64_sys_close+0x8b/0x120 [ 1299.263928][ T31] do_syscall_64+0x10b/0xf80 [ 1299.263950][ T31] ? clear_bhb_loop+0x40/0x90 [ 1299.263974][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.263993][ T31] RIP: 0033:0x7f4fc559cdd9 [ 1299.264010][ T31] RSP: 002b:00007f4fc6450028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1299.264028][ T31] RAX: ffffffffffffffda RBX: 00007f4fc5816090 RCX: 00007f4fc559cdd9 [ 1299.264041][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1299.264053][ T31] RBP: 00007f4fc5632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1299.264065][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1299.264076][ T31] R13: 00007f4fc5816128 R14: 00007f4fc5816090 R15: 00007ffc11b60d18 [ 1299.264104][ T31] [ 1299.264117][ T31] [ 1299.264117][ T31] Showing all locks held in the system: [ 1299.264126][ T31] 1 lock held by kthreadd/2: [ 1299.264139][ T31] 3 locks held by kworker/0:0/9: [ 1299.264150][ T31] #0: ffff88813fe59d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1299.264206][ T31] #1: ffffc900000e7d08 ((crda_timeout).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1299.264258][ T31] #2: ffffffff9060b6e0 (rtnl_mutex){+.+.}-{4:4}, at: crda_timeout_work+0x16/0x70 [ 1299.264306][ T31] 3 locks held by kworker/0:1/10: [ 1299.264317][ T31] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1299.264369][ T31] #1: ffffc900000f7d08 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1299.264420][ T31] #2: ffffffff9060b6e0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1299.264468][ T31] 1 lock held by kworker/R-mm_pe/14: [ 1299.264479][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.264532][ T31] 1 lock held by khungtaskd/31: [ 1299.264542][ T31] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1299.264598][ T31] 4 locks held by kworker/u8:3/48: [ 1299.264615][ T31] #0: ffff888041dcf940 ((wq_completion)wg-kex-wg2#17){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1299.264672][ T31] #1: ffffc90000b97d08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1299.264724][ T31] #2: ffff8880471a53c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 1299.264784][ T31] #3: ffff888081c46640 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 1299.264845][ T31] 4 locks held by kworker/0:2/803: [ 1299.264859][ T31] 3 locks held by kworker/u8:7/1095: [ 1299.264870][ T31] 2 locks held by kworker/1:3/1219: [ 1299.264890][ T31] 3 locks held by kworker/R-ipv6_/3191: [ 1299.264902][ T31] #0: ffff888033c6f940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1299.264953][ T31] #1: ffffc9000e4dfc70 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1299.265006][ T31] #2: ffffffff9060b6e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x12/0x30 [ 1299.265057][ T31] 2 locks held by kworker/R-bat_e/3225: [ 1299.265069][ T31] 4 locks held by kworker/u8:9/3277: [ 1299.265080][ T31] #0: ffff88805e250140 ((wq_completion)wg-kex-wg0#19){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1299.265137][ T31] #1: ffffc9000e6bfd08 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1299.265190][ T31] #2: ffff888076c493c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0xec/0x610 [ 1299.265247][ T31] #3: ffff88805ee7c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x100/0x610 [ 1299.265305][ T31] 1 lock held by klogd/4968: [ 1299.265317][ T31] 2 locks held by udevd/4979: [ 1299.265327][ T31] 1 lock held by dhcpcd/5274: [ 1299.265339][ T31] 1 lock held by crond/5350: [ 1299.265349][ T31] 2 locks held by getty/5369: [ 1299.265360][ T31] #0: ffff888033e160a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1299.265408][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1299.265465][ T31] 1 lock held by syz-executor/5598: [ 1299.265477][ T31] 4 locks held by kworker/0:4/5620: [ 1299.265487][ T31] #0: ffff888052680140 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1299.265544][ T31] #1: ffffc90003307d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1299.265621][ T31] #2: ffff88806716d3c0 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1c2/0x860 [ 1299.265681][ T31] #3: ffff88802de10d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x5ac/0x860 [ 1299.265741][ T31] 1 lock held by kworker/R-wg-cr/5691: [ 1299.265752][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 1299.265801][ T31] 1 lock held by kworker/R-wg-cr/5692: [ 1299.265812][ T31] 1 lock held by kworker/R-wg-cr/5693: [ 1299.265823][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.265876][ T31] 2 locks held by kworker/1:5/5804: [ 1299.265887][ T31] 3 locks held by kworker/1:7/5856: [ 1299.265898][ T31] 2 locks held by kworker/0:9/5899: [ 1299.265910][ T31] 4 locks held by kworker/u8:2/9370: [ 1299.265920][ T31] 4 locks held by kworker/u8:11/9372: [ 1299.265931][ T31] #0: ffff88813fe94140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1299.265982][ T31] #1: ffffc9000587fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1299.266034][ T31] #2: ffff88805a180780 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x570 [ 1299.266089][ T31] #3: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1299.266137][ T31] 3 locks held by kworker/u8:12/9374: [ 1299.266149][ T31] 3 locks held by kworker/u8:13/9376: [ 1299.266160][ T31] 4 locks held by kworker/u8:14/9378: [ 1299.266172][ T31] 4 locks held by kworker/u8:15/9380: [ 1299.266182][ T31] 4 locks held by kworker/u8:16/9383: [ 1299.266195][ T31] 1 lock held by udevd/10997: [ 1299.266206][ T31] 1 lock held by kworker/R-wg-cr/11040: [ 1299.266217][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.266269][ T31] 1 lock held by kworker/R-wg-cr/11042: [ 1299.266280][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.266332][ T31] 3 locks held by kworker/1:1/11161: [ 1299.266343][ T31] 6 locks held by kworker/0:5/11162: [ 1299.266354][ T31] 1 lock held by kworker/R-bond5/11430: [ 1299.266365][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 1299.266416][ T31] 3 locks held by udevd/11557: [ 1299.266426][ T31] 3 locks held by kworker/1:4/12426: [ 1299.266438][ T31] 1 lock held by kworker/R-bond4/13537: [ 1299.266448][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 1299.266497][ T31] 2 locks held by kworker/u8:0/13978: [ 1299.266509][ T31] 1 lock held by kworker/R-wg-cr/16048: [ 1299.266519][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 1299.266569][ T31] 1 lock held by kworker/R-wg-cr/16051: [ 1299.266580][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.266636][ T31] 1 lock held by kworker/R-wg-cr/16054: [ 1299.266648][ T31] 3 locks held by kworker/0:3/16345: [ 1299.266660][ T31] #0: ffff88813fe59d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 1299.266711][ T31] #1: ffffc9000e767d08 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 1299.266763][ T31] #2: ffffffff9060b6e0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x91/0x13a0 [ 1299.266817][ T31] 1 lock held by kworker/R-wg-cr/16434: [ 1299.266828][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.266879][ T31] 1 lock held by kworker/R-wg-cr/16437: [ 1299.266890][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 1299.266939][ T31] 1 lock held by kworker/R-wg-cr/16441: [ 1299.266949][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.267002][ T31] 1 lock held by kworker/R-wg-cr/16604: [ 1299.267013][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.267064][ T31] 1 lock held by kworker/R-wg-cr/16605: [ 1299.267075][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.267126][ T31] 2 locks held by syz-executor/16748: [ 1299.267138][ T31] 1 lock held by kworker/R-wg-cr/16815: [ 1299.267148][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.267198][ T31] 1 lock held by kworker/R-wg-cr/16816: [ 1299.267209][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: rescuer_thread+0xb7b/0x14a0 [ 1299.267261][ T31] 1 lock held by kworker/R-bond1/16888: [ 1299.267272][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 1299.267322][ T31] 1 lock held by kworker/R-bond1/17330: [ 1299.267333][ T31] #0: ffffffff8e692a60 (wq_pool_attach_mutex){+.+.}-{4:4}, at: worker_attach_to_pool+0x27/0x420 [ 1299.267382][ T31] 1 lock held by syz.5.3701/18840: [ 1299.267394][ T31] #0: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1299.267442][ T31] 3 locks held by syz.1.3705/18850: [ 1299.267453][ T31] 1 lock held by syz.1.3705/18854: [ 1299.267463][ T31] #0: ffffffff9060b6e0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1299.267512][ T31] 4 locks held by syz.3.3706/18853: [ 1299.267523][ T31] 4 locks held by kworker/u8:1/18860: [ 1299.267535][ T31] [ 1299.267540][ T31] ============================================= [ 1299.267540][ T31] [ 1299.267549][ T31] NMI backtrace for cpu 1 [ 1299.267563][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1299.267587][ T31] Tainted: [L]=SOFTLOCKUP [ 1299.267593][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1299.267604][ T31] Call Trace: [ 1299.267616][ T31] [ 1299.267623][ T31] dump_stack_lvl+0x100/0x190 [ 1299.267645][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1299.267670][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1299.267693][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1299.267723][ T31] sys_info+0x141/0x190 [ 1299.267748][ T31] watchdog+0xcb1/0x1030 [ 1299.267774][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1299.267794][ T31] ? __pfx_watchdog+0x10/0x10 [ 1299.267816][ T31] ? __kthread_parkme+0x18c/0x230 [ 1299.267837][ T31] ? kthread+0x13a/0x450 [ 1299.267856][ T31] ? __pfx_watchdog+0x10/0x10 [ 1299.267873][ T31] kthread+0x370/0x450 [ 1299.267889][ T31] ? __pfx_kthread+0x10/0x10 [ 1299.267911][ T31] ret_from_fork+0x72b/0xd50 [ 1299.267935][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1299.267960][ T31] ? __switch_to+0x800/0x1100 [ 1299.267987][ T31] ? __pfx_kthread+0x10/0x10 [ 1299.268010][ T31] ret_from_fork_asm+0x1a/0x30 [ 1299.268048][ T31] [ 1299.268055][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1299.268080][ C0] NMI backtrace for cpu 0 [ 1299.268093][ C0] CPU: 0 UID: 0 PID: 11162 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1299.268113][ C0] Tainted: [L]=SOFTLOCKUP [ 1299.268118][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1299.268128][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 1299.268147][ C0] RIP: 0010:check_preemption_disabled+0x1c/0xe0 [ 1299.268166][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 65 88 80 08 65 f7 05 56 88 80 08 ff ff ff 7f 74 0f <48> 83 c4 08 89 d8 5b 5d 41 5c c3 cc cc cc cc 9c 58 f6 c4 02 74 ea [ 1299.268179][ C0] RSP: 0018:ffffc90000006de8 EFLAGS: 00000202 [ 1299.268190][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc900077a0000 [ 1299.268198][ C0] RDX: ffffc90000006eb0 RSI: ffffffff8df1fee0 RDI: ffffffff8c1c3600 [ 1299.268207][ C0] RBP: ffffc90000006e60 R08: 0000000000000001 R09: 0000000000000000 [ 1299.268216][ C0] R10: ffffc90000006eb0 R11: 000000000000756b R12: ffffc90000006eb0 [ 1299.268225][ C0] R13: ffffc90000006ed0 R14: ffffc90000006eb0 R15: ffffc90000006ed8 [ 1299.268235][ C0] FS: 0000000000000000(0000) GS:ffff888124376000(0000) knlGS:0000000000000000 [ 1299.268249][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1299.268258][ C0] CR2: 00007fe1ab7ec4b8 CR3: 0000000026bee000 CR4: 00000000003526f0 [ 1299.268268][ C0] Call Trace: [ 1299.268273][ C0] [ 1299.268278][ C0] ? synproxy_send_client_synack+0x6ea/0x970 [ 1299.268297][ C0] get_stack_info_noinstr+0x8c/0x130 [ 1299.268318][ C0] get_stack_info+0x2c/0x90 [ 1299.268334][ C0] __unwind_start+0x368/0x7f0 [ 1299.268353][ C0] ? kernel_fpu_end+0x64/0x80 [ 1299.268370][ C0] ? blake2s_compress+0x78/0xf0 [ 1299.268390][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1299.268405][ C0] arch_stack_walk+0x73/0xf0 [ 1299.268424][ C0] ? __unwind_start+0x2fb/0x7f0 [ 1299.268444][ C0] stack_trace_save+0x8e/0xc0 [ 1299.268458][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1299.268473][ C0] ? kasan_save_track+0x14/0x30 [ 1299.268485][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 1299.268505][ C0] ref_tracker_alloc+0x1d4/0x590 [ 1299.268520][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1299.268537][ C0] ? rcu_is_watching+0x12/0xc0 [ 1299.268556][ C0] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1299.268571][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 1299.268587][ C0] dst_init+0xda/0x5b0 [ 1299.268606][ C0] dst_alloc+0xbb/0x1a0 [ 1299.268624][ C0] rt_dst_alloc+0x35/0x3a0 [ 1299.268641][ C0] ip_route_output_key_hash_rcu+0x87a/0x2870 [ 1299.268665][ C0] ip_route_output_key_hash+0x118/0x2b0 [ 1299.268684][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1299.268705][ C0] ? lock_acquire+0x1b1/0x370 [ 1299.268722][ C0] ? find_held_lock+0x2b/0x80 [ 1299.268737][ C0] ip_route_output_flow+0x27/0x150 [ 1299.268756][ C0] ip_route_me_harder+0x562/0x1260 [ 1299.268774][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1299.268787][ C0] ? rcu_is_watching+0x12/0xc0 [ 1299.268807][ C0] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 1299.268826][ C0] ? kmalloc_reserve+0x148/0x350 [ 1299.268841][ C0] ? __kasan_kfree_large+0x30/0x80 [ 1299.268863][ C0] ? __pfx_cookie_hash+0x10/0x10 [ 1299.268882][ C0] synproxy_send_tcp.isra.0+0x341/0x680 [ 1299.268900][ C0] synproxy_send_client_synack+0x6ea/0x970 [ 1299.268919][ C0] ? find_held_lock+0x2b/0x80 [ 1299.268931][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1299.268948][ C0] ? net_generic+0xea/0x2a0 [ 1299.268967][ C0] nft_synproxy_do_eval+0xa6a/0xd50 [ 1299.268985][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1299.269002][ C0] ? ip_vs_conn_in_get+0x85/0x270 [ 1299.269023][ C0] ? ip_vs_service_find+0x154/0x390 [ 1299.269041][ C0] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 1299.269059][ C0] nft_do_chain+0x2e5/0x1950 [ 1299.269079][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1299.269097][ C0] ? mark_held_locks+0x40/0x70 [ 1299.269116][ C0] ? ip_vs_in_hook+0x9e3/0x2b40 [ 1299.269128][ C0] ? ip_vs_in_hook+0xa60/0x2b40 [ 1299.269148][ C0] nft_do_chain_inet+0xf3/0x400 [ 1299.269164][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1299.269183][ C0] ? nf_nat_ipv4_local_in+0x181/0x730 [ 1299.269206][ C0] nf_hook_slow+0xbf/0x220 [ 1299.269222][ C0] nf_hook.constprop.0+0x2a6/0x750 [ 1299.269234][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1299.269248][ C0] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 1299.269260][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1299.269274][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1299.269289][ C0] ? ip_rcv_finish_core+0x7ec/0x2c30 [ 1299.269303][ C0] ip_local_deliver+0x163/0x1f0 [ 1299.269316][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1299.269328][ C0] ip_rcv+0x33a/0x3c0 [ 1299.269341][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1299.269352][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 1299.269370][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1299.269388][ C0] ? lock_acquire+0x1b1/0x370 [ 1299.269405][ C0] ? process_backlog+0x32a/0x1580 [ 1299.269423][ C0] ? process_backlog+0x32a/0x1580 [ 1299.269439][ C0] __netif_receive_skb+0x1f/0x120 [ 1299.269455][ C0] process_backlog+0x37a/0x1580 [ 1299.269475][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1299.269493][ C0] net_rx_action+0xa40/0xf20 [ 1299.269513][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1299.269533][ C0] ? tmigr_handle_remote+0x132/0x380 [ 1299.269551][ C0] ? run_timer_base+0x121/0x190 [ 1299.269567][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 1299.269584][ C0] handle_softirqs+0x1ea/0xa00 [ 1299.269604][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1299.269624][ C0] ? kernel_fpu_end+0x5f/0x80 [ 1299.269642][ C0] do_softirq+0xac/0xe0 [ 1299.269659][ C0] [ 1299.269664][ C0] [ 1299.269669][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1299.269688][ C0] kernel_fpu_end+0x64/0x80 [ 1299.269705][ C0] blake2s_compress+0x78/0xf0 [ 1299.269724][ C0] blake2s_final+0xc9/0x150 [ 1299.269743][ C0] hmac.constprop.0+0x25d/0x480 [ 1299.269764][ C0] ? __pfx_hmac.constprop.0+0x10/0x10 [ 1299.269789][ C0] ? kdf.constprop.0+0x199/0x280 [ 1299.269810][ C0] ? __pfx_curve25519+0x10/0x10 [ 1299.269827][ C0] kdf.constprop.0+0x128/0x280 [ 1299.269846][ C0] ? __pfx_kdf.constprop.0+0x10/0x10 [ 1299.269872][ C0] ? mix_dh+0xe1/0x130 [ 1299.269889][ C0] ? mix_dh+0xe8/0x130 [ 1299.269911][ C0] wg_noise_handshake_consume_response+0x4b3/0x950 [ 1299.269926][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1299.269943][ C0] ? __pfx_wg_noise_handshake_consume_response+0x10/0x10 [ 1299.269967][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1299.269985][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1299.269999][ C0] ? kernel_fpu_end+0x5f/0x80 [ 1299.270016][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1299.270035][ C0] ? kernel_fpu_end+0x69/0x80 [ 1299.270053][ C0] ? __asan_memset+0x23/0x50 [ 1299.270073][ C0] ? __pfx_blake2s.constprop.0+0x10/0x10 [ 1299.270092][ C0] ? wg_packet_handshake_receive_worker+0x166/0x370 [ 1299.270114][ C0] ? __crypto_memneq+0x1fe/0x430 [ 1299.270133][ C0] ? wg_cookie_validate_packet+0x16e/0x360 [ 1299.270153][ C0] ? __pfx_wg_cookie_validate_packet+0x10/0x10 [ 1299.270175][ C0] ? kfree_skbmem+0x19a/0x210 [ 1299.270192][ C0] wg_receive_handshake_packet+0x615/0xc20 [ 1299.270209][ C0] ? __pfx_wg_receive_handshake_packet+0x10/0x10 [ 1299.270232][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1299.270253][ C0] wg_packet_handshake_receive_worker+0x15e/0x370 [ 1299.270276][ C0] process_one_work+0xa0e/0x1980 [ 1299.270302][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1299.270326][ C0] ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10 [ 1299.270349][ C0] worker_thread+0x5ef/0xe50 [ 1299.270373][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1299.270393][ C0] ? kthread+0x13a/0x450 [ 1299.270409][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1299.270427][ C0] kthread+0x370/0x450 [ 1299.270445][ C0] ? __pfx_kthread+0x10/0x10 [ 1299.270464][ C0] ret_from_fork+0x72b/0xd50 [ 1299.270485][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1299.270504][ C0] ? rcu_is_watching+0x12/0xc0 [ 1299.270526][ C0] ? __switch_to+0x800/0x1100 [ 1299.270549][ C0] ? __pfx_kthread+0x10/0x10 [ 1299.270568][ C0] ret_from_fork_asm+0x1a/0x30 [ 1299.270597][ C0] [ 1299.306127][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1299.306148][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1299.306174][ T31] Tainted: [L]=SOFTLOCKUP [ 1299.306181][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1299.306193][ T31] Call Trace: [ 1299.306200][ T31] [ 1299.306207][ T31] dump_stack_lvl+0x100/0x190 [ 1299.306236][ T31] vpanic+0x552/0x970 [ 1299.306254][ T31] ? __pfx_vpanic+0x10/0x10 [ 1299.306272][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1299.306302][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1299.306331][ T31] panic+0xd1/0xe0 [ 1299.306348][ T31] ? __pfx_panic+0x10/0x10 [ 1299.306368][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1299.306395][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1299.306423][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1299.306449][ T31] ? watchdog.cold+0x1ec/0x234 [ 1299.306469][ T31] ? watchdog+0xcc1/0x1030 [ 1299.306492][ T31] watchdog.cold+0x1fd/0x234 [ 1299.306519][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1299.306540][ T31] ? __pfx_watchdog+0x10/0x10 [ 1299.306562][ T31] ? __kthread_parkme+0x18c/0x230 [ 1299.306584][ T31] ? kthread+0x13a/0x450 [ 1299.306604][ T31] ? __pfx_watchdog+0x10/0x10 [ 1299.306632][ T31] kthread+0x370/0x450 [ 1299.306653][ T31] ? __pfx_kthread+0x10/0x10 [ 1299.306676][ T31] ret_from_fork+0x72b/0xd50 [ 1299.306702][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1299.306727][ T31] ? __switch_to+0x800/0x1100 [ 1299.306755][ T31] ? __pfx_kthread+0x10/0x10 [ 1299.306778][ T31] ret_from_fork_asm+0x1a/0x30 [ 1299.306818][ T31] [ 1299.307105][ T31] Kernel Offset: disabled