last executing test programs: 22.726881598s ago: executing program 3 (id=1389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x33db00, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth0_to_team\x00', 0x34fa3be962bd7314}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000400)={'bridge0\x00'}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x6, &(0x7f0000000140)=0x40000000, 0x4) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r7 = syz_open_pts(r6, 0x0) read(r6, &(0x7f0000000300)=""/240, 0xf0) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000200)=0x17) r9 = dup(r2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r10 = open$dir(&(0x7f0000000040)='./file0\x00', 0x300, 0x2) fcntl$F_GET_FILE_RW_HINT(r10, 0x40d, &(0x7f0000000080)) r11 = socket(0xb, 0x5, 0x10000008) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0xfffffffe, 0x2, 0x0, 0x80}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), 0x0, r11}, 0x68) 21.883586766s ago: executing program 3 (id=1399): syz_usb_connect$uac2(0x0, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x800c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x9, 0x0, 0x2, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x20, 0x5, 0x9, 0xfc}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x4, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x1, 0x8f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x8, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0xfe, 0x2}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 21.362388933s ago: executing program 3 (id=1403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100}, 0x1c) sendmsg$inet(r3, &(0x7f0000000740)={&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x20000020) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="b91b020000b800000000ba000000800f3066baf80cb81c88948aef66bafc0ced0f01cb66b8e6000f00d0670f21632e0f01c266f30f1efac4e11457ee0f08c4c2f3f55deb", 0x44}], 0x1, 0x2f, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21.343590253s ago: executing program 3 (id=1404): pipe(&(0x7f0000000040)) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x2, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000140), 0x4) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x20) renameat2(r2, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x4) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='proc\x00', 0x200000, 0x0) 21.271743756s ago: executing program 3 (id=1406): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21.205279968s ago: executing program 3 (id=1407): syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) (async) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x20, 0x8, 0x13, "c1797937a67a960ed8ac8593ac6c6bbef2f1fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x7}, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x20, 0x8, 0x13, "c1797937a67a960ed8ac8593ac6c6bbef2f1fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x7}, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000f59ffc)=0x4, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x12}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x0, 0xf3, {0xf3, 0x10, "53045b14a6793bbacab577f6393a31ae8e7c701e0c99565b9e73ee83e0c0d7b3a6ccca62615ef0bb247b2379e82e1197c838277fa007bd22a0c4bb26da150033e0a6dffedbdfab2b7466e23c866918b09f3be23bfcc4e2dfe1bb0d53a34d6e96b06a1b318d57d98f294d9b76b6eb145f8f0ae84d9593168a9f1fc674853583b7d0ef3b13dfd028bb2ba7334bee9f6650afaadc9085dc729c5557afb689284b566ceced787cf214f9d10128a1616e39b9fd065319fc99277fd94600792f3abf74eaa334296d057c0628a2ef0a57258fd1fd0f5184a8cb894cb51c8fc1f49810a54c43df7e0f9836480d582a292277b6018b"}}, &(0x7f0000000340)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "d89904401025f3ca5f7943b9a061b845fac66b84d9bdef72784a73befc35c62ddde750fa1442ea3f3d61fac529a313e2af15d5b588ad0755b7c2eddea4600c3d6bb8e7e640b7b46296cf124308a48f32add0aa91b418b2a6fd2b2931a82fd8d9f29c26651a2cbd75123faf765fa03fcb7efe2a08d30a524d3f532023cdcecfa4f117192abe71d67012e35e5616438b1cdccc6947853f9eddb405b40c90a1ffc76978bd71a46e98db6c55a261e30fdfb751cf1c25732b454b84d133a6d4ff4dff8a1e5ffb"}}}, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x40, 0x9, 0x7c, "e8a72c5d82aafe16a1e707065f7a134460f6d7c092f93d3dfd0011ba6c5c4d9c7e1f9f359811eae1f9ce26ebabc9714cadc129cab82a83380f6488b677d1042e190fc4936cb708645b39ed05f24b4ae42e9507a144563345162d7df54dbba2d9a9350789ba3876bfcfd2c90cb69ed82032375dd7e01111cd9d46db54"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x81, 0x1, "f3"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "41dc15"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, '\"X'}, &(0x7f0000000600)={0x20, 0x84, 0x2, "4ea9"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "9d5c53"}}) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 21.101659981s ago: executing program 32 (id=1407): syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) (async) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x20, 0x8, 0x13, "c1797937a67a960ed8ac8593ac6c6bbef2f1fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x7}, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)={0x20, 0x8, 0x13, "c1797937a67a960ed8ac8593ac6c6bbef2f1fa"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x7}, 0x0, 0x0}) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000f59ffc)=0x4, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x12}, 0x1c) r3 = socket$key(0xf, 0x3, 0x2) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x0, 0xf3, {0xf3, 0x10, "53045b14a6793bbacab577f6393a31ae8e7c701e0c99565b9e73ee83e0c0d7b3a6ccca62615ef0bb247b2379e82e1197c838277fa007bd22a0c4bb26da150033e0a6dffedbdfab2b7466e23c866918b09f3be23bfcc4e2dfe1bb0d53a34d6e96b06a1b318d57d98f294d9b76b6eb145f8f0ae84d9593168a9f1fc674853583b7d0ef3b13dfd028bb2ba7334bee9f6650afaadc9085dc729c5557afb689284b566ceced787cf214f9d10128a1616e39b9fd065319fc99277fd94600792f3abf74eaa334296d057c0628a2ef0a57258fd1fd0f5184a8cb894cb51c8fc1f49810a54c43df7e0f9836480d582a292277b6018b"}}, &(0x7f0000000340)={0x0, 0x3, 0xc6, @string={0xc6, 0x3, "d89904401025f3ca5f7943b9a061b845fac66b84d9bdef72784a73befc35c62ddde750fa1442ea3f3d61fac529a313e2af15d5b588ad0755b7c2eddea4600c3d6bb8e7e640b7b46296cf124308a48f32add0aa91b418b2a6fd2b2931a82fd8d9f29c26651a2cbd75123faf765fa03fcb7efe2a08d30a524d3f532023cdcecfa4f117192abe71d67012e35e5616438b1cdccc6947853f9eddb405b40c90a1ffc76978bd71a46e98db6c55a261e30fdfb751cf1c25732b454b84d133a6d4ff4dff8a1e5ffb"}}}, &(0x7f0000000800)={0x44, &(0x7f00000004c0)={0x40, 0x9, 0x7c, "e8a72c5d82aafe16a1e707065f7a134460f6d7c092f93d3dfd0011ba6c5c4d9c7e1f9f359811eae1f9ce26ebabc9714cadc129cab82a83380f6488b677d1042e190fc4936cb708645b39ed05f24b4ae42e9507a144563345162d7df54dbba2d9a9350789ba3876bfcfd2c90cb69ed82032375dd7e01111cd9d46db54"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x81, 0x1, "f3"}, &(0x7f0000000580)={0x20, 0x82, 0x3, "41dc15"}, &(0x7f00000005c0)={0x20, 0x83, 0x2, '\"X'}, &(0x7f0000000600)={0x20, 0x84, 0x2, "4ea9"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "9d5c53"}}) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300091b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 9.103305913s ago: executing program 0 (id=1444): r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f00000001c0)={0x11, 0xf6, 0x0, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f00000002c0), 0x4) bind$packet(r2, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r1, &(0x7f00000006c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r5, &(0x7f0000000140)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) 9.102691873s ago: executing program 1 (id=1445): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x1000, {{0xa, 0x40, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x0, 0x0, @mcast1, 0x80000002}}}, 0x108) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0xffffffffffffffc7, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x20, 0x11, 0x99, {0x99, 0xf, "c7324d52e2b52dd5036826ea9201338bb0a76eb86ad2ccb6c71f9c005275d3e6a55663e2e21554087ee2a216bf3ef4107a9ccd70f7dd194697b00c2c9fa8b13f5cf4669a0b5ac3fd8bd79aca56feff889a46a19a244de024a1547731168bfa23c8eecfb7d8d4f12c31089eb1f21dbe42c945077d1a6ce99c4e9ecf680e893b22bc61fdc1855c85129f6fef0b8c5b4a96f4b9180c8f2792"}}, &(0x7f0000000100)={0x0, 0x3, 0x15, @string={0x15, 0x3, "b892b90bd3ff1eb328a49da3a1fea13fac1cd6"}}, &(0x7f0000000480)={0x0, 0xf, 0xd2, {0x5, 0xf, 0xd2, 0x3, [@generic={0xb8, 0x10, 0xb, "a046caa9b25d001d646ada6fea2d1eadd4a0f792601a057aab3f46bd688b1986e9f909e612c4903ac1b7cd0f6b67f5193fe2fe2ffd81f5392318513e5e7a7a046e4180b5b7e07156548e3405c24e5e4a2a8500482b4042aff8c8bac25845685f6c83346073bd5c2db4cf3d0492ac0c2f5ca06496b80eed40ecc571e256adbfad9b97de629d537b36c058aba2c301ba1c848947f84f78c1fc3f84a4fae1f928e14f3bb5b6ac4076c57b7999a0ec12d400cc64b9fd48"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x9, 0x7, 0xe7c, 0x81}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x0, 0x8, 0x5}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0xa, 0x5, "f80678f7", "1191d6ab"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x5, 0x2, 0x81, 0x1, 0x1}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x20, 0x0, 0x7a, "093a8b8a07e879008b5878fd5f51a47bac3a2e4df179c6eaf7115bf4fd9053b498aeee0b8e831a64a59467977f84ec9bee60fc47bebe9af08bd839bc7cbcc9e98aebdffa6dacfcbbc80f4d93269d40f44991675a28b7fd91083acdb6e937f11e3334e46b6da2daf49dcdb72fd12f4b766db19e9d39694b0cfcbf"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xf]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x9, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, "8f97"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, &(0x7f0000000880)={0x40, 0x13, 0x6}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "1508"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x5}}) 9.101527393s ago: executing program 2 (id=1446): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000010280)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex+\x88\xfe\xf7\x01') (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000102c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002ebd700001dc619b9ce977980000000c0001800800", @ANYRES32=r4, @ANYBLOB], 0x20}}, 0x400c810) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'ip_vti0\x00', 0x0}) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) clock_adjtime(0x300000000000000, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x2000000000000000, 0x40000000000, 0x3b9ac9ff, 0x8000000000000001, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x201ff, 0x4}) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x81, 0x8}, {0x4, 0x1}]}, 0x18, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000010300)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [{@subj_role={'subj_role', 0x3d, '[\\@'}}, {@pcr={'pcr', 0x3d, 0x2c}}], 0x2c}) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) sendto$packet(r1, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) (async) r9 = fsmount(0xffffffffffffffff, 0x1, 0x0) (async) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r11, &(0x7f0000010240)={&(0x7f0000000180), 0xc, &(0x7f0000010200)={&(0x7f00000001c0)={0x10, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x453, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) (async) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r10, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) 7.521011705s ago: executing program 0 (id=1447): syz_usb_connect$uac1(0x3, 0x72, &(0x7f00000010c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x2466, 0x8010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xe4, 0x60, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x8, 0x19, 0xe, {0x7, 0x25, 0x1, 0xc, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x7f, 0xc1, {0x7, 0x25, 0x1, 0xc, 0x8, 0xe0}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) r0 = socket$key(0xf, 0x3, 0x2) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_udp(0xa, 0x2, 0x0) write$tun(r1, &(0x7f0000000e80)=ANY=[@ANYBLOB="70009000aaaaaaaaaaaaaaaaaaaaaabb0800450a013b006500000189"], 0x14d) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x4, @none, 0x10}, 0xe) (async) connect$bt_l2cap(r2, &(0x7f0000000100)={0x1f, 0x8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf0e, 0x2}, 0xe) (async) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) socket$packet(0x11, 0x3, 0x300) (async) socket(0x2, 0x2, 0x1) (async) r3 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f00000000c0)) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x25, &(0x7f0000000140)={0x0, 0x0, 0x9, 0x17}) (async) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x8, 0x81, 0xffffffff}) syz_pidfd_open(0x0, 0x0) setns(r7, 0x20000) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'pim6reg1\x00'}) 7.519985335s ago: executing program 1 (id=1448): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="380000001000010000000000fedbdf25070000001300000062000000", @ANYRES32, @ANYBLOB="18001280140001"], 0x38}], 0x1}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getgroups(0x2, &(0x7f0000000000)=[0x0, 0x0]) setresgid(r4, r4, 0x0) setregid(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x108) lseek(r5, 0x9, 0x1) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) lremovexattr(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000340)=@known='security.apparmor\x00') setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x60, 0x3}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x1) mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x81, &(0x7f0000000040)=ANY=[@ANYBLOB="6e725f696e6f6465733df52c00"]) 7.519108805s ago: executing program 2 (id=1449): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='timers\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x45}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x8}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4094) (async) r2 = socket(0x27, 0x80000, 0x5) (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x14, 0x34, @random="a7a815d4344613e9708b97746550c44e"}, @NL80211_ATTR_SSID={0x20, 0x34, @random="fa50d5a80115fac5f5f00bdaede8094eec08e5ab4f9c1f21fa760093"}, @NL80211_ATTR_PMKID={0x14, 0x55, "19608ab4bac716240cd5f48693c57450"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x68}, 0x1, 0x0, 0x0, 0xc004044}, 0x0) accept4$tipc(r2, &(0x7f0000000400)=@id, &(0x7f0000000440)=0x10, 0x80800) (async) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480)=0x5, 0x4) (async) socketpair(0x1a, 0x4, 0x3, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)={0x218, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f5fd3e6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2d3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb4}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @loopback, 0x19fa}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12c9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xf3d}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c29}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8}]}]}]}, 0x218}}, 0x4000040) (async) sendmsg$tipc(r4, &(0x7f0000001940)={&(0x7f0000000800)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x3}}, 0x10, &(0x7f0000001880)=[{&(0x7f0000000840)="59ddc42f7f9c19e780efcc6befc846a31b411f5372d283f559d4bdd5313f", 0x1e}, {&(0x7f0000000880)="4670ce4f962e6b1921961caf95a80bea89f6c15cbf98f38736b123823a1d67f2f2e0da7014ea08cd942c75a75b5b4081be5633ba27f28c0ef2e22a080e5b6d034334f785d2d7d7923e7962dfc69f2cae9dd3f92be5f808a70876c3ef925798316e8f763d4b0502d3b21f28204887164381443b890524ce0ed98990b452af4a4a47418f1dcb69d1a43f5d3209f7e9e2e30f568ceb9f15a414525b3df7935d2b5e052c6c52536fb7a8d08519e8c57ff33a3969f192bdfe0933a0bf732ea270654cf27b566e0f4d502cd0afda8e3046ec43aec561420da86eb1e41bf91db85a79c38083713b16e96dcce3f2488e2e191ad1f5ab3be46c9c268105bef097467cbd93d513d68eaca70b051fb7a52359dbb498b3bdf820852753784e41870a6f02933e21adac47b7de56a0b6dc7736c4931cef495942be05a405cd863432b89d4afcfb4df54b6c82f53ae71b9a487e15e4ea14a81f5948fdca8196aa0232d73169e3dfb2fa4988eb1683ca02c8fc1668e8b666409f9308143484d60c9fd80bb5a4246184dce2daa87bfc5ac20a305de5bc755986fb6c41914b1abb3792519964e9bf20d2fe50ab78c4e2260331b846b9997d2136a0c0926484750787d936d4ecb734ef974ed77b9488ab7e3cdfc108c0d9cc11a82a149ba3e11e08faf1a312baba33fc29901ce3b4b2164d1260eed756e56d27def4ecee8c513bd99e2c17d7d32d5e95b27bb0601e904eba09a23ffe162d26aa81fb3a5d74f75eac53d0fa1f22b11d240aee1587871cdabbae94568590e025d13fe17ec9dc76ed733a2e07f5dfe3edf9b478d8dfd7ec25f49af123fafe40653d1ba0681df0774e0ea4f0cc87cccfd73085776ef07769e4a22cc6b2c87f3d536cd574570921df9eba7c264a3733d0dba8461a10a7f31c02190282463366f525e3b7b79609cc3489ef3ded123eb952bfb88e7d803e1969de58359971183990975df3cc2936a3806ceb9cc7204a9e51cbebb0adde0b9867572827affa7e5c02fab634d3d8dc9f62968508cd9314b80b2414523847e00474855d652cfb9bfb9d9d4352b57cbbf959c668a950588135824472544a46405d43f90b5eb814dc57c76798fea30d6e5e27c3ef7a7cd0e16e7c791826d8694aaac4232e5b2e5e2b660ff5ccea6b312330f5cebed7a7b20edf0aa4a654b11c94b34942d16583bc360ef9b5e2a5ef5d457cfe6d2ab28a896a77bcd43a51f22e14c5fc7c6ec64a14266381688aed7d98f417cae233e4b4d121ca137b751981bb0ee7777f5496f35d0fca4fbf240189d9154cf8e9894d343ae37d63f172d8032419fe061ba58a856b2822a36768d8e8c57e099bff885b6771a3811c6f4a583d54154c264a6fb398dd893354b70b8b43b6f2401c3d64c7ffbbaf2281637f9216ae80589cbd598f382a78d02d65aa10bf7ad82b1e30bdf0b6c66084bbbd6f41a361f580db7fc99a6197111ab2a37a1314dcabc4d34b81e5958c01948bb7ffe7d51fa2f60aa600ce3b8591ba3b8d22423a730d2bc8cc1e20fe4019e5990b1f5d064fe5d54643e11ec57f09f44d32829a419fa8e6ee22e1fd7d5a90636d8f675d554f7bd6cbb977cdf189a0979d6755368b4fa30c23a8d03fc16937d880a5727903051f11f18690c73a396102f0e5bb57984b9785d5eab9829de93df2b848739cda69b10272ed847a712f3924e3a10d12412115904d15bf96560d37f8fad3ece047d83de7ed3d2c4f0e2ff1e0d58945beaf4676f5ebe0c696fed0105a0efcfe269bebaa0e423640e60d3322a548641b3629207bb4e28cfa46a277e4cb90e5f42790fe93420977655661cffff01b18b13b6bd90475ecc61c90bbab3563e69e5428f12074121cfc7331df13e8038e42ebd2bfb2bf048d8faecd614f3d9dde50e05a8a1a7781b126324a1c993cb682dd5dd5dac2483f9bafec317747b58b38bf86cde182fdece0fa81991259b257cb058e0b6bc4ada299bb33f39ed3f71c11b68d2da0d6f9672f5203ff9decd046cd4c8fdeaa273515dfaf5d387949196ca6963a6c732dfee1c8a6503d3fd3f737a79aee62fa1fe6b0709d9f0e04dba6f5f81df2ff4155e6110cbcdb09ab7c70b86085c169783bf007c92122e12030f9045c4ba3c779be2eed743f76baf30d9b5f1932fd87ffb138a3f8cb837521f1b08697ba3d1e5b421f81cf871680b2ca9a8732f9bddced0f072e4292d3ccc804511b606570ee9081252bc05b7ab56d45df891bf12a97dfe460915081c472ec8f3669670dd401813f0b5bc1e61fe7f8d9206a028960a0d4634596b16e16e9107c1ef774f21e0036cf4324be654a4dc88861682fb3d39aa98c47d03861df162513ed3e0ecaed642a0dbab7499a896f79308d33aa33f9c7a1ad02c2344e730240b7d16a51eca9962d90fc7c59c0ce23b7833e669e28317b0b1c13ed03a9a4ce97cf3765c60ef844b275f5b169e76a9197a473445c4e547e4ee5610ab9ddfb9c73e254f15ed3ffc56f984ce28e59e85d1b8232eae917a23b12114303d82ec114a330ff53a88dcfd8f0b1b3aa907c46f5a45b159427a4cd7e3f70d36c978f1e6d8de9c2945b1fd904b42af6f56c6ee2e1fcb9e526a5a5231f340676100b87f279857d9fed861917c58389f2a2c79068d1a60e357ecd8244fe22fcf4ede7bc2dc15fdda4b050f6b0f19e68a54f0e17c578b80f6d3910262d8ad93a452febdaf506f9fdec480783dcc5ba1e9f64cdab92bf290e177c80f99dac16e9114847f868eabfb6cd6c848b8d83e1182fb3e966988f9c7c6e5447afc1835975cf982c45f2466a6d0e762624f512fe0909f3e88542b6284a27036b541963085f188f6c9ddb09648fc184fae97cf455484c915cbddc99884329223eedb1a9eca4ae2b92eb9162a634eed8802383166811f20baa296b00e89b67a7ee96f0c9f8d6612347308a4ad14b510eb21aa30fd32681df297299c9eafea2231a1d895240a532c0178e500311f6bd4172486c9dde62f3ea508241e58621ddb91f84a01776bb2cea6d4b0689c35794cc390aa19f41417ec375fe3ddf8bf964d7a90ed39e00a697e7e2e1e38d7d092bce9f8014bd0bff65058b668f634bd9870739311bbba91ab0f0e5911e7f4e60787e8a55fb1eec2245d32f67df61c4df21d0f5e42b62e627afe1220050a90cba74e24665b0f8539c9a8efd7693bbceccd63e2afabe9f9f45d94155c89b68ca158835cd58b84470c317612af60c5439f2c36cb8f3b11da1570b81dfcfc01c505aad7b0fe884de3ae82107ec610f49e5e49b8d00b29f8f327bfff6b54ef703d01f002eb6e6daa23eee88cb0ab2c222ef448fae5d0699f2f435303bbd240f0cac3eef01f619e2f8eb8c87c119ffeb6b8543e0a75814837faf2266cc191296e51686748646ef5c91c92a66bd66b340aae5d9ebbc710789e01014ae1553936bcbc94e8ec0f6831387c9f69c0356c4c3df476230d074c3a049c48110718c7ddf15e1ebc60d2051f79e449cbd78814d63c48e83df4600ce531e1be00f2d905c283f3e698f72c7a6d5caca8c76bdf8e77809b979f3850874f08a3298cc8569f37c8db8ba14ddc106bf79be3fa9a6ede787c577e192092f6b05cf2d820b5f5993e1cb0a075f47f746769236d00bf4e8785f5c99beaef52ad16cdd5409804d4ddea779b7f45bc2b1f6c59e983b6fe77bf7051f4df7226c82d049e302577df568e5bb27b2b0c98998dafaee3a41c68cf999bd9850d5612defa7c2cf9d99b719acab6292a0741b61cbdc2bec91a22d10f584137f807e2d621c37b854682a4daeedf1fe11f636e89dd615165c0792f4d788ec5d55c96c71a8dd7fd5532cfcb6b392a6c7d4d604a3a219e0607facb76c61f3ce636536bea4e691c1696d5a71862ac487d7261c23501951a26e945f99a4852bcd3cb438a34039809a45d5716174599fdb75f512e44793051d32fb8a989e58ebf956c86640c24e0edcc269946f2f8e370b67d625ef601c5e2b8af2f172563ac639f4a5aa2cd7552c23a85dbae5b12ef538216b160ea1f55bdbc9bf7aee977ec4e19976468d3285bc709565e3727dc4b01660cf35d62df0c43a14baa61ab9a8eb7439f519751c827d49f89b4645c2a65cb9b60df2fe5070157386fcb7bea1a47bbcf448773b011c136a6b5d679199e25eec88e39e81ace349f7d9f742f0f55861af14ed5686e545a370070b9137cdb1fc97f90994b96d68c1c078c0dfb4bdd0b37e124d18b6acfcb79d6010a1128386738ab37aebab45ebd5ee523297c12eedde0432bc0007e0c220da827ea80eaef81997980602c76336bc93220ecc0d65ca1d62bbbc5843b5bb56a666f67d9b092bd6ca0e38b32d4ee2a0057b060551e7b0dc9ad0f65a053661ebb249a5d3009fe697ef78320e3a9e9efc02ee73ea31a3a9166e41dbe50a93aa694b65fc5847740071406e52315b6af38c7ce954a48d196aab37dcd7b1c7df5d5cca0a413db179123bcc3f44fc79bd14c8f3dc2e6c523aaa1ebc154fcca1f37b418251db06380bee822236ab3cd2feb312d9090399d67915da630cd6dbc1ed2fb393dadc4ec0e65d3d1dd6c69e200f7d1f9e5e414c58c4c74bb92f49def5e75c10848f155a97ce6a7b1611b2c2341777d8e289f2b2ce22790b860934f8190d62238e43bb5de56f1bdfdc1628f3e8a5b7d7373789109de536e576ec6272746f40b692e74f0a83c1f871e53691c1fbe6ce9cb72513aeeafcfdf93a3045f75813e0a30973d5788c7bab37b3c1ec19aa1e88035947a93f7786cbb3d4a4b1d64f731f3841d85fd55e8a42858b6354c02c9d99c79b47ef94f69f5ff9c809d593f3a979d04ee57dc3d31c5076130e01c712e43e88e7bcfbb493ec404c3072ea71d3cfe938705196141d802fe240272c5e6d974e560b41cbca9eb6cfcf1c997c396f58bb23a83eec76169b292b3b3341ac08b2b26ac74d81f60769d1d27712f03cbba28dc61839a5870efe218001c722482f66fdd0968147d3fb3b4926705e88eec4502be24440f1844bb18165936aa8b5a5fd5659fc8585ac523dd1cbf4ca6daed82e4827de42c8c1de4ee2cede80811be0dc31002e52c703c854757784334f486df79e6bfdc7c62532716f88adb41cf03c44e8cef63c0b97a67a5ab06970c1f4f96c3e6286d7f0b7ed709f624cdaa678398530b25a50a46d3a29a7a44148bb9775e8f3402e91c48a9e21762a0800bc02e1d64a7f4b55eaceab83f8eb47096807fe73cff1d28c8ffc54798430c56380250f72cbec26e33bc7b7c6969d241b0c36f1180099bb0799123e9f28103e6ecad7a363e5370dfde27a8f8147610812e5098c650e7c74098a33701aa59e12bc0f6afad06a81a246a5f7c1b91ddd955193c43baaa87f2172887fdfeabe6c5d1c9b5bec776305eb48d9c8fd608ce57169456aa3d4b0e934d9d44692b07beea2bb698dbe554ee685208e2185a59a9bfe285e77023decb68f43ad5ed232d08b8836f58360e5d081f5f0799548ab7cf692e1ad35fe9e677611b199f107c25937c79163a999b044759910e88d9d2455164fae4c1be87a3cc29aa95a282f339b8ddbd30ab77e4485aa654140af879c1bb05b4df71515c17954f221ce774a57baabad34231325867729387bcb0782202d58d47739cf992fab0dc486b89951f94c220178dc39d48adf9ce1ab9c90b29e99f01a1401be811d34341d8ac0b596e0f75a6f09daf7edcbeef6386fbe1e1fb167d510fc2de339e408dbd2395bc377f09c5e05c2b0015b8a00b3c0ed3c2636aebada06d9550ab4a89a0c43d7bef063268cc719b3164e1c553e7837b6", 0x1000}], 0x2, &(0x7f00000018c0)="83f20092f7242f4b1c66202aa79d20a6259c6221708edd000d8338d617a99a1b5940e91125b9d48cc714c1e674c547ca1110613b97523355f864fc975dec2ed88e4e0134403cd8e2d722b862d1c6dc7ff33396d0c92df81a7b6b1561ad237ca4aa1fc02a", 0x64, 0x45}, 0x40040) (async) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000001980), 0x3) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000006380)=[{{&(0x7f00000019c0)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001a40)=""/93, 0x5d}, {&(0x7f0000001ac0)=""/243, 0xf3}, {&(0x7f0000001bc0)=""/157, 0x9d}, {&(0x7f0000001c80)=""/189, 0xbd}], 0x4, &(0x7f0000001d80)=""/200, 0xc8}, 0x40}, {{&(0x7f0000001e80)=@l2tp, 0x80, &(0x7f0000001fc0)=[{&(0x7f0000001f00)=""/148, 0x94}], 0x1, &(0x7f0000002000)=""/138, 0x8a}, 0x6}, {{&(0x7f00000020c0), 0x80, &(0x7f0000002380)=[{&(0x7f0000002140)=""/192, 0xc0}, {&(0x7f0000002200)=""/107, 0x6b}, {&(0x7f0000002280)=""/163, 0xa3}, {&(0x7f0000002340)=""/56, 0x38}], 0x4, &(0x7f00000023c0)=""/85, 0x55}}, {{&(0x7f0000002440)=@qipcrtr, 0x80, &(0x7f0000002540)=[{&(0x7f00000024c0)=""/122, 0x7a}], 0x1}, 0xfffffe00}, {{&(0x7f0000002580)=@qipcrtr, 0x80, &(0x7f0000002780)=[{&(0x7f0000002600)=""/73, 0x49}, {&(0x7f0000002680)=""/249, 0xf9}], 0x2, &(0x7f00000027c0)=""/167, 0xa7}, 0x9}, {{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002880)=""/255, 0xff}, {&(0x7f0000002980)=""/179, 0xb3}, {&(0x7f0000002a40)=""/178, 0xb2}, {&(0x7f0000002b00)=""/4096, 0x1000}, {&(0x7f0000003b00)=""/85, 0x55}, {&(0x7f0000003b80)=""/175, 0xaf}, {&(0x7f0000003c40)=""/241, 0xf1}], 0x7, &(0x7f0000003dc0)=""/191, 0xbf}, 0x6}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/56, 0x38}, {&(0x7f0000004ec0)=""/47, 0x2f}, {&(0x7f0000004f00)=""/86, 0x56}, {&(0x7f0000004f80)=""/89, 0x59}, {&(0x7f0000005000)=""/93, 0x5d}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/145, 0x91}, {&(0x7f0000006140)=""/155, 0x9b}, {&(0x7f0000006200)=""/38, 0x26}], 0xa, &(0x7f0000006300)=""/122, 0x7a}, 0xde}], 0x7, 0x10000, &(0x7f0000006540)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000065c0)={'syztnl2\x00', &(0x7f0000006580)={'syztnl2\x00', r6, 0x7, 0x40, 0x7, 0xa, {{0x7, 0x4, 0x3, 0x3d, 0x1c, 0x68, 0x0, 0x4, 0x0, 0x0, @multicast1, @broadcast, {[@cipso={0x86, 0x6, 0x3}]}}}}}) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000006640), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000006700)={&(0x7f0000006600)={0x10, 0x0, 0x0, 0x98248}, 0xc, &(0x7f00000066c0)={&(0x7f0000006680)={0x34, r7, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x2, 0x4, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) (async) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000006800)={&(0x7f0000006740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000067c0)={&(0x7f0000006780)={0x38, 0x4, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044085}, 0x4000004) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0xb, &(0x7f0000006840)=""/21, &(0x7f0000006880)=0x15) (async) getsockopt$inet_int(r3, 0x0, 0x32, &(0x7f00000068c0), &(0x7f0000006900)=0x4) (async) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000006940)) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000006e00)={0x0, &(0x7f0000006980)=[@wr_drn={0x68, 0x20, {0x3, 0x8}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x6, 0x7}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0x72a8, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x583, 0xe, 0x0, 0x1}}, @set_irq_handler={0xc8, 0x20, {0xd1, 0x1}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x2}, @cpuid={0x64, 0x18, {0x6, 0x78de}}, @in_dx={0x69, 0x20, {0xa09, 0x1}}, @cpuid={0x64, 0x18, {0x9, 0x100}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x556, 0x0, 0x3ff, 0x9}}, @wr_crn={0x67, 0x20, {0x3, 0x8001}}, @wr_drn={0x68, 0x20, {0x6, 0x6}}, @cpuid={0x64, 0x18, {0x7, 0x8}}, @nested_load_code={0x12e, 0x5e, {0x2, "c4827d1945fd0f01c389a242000000c42259bb64b700c42245457c8106b9e8000000b823be0000ba000000000f308fa80ca20b06640f01d066ba420066b8008066ef670f2333"}}, @wrmsr={0x65, 0x20, {0x405}}, @enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0xb15, 0x63dae28}}, @cpuid={0x64, 0x18, {0x6ff, 0x8a3b}}, @nested_load_syzos={0x136, 0x150, {0x3, 0xa, [@out_dx={0x6a, 0x28, {0x9567, 0x0, 0x44}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmsave={0x183, 0x18}, @nested_load_code={0x12e, 0x78, {0x0, "26460f019b4d4a00004318e7c744240092000000c7442402c4000000ff1c2436430f01cb65440f08c4025d0baaf8ffffffb805000000b9000000000f01d9b9800000c00f3235002000000f3066baf80cb89869e281ef66bafc0ced3e640f79dc"}}, @uexit={0x0, 0x18, 0x4}, @nested_amd_invlpga={0x17d, 0x20, {0x58000, 0xca08}}, @nested_create_vm={0x12d, 0x18}]}}], 0x446}) syz_kvm_setup_cpu$x86(r0, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000006ec0)=[@text64={0x40, &(0x7f0000006e40)="afc4a3f961b9020000000066baf80cb8e2f6d186ef66bafc0c66b8090066efb9800000c00f3235000400000f30440f01cf650f3236660fc7b700500000b805000000b955da00000f01d9420f01d10f01c8", 0x51}], 0x1, 0x0, &(0x7f0000006f00)=[@dstype3={0x7, 0xd}, @vmwrite={0x8, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffff2d5}], 0x2) (async) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000006f40)=0x0) prlimit64(r10, 0x2, &(0x7f0000006f80)={0xc9d, 0x1}, &(0x7f0000006fc0)) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x14) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007040), r4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000007100)={&(0x7f0000007000), 0xc, &(0x7f00000070c0)={&(0x7f0000007080)={0x20, r11, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2b2, 0x7e}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x44000011) 5.800203751s ago: executing program 0 (id=1450): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x44, 0x2}]}}}], 0x18}}], 0x2, 0x0) setresuid(r0, r0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) recvfrom$inet(r3, 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(r2, 0xd, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3263, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x80, 0xd0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xb, 0x20, 0x2e}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xb, 0x9, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x5, 0xc9, 0x5, {0x8, 0x25, 0x1, 0x182, 0x3f, 0x2, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x1, 0xf, {0x8, 0x25, 0x1, 0x0, 0xf, 0x3, 0x9}}}}}}}}]}}, 0x0) syz_usb_connect$uac3(0x6, 0x80, &(0x7f00000006c0)=ANY=[@ANYRESHEX], &(0x7f00000002c0)={0x0, 0x0, 0x32, 0x0, 0x0, [{0x0, &(0x7f00000000c0)=@lang_id={0x0, 0x3, 0x455}}, {0x0, &(0x7f00000001c0)=@string={0x0, 0x3, "7c6a1fbbe7682d4874eed3af7937a2ebac33b1eda32ef9166cf29c121a214ad900cad8f2e90fadd4da26c183922bddbd6a9dcfd9ec16e3e35c120fb4171328320a0aafc186cc1503909bae00578da5f0ac0dc3778d7ecc32d41277c532e4ebff37d7f6d1630eb0054b45dce8f56f03906364060c6b3655f36675964e85f3d3754801b4e68d02d9d4006745ce9ecbb2f279baec78b71da4b72ab542b014f16d3d3aaa0be75b0b53e81b338999d4bcff88bedcaab15b4c1468f6b91761ad1a7eaf2f4a15aab3e940b7a17b0f380499e0cc7ff0234cde872a7e684bf4ab318a0c24917e9e0e5aa202ebc47c"}}]}) 5.798830221s ago: executing program 1 (id=1451): timer_create(0x3, 0x0, &(0x7f0000000140)) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000002c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000440)=@vmx={0x0, 0x0, 0x2080, {0x54000, 0xeeee0000, {0x1}, 0x0, 0x1ff}, {"f99dc33c3d7fbe3dc386aadaaa7c70b549e245bb495eac682697036e6c180407fee43a47808e1c1a8f108abba2772cefa8dbb858a2e3b3c9898b79550cedea7ba66ff43e0da26d51658f1440a8ab06db02530d857fa2f996dcbbc571e7f3deafc111da3f83f99b914c7299df3eb3c8db7fb0d7ba1a2fbfca5096e84da3fcc56ecc2acdaf916a63fee87935ef7a8a5b5e651149ff02d04774396f39246293aee659693f3a5baf2dd10ac89cd7a4717435671f0a64e1de8bb05df2887dc6a72607df257053899537a80513bc230ce26e8f6ad7fd1fbeeaf669cd29014fb02de185b9cc6d8659d110fddaa90ce4e7e94dd5c1b749c6bc6bf45269e24f496c389e277ff82a019c2cce7b909645c6d5d5f8beb310d175858dd5eed184134ecb5d5e3b13ec671b1951514b81eed1965ee8a174d077ce7490b814a4fc255bc585fdcf34d6af33aaca869f504e196ce60fd6db5bbff14e22a70530a28d8cabaf506f72f6f1daa8679231b69e3b40db46220798ac3beb43cc1e74f0d7e53ef6fd802672d5b2f19f4807da746c9bef0c5576e9ecd18d9f5c13c4bec7b9c10585bc6cb4b3a7750da2f26411ba060402654d8a2082ed76b580114a9c2c228b126d64f4748240523c72b37adcf3e66c9c57680066de062211e7b77c5b16ef2fe107619435ac7734e707d077c261a7fe55f2bd86072bdde9a0b602ef1090381dfa7e5d5c3f0c6f6b388a2c6b0e8a9005469f979b9684da4c1efe447973c9f368b4fb2b5432473db5c61bf0fb6a7c141140608a4160378261b5643e6040a7f3537e241825a1646fcdcf0b95d04d6109018e6c5f2345618cf9fe08dbeb5535869cfc35bb8fb41fd5f8832d8ba16643f4293866552cc025bbd93795f1c53f9adc353eae485f260e97907532c45b3b8e7fe770f99975ac161bb06a49412cbba4fef7154519426164924082de69b6320f2c48d5462e687390b6fa839222955ea897c1c9744c4168cf44ff51f4030be52d789524f1ac18bc5001f12af68ce239a6437c55eafa64c5d5aa31efc07921e05afe6964d082ebf09311887ee709a1bf379b163779545034ee854729da12b21de19a01b9d222ced075748e759d6b0bf6bee8828ec3663ec19e63ffbd7288dab01ccf0625d7080ec2c1b114b2e6d9daf2d3493e138f10b823e6f14ece3bbd10703d819d60630c01727625261696c701c49fcaeb51d8d997c16de1842400a408b9d0c61ce1c20a908773d2e5caf8b319775415783c8632b38afc39a74052af42168a1bcb06d40c30019adf0f5feac27c6fe08ba543357e9644e1eccae41514c7cc0bf21764fc54ef1ebc24838ea4866fe7d59db8f485969ddb698290a3ea24544bfce3d79d109654da150a30431e1278fbbc13b68c2271d28a9102f29073fd6757a5423389aa60e45197634a8d038537e9991b04ef213d379f97091e2b704b1b5cc53b9e7c850374d322643ac73a24aede406cad6e1ec6975010c8b000281747ffdd2b84daf6c3cd1cc8c075e674eee4f0a04bb00e866b3eba3af6981b835e9c3c99d29f30d01618e400d09104d02bcea0a95b7c1bbdbf4b0ee1e15eb04302d58b55a5108be873701c9bb9ff83697a18d2ad397a170d173cd8c4289801baf41e958b6655d8c7c793eb0d5dee0c7fb3f0ea09dd99ef1efaad947067af1af5ba0fde79e11a12a359c4f8d0dbebd2c00069fd52a7ef4d1f8b090ff3b5a7b11a45ecb3dbfed51f49b257c39642b92694af63ee28322285e56fbd6371a6806207794d077ba483b025971ee8a5426d3cd29fb80b559d5878a2edc148e3d7e528f6bab84715e2f14a1d8ab1c755928cb04d05a9c3f3870512c8c66c441821b62fcb4509dc56d5919e1a3782e75202f2a68d0b50ee425a806ed55b89a2c7f9b0366096cf3eef0ab08190725bd2ccc2747f25241dd3d7af091885214a066a48f96b178248af3baa144e3e8c90c0827056fb1b4ff99473d733d4f127350e7f9b76710b432a35a1b35f52201cdafe8ad9db7fda95e6f2dfca7ae5e97feb79dc5b2c2aca8f232e6ca73dfdfb206c23ba967e45e1f77fafa86433f3eb3a1b31d955ffeb77c8ba3ac46e89b158b0127ce1d97fa06434bc41c8543b5c51fd3c53fc3e830cd6d7c6ed0af338f6921570574280056a2584e92d9321e7b92fbcdc00d570268251996cc4fe6d0154cc920b7e6d676689ae65a18de4ced677e0bb651a4ae63577d5a151a6a7ca2416a91da1814e4865d4414441c6f00d61b310edc114ea459265a4f462f63176e42acfb9ac21051186b3bc977f6959f3f9d2bfc711f3dbeaede5cb4081e20e752b8f1bf9f46c6ba50f348fc561881ce8193315d6dda18832717f12634ed6bff8b22a98be43fecef582eb60ef33cb8052c1e6be5ed714f522f45fdd76d180c47efb4afb0164ec4a6d60fd559830cd89e8c2fbbc472e4e051847c247b782d454b9ef1b665b56b7ebd9d96866909a67743f8696c89488d7a57ada3a9482ca48a71e2d0224e5e84ab0eb4a03bfc6c2d0cba4e357f13faae1bff29bfb253562620fad338a13f4b4addcc042e683ba97be6bedba20dfd6a1ff34141881ce9b197d8cbaee2029387efc5d030cca27389079d8c950098566801227cfaa6c4d8f4bbd6b74be874b2fd66756588164055c00b89389ee8718910290f8ea3a7d6e74de954b4b3e165c708f6786689b3beb7504746a1488f455883d0c8e21d4db7a99a2b85ead87346a98be2fa37ad9fe8a635291313f66878622600af77f2be2822f2d23d531d352581a30a3d669a21983fa49a82fcd97806b4608ce3443d977809d486b789e3701874d07b1be5b136312414bf6ac888ee1429c6ad652624be5ac91c53b1ad391a6b3a39312b081f9b4cf7b74a912210317820f5ec4a5dd151493e2f52e7708a1df785d6365773e377cf2a4e40bc642a01fc52e258e03dbacbaae3df55b2df49f12d0f25383d8b4b47db58bdce1d1c716401d668b7b3be10fe2a1ee269a6c11c0e21ff6bec3932d39cff136bddede522ded442730abd77ddbd2fe7121fe2694ddbb19240f6ff75f74e9e20f02c36422c21fd1c28bd94ebbe070dc3c1bac3f8e2a3112f7098c55f4f5161fbb6092c5bf6198212cada87436e07df3ec598307156a35413243661c7e33e77a02988716ce03921a6a0e0b8ec44e6e5a04dc581e5b5db37a60b373734477693de126645492d14dd764ee90e32fdb26c660170bef5fb3269f869a39cbd54dacd4df5c468edbb94f058ab78835a5e0d62aa0fc39280d6cff19e6fba83206da6badc3b07e173a035e26a6ac687ebf017f33747839c5b65e077b1ce51168dc44124a49a4699ab38b67a758c9f9fdb2ee49007fd383fffeca3a2506b03c6686e4cea964bef13e5068b122cad87db52e285e045398cc8c12dd40e1f8d50c6c1a635e8d95308cebe1b4bd91bb23438410e04284fc8c8e7d5242eb5750bfe8dd5b8607a96db5f4759098b0989309315cff6143a56b79cb068347adc8f8930301f69ae6daf3a5ed0cf59c83c744c23c5156fba15b5997e4d255e56003a9d2947429ff3ae35e79476da750b33bb86c4294481ff102df998412dcc63ce69594920bbc2e658919f2494b55e63949009192b8f7b8cfdc02033177612e126a352d8ef2d7bf64d074492b07bf8ed84521b530ec0b7e5b09f52f291d4f3b8bab2e586ac4912213c17e6b25c15398a0a4e5f23873b4c1f1a30f85bf3d2c5a3e0a3b6b797af667bec57529e5a503164c4a83ca56197c9b77b19e9236fadf2fe00f852f50bcedab1a03e95f5f0f2d32a36f0787d8e819d4129c83f15d808af485afe53efbf8398d96cd60dd5e5694926051e3cbfbcaed3d28f5cf0722053672b8a756579d5f95cf5279624a581e34718bd5f8a46b81ddc99958fbf2cb81e9b1b6a7d6b3ba9bc540deb05d1dfb069475b6238e832050549adc76ff0bb9d597d962aa4545c1368a5e3fad63725f447374e869933e08c8ec3a2152e39cf95eb58b286c8c66ad10ebde32d174891a007af4487d7841bc5241451969adcd688764720838f89429746474bb3d2f5a84bbef9c13ef99be3b9a9fb8e973d88a5a84757a37273f1ebe0ec16096d10056139bf77b5fc8c2c4a01f5acc925fc1ae51f311022f33452cfd5df4e7483b621daa70fd3d5587bbeead0fbd6dde8f7c2225166d34adbf5518efb52d2c1e5c40ed8b110cf29bde78de3baee6838e16a1e4dd5d21ceb766021f3281aebce78cb4c146726de894827fd40dcc87f4d4a6122ed66afc755284aa041085e43c562f8887ddac36a64271ca1a38ca7b08c4da3dec9a4d4980cc07e277617bd65c43492cf380496e4871f5b477a1c197cd03aa272f79e38b203ce0fd9740ff63d21415f7d0a8effb39526c2ec8b8040b8c3a8c69595c6fe5dbf7f14f0cb5e6527b2978e2f43a0fd817adc1a53a29719456779bd6b36c60812b82a9832cc9f8c80542026621d5b06baec337b8d1d6b5c6913c98d432cd75c909e595f650b678debe9c06a8edb51182e94750e9761809db50f03e6a8b3af9ac89e983df26b23f31d02e5dfaa1e479ae0ed992b28e8ca3761ecf2ee1ff2ab76c4afdd749f2583115a549043f8689e0736e183b315839af1d266d861eeabb26a14ef71ab2cf90fb77a1f8bd06723e039d9fe4590b82ed295af7d8d920e60868a0bb5628b0c512715812d625b79c432ee0aad1b0d2de414eb9fe5113514ef8b7bb26efc74c51d63791ea4766f47f4dae5417f5348468181dc8fc2a0f07c35292a1b1e02920e8637d45e93d98a96560f1e49cfe8675705c0a802ff228839bcad2e83ac1f3066671b3d0d403db0e36f8e0d4699416e88cf4b533ea57259e5f808b3c941a509e66e2c294f863b122ee32486a11875dd6b3a3f7bef7274ad3117519838b2240e512eb7c7e978d2098ee462996c07883411bc052f81a4407e7552659f4e63518b1709c4d040defd084f59a2233cb13bf9bea12b3fea7040ab2917a9be2a2a15e672fb52e966661d0a4c85bb964f7d6b30860de4e68563174df2b89ab384a5f3a72fb371a55795319c7acf7145b3c9acf06ec73f9f4e628770995f964fd9710d4cf055ff00aa18b06d498c1669f50a96f9b5a1e5d2c65905995cbea4923a79ba03994eefd591e2cb397e56f8839e423aa4458b2df8509c47b8444b3aa71b1a3e1fdd7eb3366c4791e1b04e4381a5a30756aa7280981d47f2a0a881a8300104991ad288b578747004ff6474f7bc48f004918566aed4ece85cc0a7f5d17236203d66a8c99f573e7700a3e0e214d31314cc77b0e8480d2f53364d4044ec8551969fcaf0b1489583a1caa29bd069107b71eeeea882662de40a6c302526a642b19600a105162f0729badadf868a3fc852af38bd48038917e87a4cc5cdec207424d7ab5dabba0101e97b42c15c3a438b911dd11c8fe9fae3825a73519f164645f5913e3c25e1d899f3dea68fe93766dd216d2422c09b47d177827aaf08fbe63b5976a5c3e2c5595ff242296ccd3ce87e90801a72226be49f431f84d9aa04e0f448f0cd47057c90bf15c2f7c17c8739354426176bf3f25a531b8d8ca6d14bba05e09217dc740deb9f3c83a73aa57366f9bf645cefac5465354b257081248daf02da4b920317cd4afd78c662e316b7042b422e87846c69619256510f3a609e00a88f224522eecc25454d6d1419acce42332ea2f5188a4c04774af60bb0aaa4842252108bc54cc4aba5b41f2c8b1349ad575b27737bdb34921e89ae581be6d822687a76ad89dbffdb6280ba83dbba30858c7bad0bcd19b0e982a", "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"}}) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x21) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r8, 0x4068aea3, &(0x7f0000000180)) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x33, 0x790, 0x80000000002, 0x17d, 0x400040004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x4, 0x5, 0x0, 0x0, 0x1], 0x8080000, 0x3c4211}) (async) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) ioctl$KVM_GET_LAPIC(r9, 0x8400ae8e, &(0x7f00000003c0)) 5.798606181s ago: executing program 2 (id=1452): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'veth1_to_team\x00', 0x1}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) (async) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001300)={0x4c4, 0x3d, 0x1, 0x70bd27, 0x25dfdbfe, "", [@generic="a512825d1fa3173e8ccdf7aaef8c4151cddff8ab049abbe2ae8cd00ee4c8356f424b6f7017e1b62dc21de45c7643bbc6f489c7b9709c541fd47bd0e9721cc69950a9d686d3ead4f236db0cd5c58a74c8641d812e4a9bc3ee83546c63319c1b1a63a5372d31b04dc1e4b43baf7f2e05e8bc5257de3826f90971640da569d9131868bc3d5e3259901cc07742145149b15e5a62078a513e5a2fc79345f2f503241e171a0784e7c65f482e2ee42331839e606efd6b24ccc888cca614e9d9ee19d2b236e2cafb1aa0a2251b415120325c41666bdcbdc1507b7d90daf6b21ff6489cad1bdd626dacdd79917038e5887b50b6eda06c96c5e981b7c28e08af64", @generic="07fb233b3d57ce82c476a8f67e017970e0106e6ba070a8f857d404a53c23b02916e3c5f00576c689471ffca5e14b4dc10c38ea6a796adc7ec5e746eabe01f05e1691666f7ff47ca7d471ca49a7cd942f98528a1261359261d7b05afe6a845cb132d5e4acd47161a1992167a4f15ac8bcad0d7547e1d044a6950425b4b429decdca416608967640465505ad15c1333865dfb2e0737f2af0891a5d71ebbc8be7da47a661e1902a201be0c0", @typed={0x8, 0x3, 0x0, 0x0, @pid}, @nested={0x113, 0x2b, 0x0, 0x1, [@typed={0x7, 0x9b, 0x0, 0x0, @str='.[\x00'}, @nested={0x4, 0x46}, @generic="264953e8344b2eaa134f9405387697198ce56b36cfb59372016a5b122c79a81ce92b98f94ba2ce0328a384774f28d98db62c035291d5aad4e832044cd1eea4a704edf7c6ad7f12cd8fb06f2d434f25f17688b99038fff87ce65fc3877269b2e9822af8e5a5c25409207932ca601ad1d69787ddf9d2", @generic="674769ffe2bff56947b146ffb03e6427902c2cee0e9e342d517b1feb360fb1ad934ffdd67a9fa7de5124f814b063ed77a6e3ef3870587a6fd1a963b02ff5033eba0f9147eb1086f28fa40ab4aac23e314e7a461e4022d583e3ed59caeb3b2bdb13b90fae14af4447c30968e958e41c3b6b3e6ddbeb302774a07b058139dd8b233a0b3bb12c81", @nested={0x4, 0x19}, @nested={0x4, 0x15a}]}, @generic="a9ae7da2083622246f222937ebec13d5ba8258817b97430147c60a407f72063cc6d0d00bb8a57333a143167458dafda4a5f34ae3289d21dd914403d20677f974634ccbd3c1d57b9c70e963f5513c414c59b09da7831b57fb3628c38914f5d99fd2e51a7d641c0d9224409bea9dd9cbd69219f4d4cb0df732852311fc018dce873006d81eab43dc984385f98f6494a36b7ec45c937b03c6", @generic="f60d1d24368d75068f3004e1c98fe2d677bde5ff1a61498172ae1a8ce4fb512320c2799b61fe010f1f06b30905d661a149279c72caa1b751e911d2d1108478acc705aaa654f14c5c67ff3d9192c83b39685bf0db8bc1dcfbe9f5b21b68f5f8b76db5459800d8ca0d85443ae9b6006adefad9678bad23fa4a8662ee00ab41f4b794ce8b0a762660810f4430033eeb5a86b7a55087d75b1f556c73e2212ddc23617b3f8d541c94e01b19943711d26c0b3b5752660bb06f0c7cd9b03ff8a53030e2eace516368bbf47699c8", @typed={0x8, 0x3e, 0x0, 0x0, @pid}, @generic="9e02260696584c8a9f09560fcb202f85aa5c859b619dda3387ff4c1d6c51398be83c76508c087e5cc56c8bc3f79fa2bc762dcace940040b23b2f9c3df10b7b2cc8b8ea711558d35a0c95c3c725cad782b4e33434d495c05e28a745cb27ed49728be3e759f545e331cc189c10887dd4be8516e10f32799f0971cc8b652dc97fa7324f844e6ce7"]}, 0x4c4}, {0x0}], 0x2, 0x0, 0x0, 0x24040000}, 0x0) 3.927368602s ago: executing program 0 (id=1453): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r2, 0x91a4b000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r2, 0x4002f516, &(0x7f0000000000)={0x5, 0xd8}) ioctl$BLKRRPART(r2, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002300090025bd7000ffd3df25010000000c0002000200000000000000cb43de9dcd5a1aab3a88485747edd3111f8c508ca57284096e7c00f2a4873b8498a04c77c188d9bdea9b09c51aa0a7d0dae0dc229f0608e07de97f85b68a529f00fd86399e35df1bf9ff5d40922ada17e9faa184be174d309cc03da36ab882e0d94add98a48dafee5e088518f5d0886dddcb1d19d641c7b03962679f611221"], 0x20}, 0x1, 0x0, 0x0, 0x4000815}, 0x4000) syz_usb_connect$midi(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000081e0437324000010203010902280001014f00de090400000101030009072401000b07000905070308000d0b0406"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) 3.927046972s ago: executing program 1 (id=1454): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000400)=@ethtool_ts_info}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) ioctl$PPPIOCGCHAN(r4, 0x80047437, 0x0) (async) setresuid(r1, r1, 0x0) (async) setxattr$incfs_id(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) (async) setresuid(0x0, 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = syz_clone(0x2a911000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0xc, 0x1, @tid=r6}, 0x0) ptrace(0x10, r6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffffffffce7}, 0x40000102) (async) ptrace$setregs(0x1a, r6, 0xc, &(0x7f0000000000)) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000003c0)={'wlan0\x00', @local}) (async) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86dd606712e9000d118db0049d90491c32480400", 0x24}, {&(0x7f0000000240)="b00c7037e07686acd2c8dd812560e8ae4712639dbc23", 0x16}], 0x2) (async) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r10, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) readv(r10, &(0x7f0000000280)=[{&(0x7f0000000340)=""/95, 0x5f}], 0x1) (async) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000e0001000500000000000072080003000500030000", 0x39}], 0x5a) 3.926797222s ago: executing program 2 (id=1455): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r1 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0xfffffffe, {{0xa, 0x4e24, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffe01}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)={0x60, 0x22, 0x6, {0x6, 0x1, "a9c64b7f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r3, 0x10000000005, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 2.034811284s ago: executing program 0 (id=1456): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x1000, {{0xa, 0x40, 0x0, @mcast1={0xff, 0x7}, 0x4}}, {{0xa, 0x0, 0x0, @mcast1, 0x80000002}}}, 0x108) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0xffffffffffffffc7, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x20, 0x11, 0x99, {0x99, 0xf, "c7324d52e2b52dd5036826ea9201338bb0a76eb86ad2ccb6c71f9c005275d3e6a55663e2e21554087ee2a216bf3ef4107a9ccd70f7dd194697b00c2c9fa8b13f5cf4669a0b5ac3fd8bd79aca56feff889a46a19a244de024a1547731168bfa23c8eecfb7d8d4f12c31089eb1f21dbe42c945077d1a6ce99c4e9ecf680e893b22bc61fdc1855c85129f6fef0b8c5b4a96f4b9180c8f2792"}}, &(0x7f0000000100)={0x0, 0x3, 0x15, @string={0x15, 0x3, "b892b90bd3ff1eb328a49da3a1fea13fac1cd6"}}, &(0x7f0000000480)={0x0, 0xf, 0xd2, {0x5, 0xf, 0xd2, 0x3, [@generic={0xb8, 0x10, 0xb, "a046caa9b25d001d646ada6fea2d1eadd4a0f792601a057aab3f46bd688b1986e9f909e612c4903ac1b7cd0f6b67f5193fe2fe2ffd81f5392318513e5e7a7a046e4180b5b7e07156548e3405c24e5e4a2a8500482b4042aff8c8bac25845685f6c83346073bd5c2db4cf3d0492ac0c2f5ca06496b80eed40ecc571e256adbfad9b97de629d537b36c058aba2c301ba1c848947f84f78c1fc3f84a4fae1f928e14f3bb5b6ac4076c57b7999a0ec12d400cc64b9fd48"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x22, 0x9, 0x7, 0xe7c, 0x81}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x0, 0x8, 0x5}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x4, 0xa, 0x5, "f80678f7", "1191d6ab"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x10, 0x5, 0x2, 0x81, 0x1, 0x1}}}, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x20, 0x0, 0x7a, "093a8b8a07e879008b5878fd5f51a47bac3a2e4df179c6eaf7115bf4fd9053b498aeee0b8e831a64a59467977f84ec9bee60fc47bebe9af08bd839bc7cbcc9e98aebdffa6dacfcbbc80f4d93269d40f44991675a28b7fd91083acdb6e937f11e3334e46b6da2daf49dcdb72fd12f4b766db19e9d39694b0cfcbf"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x10}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0xc0, 0x20, [0xf]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0x7}, &(0x7f00000007c0)={0x40, 0x9, 0x1}, &(0x7f0000000800)={0x40, 0xb, 0x2, "8f97"}, &(0x7f0000000840)={0x40, 0xf, 0x2}, &(0x7f0000000880)={0x40, 0x13, 0x6}, &(0x7f00000008c0)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000900)={0x40, 0x19, 0x2, "1508"}, &(0x7f0000000940)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000980)={0x40, 0x1c, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000a00)={0x40, 0x21, 0x1, 0x5}}) 2.033999844s ago: executing program 1 (id=1457): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000001040)=0x2, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtaction={0x3d0, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{0x3bc, 0x1, [@m_ipt={0x1fc, 0x18, 0x0, 0x0, {{0x8}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x36c}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xae, 0x6, {0xf71, 'filter\x00', 0xf, 0xfffa, "889d11364b4dac0d244d0eabaacc6817d197c9075b8e61cfe5409abd0c1f64cb9f61e084c45fa54bf6e99ee4f08757cf6e494b41e97474d1894d7b2be427a87b3a94f93784bc2426ebcfeb9ecee6734e6316ae32bc8249e89e69d6fab813677b3772e3979432972235c4fde5d18a8821c6fd5187c2d51d95935c29ae8541689db66d820e"}}]}, {0xcf, 0x6, "a42e550815b58dcbbbe16a094b0a58a91189a12791e7ad6ecaa49f67c63f0f8450b9a56771bfdd1a2577c8fa66eb6bd97240f406b9eb9f12dfe476c46fe5529095dedf65f289e25dc1fc64a6608b1e4bac65e15295300972470265fba6a0cd9a78c41624bf95e5ae58cc966754baadb5484353940706963167376f61b448af3b11eb789549911d4c956354040d761e4ab9bbd724f8b22fbc427bf9e920f11a001d77b6a86eb13bad4b783ca8f8f3cc9902d30eac06a53deeb2a336891c608d7a3e76afb58715da14507c0d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0xa7, 0x8, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x6b, 0x6, {0x400, 'nat\x00', 0x6, 0x1, "18b02d657b18d491c0bc06ad990214f0dca09dbf1c890ec9a84e1dd51ccaaf9260dbef8f0080dd319c9e2dd96f0b5e2eef3f898aef73274db44b47c0981cde5880"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xe6da}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x2e, 0x6, "ad2fbed1eb8857b87240f701fe7cb5df2c5d884ce76d4b4e53d373470821dc97f23e76e23db0c10013cf"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ipt={0xd8, 0x0, 0x0, 0x0, {{0x8}, {0x14}, {0x9f, 0x6, "1d795f25dca851157c6b13138157b1bca5ecdd131bbaee5438b426d94017c255fbc730fb5787f44dc7cba6ac0c994aaffb6ef567cb8b3c4a3461960c95aa02726a0f96fae1f7c5c26c9643fa9e11386b8a4cfd672756b6b9ad595be94b6b4f24f8b937d7f3312ab234febae91cc8be10d34cbcccbfdbe432b3d83991033958efa21d42c8ce0cac79b1fe36a6db081fa428c41c38c8dffba262058a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x8080}, 0x4d0d0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x30) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000001040)=0x2, 0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtaction={0x3d0, 0x31, 0x100, 0x70bd29, 0x25dfdbfb, {}, [{0x3bc, 0x1, [@m_ipt={0x1fc, 0x18, 0x0, 0x0, {{0x8}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x36c}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TARG={0xae, 0x6, {0xf71, 'filter\x00', 0xf, 0xfffa, "889d11364b4dac0d244d0eabaacc6817d197c9075b8e61cfe5409abd0c1f64cb9f61e084c45fa54bf6e99ee4f08757cf6e494b41e97474d1894d7b2be427a87b3a94f93784bc2426ebcfeb9ecee6734e6316ae32bc8249e89e69d6fab813677b3772e3979432972235c4fde5d18a8821c6fd5187c2d51d95935c29ae8541689db66d820e"}}]}, {0xcf, 0x6, "a42e550815b58dcbbbe16a094b0a58a91189a12791e7ad6ecaa49f67c63f0f8450b9a56771bfdd1a2577c8fa66eb6bd97240f406b9eb9f12dfe476c46fe5529095dedf65f289e25dc1fc64a6608b1e4bac65e15295300972470265fba6a0cd9a78c41624bf95e5ae58cc966754baadb5484353940706963167376f61b448af3b11eb789549911d4c956354040d761e4ab9bbd724f8b22fbc427bf9e920f11a001d77b6a86eb13bad4b783ca8f8f3cc9902d30eac06a53deeb2a336891c608d7a3e76afb58715da14507c0d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0xa7, 0x8, 0x0, 0x0, {{0x8}, {0x90, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TARG={0x6b, 0x6, {0x400, 'nat\x00', 0x6, 0x1, "18b02d657b18d491c0bc06ad990214f0dca09dbf1c890ec9a84e1dd51ccaaf9260dbef8f0080dd319c9e2dd96f0b5e2eef3f898aef73274db44b47c0981cde5880"}}, @TCA_IPT_INDEX={0x8, 0x3, 0xe6da}, @TCA_IPT_INDEX={0x8, 0x3, 0x1}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}]}, {0x2e, 0x6, "ad2fbed1eb8857b87240f701fe7cb5df2c5d884ce76d4b4e53d373470821dc97f23e76e23db0c10013cf"}, {0xc}, {0xc, 0x8, {0x5, 0x3}}}}, @m_ipt={0xd8, 0x0, 0x0, 0x0, {{0x8}, {0x14}, {0x9f, 0x6, "1d795f25dca851157c6b13138157b1bca5ecdd131bbaee5438b426d94017c255fbc730fb5787f44dc7cba6ac0c994aaffb6ef567cb8b3c4a3461960c95aa02726a0f96fae1f7c5c26c9643fa9e11386b8a4cfd672756b6b9ad595be94b6b4f24f8b937d7f3312ab234febae91cc8be10d34cbcccbfdbe432b3d83991033958efa21d42c8ce0cac79b1fe36a6db081fa428c41c38c8dffba262058a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x8080}, 0x4d0d0) (async) 2.033446734s ago: executing program 2 (id=1458): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fchdir(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0xfeea}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000003c0)={0x286e, 0x0, 0x2, 0x8d62, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 510.4µs ago: executing program 0 (id=1459): r0 = socket$tipc(0x1e, 0x2, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) (async) r3 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000240)={0x1}) ppoll(&(0x7f0000000080)=[{r1, 0x8000}, {r3, 0x1040}], 0x2, &(0x7f00000001c0), &(0x7f0000000300)={[0xffffffffffffd491]}, 0x8) bind$tipc(r0, &(0x7f0000000340)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020103030c00000000000000000000000200090008000000800000000000000003000600000000000200000000000400000000000000000002000100000000000002080200000000030005006c00000002000000640101000000000000000000"], 0x60}, 0x1, 0x7}, 0x0) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRES64=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r1, 0x4010e501, &(0x7f00000000c0)={r5}) (async) ioperm(0x3, 0x7, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) (async) ptrace$pokeuser(0x6, r6, 0x388, 0x41d9fda7) (async) mount$binderfs(0x0, 0x0, 0x0, 0x2076c10, &(0x7f0000000100)=ANY=[@ANYBLOB='max=']) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) (async) read$FUSE(r5, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r7, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x2) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = epoll_create1(0x80000) (async) r10 = fcntl$dupfd(r8, 0x0, r8) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000000)) (async) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f00000001c0)={0x10000014}) (async) getpid() (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 280.76µs ago: executing program 1 (id=1460): r0 = syz_usb_connect$printer(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in6=@loopback, @in6=@rand_addr=' \x01\x00', 0x4e22, 0xb, 0xfffc, 0x4, 0xa, 0x80, 0x0, 0x33, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1000000, 0x0, 0x8}, {0x1, 0x9, 0x80}, 0x0, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in6=@private0, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x2, 0x1, 0x0, 0x0, 0xfffffffd}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@loopback, 0xfffffffd, 0x4, 0x3, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3513, 0x1, 0x0, 0xfd, 0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000100)=""/178, 0xb2}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f00000001c0)=""/179, 0xb3}], 0x3) 0s ago: executing program 2 (id=1461): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x103301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000080)={0x80, 0x6, 0x101, 0x0, 0xec, 0x2, 0x0}) r1 = openat$kvm(0x0, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3a) ioctl$KVM_TDX_CAPABILITIES(r3, 0xc008aeba, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0xf000, 0x114000, 0x1}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.505574][ T1538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.671727][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 81.717391][ T399] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 81.731613][ T348] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 81.801561][ T67] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 81.821550][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 81.831384][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.844493][ T31] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 81.853925][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.864289][ T31] usb 2-1: Product: syz [ 81.868659][ T31] usb 2-1: Manufacturer: syz [ 81.875407][ T31] usb 2-1: SerialNumber: syz [ 81.882507][ T31] usb 2-1: config 0 descriptor?? [ 81.891552][ T348] usb 3-1: Using ep0 maxpacket: 8 [ 81.902466][ T31] usb 2-1: bad CDC descriptors [ 81.907679][ T31] usb 2-1: unsupported MDLM descriptors [ 81.918473][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.932239][ T348] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 81.949415][ T348] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 81.961564][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 81.966955][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.982089][ T67] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.998143][ T67] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.007673][ T348] usb 3-1: config 0 descriptor?? [ 82.020548][ T67] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.032926][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.041178][ T67] usb 4-1: Product: syz [ 82.045893][ T67] usb 4-1: Manufacturer: syz [ 82.050880][ T67] usb 4-1: SerialNumber: syz [ 82.129788][ T31] usb 2-1: USB disconnect, device number 32 [ 82.142973][ T400] usb 1-1: USB disconnect, device number 43 [ 82.149559][ T400] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 82.247240][ T348] usbhid 3-1:0.0: can't add hid device: -71 [ 82.265289][ T67] usb 4-1: 0:2 : does not exist [ 82.270422][ T348] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 82.281896][ T67] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 82.289792][ T348] usb 3-1: USB disconnect, device number 38 [ 82.302767][ T67] usb 4-1: USB disconnect, device number 32 [ 82.323010][ T551] udevd[551]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 82.540300][ T1619] SELinux: failed to load policy [ 82.561587][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 82.723597][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 82.740308][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.751353][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.761369][ T31] usb 2-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 82.770929][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.788037][ T1652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.390'. [ 82.802746][ T31] usb 2-1: config 0 descriptor?? [ 82.972411][ T339] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 83.041590][ T306] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 83.061659][ T348] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 83.121579][ T339] usb 1-1: Using ep0 maxpacket: 32 [ 83.128240][ T339] usb 1-1: config 6 has an invalid interface number: 251 but max is 1 [ 83.136908][ T339] usb 1-1: config 6 has an invalid interface number: 9 but max is 1 [ 83.145610][ T339] usb 1-1: config 6 has no interface number 0 [ 83.152061][ T339] usb 1-1: config 6 has no interface number 1 [ 83.158473][ T339] usb 1-1: config 6 interface 251 has no altsetting 0 [ 83.165424][ T339] usb 1-1: config 6 interface 9 has no altsetting 0 [ 83.173848][ T339] usb 1-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=e9.d2 [ 83.183285][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.191431][ T339] usb 1-1: Product: syz [ 83.195783][ T306] usb 4-1: Using ep0 maxpacket: 16 [ 83.201000][ T339] usb 1-1: Manufacturer: syz [ 83.205795][ T339] usb 1-1: SerialNumber: syz [ 83.211371][ T306] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 83.223135][ T306] usb 4-1: config 0 has no interface number 0 [ 83.224997][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.230542][ T306] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 83.243075][ T1597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.380'. [ 83.252168][ T306] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 83.262666][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.273805][ T306] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 83.289459][ T31] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0x2 [ 83.298125][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.298156][ T306] usb 4-1: Product: syz [ 83.298177][ T306] usb 4-1: Manufacturer: syz [ 83.307320][ T348] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 83.310726][ T306] usb 4-1: SerialNumber: syz [ 83.315722][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.337879][ T306] usb 4-1: config 0 descriptor?? [ 83.338486][ T31] hid-rmi 0003:0461:4E72.0010: unknown main item tag 0x0 [ 83.344200][ T1654] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 83.350907][ T31] hid-rmi 0003:0461:4E72.0010: unbalanced collection at end of report description [ 83.363934][ T1654] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 83.369556][ T31] hid-rmi 0003:0461:4E72.0010: parse failed [ 83.380732][ T31] hid-rmi 0003:0461:4E72.0010: probe with driver hid-rmi failed with error -22 [ 83.390337][ T348] usb 3-1: config 0 descriptor?? [ 83.421732][ T1647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.431708][ T1647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.441743][ T339] asix 1-1:6.251: probe with driver asix failed with error -22 [ 83.462169][ T339] asix 1-1:6.9: probe with driver asix failed with error -22 [ 83.472727][ T339] usb 1-1: USB disconnect, device number 44 [ 83.576427][ T1654] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 83.584065][ T1654] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 83.601218][ T348] hid-steam 0003:28DE:1142.0011: unknown main item tag 0x0 [ 83.609302][ T348] hid-steam 0003:28DE:1142.0011: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 83.681644][ T348] hid-steam 0003:28DE:1142.0011: Steam wireless receiver connected [ 83.690069][ T348] hid-steam 0003:28DE:1142.0011: No HID_FEATURE_REPORT submitted - nothing to read [ 83.700150][ T1664] netlink: 520 bytes leftover after parsing attributes in process `syz.2.393'. [ 83.709292][ T348] hid-steam 0003:28DE:1142.0012: unknown main item tag 0x0 [ 83.717369][ T348] hid-steam 0003:28DE:1142.0012: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0 [ 83.739618][ T348] usb 3-1: USB disconnect, device number 39 [ 83.751216][ T348] hid-steam 0003:28DE:1142.0011: Steam wireless receiver disconnected [ 83.763844][ T1665] fido_id[1665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 83.794341][ T306] asix 4-1:0.251 (unnamed net_device) (uninitialized): invalid PHY address: 158 [ 83.994951][ T348] usb 4-1: USB disconnect, device number 33 [ 84.029654][ T1669] sit0: entered promiscuous mode [ 84.038684][ T1669] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 84.046555][ T1669] netlink: 1 bytes leftover after parsing attributes in process `syz.1.394'. [ 84.074481][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 84.074502][ T36] audit: type=1400 audit(84.047:358): avc: denied { mounton } for pid=1672 comm="syz.1.396" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 84.261646][ T31] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 84.371533][ T36] audit: type=1400 audit(84.337:359): avc: denied { bpf } for pid=1682 comm="syz.1.398" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.401710][ T31] usb 1-1: device descriptor read/64, error -71 [ 84.593455][ T1694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 84.641564][ T31] usb 1-1: device descriptor read/64, error -71 [ 84.830379][ T1701] SELinux: failed to load policy [ 84.836865][ T1701] SELinux: failed to load policy [ 84.859616][ T1704] netlink: 580 bytes leftover after parsing attributes in process `syz.1.405'. [ 84.885938][ T31] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 84.941631][ T399] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 85.021810][ T31] usb 1-1: device descriptor read/64, error -71 [ 85.033857][ T1706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.042742][ T1706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.092712][ T399] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 1024, setting to 64 [ 85.105699][ T399] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 85.115380][ T399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.123749][ T399] usb 4-1: Product: syz [ 85.128133][ T399] usb 4-1: Manufacturer: syz [ 85.132868][ T399] usb 4-1: SerialNumber: syz [ 85.139176][ T1699] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 85.271610][ T31] usb 1-1: device descriptor read/64, error -71 [ 85.351317][ T399] usb 4-1: MIDIStreaming interface descriptor not found [ 85.361895][ T399] usb 4-1: USB disconnect, device number 34 [ 85.375689][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 85.393163][ T31] usb usb1-port1: attempt power cycle [ 85.731588][ T31] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 85.752922][ T31] usb 1-1: device descriptor read/8, error -71 [ 85.882826][ T31] usb 1-1: device descriptor read/8, error -71 [ 86.121635][ T399] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 86.129685][ T31] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 86.152786][ T31] usb 1-1: device descriptor read/8, error -71 [ 86.281582][ T399] usb 4-1: Using ep0 maxpacket: 16 [ 86.288453][ T399] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 86.297613][ T31] usb 1-1: device descriptor read/8, error -71 [ 86.304241][ T399] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 86.314224][ T399] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 86.324546][ T399] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 86.334791][ T399] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 86.344760][ T399] usb 4-1: config 1 interface 0 has no altsetting 0 [ 86.351421][ T399] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 86.360529][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.372074][ T399] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 86.421733][ T31] usb usb1-port1: unable to enumerate USB device [ 86.632452][ T399] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 86.642382][ T399] usb 4-1: USB disconnect, device number 35 [ 86.666028][ T36] audit: type=1400 audit(86.637:360): avc: denied { setattr } for pid=1715 comm="syz.2.409" name="" dev="pipefs" ino=14634 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 86.700394][ T1719] netlink: 144 bytes leftover after parsing attributes in process `syz.2.410'. [ 86.710125][ T36] audit: type=1400 audit(86.677:361): avc: denied { ioctl } for pid=1718 comm="syz.2.410" path="/dev/cpu/1/msr" dev="devtmpfs" ino=18 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 87.110766][ T1752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5662 sclass=netlink_route_socket pid=1752 comm=syz.2.418 [ 87.242418][ T1759] netlink: 188 bytes leftover after parsing attributes in process `syz.2.421'. [ 87.432500][ T31] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 87.561683][ T399] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 87.601569][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 87.610644][ T31] usb 1-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 87.620090][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.629305][ T31] usb 1-1: Product: syz [ 87.633879][ T31] usb 1-1: Manufacturer: syz [ 87.638685][ T31] usb 1-1: SerialNumber: syz [ 87.711575][ T348] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 87.722668][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.733891][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.743716][ T399] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 87.752848][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.762442][ T399] usb 4-1: config 0 descriptor?? [ 87.845443][ T1745] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 87.853333][ T1745] netlink: 1 bytes leftover after parsing attributes in process `syz.0.416'. [ 87.864585][ T348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.873569][ T31] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 87.881970][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 87.891995][ T348] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 87.899755][ T348] usb 3-1: can't read configurations, error -71 [ 87.906662][ T31] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 87.914964][ T31] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 87.925363][ T31] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 87.936159][ T31] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 87.946693][ T31] usb 1-1: USB disconnect, device number 49 [ 87.958435][ T551] udevd[551]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 88.092968][ T1775] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1775 comm=syz.1.427 [ 88.171596][ T1778] overlay: Unknown parameter '/' [ 88.178138][ T399] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 88.189343][ T399] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 88.202282][ T1778] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=118 sclass=netlink_tcpdiag_socket pid=1778 comm=syz.1.428 [ 88.219843][ T36] audit: type=1400 audit(88.187:362): avc: denied { write } for pid=1777 comm="syz.1.428" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 88.347473][ T36] audit: type=1400 audit(88.317:363): avc: denied { create } for pid=1783 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 88.367424][ T1784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.376358][ T1784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.384837][ T399] cp2112 0003:10C4:EA90.0013: Part Number: 0x47 Device Version: 0xD0 [ 88.761574][ T348] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 88.771635][ T339] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 88.916065][ T348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 88.924559][ T348] usb 3-1: not running at top speed; connect to a high speed hub [ 88.934708][ T339] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 88.934997][ T348] usb 3-1: config 3 has an invalid interface number: 27 but max is 0 [ 88.944486][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.954420][ T348] usb 3-1: config 3 has no interface number 0 [ 88.960856][ T339] usb 1-1: Product: syz [ 88.967790][ T348] usb 3-1: config 3 interface 27 has no altsetting 0 [ 88.970913][ T339] usb 1-1: Manufacturer: syz [ 88.970934][ T339] usb 1-1: SerialNumber: syz [ 88.990539][ T1798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.992953][ T348] usb 3-1: New USB device found, idVendor=19d2, idProduct=f421, bcdDevice=bb.f2 [ 89.008499][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.016979][ T348] usb 3-1: Product: syz [ 89.017554][ T1798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.021479][ T348] usb 3-1: Manufacturer: syz [ 89.034050][ T348] usb 3-1: SerialNumber: syz [ 89.037522][ T1798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.047960][ T1798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.057227][ T1798] netlink: 'syz.1.435': attribute type 5 has an invalid length. [ 89.188237][ T1754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.200679][ T339] usb 1-1: USB disconnect, device number 50 [ 89.214588][ T1754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.225588][ T1803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.234926][ T1803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.259629][ T348] usb 3-1: bad CDC descriptors [ 89.271729][ T348] usb 3-1: USB disconnect, device number 41 [ 89.621695][ T399] usb 4-1: reset high-speed USB device number 36 using dummy_hcd [ 89.630318][ T399] usb 4-1: device reset changed ep0 maxpacket size! [ 89.637376][ T306] usb 4-1: USB disconnect, device number 36 [ 89.681582][ T348] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 89.771605][ T306] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 89.830718][ T36] audit: type=1400 audit(89.797:364): avc: denied { setattr } for pid=1835 comm="syz.2.447" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 89.854506][ T348] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 89.862841][ T348] usb 1-1: config 0 has no interface number 0 [ 89.869035][ T348] usb 1-1: config 0 interface 41 has no altsetting 0 [ 89.878281][ T348] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 89.890791][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.899012][ T348] usb 1-1: Product: syz [ 89.903305][ T348] usb 1-1: Manufacturer: syz [ 89.908040][ T348] usb 1-1: SerialNumber: syz [ 89.921646][ T348] usb 1-1: config 0 descriptor?? [ 89.941541][ T306] usb 4-1: Using ep0 maxpacket: 32 [ 89.952163][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.964037][ T306] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.974848][ T306] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 89.994165][ T306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.003312][ T306] usb 4-1: config 0 descriptor?? [ 90.241682][ T752] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 90.281705][ T36] audit: type=1326 audit(90.257:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1843 comm="syz.1.451" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc3079c819 code=0x0 [ 90.336218][ T1845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.346056][ T1845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.393766][ T752] usb 3-1: unable to get BOS descriptor or descriptor too short [ 90.403032][ T752] usb 3-1: not running at top speed; connect to a high speed hub [ 90.423345][ T306] koneplus 0003:1E7D:2D51.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 90.436255][ T752] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.447063][ T752] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 90.458057][ T752] usb 3-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 90.467705][ T752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.476273][ T752] usb 3-1: Product: syz [ 90.486452][ T752] usb 3-1: Manufacturer: syz [ 90.496491][ T752] usb 3-1: SerialNumber: syz [ 90.614209][ T306] koneplus 0003:1E7D:2D51.0014: couldn't init struct koneplus_device [ 90.625171][ T306] koneplus 0003:1E7D:2D51.0014: couldn't install mouse [ 90.634401][ T306] koneplus 0003:1E7D:2D51.0014: probe with driver koneplus failed with error -71 [ 90.650719][ T306] usb 4-1: USB disconnect, device number 37 [ 90.719217][ T752] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 90.741558][ T752] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 90.762912][ T752] usb 3-1: unit 2 not found! [ 90.768076][ T752] usb 3-1: unit 8 not found! [ 90.794046][ T752] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 90.805561][ T752] usb 3-1: USB disconnect, device number 42 [ 90.817973][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.205146][ T36] audit: type=1400 audit(91.177:366): avc: denied { sqpoll } for pid=1864 comm="syz.1.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 91.240429][ T36] audit: type=1400 audit(91.207:367): avc: denied { append } for pid=1870 comm="syz.2.457" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.265280][ T36] audit: type=1400 audit(91.237:368): avc: denied { map } for pid=1870 comm="syz.2.457" path="socket:[16112]" dev="sockfs" ino=16112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 91.353011][ T1878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.459'. [ 91.394329][ T1880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.403175][ T1880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.417355][ T1881] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 91.424484][ T1881] overlayfs: failed to set xattr on upper [ 91.430472][ T1881] overlayfs: ...falling back to uuid=null. [ 91.671658][ T306] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 91.822798][ T306] usb 4-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 91.833341][ T306] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 91.844192][ T306] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 91.853384][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.861648][ T306] usb 4-1: Product: syz [ 91.866015][ T306] usb 4-1: Manufacturer: syz [ 91.870705][ T306] usb 4-1: SerialNumber: syz [ 91.929022][ T1884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.938677][ T1884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.029735][ T36] audit: type=1400 audit(91.997:369): avc: denied { mount } for pid=1887 comm="syz.2.463" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 92.131413][ T36] audit: type=1400 audit(92.097:370): avc: denied { setcheckreqprot } for pid=1895 comm="syz.2.466" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 92.152166][ T348] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 92.164289][ T348] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 92.185023][ T348] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 92.198364][ T348] usb 1-1: USB disconnect, device number 51 [ 92.222919][ T1900] netlink: 'syz.2.467': attribute type 4 has an invalid length. [ 92.230804][ T1900] netlink: 'syz.2.467': attribute type 5 has an invalid length. [ 92.239747][ T1900] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.467'. [ 92.249039][ T1899] netlink: 'syz.2.467': attribute type 4 has an invalid length. [ 92.256776][ T1899] netlink: 'syz.2.467': attribute type 5 has an invalid length. [ 92.264831][ T1899] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.467'. [ 92.478957][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.499551][ T1909] bridge_slave_0 (unregistering): left allmulticast mode [ 92.508000][ T36] audit: type=1400 audit(92.457:371): avc: denied { watch watch_reads } for pid=1910 comm="syz.2.471" path="/118" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 92.525016][ T1909] bridge_slave_0 (unregistering): left promiscuous mode [ 92.557959][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.590472][ T1913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.599544][ T1913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.716180][ T1920] loop7: detected capacity change from 0 to 16384 [ 92.761792][ T1920] loop7: detected capacity change from 16384 to 0 [ 92.769207][ C1] I/O error, dev loop7, sector 16368 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 92.782277][ T1920] fuse: Bad value for 'group_id' [ 92.791151][ T1920] fuse: Bad value for 'group_id' [ 93.111575][ T348] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 93.141003][ T36] audit: type=1400 audit(93.107:372): avc: denied { remount } for pid=1924 comm="syz.1.476" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 93.141007][ T1925] binder: Unknown parameter '01777777777777777777777' [ 93.274642][ T348] usb 1-1: config 1 interface 0 has no altsetting 0 [ 93.283835][ T348] usb 1-1: string descriptor 0 read error: -22 [ 93.290266][ T348] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.40 [ 93.299540][ T348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.717034][ T348] samsung 0003:0419:0001.0015: unknown main item tag 0x6 [ 93.724552][ T348] samsung 0003:0419:0001.0015: item 0 0 0 8 parsing failed [ 93.732782][ T348] samsung 0003:0419:0001.0015: parse failed [ 93.739022][ T348] samsung 0003:0419:0001.0015: probe with driver samsung failed with error -22 [ 93.919922][ T348] usb 1-1: USB disconnect, device number 52 [ 94.169864][ T306] usb 4-1: USB disconnect, device number 38 [ 94.272291][ T1943] exfat: Deprecated parameter 'debug' [ 94.278106][ T1943] syz.3.482: attempt to access beyond end of device [ 94.278106][ T1943] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 94.291328][ T1943] exFAT-fs (loop3): unable to read boot sector [ 94.297719][ T1943] exFAT-fs (loop3): failed to read boot sector [ 94.304379][ T1943] exFAT-fs (loop3): failed to recognize exfat type [ 94.325730][ T36] audit: type=1400 audit(94.297:373): avc: denied { create } for pid=1944 comm="syz.3.483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 94.403123][ T1950] SELinux: policydb version -1409107886 does not match my version range 15-33 [ 94.412511][ T1950] SELinux: failed to load policy [ 94.764539][ T1954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.773515][ T1954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.785020][ T1954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=1954 comm=syz.1.487 [ 94.798290][ T1954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=1954 comm=syz.1.487 [ 94.811621][ T1954] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 94.817516][ T1954] syzkaller1: linktype set to 270 [ 94.823133][ T1954] syzkaller1: tun_chr_ioctl cmd 35108 [ 95.171593][ T339] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 95.321571][ T339] usb 4-1: Using ep0 maxpacket: 32 [ 95.328602][ T339] usb 4-1: unable to get BOS descriptor or descriptor too short [ 95.337491][ T339] usb 4-1: config 8 has an invalid interface number: 68 but max is 0 [ 95.345698][ T339] usb 4-1: config 8 has no interface number 0 [ 95.352226][ T339] usb 4-1: config 8 interface 68 has no altsetting 0 [ 95.360746][ T339] usb 4-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=46.37 [ 95.369980][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.378071][ T339] usb 4-1: Product: syz [ 95.387677][ T339] usb 4-1: Manufacturer: syz [ 95.395497][ T339] usb 4-1: SerialNumber: syz [ 95.424137][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 95.424156][ T36] audit: type=1400 audit(95.397:375): avc: denied { audit_write } for pid=1966 comm="syz.1.491" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 95.451769][ T36] audit: type=1107 audit(95.397:376): pid=1966 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 95.537768][ T1972] kvm: kvm [1971]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x72aa [ 95.647132][ T339] ums-freecom 4-1:8.68: USB Mass Storage device detected [ 95.696902][ T339] usb 4-1: USB disconnect, device number 39 [ 95.860432][ T1987] random: crng reseeded on system resumption [ 95.887698][ T36] audit: type=1400 audit(95.857:377): avc: denied { watch } for pid=1986 comm="syz.0.495" path="/109/file1" dev="tmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.075394][ T36] audit: type=1326 audit(96.047:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2009 comm="syz.0.498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff33d9c819 code=0x0 [ 96.126725][ T2013] rust_binder: Error while translating object. [ 96.126774][ T2013] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 96.133515][ T2013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:358 [ 96.412017][ T339] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 96.445353][ T2019] netlink: 108 bytes leftover after parsing attributes in process `syz.1.501'. [ 96.503991][ T2024] syz.1.503: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0 [ 96.524388][ T2024] CPU: 1 UID: 0 PID: 2024 Comm: syz.1.503 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 96.524429][ T2024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 96.524445][ T2024] Call Trace: [ 96.524452][ T2024] [ 96.524461][ T2024] __dump_stack+0x21/0x30 [ 96.524497][ T2024] dump_stack_lvl+0x140/0x1c0 [ 96.524526][ T2024] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.524557][ T2024] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 96.524590][ T2024] dump_stack+0x19/0x20 [ 96.524617][ T2024] warn_alloc+0x1e7/0x2c0 [ 96.524643][ T2024] ? stack_depot_save_flags+0x38/0x800 [ 96.524675][ T2024] ? __cfi_warn_alloc+0x10/0x10 [ 96.524699][ T2024] ? kasan_save_track+0x3e/0x80 [ 96.524733][ T2024] ? kasan_save_alloc_info+0x40/0x50 [ 96.524760][ T2024] ? xsk_init_queue+0xb2/0x120 [ 96.524792][ T2024] ? xsk_setsockopt+0x42c/0x760 [ 96.524823][ T2024] ? do_sock_setsockopt+0x27c/0x410 [ 96.524852][ T2024] ? __x64_sys_setsockopt+0x1b7/0x250 [ 96.524879][ T2024] ? x64_sys_call+0x2adc/0x2ee0 [ 96.524912][ T2024] ? do_syscall_64+0x57/0xf0 [ 96.524956][ T2024] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.524997][ T2024] __vmalloc_node_range_noprof+0x132/0x1480 [ 96.525025][ T2024] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 96.525047][ T2024] ? kasan_save_alloc_info+0x40/0x50 [ 96.525067][ T2024] ? __kasan_kmalloc+0x96/0xb0 [ 96.525090][ T2024] ? __kmalloc_cache_noprof+0x23c/0x470 [ 96.525116][ T2024] vmalloc_user_noprof+0x77/0x90 [ 96.525136][ T2024] ? xskq_create+0xdb/0x290 [ 96.525150][ T2024] xskq_create+0xdb/0x290 [ 96.525164][ T2024] xsk_init_queue+0xb2/0x120 [ 96.525189][ T2024] xsk_setsockopt+0x42c/0x760 [ 96.525213][ T2024] ? __cfi_xsk_setsockopt+0x10/0x10 [ 96.525237][ T2024] ? do_futex+0x32a/0x510 [ 96.525257][ T2024] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 96.525283][ T2024] ? security_socket_setsockopt+0x3d/0x100 [ 96.525300][ T2024] ? __cfi_xsk_setsockopt+0x10/0x10 [ 96.525323][ T2024] do_sock_setsockopt+0x27c/0x410 [ 96.525344][ T2024] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 96.525367][ T2024] __x64_sys_setsockopt+0x1b7/0x250 [ 96.525388][ T2024] x64_sys_call+0x2adc/0x2ee0 [ 96.525411][ T2024] do_syscall_64+0x57/0xf0 [ 96.525432][ T2024] ? clear_bhb_loop+0x50/0xa0 [ 96.525455][ T2024] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.525478][ T2024] RIP: 0033:0x7fdc3079c819 [ 96.525492][ T2024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.525506][ T2024] RSP: 002b:00007fdc315d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 96.525524][ T2024] RAX: ffffffffffffffda RBX: 00007fdc30a15fa0 RCX: 00007fdc3079c819 [ 96.525536][ T2024] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 96.525546][ T2024] RBP: 00007fdc30832c91 R08: 0000000000000004 R09: 0000000000000000 [ 96.525557][ T2024] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 96.525567][ T2024] R13: 00007fdc30a16038 R14: 00007fdc30a15fa0 R15: 00007ffef3061628 [ 96.525581][ T2024] [ 96.525771][ T2024] Mem-Info: [ 96.558877][ T2025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.559611][ T2025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.565387][ T2024] active_anon:40703 inactive_anon:14 isolated_anon:0 [ 96.565387][ T2024] active_file:21912 inactive_file:2306 isolated_file:0 [ 96.565387][ T2024] unevictable:0 dirty:67 writeback:0 [ 96.565387][ T2024] slab_reclaimable:5130 slab_unreclaimable:72174 [ 96.565387][ T2024] mapped:24740 shmem:33030 pagetables:1053 [ 96.565387][ T2024] sec_pagetables:0 bounce:0 [ 96.565387][ T2024] kernel_misc_reclaimable:0 [ 96.565387][ T2024] free:1483763 free_pcp:2333 free_cma:0 [ 96.644641][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.649474][ T2024] Node 0 active_anon:163012kB inactive_anon:56kB active_file:87648kB inactive_file:9224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:98960kB dirty:268kB writeback:0kB shmem:132120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5444kB pagetables:4312kB sec_pagetables:0kB all_unreclaimable? no [ 96.655630][ T339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.659619][ T2024] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963376kB mlocked:0kB bounce:0kB free_pcp:5212kB local_pcp:0kB free_cma:0kB [ 96.665119][ T339] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 96.670053][ T2024] lowmem_reserve[]: [ 96.675780][ T339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.679671][ T2024] 0 3921 3921 [ 96.679705][ T2024] Normal free:2976460kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:163012kB inactive_anon:56kB active_file:87648kB inactive_file:9224kB unevictable:0kB writepending:268kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:4256kB local_pcp:2356kB free_cma:0kB [ 96.696423][ T339] usb 4-1: config 0 descriptor?? [ 96.699454][ T2024] lowmem_reserve[]: [ 96.902230][ T306] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 96.909912][ T2024] 0 0 0 [ 97.060020][ T2024] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 6*32kB (M) 5*64kB (M) 4*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB [ 97.075808][ T2024] Normal: 175*4kB (UME) 71*8kB (UE) 67*16kB (UME) 111*32kB (UE) 48*64kB (UE) 19*128kB (UME) 21*256kB (UME) 6*512kB (UME) 3*1024kB (ME) 2*2048kB (ME) 720*4096kB (UM) = 2976132kB [ 97.093689][ T2024] 56545 total pagecache pages [ 97.098550][ T2024] 25 pages in swap cache [ 97.103051][ T2024] Free swap = 124264kB [ 97.107336][ T2024] Total swap = 124996kB [ 97.112023][ T2024] 2097051 pages RAM [ 97.116317][ T2024] 0 pages HighMem/MovableOnly [ 97.121238][ T2024] 352241 pages reserved [ 97.125653][ T2024] 0 pages cma reserved [ 97.131664][ T306] usb 3-1: Using ep0 maxpacket: 32 [ 97.134469][ T2024] Memory allocations: [ 97.141047][ T2024] 0 B 0 init/main.c:1477 func:do_initcalls [ 97.143606][ T306] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.148503][ T2024] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 97.159724][ T306] usb 3-1: config 0 has no interfaces? [ 97.173007][ T306] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 97.183335][ T339] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 97.190448][ T339] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 97.199818][ T339] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 97.207219][ T306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.211813][ T2024] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 97.225239][ T339] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 97.237569][ T306] usb 3-1: config 0 descriptor?? [ 97.241827][ T2024] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 97.261563][ T2024] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 97.269770][ T2024] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 97.281576][ T2024] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 97.290140][ T2024] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 97.298805][ T2024] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 97.307557][ T2024] 0 B 0 init/initramfs.c:101 func:find_link [ 97.409552][ T2015] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 97.457016][ T339] cp2112 0003:10C4:EA90.0016: error requesting version [ 97.470665][ T339] cp2112 0003:10C4:EA90.0016: probe with driver cp2112 failed with error -71 [ 97.483050][ T339] usb 4-1: USB disconnect, device number 40 [ 97.598200][ T36] audit: type=1400 audit(97.567:379): avc: denied { audit_control } for pid=2034 comm="syz.0.507" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 97.838978][ T2038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.848185][ T2038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.178443][ T36] audit: type=1400 audit(98.147:380): avc: denied { accept } for pid=2042 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.198433][ T36] audit: type=1400 audit(98.167:381): avc: denied { write } for pid=2042 comm="syz.0.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.211685][ T339] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 98.371577][ T339] usb 4-1: Using ep0 maxpacket: 32 [ 98.378124][ T339] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 98.386545][ T339] usb 4-1: config 0 has no interface number 0 [ 98.392719][ T339] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 98.404810][ T339] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 98.414218][ T339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.422534][ T339] usb 4-1: Product: syz [ 98.426883][ T339] usb 4-1: Manufacturer: syz [ 98.431586][ T339] usb 4-1: SerialNumber: syz [ 98.437393][ T339] usb 4-1: config 0 descriptor?? [ 98.443006][ T2041] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.651146][ T2041] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 98.744654][ T339] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 98.765271][ T339] asix 4-1:0.188: probe with driver asix failed with error -71 [ 98.782627][ T339] usb 4-1: USB disconnect, device number 41 [ 98.899030][ T36] audit: type=1400 audit(98.867:382): avc: denied { map } for pid=2057 comm="syz.3.514" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 99.241570][ T348] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 99.321610][ T339] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 99.393020][ T348] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.403469][ T348] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.418424][ T348] usb 4-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 99.427634][ T348] usb 4-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 99.436139][ T348] usb 4-1: Product: syz [ 99.440406][ T348] usb 4-1: Manufacturer: syz [ 99.445063][ T348] usb 4-1: SerialNumber: syz [ 99.450302][ T348] usb 4-1: config 0 descriptor?? [ 99.456726][ T348] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 99.483604][ T339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.492287][ T339] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 209, changing to 7 [ 99.505197][ T339] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice= 0.40 [ 99.514810][ T339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.523188][ T339] usb 1-1: Product: syz [ 99.527475][ T339] usb 1-1: Manufacturer: syz [ 99.532286][ T339] usb 1-1: SerialNumber: syz [ 99.626140][ T306] usb 3-1: USB disconnect, device number 43 [ 99.667588][ T36] audit: type=1400 audit(99.637:383): avc: denied { connect } for pid=2077 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.704974][ T36] audit: type=1400 audit(99.677:384): avc: denied { getattr } for pid=2079 comm="syz.2.521" name="/" dev="incremental-fs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 99.711024][ T2080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 99.742776][ T339] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 99.749752][ T339] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 99.761614][ T339] usb 1-1: USB disconnect, device number 53 [ 99.773901][ T551] udevd[551]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 100.541584][ T348] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 100.646834][ T36] kauditd_printk_skb: 5 callbacks suppressed [ 100.646854][ T36] audit: type=1400 audit(100.617:390): avc: denied { write } for pid=2088 comm="syz.2.524" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 100.671744][ T348] usb 1-1: device descriptor read/64, error -71 [ 100.859283][ T36] audit: type=1400 audit(100.827:391): avc: denied { create } for pid=2091 comm="syz.1.525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 100.921570][ T348] usb 1-1: device descriptor read/64, error -71 [ 101.181599][ T348] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 101.311577][ T348] usb 1-1: device descriptor read/64, error -71 [ 101.552785][ T348] usb 1-1: device descriptor read/64, error -71 [ 101.582757][ T2101] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 101.633108][ T36] audit: type=1326 audit(101.607:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2104 comm="syz.1.528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc3079c819 code=0x0 [ 101.644303][ T2106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.527'. [ 101.665219][ T348] usb usb1-port1: attempt power cycle [ 101.739111][ T2107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.748084][ T2107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.856900][ T339] usb 4-1: USB disconnect, device number 42 [ 102.001629][ T348] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 102.022726][ T348] usb 1-1: device descriptor read/8, error -71 [ 102.153045][ T348] usb 1-1: device descriptor read/8, error -71 [ 102.191580][ T339] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 102.321630][ T339] usb 4-1: device descriptor read/64, error -71 [ 102.391667][ T348] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 102.412866][ T348] usb 1-1: device descriptor read/8, error -71 [ 102.543010][ T348] usb 1-1: device descriptor read/8, error -71 [ 102.561613][ T339] usb 4-1: device descriptor read/64, error -71 [ 102.651714][ T348] usb usb1-port1: unable to enumerate USB device [ 102.801631][ T339] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 102.831560][ T67] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 102.931616][ T339] usb 4-1: device descriptor read/64, error -71 [ 102.981577][ T67] usb 3-1: Using ep0 maxpacket: 16 [ 102.988352][ T67] usb 3-1: config index 0 descriptor too short (expected 243, got 18) [ 102.996795][ T67] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.007174][ T67] usb 3-1: config 0 has no interfaces? [ 103.014763][ T67] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 103.024001][ T67] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.032164][ T67] usb 3-1: Product: syz [ 103.036377][ T67] usb 3-1: Manufacturer: syz [ 103.041090][ T67] usb 3-1: SerialNumber: syz [ 103.048759][ T67] r8152-cfgselector 3-1: Unknown version 0x0000 [ 103.055194][ T67] r8152-cfgselector 3-1: config 0 descriptor?? [ 103.181632][ T339] usb 4-1: device descriptor read/64, error -71 [ 103.275859][ T2116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.289373][ T2116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.292585][ T339] usb usb4-port1: attempt power cycle [ 103.363524][ T348] r8152-cfgselector 3-1: USB disconnect, device number 44 [ 103.641633][ T339] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 103.661642][ T306] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 103.670543][ T339] usb 4-1: device descriptor read/8, error -71 [ 103.803241][ T339] usb 4-1: device descriptor read/8, error -71 [ 103.811592][ T306] usb 1-1: Using ep0 maxpacket: 32 [ 103.818280][ T306] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 103.826758][ T306] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 103.835965][ T306] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 103.845171][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.855136][ T306] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.864985][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 103.879153][ T306] usb 1-1: New USB device found, idVendor=03f0, idProduct=2817, bcdDevice=4a.a1 [ 103.888623][ T306] usb 1-1: New USB device strings: Mfr=121, Product=0, SerialNumber=0 [ 103.897373][ T306] usb 1-1: Manufacturer: syz [ 103.903745][ T306] usb 1-1: config 0 descriptor?? [ 103.916833][ T36] audit: type=1400 audit(103.887:393): avc: denied { map } for pid=2120 comm="syz.2.533" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.041836][ T339] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 104.062780][ T339] usb 4-1: device descriptor read/8, error -71 [ 104.115123][ T306] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x2817 [ 104.128164][ T306] usb 1-1: USB disconnect, device number 58 [ 104.135400][ T306] usblp0: removed [ 104.171732][ T752] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 104.192936][ T339] usb 4-1: device descriptor read/8, error -71 [ 104.301896][ T339] usb usb4-port1: unable to enumerate USB device [ 104.321553][ T752] usb 3-1: Invalid ep0 maxpacket: 16 [ 104.329973][ T2119] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.451612][ T752] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 104.571729][ T67] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 104.601585][ T752] usb 3-1: Invalid ep0 maxpacket: 16 [ 104.607080][ T752] usb usb3-port1: attempt power cycle [ 104.701552][ T67] usb 1-1: device descriptor read/64, error -71 [ 104.710136][ T2127] fuse: Unknown parameter 'root.3Ø v' [ 104.755144][ T2132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.763980][ T2132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.773230][ T2132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.782358][ T2132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.901044][ T306] kernel write not supported for file /uinput (pid: 306 comm: kworker/0:2) [ 104.927204][ T2136] netlink: 9 bytes leftover after parsing attributes in process `syz.3.539'. [ 104.936409][ T2136] gretap0: entered promiscuous mode [ 104.942095][ T2136] gretap0: left allmulticast mode [ 104.948698][ T2136] netlink: 5 bytes leftover after parsing attributes in process `syz.3.539'. [ 104.958308][ T752] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 104.961872][ T67] usb 1-1: device descriptor read/64, error -71 [ 104.966270][ T2136] 0ªî{X¹¦: renamed from gretap0 [ 104.979452][ T2136] 0ªî{X¹¦: left promiscuous mode [ 104.984576][ T2136] 0ªî{X¹¦: entered allmulticast mode [ 104.990717][ T2136] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 105.007321][ T752] usb 3-1: Invalid ep0 maxpacket: 16 [ 105.141591][ T752] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 105.161932][ T752] usb 3-1: Invalid ep0 maxpacket: 16 [ 105.167541][ T752] usb usb3-port1: unable to enumerate USB device [ 105.211645][ T67] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 105.312078][ T348] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 105.333616][ T2141] netlink: 16 bytes leftover after parsing attributes in process `syz.1.541'. [ 105.342725][ T67] usb 1-1: device descriptor read/64, error -71 [ 105.355887][ T2141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.364795][ T2141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.462921][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.474475][ T348] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.484729][ T348] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 105.494377][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.503565][ T348] usb 4-1: config 0 descriptor?? [ 105.510180][ T348] usbhid 4-1:0.0: can't add hid device: -22 [ 105.516354][ T348] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 105.581670][ T67] usb 1-1: device descriptor read/64, error -71 [ 105.691744][ T67] usb usb1-port1: attempt power cycle [ 105.710121][ T2139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.719472][ T2139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.744695][ T2139] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 105.753543][ T2139] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 105.772477][ T2139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.781208][ T2139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.812885][ T348] usb 4-1: USB disconnect, device number 47 [ 105.950352][ T2151] overlayfs: empty lowerdir [ 106.313348][ T67] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 106.353667][ T752] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 106.504440][ T36] audit: type=1400 audit(106.477:394): avc: denied { relabelfrom } for pid=2175 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 106.528164][ T752] usb 4-1: Using ep0 maxpacket: 16 [ 106.535555][ T36] audit: type=1400 audit(106.477:395): avc: denied { relabelto } for pid=2175 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 106.555707][ T752] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 106.573280][ T752] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 106.583094][ T752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.595925][ T752] usb 4-1: config 0 descriptor?? [ 106.650458][ T2186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.659837][ T2186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.741604][ T67] usb 1-1: device not accepting address 61, error -71 [ 106.940740][ T2188] fuse: Unknown parameter 'fl' [ 107.081850][ T67] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 107.103281][ T67] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 64 [ 107.114507][ T67] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 107.141554][ T67] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.150685][ T67] usb 1-1: config 0 descriptor?? [ 107.162035][ T2182] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 107.170479][ T67] hub 1-1:0.0: USB hub found [ 107.204577][ T2163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.215446][ T2163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.232389][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.239734][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.247236][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.254764][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.262387][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.269630][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.277249][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.284913][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.292910][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.300360][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.308067][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.315615][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.323103][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.330520][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.338037][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.345771][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.353571][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.360809][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.368305][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.375943][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.381589][ T67] hub 1-1:0.0: 1 port detected [ 107.384198][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.395485][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.402942][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.410360][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.417824][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.425256][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.432542][ T339] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 107.440815][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.450274][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.459079][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.466596][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.474113][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.481295][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.493355][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.500623][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.508522][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.516382][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.523910][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.531272][ T752] zeroplus 0003:0C12:0030.0017: unknown main item tag 0x0 [ 107.543502][ T752] zeroplus 0003:0C12:0030.0017: hidraw0: USB HID v0.0a Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 107.558091][ T752] zeroplus 0003:0C12:0030.0017: no inputs found [ 107.566855][ T752] usb 4-1: USB disconnect, device number 48 [ 107.580051][ T2195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.590027][ T2195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.601752][ T2193] fido_id[2193]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 107.616980][ T339] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.625836][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 107.637649][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 107.647760][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 107.658044][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 107.668172][ T339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 107.680646][ T339] usb 3-1: string descriptor 0 read error: -22 [ 107.686976][ T339] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 107.696500][ T339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.705620][ T339] usb 3-1: config 0 descriptor?? [ 107.711148][ T2190] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 107.729205][ T320] udevd[320]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.923665][ T36] audit: type=1400 audit(107.897:396): avc: denied { read } for pid=2189 comm="syz.2.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.149246][ T2202] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 108.160556][ T2200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.169367][ T2200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.177729][ T2202] SELinux: failed to load policy [ 108.261649][ T399] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 108.388235][ T348] usb 1-1: USB disconnect, device number 62 [ 108.412910][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.424534][ T399] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.434607][ T399] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 108.444047][ T399] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.453359][ T399] usb 4-1: config 0 descriptor?? [ 108.460435][ T399] hub 4-1:0.0: USB hub found [ 108.660264][ T399] hub 4-1:0.0: 1 port detected [ 108.743640][ T36] audit: type=1400 audit(108.717:397): avc: denied { mount } for pid=2205 comm="syz.1.564" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 108.783290][ T2208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.792313][ T2208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.923161][ T2210] netlink: 260 bytes leftover after parsing attributes in process `syz.0.566'. [ 109.054329][ T36] audit: type=1400 audit(109.027:398): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 109.082385][ T36] audit: type=1400 audit(109.037:399): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 109.115591][ T2223] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.115727][ T2222] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:421 [ 109.235021][ T36] audit: type=1400 audit(109.207:400): avc: denied { ioctl } for pid=2226 comm="syz.0.572" path="socket:[19760]" dev="sockfs" ino=19760 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 109.270870][ T399] hub 4-1:0.0: activate --> -90 [ 109.276800][ T2231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.285613][ T2231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.302507][ T752] usb 4-1: USB disconnect, device number 49 [ 109.303567][ T399] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 109.335255][ T36] audit: type=1400 audit(109.307:401): avc: denied { setattr } for pid=2233 comm="syz.3.574" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 109.375870][ T36] audit: type=1400 audit(109.327:402): avc: denied { attach_queue } for pid=2234 comm="syz.1.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 109.431757][ T2248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.440832][ T2248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.492742][ T2255] incfs: mount failed -22 [ 109.497345][ T2255] incfs: mount failed -22 [ 109.502374][ T2255] incfs: mount failed -22 [ 109.506984][ T2255] incfs: mount failed -22 [ 109.511922][ T2255] incfs: mount failed -22 [ 109.516556][ T2255] incfs: mount failed -22 [ 109.521731][ T2255] incfs: mount failed -22 [ 109.526285][ T2255] incfs: mount failed -22 [ 109.530850][ T2255] incfs: mount failed -22 [ 109.535703][ T2255] incfs: mount failed -22 [ 109.540280][ T2255] incfs: mount failed -22 [ 109.545404][ T2255] incfs: mount failed -22 [ 109.549906][ T2255] incfs: mount failed -22 [ 109.555224][ T2255] incfs: mount failed -22 [ 109.560278][ T2255] incfs: mount failed -22 [ 109.565636][ T2255] incfs: mount failed -22 [ 109.565664][ T36] audit: type=1400 audit(109.537:403): avc: denied { mount } for pid=2253 comm="syz.3.580" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 109.649970][ T2259] kvm: kvm [2258]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 109.661575][ T399] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 109.835000][ T399] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 64 [ 109.847505][ T399] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 109.861266][ T399] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.869950][ T2262] incfs_lookup_dentry err:-13 [ 109.880131][ T399] usb 1-1: config 0 descriptor?? [ 109.885509][ T2241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 109.894562][ T399] hub 1-1:0.0: USB hub found [ 109.918712][ T2265] tmpfs: Unsupported parameter 'mpol' [ 109.977441][ T2269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.986246][ T2269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.094686][ T399] hub 1-1:0.0: 1 port detected [ 110.151703][ T752] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 110.197841][ T67] usb 3-1: USB disconnect, device number 49 [ 110.301564][ T752] usb 4-1: Using ep0 maxpacket: 16 [ 110.308243][ T752] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 110.316906][ T752] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.327306][ T752] usb 4-1: config 0 has no interface number 0 [ 110.335478][ T752] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 110.344912][ T752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.353076][ T752] usb 4-1: Product: syz [ 110.357451][ T752] usb 4-1: Manufacturer: syz [ 110.362121][ T752] usb 4-1: SerialNumber: syz [ 110.369893][ T752] usb 4-1: config 0 descriptor?? [ 110.380259][ T752] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 110.388596][ T752] usb 4-1: No valid video chain found. [ 110.579854][ T399] usb 4-1: USB disconnect, device number 50 [ 110.771586][ T752] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 110.922936][ T752] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.934281][ T752] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 110.946123][ T752] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.955262][ T752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.963439][ T752] usb 3-1: Product: syz [ 110.967663][ T752] usb 3-1: Manufacturer: syz [ 110.972596][ T752] usb 3-1: SerialNumber: syz [ 110.979195][ T752] cdc_mbim 3-1:1.0: skipping garbage [ 111.108269][ T399] usb 1-1: USB disconnect, device number 63 [ 111.114442][ T67] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 111.135146][ T2286] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.186312][ T2283] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 111.247886][ T2289] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 111.384750][ T2293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.394942][ T2293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.405903][ T2293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.415520][ T2293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.795715][ T2283] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 111.803592][ T752] cdc_mbim 3-1:1.0: setting rx_max = 16384 [ 111.891644][ T339] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 112.004036][ T752] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 112.010701][ T752] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 112.018738][ T752] wwan wwan0: port wwan0mbim0 attached [ 112.027520][ T752] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 2a:b3:1e:2e:a3:7a [ 112.044650][ T339] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.060965][ T339] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 112.072404][ T339] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 112.087111][ T339] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.097113][ T339] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.105587][ T339] usb 1-1: SerialNumber: syz [ 112.118659][ T339] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 112.127030][ T339] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 112.149680][ T339] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 112.206977][ T67] usb 3-1: USB disconnect, device number 50 [ 112.225178][ T67] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 112.298374][ T67] wwan wwan0: port wwan0mbim0 disconnected [ 112.299486][ T36] audit: type=1404 audit(112.267:404): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 112.337613][ T399] usb 1-1: USB disconnect, device number 64 [ 112.341637][ T36] audit: type=1400 audit(112.297:405): avc: denied { search } for pid=2325 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 112.379404][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 112.386323][ T36] audit: type=1400 audit(112.297:406): avc: denied { read write } for pid=2313 comm="syz.1.598" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 112.387626][ T150] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 112.422265][ T36] audit: type=1400 audit(112.297:407): avc: denied { mounton } for pid=2313 comm="syz.1.598" path="/184/file0" dev="tmpfs" ino=1030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 112.441627][ T150] audit: backlog limit exceeded [ 112.451659][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 112.458608][ T150] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 112.473583][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 113.134916][ T2363] syz.1.609 (2363): /proc/2362/oom_adj is deprecated, please use /proc/2362/oom_score_adj instead. [ 115.329232][ T2438] FAULT_INJECTION: forcing a failure. [ 115.329232][ T2438] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.342791][ T2438] CPU: 1 UID: 0 PID: 2438 Comm: syz.1.635 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 115.342829][ T2438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 115.342844][ T2438] Call Trace: [ 115.342851][ T2438] [ 115.342861][ T2438] __dump_stack+0x21/0x30 [ 115.342895][ T2438] dump_stack_lvl+0x140/0x1c0 [ 115.342924][ T2438] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.342954][ T2438] ? check_stack_object+0x12b/0x150 [ 115.342986][ T2438] dump_stack+0x19/0x20 [ 115.343013][ T2438] should_fail_ex+0x3d7/0x530 [ 115.343041][ T2438] should_fail+0xf/0x20 [ 115.343066][ T2438] should_fail_usercopy+0x1e/0x30 [ 115.343095][ T2438] _copy_to_user+0x24/0xa0 [ 115.343127][ T2438] simple_read_from_buffer+0xed/0x160 [ 115.343154][ T2438] proc_fail_nth_read+0x1aa/0x220 [ 115.343180][ T2438] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 115.343206][ T2438] ? bpf_lsm_file_permission+0xd/0x20 [ 115.343230][ T2438] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 115.343257][ T2438] vfs_read+0x289/0xcb0 [ 115.343287][ T2438] ? __cfi_vfs_read+0x10/0x10 [ 115.343315][ T2438] ? __kasan_check_write+0x18/0x20 [ 115.343345][ T2438] ? mutex_lock+0x97/0x1d0 [ 115.343366][ T2438] ? __cfi_mutex_lock+0x10/0x10 [ 115.343388][ T2438] ? __fget_files+0x2c5/0x340 [ 115.343410][ T2438] ksys_read+0x145/0x260 [ 115.343440][ T2438] ? __cfi_ksys_read+0x10/0x10 [ 115.343479][ T2438] ? __kasan_check_read+0x15/0x20 [ 115.343508][ T2438] __x64_sys_read+0x7f/0x90 [ 115.343538][ T2438] x64_sys_call+0x2638/0x2ee0 [ 115.343570][ T2438] do_syscall_64+0x57/0xf0 [ 115.343600][ T2438] ? clear_bhb_loop+0x50/0xa0 [ 115.343632][ T2438] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.343662][ T2438] RIP: 0033:0x7fdc3075d04e [ 115.343681][ T2438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.343700][ T2438] RSP: 002b:00007fdc315d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.343723][ T2438] RAX: ffffffffffffffda RBX: 00007fdc315d26c0 RCX: 00007fdc3075d04e [ 115.343739][ T2438] RDX: 000000000000000f RSI: 00007fdc315d20a0 RDI: 0000000000000003 [ 115.343760][ T2438] RBP: 00007fdc315d2090 R08: 0000000000000000 R09: 0000000000000000 [ 115.343775][ T2438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.343788][ T2438] R13: 00007fdc30a16038 R14: 00007fdc30a15fa0 R15: 00007ffef3061628 [ 115.343808][ T2438] [ 116.900173][ T2479] netlink: 'syz.0.648': attribute type 10 has an invalid length. [ 116.941593][ T2479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.648'. [ 116.955270][ T2479] veth1: entered promiscuous mode [ 117.301533][ T36] kauditd_printk_skb: 37611 callbacks suppressed [ 117.301553][ T36] audit: type=1400 audit(117.267:36477): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.335626][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.342346][ T150] audit: audit_lost=517 audit_rate_limit=0 audit_backlog_limit=64 [ 117.350515][ T150] audit: backlog limit exceeded [ 117.355705][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.362349][ T36] audit: type=1400 audit(117.297:36478): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.383929][ T150] audit: audit_lost=518 audit_rate_limit=0 audit_backlog_limit=64 [ 117.391770][ T36] audit: type=1400 audit(117.297:36479): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 117.392600][ T150] audit: backlog limit exceeded [ 117.422001][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 117.538209][ T2482] netlink: 'syz.2.649': attribute type 10 has an invalid length. [ 117.573803][ T2482] netlink: 5 bytes leftover after parsing attributes in process `syz.2.649'. [ 117.592416][ T2482] bridge_slave_1: left promiscuous mode [ 117.600419][ T2482] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.394140][ T2564] x_tables: unsorted entry at hook 1 [ 122.311565][ T36] kauditd_printk_skb: 38906 callbacks suppressed [ 122.311585][ T36] audit: type=1400 audit(122.287:73761): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.345517][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.352465][ T150] audit: audit_lost=1061 audit_rate_limit=0 audit_backlog_limit=64 [ 122.360927][ T150] audit: backlog limit exceeded [ 122.366066][ T36] audit: type=1400 audit(122.287:73762): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.373100][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 122.386827][ T36] audit: type=1400 audit(122.287:73763): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.396060][ T150] audit: audit_lost=1062 audit_rate_limit=0 audit_backlog_limit=64 [ 122.413847][ T36] audit: type=1400 audit(122.287:73764): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 122.423079][ T150] audit: backlog limit exceeded [ 123.890071][ T2682] netlink: 1143 bytes leftover after parsing attributes in process `syz.2.726'. [ 123.963622][ T2685] can0: slcan on ptm0. [ 124.472300][ T2679] can0 (unregistered): slcan off ptm0. [ 124.478565][ T2719] netlink: 80 bytes leftover after parsing attributes in process `syz.2.737'. [ 124.502877][ T2721] netlink: 'syz.2.738': attribute type 12 has an invalid length. [ 124.510873][ T2721] netlink: 17 bytes leftover after parsing attributes in process `syz.2.738'. [ 124.607549][ T2731] kernel profiling enabled (shift: 34) [ 124.613417][ T2731] profiling shift: 34 too large [ 125.318125][ T2775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 126.047994][ T2819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 126.337426][ T2826] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.666240][ T2838] netlink: 188 bytes leftover after parsing attributes in process `syz.1.779'. [ 126.790794][ T2844] syzkaller1: entered promiscuous mode [ 126.819790][ T2844] syzkaller1: entered allmulticast mode [ 127.322084][ T36] kauditd_printk_skb: 37335 callbacks suppressed [ 127.322106][ T36] audit: type=1400 audit(127.287:110224): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 127.352920][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 127.365849][ T150] audit: audit_lost=1355 audit_rate_limit=0 audit_backlog_limit=64 [ 127.382697][ T150] audit: backlog limit exceeded [ 127.393255][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 127.407290][ T150] audit: audit_lost=1356 audit_rate_limit=0 audit_backlog_limit=64 [ 127.424059][ T150] audit: backlog limit exceeded [ 127.434653][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 127.448059][ T150] audit: audit_lost=1357 audit_rate_limit=0 audit_backlog_limit=64 [ 127.458109][ T150] audit: backlog limit exceeded [ 127.820626][ T2864] netlink: 96 bytes leftover after parsing attributes in process `syz.3.789'. [ 127.936014][ T2873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=102 sclass=netlink_tcpdiag_socket pid=2873 comm=syz.3.791 [ 132.331786][ T36] kauditd_printk_skb: 38987 callbacks suppressed [ 132.331804][ T36] audit: type=1400 audit(132.307:143392): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.360150][ T36] audit: type=1400 audit(132.307:143393): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.364119][ T769] Bluetooth: hci0: Frame reassembly failed (-84) [ 132.382297][ T36] audit: type=1400 audit(132.307:143394): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.410763][ T36] audit: type=1400 audit(132.307:143395): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.432191][ T36] audit: type=1400 audit(132.307:143396): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.434604][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 132.454117][ T36] audit: type=1400 audit(132.307:143397): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.463840][ T150] audit: audit_lost=3298 audit_rate_limit=0 audit_backlog_limit=64 [ 132.482090][ T36] audit: type=1400 audit(132.307:143398): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 132.490169][ T150] audit: backlog limit exceeded [ 134.411529][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 134.411540][ T754] Bluetooth: hci0: command 0x1003 tx timeout [ 137.341527][ T36] kauditd_printk_skb: 41223 callbacks suppressed [ 137.341548][ T36] audit: type=1400 audit(137.307:184436): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.377693][ T36] audit: type=1400 audit(137.317:184437): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.387448][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.399712][ T36] audit: type=1400 audit(137.317:184438): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 137.406850][ T3069] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.426577][ T3071] audit: audit_backlog=65 > audit_backlog_limit=64 [ 137.432443][ T150] audit: audit_lost=3361 audit_rate_limit=0 audit_backlog_limit=64 [ 137.448880][ T3069] audit: audit_lost=3362 audit_rate_limit=0 audit_backlog_limit=64 [ 137.457105][ T150] audit: backlog limit exceeded [ 137.461417][ T3071] audit: audit_lost=3363 audit_rate_limit=0 audit_backlog_limit=64 [ 140.001603][ T3171] pimreg: tun_chr_ioctl cmd 1074025676 [ 140.007631][ T3171] pimreg: owner set to 0 [ 140.549795][ T3204] netlink: 57 bytes leftover after parsing attributes in process `syz.2.912'. [ 141.538485][ T3256] kernel profiling enabled (shift: 9) [ 141.545701][ T3257] netlink: 'syz.0.931': attribute type 11 has an invalid length. [ 141.566450][ T3257] netlink: 'syz.0.931': attribute type 64 has an invalid length. [ 141.574627][ T3257] netlink: 5 bytes leftover after parsing attributes in process `syz.0.931'. [ 142.352449][ T36] kauditd_printk_skb: 36551 callbacks suppressed [ 142.352471][ T36] audit: type=1400 audit(142.317:220565): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.385861][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 142.392672][ T150] audit: audit_lost=3505 audit_rate_limit=0 audit_backlog_limit=64 [ 142.400605][ T150] audit: backlog limit exceeded [ 142.405885][ T36] audit: type=1400 audit(142.327:220566): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.427024][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 142.434130][ T150] audit: audit_lost=3506 audit_rate_limit=0 audit_backlog_limit=64 [ 142.442209][ T36] audit: type=1400 audit(142.327:220567): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 142.463571][ T150] audit: backlog limit exceeded [ 142.468785][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 143.804518][ T3319] netlink: 'syz.1.952': attribute type 19 has an invalid length. [ 143.850965][ T3323] x_tables: unsorted underflow at hook 3 [ 143.919339][ T3332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 144.717628][ T3363] syzkaller1: entered promiscuous mode [ 144.723266][ T3363] syzkaller1: entered allmulticast mode [ 147.234053][ T3446] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3446 comm=syz.2.999 [ 147.269962][ T3450] netlink: 'syz.2.1001': attribute type 21 has an invalid length. [ 147.361723][ T36] kauditd_printk_skb: 39697 callbacks suppressed [ 147.361742][ T36] audit: type=1400 audit(147.333:258271): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 147.389702][ T36] audit: type=1400 audit(147.333:258272): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 147.411378][ T36] audit: type=1400 audit(147.333:258273): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 147.432994][ T36] audit: type=1400 audit(147.333:258274): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 147.457977][ T36] audit: type=1400 audit(147.333:258275): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 147.460274][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 147.486036][ T150] audit: audit_lost=4172 audit_rate_limit=0 audit_backlog_limit=64 [ 147.494241][ T150] audit: backlog limit exceeded [ 147.499263][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 147.506206][ T150] audit: audit_lost=4173 audit_rate_limit=0 audit_backlog_limit=64 [ 147.968332][ T3474] netlink: 'syz.1.1010': attribute type 1 has an invalid length. [ 147.976325][ T3474] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1010'. [ 148.645957][ T3495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3495 comm=syz.1.1019 [ 149.812641][ T3516] IPv6: syztnl0: Disabled Multicast RS [ 152.371529][ T36] kauditd_printk_skb: 44646 callbacks suppressed [ 152.371550][ T36] audit: type=1400 audit(152.333:302414): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 152.399761][ T36] audit: type=1400 audit(152.343:302415): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 152.409067][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.421189][ T36] audit: type=1400 audit(152.343:302416): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 152.441658][ T150] audit: audit_lost=4343 audit_rate_limit=0 audit_backlog_limit=64 [ 152.448934][ T36] audit: type=1400 audit(152.343:302417): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 152.462073][ T150] audit: backlog limit exceeded [ 152.482818][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 152.489719][ T150] audit: audit_lost=4344 audit_rate_limit=0 audit_backlog_limit=64 [ 152.491599][ T36] audit: type=1400 audit(152.343:302418): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 152.829639][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.859564][ T3551] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1040'. [ 157.381568][ T36] kauditd_printk_skb: 41779 callbacks suppressed [ 157.381622][ T36] audit: type=1400 audit(157.353:342421): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 157.409717][ T36] audit: type=1400 audit(157.353:342422): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 157.430820][ T36] audit: type=1400 audit(157.353:342423): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 157.436149][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.463372][ T291] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.469559][ T150] audit: audit_lost=4937 audit_rate_limit=0 audit_backlog_limit=64 [ 157.472630][ T292] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.478843][ T150] audit: backlog limit exceeded [ 157.485357][ T291] audit: audit_lost=4938 audit_rate_limit=0 audit_backlog_limit=64 [ 157.490254][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 157.621835][ T3711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3711 comm=syz.3.1095 [ 159.529665][ T3790] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.635779][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1146'. [ 161.721075][ T3883] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.732310][ T307] Bluetooth: hci0: Frame reassembly failed (-84) [ 162.394841][ T36] kauditd_printk_skb: 34608 callbacks suppressed [ 162.394861][ T36] audit: type=1400 audit(162.353:375812): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 162.441917][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.451441][ T150] audit: audit_lost=5346 audit_rate_limit=0 audit_backlog_limit=64 [ 162.451512][ T36] audit: type=1400 audit(162.353:375813): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 162.461595][ T36] audit: type=1400 audit(162.353:375814): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 162.511278][ T150] audit: backlog limit exceeded [ 162.516718][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 162.521667][ T36] audit: type=1400 audit(162.353:375815): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 162.524126][ T150] audit: audit_lost=5347 audit_rate_limit=0 audit_backlog_limit=64 [ 162.551694][ T36] audit: type=1400 audit(162.363:375816): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 163.259988][ T3936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 163.311586][ T3937] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1172'. [ 163.771515][ T754] Bluetooth: hci0: command 0x1003 tx timeout [ 163.771981][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.843002][ T3959] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1180'. [ 163.853619][ T3961] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1180'. [ 163.905686][ T3955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3955 comm=syz.2.1178 [ 165.051726][ T4005] syzkaller1: entered promiscuous mode [ 165.057497][ T4005] syzkaller1: entered allmulticast mode [ 166.601338][ T4042] syzkaller1: entered promiscuous mode [ 166.607441][ T4042] syzkaller1: entered allmulticast mode [ 167.361538][ T4067] netlink: 'syz.1.1220': attribute type 16 has an invalid length. [ 167.388488][ T4067] netlink: 'syz.1.1220': attribute type 2 has an invalid length. [ 167.401492][ T36] kauditd_printk_skb: 30870 callbacks suppressed [ 167.401511][ T36] audit: type=1400 audit(167.373:403770): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 167.423184][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.441543][ T4067] netlink: 'syz.1.1220': attribute type 1 has an invalid length. [ 167.459795][ T36] audit: type=1400 audit(167.373:403771): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 167.481065][ T4067] netlink: 51790 bytes leftover after parsing attributes in process `syz.1.1220'. [ 167.521167][ T36] audit: type=1400 audit(167.373:403772): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 167.578798][ T150] audit: audit_lost=6320 audit_rate_limit=0 audit_backlog_limit=64 [ 167.587112][ T150] audit: backlog limit exceeded [ 167.592592][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 167.596949][ T36] audit: type=1400 audit(167.373:403773): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 167.599702][ T150] audit: audit_lost=6321 audit_rate_limit=0 audit_backlog_limit=64 [ 167.633239][ T150] audit: backlog limit exceeded [ 168.757297][ T3857] syz.2.1147 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 168.773608][ T4088] syzkaller1: entered promiscuous mode [ 168.795986][ T4088] syzkaller1: entered allmulticast mode [ 168.839366][ T3857] CPU: 1 UID: 0 PID: 3857 Comm: syz.2.1147 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 168.839403][ T3857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.839418][ T3857] Call Trace: [ 168.839426][ T3857] [ 168.839435][ T3857] __dump_stack+0x21/0x30 [ 168.839472][ T3857] dump_stack_lvl+0x140/0x1c0 [ 168.839501][ T3857] ? __cfi_dump_stack_lvl+0x10/0x10 [ 168.839531][ T3857] ? ___ratelimit+0x40e/0x5b0 [ 168.839567][ T3857] dump_stack+0x19/0x20 [ 168.839595][ T3857] dump_header+0xd6/0x490 [ 168.839621][ T3857] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 168.839649][ T3857] oom_kill_process+0x35d/0x640 [ 168.839686][ T3857] out_of_memory+0x624/0xa30 [ 168.839720][ T3857] ? __cfi_out_of_memory+0x10/0x10 [ 168.839754][ T3857] ? mutex_lock_killable+0x97/0x1d0 [ 168.839779][ T3857] ? __cfi_mutex_lock_killable+0x10/0x10 [ 168.839805][ T3857] mem_cgroup_out_of_memory+0x2c8/0x390 [ 168.839837][ T3857] ? css_next_descendant_pre+0x202/0x230 [ 168.839864][ T3857] ? drain_obj_stock+0xed0/0xed0 [ 168.839905][ T3857] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 168.839938][ T3857] try_charge_memcg+0x91c/0xe10 [ 168.839965][ T3857] ? __cfi_try_charge_memcg+0x10/0x10 [ 168.839993][ T3857] ? __alloc_pages_noprof+0x35f/0x7e0 [ 168.840021][ T3857] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 168.840050][ T3857] __mem_cgroup_charge+0xfc/0x420 [ 168.840080][ T3857] ? folio_add_lru+0x116/0x400 [ 168.840102][ T3857] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 168.840134][ T3857] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 168.840157][ T3857] ? finish_task_switch+0x139/0x760 [ 168.840185][ T3857] ? put_swap_device+0x130/0x130 [ 168.840213][ T3857] ? shmem_huge_global_enabled+0x2da/0x360 [ 168.840247][ T3857] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 168.840279][ T3857] ? __kasan_check_write+0x18/0x20 [ 168.840314][ T3857] ? _raw_spin_lock+0x92/0x120 [ 168.840341][ T3857] shmem_get_folio_gfp+0x607/0x1390 [ 168.840376][ T3857] ? shmem_get_folio+0xc0/0xc0 [ 168.840407][ T3857] ? follow_page_pte+0x90f/0xbc0 [ 168.840432][ T3857] ? inode_to_bdi+0x6d/0x100 [ 168.840458][ T3857] shmem_write_begin+0xf4/0x270 [ 168.840479][ T3857] generic_perform_write+0x328/0x970 [ 168.840508][ T3857] ? __cfi_generic_perform_write+0x10/0x10 [ 168.840533][ T3857] ? down_write+0xee/0x2b0 [ 168.840559][ T3857] ? file_update_time+0xa3/0x210 [ 168.840586][ T3857] shmem_file_write_iter+0x105/0x130 [ 168.840612][ T3857] __kernel_write_iter+0x42c/0x8a0 [ 168.840645][ T3857] ? __cfi___kernel_write_iter+0x10/0x10 [ 168.840676][ T3857] ? get_dump_page+0x165/0x220 [ 168.840700][ T3857] ? __asan_memset+0x39/0x50 [ 168.840731][ T3857] ? iov_iter_bvec+0xc0/0x180 [ 168.840765][ T3857] dump_user_range+0xb8b/0xe60 [ 168.840800][ T3857] ? __cfi_dump_user_range+0x10/0x10 [ 168.840833][ T3857] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 168.840867][ T3857] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 168.840901][ T3857] ? elf_core_dump+0x24c0/0x3960 [ 168.840926][ T3857] elf_core_dump+0x2e7e/0x3960 [ 168.840953][ T3857] ? __cfi_elf_core_dump+0x10/0x10 [ 168.840984][ T3857] ? dump_interrupted+0xf0/0xf0 [ 168.841014][ T3857] ? filp_open+0x199/0x1f0 [ 168.841040][ T3857] ? 0xffffffffff600000 [ 168.841074][ T3857] do_coredump+0x208a/0x2fe0 [ 168.841109][ T3857] ? __cfi_do_coredump+0x10/0x10 [ 168.841138][ T3857] ? asm_exc_general_protection+0x2b/0x30 [ 168.841179][ T3857] ? __kasan_slab_free+0x6a/0x80 [ 168.841201][ T3857] ? kmem_cache_free+0x1bd/0x4f0 [ 168.841242][ T3857] ? get_signal+0xa74/0x14e0 [ 168.841271][ T3857] get_signal+0x11f8/0x14e0 [ 168.841303][ T3857] arch_do_signal_or_restart+0xbc/0x760 [ 168.841337][ T3857] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 168.841373][ T3857] ? fixup_iopl_exception+0xe2/0x2e0 [ 168.841409][ T3857] irqentry_exit_to_user_mode+0x4d/0xb0 [ 168.841436][ T3857] irqentry_exit+0x16/0x60 [ 168.841461][ T3857] exc_general_protection+0x152/0x1e0 [ 168.841492][ T3857] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 168.841519][ T3857] asm_exc_general_protection+0x2b/0x30 [ 168.841551][ T3857] RIP: 0033:0x7f2b2e59c821 [ 168.841571][ T3857] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 168.841592][ T3857] RSP: 002b:0000200000000360 EFLAGS: 00010217 [ 168.841614][ T3857] RAX: 0000000000000000 RBX: 00007f2b2e816090 RCX: 00007f2b2e59c819 [ 168.841631][ T3857] RDX: 00002000000001c0 RSI: 0000200000000360 RDI: 0000000000320000 [ 168.841647][ T3857] RBP: 00007f2b2e632c91 R08: 00002000000003c0 R09: 00002000000003c0 [ 168.841663][ T3857] R10: 0000200000000380 R11: 0000000000000206 R12: 0000000000000000 [ 168.841679][ T3857] R13: 00007f2b2e816128 R14: 00007f2b2e816090 R15: 00007ffe0d41edd8 [ 168.841700][ T3857] [ 169.324626][ T3857] memory: usage 307196kB, limit 307200kB, failcnt 19546 [ 169.346502][ T3857] memory+swap: usage 432136kB, limit 9007199254740988kB, failcnt 0 [ 169.354760][ T3857] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 169.361829][ T3857] Memory cgroup stats for /syz2: [ 169.362037][ T3857] cache 314298368 [ 169.370876][ T3857] rss 217088 [ 169.374389][ T3857] rss_huge 0 [ 169.377674][ T3857] shmem 314298368 [ 169.381371][ T3857] mapped_file 0 [ 169.384955][ T3857] dirty 0 [ 169.387956][ T3857] writeback 0 [ 169.391308][ T3857] workingset_refault_anon 38 [ 169.396048][ T3857] workingset_refault_file 664 [ 169.400817][ T3857] swap 127938560 [ 169.404548][ T3857] swapcached 57344 [ 169.408366][ T3857] pgpgin 223765 [ 169.411941][ T3857] pgpgout 146966 [ 169.415649][ T3857] pgfault 60804 [ 169.419201][ T3857] pgmajfault 30 [ 169.422920][ T3857] inactive_anon 1859584 [ 169.427401][ T3857] active_anon 312709120 [ 169.431796][ T3857] inactive_file 0 [ 169.435617][ T3857] active_file 0 [ 169.439149][ T3857] unevictable 0 [ 169.443173][ T3857] hierarchical_memory_limit 314572800 [ 169.448726][ T3857] hierarchical_memsw_limit 9223372036854771712 [ 169.455273][ T3857] total_cache 314298368 [ 169.459516][ T3857] total_rss 217088 [ 169.465089][ T3857] total_rss_huge 0 [ 169.468936][ T3857] total_shmem 314298368 [ 169.473376][ T3857] total_mapped_file 0 [ 169.477439][ T3857] total_dirty 0 [ 169.481036][ T3857] total_writeback 0 [ 169.485022][ T3857] total_workingset_refault_anon 38 [ 169.490466][ T3857] total_workingset_refault_file 664 [ 169.495956][ T3857] total_swap 127938560 [ 169.500150][ T3857] total_swapcached 57344 [ 169.504634][ T3857] total_pgpgin 223765 [ 169.509167][ T3857] total_pgpgout 146966 [ 169.513330][ T3857] total_pgfault 60804 [ 169.517391][ T3857] total_pgmajfault 30 [ 169.521536][ T3857] total_inactive_anon 1859584 [ 169.526289][ T3857] total_active_anon 312709120 [ 169.531060][ T3857] total_inactive_file 0 [ 169.535355][ T3857] total_active_file 0 [ 169.539412][ T3857] total_unevictable 0 [ 169.543481][ T3857] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1147,pid=3865,uid=0 [ 169.560343][ T3857] Memory cgroup out of memory: Killed process 3865 (syz.2.1147) total-vm:90504kB, anon-rss:1232kB, file-rss:53552kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 169.697767][ T3856] syz.2.1147 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 169.799067][ T3856] CPU: 1 UID: 0 PID: 3856 Comm: syz.2.1147 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 169.799103][ T3856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 169.799118][ T3856] Call Trace: [ 169.799126][ T3856] [ 169.799135][ T3856] __dump_stack+0x21/0x30 [ 169.799169][ T3856] dump_stack_lvl+0x140/0x1c0 [ 169.799198][ T3856] ? __cfi_dump_stack_lvl+0x10/0x10 [ 169.799228][ T3856] ? ___ratelimit+0x40e/0x5b0 [ 169.799265][ T3856] dump_stack+0x19/0x20 [ 169.799294][ T3856] dump_header+0xd6/0x490 [ 169.799319][ T3856] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 169.799346][ T3856] oom_kill_process+0x35d/0x640 [ 169.799382][ T3856] out_of_memory+0x624/0xa30 [ 169.799417][ T3856] ? __cfi_out_of_memory+0x10/0x10 [ 169.799457][ T3856] ? mutex_lock_killable+0x115/0x1d0 [ 169.799481][ T3856] ? __cfi_mutex_lock_killable+0x10/0x10 [ 169.799506][ T3856] mem_cgroup_out_of_memory+0x2c8/0x390 [ 169.799536][ T3856] ? css_next_descendant_pre+0x202/0x230 [ 169.799560][ T3856] ? drain_obj_stock+0xed0/0xed0 [ 169.799593][ T3856] ? memcg1_oom_prepare+0x2c5/0x3a0 [ 169.799627][ T3856] try_charge_memcg+0x91c/0xe10 [ 169.799654][ T3856] ? __cfi_try_charge_memcg+0x10/0x10 [ 169.799679][ T3856] ? __alloc_pages_noprof+0x35f/0x7e0 [ 169.799707][ T3856] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 169.799734][ T3856] __mem_cgroup_charge+0xfc/0x420 [ 169.799762][ T3856] ? folio_add_lru+0x116/0x400 [ 169.799784][ T3856] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 169.799825][ T3856] shmem_alloc_and_add_folio+0x8e6/0x10b0 [ 169.799851][ T3856] ? put_swap_device+0x130/0x130 [ 169.799874][ T3856] ? shmem_huge_global_enabled+0x2da/0x360 [ 169.799910][ T3856] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 169.799944][ T3856] ? __kasan_check_write+0x18/0x20 [ 169.799975][ T3856] ? _raw_spin_lock+0x92/0x120 [ 169.800006][ T3856] shmem_get_folio_gfp+0x607/0x1390 [ 169.800048][ T3856] ? shmem_get_folio+0xc0/0xc0 [ 169.800081][ T3856] ? __kasan_check_write+0x18/0x20 [ 169.800110][ T3856] ? inode_to_bdi+0x6d/0x100 [ 169.800138][ T3856] shmem_write_begin+0xf4/0x270 [ 169.800160][ T3856] generic_perform_write+0x328/0x970 [ 169.800186][ T3856] ? inode_update_timestamps+0x4f0/0x700 [ 169.800216][ T3856] ? __cfi_generic_perform_write+0x10/0x10 [ 169.800240][ T3856] ? down_write+0xee/0x2b0 [ 169.800264][ T3856] ? mnt_get_write_access_file+0x1af/0x3b0 [ 169.800289][ T3856] ? mnt_put_write_access_file+0xc2/0x100 [ 169.800316][ T3856] ? file_update_time+0x1de/0x210 [ 169.800343][ T3856] shmem_file_write_iter+0x105/0x130 [ 169.800369][ T3856] __kernel_write_iter+0x42c/0x8a0 [ 169.800402][ T3856] ? __cfi___kernel_write_iter+0x10/0x10 [ 169.800433][ T3856] ? get_dump_page+0x165/0x220 [ 169.800457][ T3856] ? __asan_memset+0x39/0x50 [ 169.800486][ T3856] ? iov_iter_bvec+0xc0/0x180 [ 169.800519][ T3856] dump_user_range+0xb8b/0xe60 [ 169.800552][ T3856] ? __cfi_dump_user_range+0x10/0x10 [ 169.800583][ T3856] ? elf_coredump_extra_notes_write+0x442/0x4d0 [ 169.800615][ T3856] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 169.800647][ T3856] ? elf_core_dump+0x24c0/0x3960 [ 169.800669][ T3856] elf_core_dump+0x2e7e/0x3960 [ 169.800694][ T3856] ? __cfi_elf_core_dump+0x10/0x10 [ 169.800725][ T3856] ? dump_interrupted+0xf0/0xf0 [ 169.800752][ T3856] ? filp_open+0x199/0x1f0 [ 169.800776][ T3856] ? 0xffffffffff600000 [ 169.800795][ T3856] do_coredump+0x208a/0x2fe0 [ 169.800836][ T3856] ? __cfi_do_coredump+0x10/0x10 [ 169.800864][ T3856] ? asm_exc_general_protection+0x2b/0x30 [ 169.800904][ T3856] ? __kasan_slab_free+0x6a/0x80 [ 169.800924][ T3856] ? kmem_cache_free+0x1bd/0x4f0 [ 169.800955][ T3856] ? get_signal+0xa74/0x14e0 [ 169.800982][ T3856] get_signal+0x11f8/0x14e0 [ 169.801012][ T3856] arch_do_signal_or_restart+0xbc/0x760 [ 169.801045][ T3856] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 169.801079][ T3856] ? fixup_iopl_exception+0xe2/0x2e0 [ 169.801113][ T3856] irqentry_exit_to_user_mode+0x4d/0xb0 [ 169.801139][ T3856] irqentry_exit+0x16/0x60 [ 169.801162][ T3856] exc_general_protection+0x152/0x1e0 [ 169.801197][ T3856] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 169.801224][ T3856] asm_exc_general_protection+0x2b/0x30 [ 169.801254][ T3856] RIP: 0033:0x7f2b2e59c821 [ 169.801273][ T3856] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 169.801294][ T3856] RSP: 002b:0000200000000360 EFLAGS: 00010217 [ 169.801315][ T3856] RAX: 0000000000000000 RBX: 00007f2b2e816090 RCX: 00007f2b2e59c819 [ 169.801332][ T3856] RDX: 00002000000001c0 RSI: 0000200000000360 RDI: 0000000000320000 [ 169.801349][ T3856] RBP: 00007f2b2e632c91 R08: 00002000000003c0 R09: 00002000000003c0 [ 169.801365][ T3856] R10: 0000200000000380 R11: 0000000000000206 R12: 0000000000000000 [ 169.801381][ T3856] R13: 00007f2b2e816128 R14: 00007f2b2e816090 R15: 00007ffe0d41edd8 [ 169.801402][ T3856] [ 169.817208][ T3856] memory: usage 272336kB, limit 307200kB, failcnt 20290 [ 170.294771][ T3856] memory+swap: usage 392152kB, limit 9007199254740988kB, failcnt 0 [ 170.333964][ T3856] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 170.341537][ T3856] Memory cgroup stats for /syz2: [ 170.348670][ T3856] cache 275316736 [ 170.357573][ T3856] rss 253952 [ 170.360815][ T3856] rss_huge 0 [ 170.364158][ T3856] shmem 275054592 [ 170.368070][ T3856] mapped_file 69632 [ 170.372102][ T3856] dirty 8192 [ 170.375434][ T3856] writeback 0 [ 170.378833][ T3856] workingset_refault_anon 38 [ 170.391497][ T3856] workingset_refault_file 729 [ 170.399053][ T3856] swap 126648320 [ 170.430081][ T3856] swapcached 36864 [ 170.468514][ T3856] pgpgin 224597 [ 170.514166][ T3856] pgpgout 157311 [ 170.517940][ T3856] pgfault 60896 [ 170.525458][ T3856] pgmajfault 32 [ 170.529039][ T3856] inactive_anon 270340096 [ 170.533861][ T3856] active_anon 4980736 [ 170.538114][ T3856] inactive_file 0 [ 170.542896][ T3856] active_file 262144 [ 170.551599][ T3856] unevictable 0 [ 170.560333][ T3856] hierarchical_memory_limit 314572800 [ 170.604254][ T4139] netlink: 'syz.1.1247': attribute type 13 has an invalid length. [ 170.615456][ T3856] hierarchical_memsw_limit 9223372036854771712 [ 170.622695][ T4139] erspan0: refused to change device tx_queue_len [ 170.640918][ T3856] total_cache 275316736 [ 170.646259][ T3856] total_rss 253952 [ 170.656036][ T3856] total_rss_huge 0 [ 170.660401][ T3856] total_shmem 275054592 [ 170.671502][ T3856] total_mapped_file 69632 [ 170.680444][ T3856] total_dirty 8192 [ 170.689195][ T3856] total_writeback 0 [ 170.701507][ T3856] total_workingset_refault_anon 38 [ 170.708993][ T3856] total_workingset_refault_file 729 [ 170.730569][ T3856] total_swap 126648320 [ 170.743270][ T3856] total_swapcached 36864 [ 170.755259][ T3856] total_pgpgin 224597 [ 170.764508][ T3856] total_pgpgout 157311 [ 170.769125][ T3856] total_pgfault 60896 [ 170.805137][ T3856] total_pgmajfault 32 [ 170.809459][ T3856] total_inactive_anon 270340096 [ 170.829843][ T3856] total_active_anon 4980736 [ 170.851726][ T3856] total_inactive_file 0 [ 170.874264][ T3856] total_active_file 262144 [ 170.896333][ T3856] total_unevictable 0 [ 170.916020][ T3856] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1147,pid=3853,uid=0 [ 171.015164][ T3856] Memory cgroup out of memory: Killed process 3853 (syz.2.1147) total-vm:90372kB, anon-rss:1232kB, file-rss:53680kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 171.467472][ T4169] syzkaller1: entered promiscuous mode [ 171.509377][ T4169] syzkaller1: entered allmulticast mode [ 172.411473][ T36] kauditd_printk_skb: 22333 callbacks suppressed [ 172.411492][ T36] audit: type=1400 audit(172.373:423473): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 172.445279][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.461493][ T150] audit: audit_lost=7200 audit_rate_limit=0 audit_backlog_limit=64 [ 172.469748][ T150] audit: backlog limit exceeded [ 172.474786][ T36] audit: type=1400 audit(172.403:423474): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 172.496348][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.503016][ T150] audit: audit_lost=7201 audit_rate_limit=0 audit_backlog_limit=64 [ 172.511124][ T150] audit: backlog limit exceeded [ 172.516223][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 172.523185][ T36] audit: type=1400 audit(172.403:423475): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 173.307721][ T4225] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1278'. [ 175.629919][ T787] Bluetooth: hci0: Frame reassembly failed (-84) [ 175.685866][ T4295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4295 comm=syz.3.1305 [ 175.723324][ T4300] netlink: 'syz.3.1307': attribute type 13 has an invalid length. [ 175.731865][ T4300] erspan0: refused to change device tx_queue_len [ 176.499440][ T4311] netlink: 'syz.0.1312': attribute type 13 has an invalid length. [ 176.892417][ T4317] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1314'. [ 177.421480][ T36] kauditd_printk_skb: 40059 callbacks suppressed [ 177.421499][ T36] audit: type=1400 audit(177.383:462747): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 177.449491][ T36] audit: type=1400 audit(177.393:462748): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 177.471090][ T36] audit: type=1400 audit(177.393:462749): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 177.492444][ T36] audit: type=1400 audit(177.393:462750): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 177.513607][ T36] audit: type=1400 audit(177.393:462751): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 177.534835][ T36] audit: type=1400 audit(177.393:462752): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 177.536185][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.556076][ T36] audit: type=1400 audit(177.393:462753): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 177.585002][ T4327] audit: audit_backlog=65 > audit_backlog_limit=64 [ 177.591682][ T4327] audit: audit_lost=7465 audit_rate_limit=0 audit_backlog_limit=64 [ 177.691503][ T754] Bluetooth: hci0: command 0x1003 tx timeout [ 177.691516][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 177.791935][ T4342] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1326'. [ 178.474773][ T4381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1340'. [ 180.131720][ T4426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=4426 comm=syz.3.1358 [ 182.431571][ T36] kauditd_printk_skb: 40206 callbacks suppressed [ 182.431626][ T36] audit: type=1400 audit(182.403:502609): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 182.451288][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.460027][ T36] audit: type=1400 audit(182.403:502610): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 182.466624][ T150] audit: audit_lost=7583 audit_rate_limit=0 audit_backlog_limit=64 [ 182.487245][ T36] audit: type=1400 audit(182.403:502611): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 182.495383][ T150] audit: backlog limit exceeded [ 182.516969][ T36] audit: type=1400 audit(182.403:502612): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 182.523650][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 182.543218][ T36] audit: type=1400 audit(182.403:502613): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 182.569304][ T150] audit: audit_lost=7584 audit_rate_limit=0 audit_backlog_limit=64 [ 182.723276][ T4524] can0: slcan on ptm1. [ 183.212760][ T4522] can0 (unregistered): slcan off ptm1. [ 183.607874][ T787] bridge_slave_1: left allmulticast mode [ 183.625810][ T787] bridge_slave_1: left promiscuous mode [ 183.645333][ T787] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.665846][ T787] bridge_slave_0: left allmulticast mode [ 183.681511][ T787] bridge_slave_0: left promiscuous mode [ 183.697523][ T787] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.877529][ T787] veth1_macvtap: left promiscuous mode [ 183.886385][ T787] veth0_vlan: left promiscuous mode [ 184.341623][ T4566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4566 comm=syz.1.1413 [ 186.294259][ T4600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4600 comm=syz.0.1420 [ 187.441502][ T36] kauditd_printk_skb: 39969 callbacks suppressed [ 187.441522][ T36] audit: type=1400 audit(187.403:542393): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 187.468981][ T36] audit: type=1400 audit(187.413:542394): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 187.477305][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 187.490326][ T36] audit: type=1400 audit(187.413:542395): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 187.496482][ T150] audit: audit_lost=7648 audit_rate_limit=0 audit_backlog_limit=64 [ 187.517577][ T36] audit: type=1400 audit(187.413:542396): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 187.525172][ T150] audit: backlog limit exceeded [ 187.546180][ T36] audit: type=1400 audit(187.413:542397): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 187.552060][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 187.571765][ T36] audit: type=1400 audit(187.413:542398): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 189.057005][ T307] Bluetooth: hci0: Frame reassembly failed (-84) [ 191.131597][ T754] Bluetooth: hci0: command 0x1003 tx timeout [ 191.131847][ T55] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 192.451604][ T36] kauditd_printk_skb: 47751 callbacks suppressed [ 192.451626][ T36] audit: type=1400 audit(192.413:589347): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 192.473851][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 192.479715][ T36] audit: type=1400 audit(192.423:589348): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 192.487674][ T150] audit: audit_lost=7917 audit_rate_limit=0 audit_backlog_limit=64 [ 192.508185][ T36] audit: type=1400 audit(192.423:589349): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 192.516717][ T150] audit: backlog limit exceeded [ 192.537673][ T36] audit: type=1400 audit(192.423:589350): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 192.544217][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 192.563635][ T36] audit: type=1400 audit(192.423:589351): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 192.570043][ T150] audit: audit_lost=7918 audit_rate_limit=0 audit_backlog_limit=64 [ 197.461457][ T36] kauditd_printk_skb: 47420 callbacks suppressed [ 197.461478][ T36] audit: type=1400 audit(197.423:636654): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 197.489397][ T36] audit: type=1400 audit(197.433:636655): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 197.510784][ T36] audit: type=1400 audit(197.433:636656): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 197.532157][ T36] audit: type=1400 audit(197.433:636657): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 197.543260][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 197.555530][ T36] audit: type=1400 audit(197.433:636658): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 197.560605][ T150] audit: audit_lost=7958 audit_rate_limit=0 audit_backlog_limit=64 [ 197.581795][ T36] audit: type=1400 audit(197.433:636659): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 197.591129][ T150] audit: backlog limit exceeded [ 197.610699][ T36] audit: type=1400 audit(197.433:636660): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 202.471583][ T36] kauditd_printk_skb: 48689 callbacks suppressed [ 202.471604][ T36] audit: type=1400 audit(202.443:684690): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 202.491132][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.499829][ T36] audit: type=1400 audit(202.443:684691): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 202.505620][ T150] audit: audit_lost=8179 audit_rate_limit=0 audit_backlog_limit=64 [ 202.527220][ T36] audit: type=1400 audit(202.443:684692): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 202.534457][ T150] audit: backlog limit exceeded [ 202.535186][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 202.555646][ T36] audit: type=1400 audit(202.443:684693): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 202.560795][ T150] audit: audit_lost=8180 audit_rate_limit=0 audit_backlog_limit=64 [ 202.567107][ T36] audit: type=1400 audit(202.443:684694): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 205.010049][ T348] usb 2-1: USB disconnect, device number 33 [ 205.173877][ T4275] syz_tun (unregistering): left allmulticast mode [ 205.194456][ T307] bridge_slave_1: left allmulticast mode [ 205.200544][ T307] bridge_slave_1: left promiscuous mode [ 205.206530][ T307] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.324670][ T307] veth1_macvtap: left promiscuous mode [ 205.330234][ T307] veth0_vlan: left promiscuous mode [ 205.573489][ T307] ------------[ cut here ]------------ [ 205.579063][ T307] WARNING: CPU: 0 PID: 307 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 205.589139][ T307] Modules linked in: [ 205.593114][ T307] CPU: 0 UID: 0 PID: 307 Comm: kworker/u8:4 Not tainted syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 205.604818][ T307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.615127][ T307] Workqueue: netns cleanup_net [ 205.619955][ T307] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 205.626042][ T307] Code: e8 21 74 d9 fc 4b 83 3c 3e 00 75 19 e8 45 47 81 fc 49 81 ff f8 07 00 00 74 1b e8 37 47 81 fc 49 83 c7 08 eb c9 e8 2c 47 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 205.646024][ T307] RSP: 0018:ffffc9000b7cfb90 EFLAGS: 00010293 [ 205.652334][ T307] RAX: ffffffff85066384 RBX: ffff88812d9c91c0 RCX: ffff8881303ccc00 [ 205.660460][ T307] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881043bc000 [ 205.668509][ T307] RBP: ffffc9000b7cfbb0 R08: ffffffff87d380c7 R09: 1ffffffff0fa7018 [ 205.676992][ T307] R10: dffffc0000000000 R11: fffffbfff0fa7019 R12: dffffc0000000000 [ 205.685126][ T307] R13: dffffc0000000000 R14: ffff8881043bc000 R15: 0000000000000000 [ 205.693356][ T307] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 205.702458][ T307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.709084][ T307] CR2: 00007f0fec874140 CR3: 000000010bfd0000 CR4: 00000000003526b0 [ 205.717125][ T307] Call Trace: [ 205.720571][ T307] [ 205.723562][ T307] cleanup_net+0x6bd/0xc90 [ 205.728056][ T307] ? __cfi_cleanup_net+0x10/0x10 [ 205.733270][ T307] ? kick_pool+0xb9/0x550 [ 205.737644][ T307] process_scheduled_works+0x7d1/0x1020 [ 205.743394][ T307] worker_thread+0xc70/0x10b0 [ 205.748324][ T307] ? __cfi_try_to_wake_up+0x10/0x10 [ 205.753757][ T307] kthread+0x2c9/0x370 [ 205.757969][ T307] ? __cfi_worker_thread+0x10/0x10 [ 205.763341][ T307] ? __cfi_kthread+0x10/0x10 [ 205.768080][ T307] ret_from_fork+0x67/0xa0 [ 205.772745][ T307] ? __cfi_kthread+0x10/0x10 [ 205.777435][ T307] ret_from_fork_asm+0x1a/0x30 [ 205.782284][ T307] [ 205.785335][ T307] ---[ end trace 0000000000000000 ]--- [ 205.791843][ T307] ------------[ cut here ]------------ [ 205.797342][ T307] WARNING: CPU: 0 PID: 307 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 205.807582][ T307] Modules linked in: [ 205.811535][ T307] CPU: 0 UID: 0 PID: 307 Comm: kworker/u8:4 Tainted: G W syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 205.825221][ T307] Tainted: [W]=WARN [ 205.829103][ T307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 205.839511][ T307] Workqueue: netns cleanup_net [ 205.844343][ T307] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 205.850464][ T307] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 f0 46 81 fc 49 81 ff f8 07 00 00 74 1b e8 e2 46 81 fc 49 83 c7 08 eb c5 e8 d7 46 81 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 c7 46 81 fc 5b 41 5c 41 5e 41 [ 205.870143][ T307] RSP: 0018:ffffc9000b7cfb90 EFLAGS: 00010293 [ 205.876347][ T307] RAX: ffffffff850663d9 RBX: ffff8881043bc800 RCX: ffff8881303ccc00 [ 205.884388][ T307] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881043bc810 [ 205.892430][ T307] RBP: ffffc9000b7cfbb0 R08: ffffffff87d380c7 R09: 1ffffffff0fa7018 [ 205.900449][ T307] R10: dffffc0000000000 R11: fffffbfff0fa7019 R12: dffffc0000000000 [ 205.908842][ T307] R13: dffffc0000000000 R14: ffff8881043bc000 R15: 0000000000000010 [ 205.916895][ T307] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 205.926055][ T307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.932799][ T307] CR2: 00007f0fec874140 CR3: 000000010cb1c000 CR4: 00000000003526b0 [ 205.940820][ T307] Call Trace: [ 205.944198][ T307] [ 205.947258][ T307] cleanup_net+0x6bd/0xc90 [ 205.951744][ T307] ? __cfi_cleanup_net+0x10/0x10 [ 205.956724][ T307] ? kick_pool+0xb9/0x550 [ 205.961272][ T307] process_scheduled_works+0x7d1/0x1020 [ 205.967001][ T307] worker_thread+0xc70/0x10b0 [ 205.971769][ T307] ? __cfi_try_to_wake_up+0x10/0x10 [ 205.977022][ T307] kthread+0x2c9/0x370 [ 205.981134][ T307] ? __cfi_worker_thread+0x10/0x10 [ 205.986327][ T307] ? __cfi_kthread+0x10/0x10 [ 205.991049][ T307] ret_from_fork+0x67/0xa0 [ 205.995544][ T307] ? __cfi_kthread+0x10/0x10 [ 206.000191][ T307] ret_from_fork_asm+0x1a/0x30 [ 206.005297][ T307] [ 206.008368][ T307] ---[ end trace 0000000000000000 ]--- [ 206.019305][ T307] ------------[ cut here ]------------ [ 206.024936][ T307] WARNING: CPU: 0 PID: 307 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310 [ 206.034610][ T307] Modules linked in: [ 206.038544][ T307] CPU: 0 UID: 0 PID: 307 Comm: kworker/u8:4 Tainted: G W syzkaller #0 f4a4c1113d1fc99d80605e766864695bb8e4828c [ 206.051895][ T307] Tainted: [W]=WARN [ 206.055734][ T307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 206.065957][ T307] Workqueue: netns cleanup_net [ 206.070783][ T307] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 206.076434][ T307] Code: 3c 20 00 74 08 48 89 df e8 cf 3d f4 fc 48 8b 3b e8 37 66 df fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 c8 b7 00 cc e8 e2 10 9c fc <0f> 0b e9 b0 fd ff ff e8 d6 10 9c fc 0f 0b e9 18 fe ff ff e8 ca 10 [ 206.096288][ T307] RSP: 0018:ffffc9000b7cfb70 EFLAGS: 00010293 [ 206.102511][ T307] RAX: ffffffff84eb99ce RBX: ffff88812d9c91c0 RCX: ffff8881303ccc00 [ 206.110613][ T307] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881303ccc00 [ 206.118743][ T307] RBP: ffffc9000b7cfb98 R08: ffffffff87d380c7 R09: 1ffffffff0fa7018 [ 206.126947][ T307] R10: dffffc0000000000 R11: fffffbfff0fa7019 R12: 1ffffffff0fa6d68 [ 206.135083][ T307] R13: dffffc0000000000 R14: ffff88812d9c9dc0 R15: dffffc0000000000 [ 206.143135][ T307] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 206.152243][ T307] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 206.158872][ T307] CR2: 00007f0fec874140 CR3: 000000010cb1c000 CR4: 00000000003526b0 [ 206.166961][ T307] Call Trace: [ 206.170489][ T307] [ 206.173497][ T307] xfrm_net_exit+0x31/0x80 [ 206.177961][ T307] cleanup_net+0x6bd/0xc90 [ 206.182502][ T307] ? __cfi_cleanup_net+0x10/0x10 [ 206.187494][ T307] ? kick_pool+0xb9/0x550 [ 206.191991][ T307] process_scheduled_works+0x7d1/0x1020 [ 206.197957][ T307] worker_thread+0xc70/0x10b0 [ 206.202821][ T307] ? __cfi_try_to_wake_up+0x10/0x10 [ 206.208265][ T307] kthread+0x2c9/0x370 [ 206.212450][ T307] ? __cfi_worker_thread+0x10/0x10 [ 206.217616][ T307] ? __cfi_kthread+0x10/0x10 [ 206.222300][ T307] ret_from_fork+0x67/0xa0 [ 206.226782][ T307] ? __cfi_kthread+0x10/0x10 [ 206.231430][ T307] ret_from_fork_asm+0x1a/0x30 [ 206.236372][ T307] [ 206.239420][ T307] ---[ end trace 0000000000000000 ]--- [ 206.263321][ T307] bridge_slave_0: left allmulticast mode [ 206.269040][ T307] bridge_slave_0: left promiscuous mode [ 206.274853][ T307] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.386038][ T307] veth1_macvtap: left promiscuous mode [ 206.391756][ T307] veth0_vlan: left promiscuous mode [ 207.481493][ T36] kauditd_printk_skb: 40665 callbacks suppressed [ 207.481515][ T36] audit: type=1400 audit(207.443:723844): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 207.500729][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.509445][ T36] audit: type=1400 audit(207.453:723845): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 207.515796][ T150] audit: audit_lost=8686 audit_rate_limit=0 audit_backlog_limit=64 [ 207.536916][ T36] audit: type=1400 audit(207.453:723846): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 207.544578][ T150] audit: backlog limit exceeded [ 207.565616][ T36] audit: type=1400 audit(207.453:723847): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 207.571594][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 207.591109][ T36] audit: type=1400 audit(207.453:723848): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 207.597445][ T150] audit: audit_lost=8687 audit_rate_limit=0 audit_backlog_limit=64 [ 212.491530][ T36] kauditd_printk_skb: 48544 callbacks suppressed [ 212.491553][ T36] audit: type=1400 audit(212.453:772392): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 212.512828][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 212.519657][ T36] audit: type=1400 audit(212.463:772393): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 212.525905][ T150] audit: audit_lost=8688 audit_rate_limit=0 audit_backlog_limit=64 [ 212.547468][ T36] audit: type=1400 audit(212.463:772394): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 212.554894][ T150] audit: backlog limit exceeded [ 212.555743][ T150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 212.576370][ T36] audit: type=1400 audit(212.463:772395): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 212.581747][ T150] audit: audit_lost=8689 audit_rate_limit=0 audit_backlog_limit=64 [ 212.588027][ T36] audit: type=1400 audit(212.463:772396): avc: denied { read } for pid=150 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0