last executing test programs: 15m14.283433614s ago: executing program 32 (id=2900): read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f00000002c0)=r3}, 0x20) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{0x0}], 0x1}, 0x0) recvmsg$unix(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0xec0}], 0x1}, 0x2002) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f00000002c0), 0x4) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xffff, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x1ff, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x8, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000000, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0xffff, 0x81, 0x5, 0x94c, 0x1cf, 0x10000004, 0x3, 0x6, 0xffff7ffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0xfeba, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0xac5, 0x9, 0xffb, 0x2, 0x67, 0xa, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x1000005, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1fe, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x9, 0x3fed, 0x2, 0x1, 0x2, 0x101, 0x4, 0x7, 0x240, 0x4, 0x5, 0x1, 0xfffffffb, 0x1, 0x800, 0x7fffffff, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0x101, 0x6, 0x7, 0x7, 0x3, 0x2, 0x3, 0x8, 0x9, 0x0, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x3, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0xfffffffc, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7fff, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0xc1, 0x0, 0x7, 0x40, 0x7fffffff, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0x0, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff7, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x2, 0x6, 0x1000, 0xffffffff, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x7fffffff, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x4, 0x3, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9a, 0x5, 0x7f, 0x9, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x78, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x0, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x8, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0x6, 0x4d2, 0x0, {0x8, 0x2, 0xa, 0x9, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x4}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 12m40.182698295s ago: executing program 33 (id=3252): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002d80)={0xe, {"a2e3ad21ed0d52f90b9b500987f70e06d038e7ff7fc6e5539b324b298b089b07083f6d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d1780700523c921b1b9b31070d075d0936cd3b78130daa61f94b61404d64aec1b77f07227227b7ba67e0e786570400000074e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934280fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76354a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c088215ec110911e893d0a884f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6f44ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d208001349b41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa1811cf867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2a15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee53259289d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c1980778efa5ea567b7b7430acc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a0700d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8440daaa69bf5c8f4350aeae9ca1207e76061b28f27da19acc7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bd3a20d1cbe68981f392203ddf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211c7847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7818876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7beddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b3cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e781171e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488a8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b906ce2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf3f2aaaea1cc43a6c5cbe57491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7ae288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a9d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289d8523f483e1ff7408c6087f1ab6a911e818e022939987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c78e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e7c7b2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df06720ba2b26bbfcc807c8aabb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de9925838b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e1f, 0x2200005, @mcast2, 0x4009}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\x00 ', 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 11m39.242446012s ago: executing program 6 (id=3486): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11m37.976762472s ago: executing program 6 (id=3492): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921"], 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f00000002c0)='(') readv(r2, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/72, 0x48}], 0x1) 11m36.208892564s ago: executing program 1 (id=3500): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f0000012640)={0x2020}, 0x2020) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xa, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x20, 0x10, 0x303, 0x70bd28, 0x25dfd3fb, {0x0, 0x0, 0x0, r3, 0x676f0, 0x16ac1}}, 0x20}, 0x1, 0x0, 0x0, 0x400c080}, 0x20008040) 11m34.925588765s ago: executing program 5 (id=3504): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) getpeername$netlink(r0, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11m34.596782941s ago: executing program 1 (id=3506): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0}, 0xc) 11m34.585517884s ago: executing program 5 (id=3507): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0000101}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800a5223c0099ee1220d91f270cc794f4f010459a175e50bf6836d1fde03c64e15800ca62e2f754ad3d9bba6aea5a3f9b4e9e8e27662d302b289b8648dd3678c0f4ce9c26fc762f4e2cf21e80503b550ac788547e0a", @ANYRES16, @ANYBLOB="010025bd7002fddbdf25210000000c0005000201aaaaaaaaaaaa0c00050040c3fa000000000009001f007068793000000000"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x4040814) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0xcc0, 0x0, &(0x7f00000000c0)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x972, &(0x7f0000006680)=0x4) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 11m34.366312404s ago: executing program 1 (id=3508): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100230100003402000002000000", @ANYRES32=r1, @ANYBLOB="90767872fba1e0eb1f76d8d01b70f010a83ca6cc8150e111281af3e42d1301cfa1355a1a6e33"], 0x1c}}, 0x0) read$nci(r0, &(0x7f0000000200)=""/100, 0x64) read$nci(r0, &(0x7f00000002c0)=""/100, 0x64) write$nci(r0, &(0x7f0000000900)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x1, {{0x2, 0x80000000, 0xbe, "0090b5a31416f45705ab523a9e7cf7b10ac207a43862246407c527b847d464fb727c64c56deb34e1d6e4e747a5140157253e8106fa83816f55371e4e0ad73827b0459c3d3554e68243742e06fb744c518d56b6de751e1109a35fb166773f86b4acfdd742c5a9d2bf6856e4f898132ab086a69a403a7b4a577aa63429f1f0fd43d73a023ff23d6fa95b7246c6ffe862060f0529558f7a2c0eaaf51e79d20460b289f5ca209656dfb9913c9ff301918b63141accb0fbef1450393afe554afa"}, {0x0, 0x0, 0x0, 0xffff, 0x0, 0x5}}}, 0xd2) read$nci(r0, &(0x7f0000000380)=""/100, 0x64) write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, r4, 0x5eae78d9c54e9d3f, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "acc8ef65b6c1020aa28bf8fad4a69fd9"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a00)={0x254, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xfffffffffffe0606}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x94, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x800}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6b1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1d08}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xbe42}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVKEY={0xc0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x33c3fd58}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2d}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x401}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x254}, 0x1, 0x0, 0x0, 0x20000040}, 0x24000814) read$nci(r0, &(0x7f0000000500)=""/100, 0x64) read$nci(r0, &(0x7f00000005c0)=""/100, 0x64) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000003b12"], 0x5) read$nci(r0, &(0x7f0000000680)=""/100, 0x64) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0) write$nci(r0, &(0x7f00000008c0)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x7) 11m32.909805736s ago: executing program 5 (id=3510): syz_emit_ethernet(0x600, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 11m32.902406266s ago: executing program 6 (id=3511): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 11m32.634639596s ago: executing program 3 (id=3514): r0 = socket(0xa, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000001100)={0xa, 0x4a21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c, 0x0}, 0xd158e5cd336140dd) write$P9_RGETLOCK(r3, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r2, 0x0, r1, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x200, 0x0) fanotify_mark(r7, 0x1, 0x4800003e, r6, 0x0) r8 = dup2(r7, r6) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r9, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)=""/277, 0x115}, {&(0x7f00000029c0)=""/4099, 0x1003}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f0000000100)=""/258, 0x102}, {&(0x7f00000003c0)=""/178, 0xb2}], 0x5}, 0xf7d}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {0x0}, {&(0x7f0000003a00)=""/4096, 0x1000}], 0x3}, 0x6c74a33a}], 0x2, 0x10002, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f00000000c0)=@ethtool_gfeatures}) bind$rxrpc(r5, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0xffffffff, @loopback, 0x7}}, 0x24) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414aa00000000200000000000000084000000080000002001000000000000000000000000000020000000000000008400000008000000fc0000000000000000000000000000009e495570231b76c2bfe5fee275865de0d027ba0eb85443125e8e4909e95bf8286cbb645acfa35264f9e8b1d1a78ffd5f1d82eab1444d7f6c61c5a2"], 0x58, 0x4855}, 0x24000052) 11m32.498588319s ago: executing program 6 (id=3516): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x5, &(0x7f0000000440)=ANY=[@ANYRES8=r1], 0x0, 0xfffffdff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000002f77fbac141516e0000001440c0510b18000890304000084500806325f003901050b038da1002125181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl(r7, 0x3b8e, &(0x7f0000000000)="10") read(0x4, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r6, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @loopback, 0x8}}, {0xfffffffffffffe15, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x60}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r8, &(0x7f00000004c0)="d7845f31af8cac3f78af0aa408a802e491b42b0f5d57383f32c9de567ca637c766ef05d8d067554eeac0212eb986a290d39d5f3160941a39b21c60c192eeafa00151ef3f0c3cbdc621ff5cfd74b403931b3ce263766445093190aa36aff60fcf473daf7083a65980ed2e8abc18cb06a6019abafe37a729af2f55a2b6a5397d3c044871a86f0f086bcf875ea97294203783745f6889de229a60906a6cf5385d59d145ceedd1e91785b2297e1571a5adbe6349bcf85c89f700786fef7587ca55fd7ee8b2b586402bb1b2e3e02223938337cb72bc7323dbf4379d78e8811042f37b79cc69111855000000000000006becbd1ef6da2f79876b128a5bd50f01c7ef13182deaba5da0d75c1be04dfb6284bce52bf892c52e761078213debf2cc9d911f23b608424ec2aacc0a26662cd9f8c10b20ea2b1984b7e09bb58ce2c29ab193178297b7b158a358c298d5ebc77923e2111b0d1efe166d87262316a84bb5f2be78009293f19ceb6acd491ae727e8590bf65670a82db47425fb97496c7b446d9b4430d38288b332bf9f1679ff00", &(0x7f00000000c0)=""/113}, 0x20) 11m32.038784721s ago: executing program 1 (id=3518): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket(0x10, 0x803, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xc9a9c042ad77c5e5) close(r2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) sendmsg$unix(r3, &(0x7f0000000980)={&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004084}, 0x40001) bind$netlink(r1, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x4001005, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r4, 0x80685600, &(0x7f00000001c0)) 11m31.481343225s ago: executing program 3 (id=3519): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 11m31.310660673s ago: executing program 3 (id=3520): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 11m30.685790258s ago: executing program 1 (id=3521): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd700000000000010000001c0007"], 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0xc844) (fail_nth: 4) 11m30.560534906s ago: executing program 5 (id=3523): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getpeername$netlink(r0, 0x0, &(0x7f0000000540)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 11m30.544843956s ago: executing program 6 (id=3524): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x5, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}, {0xa, 0x40, 0x1, 0xb}, {0xfff9, 0x83, 0x3, 0x3}, {0x1, 0x81, 0x1, 0x1ff}, {0x0, 0x40, 0xd}]}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="c744240077dd0000c74424027fbe0000c7442406000000000f011c2466460f3881460a0f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ba4100ed40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5f}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000700)={0x1, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f00005a6000/0x3000)=nil, 0x3000, 0xc, 0x1010, r1, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) kexec_load(0x1, 0x0, 0x0, 0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7570646174650464656661756c7420757365723a74723a000000000000"], 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000780), &(0x7f0000000740)="c4e8e9d182645c14eb90d25a932c72c29fa01c6845b3aa5c9dfbad27b600226cee8e13d7fbdebd36a271b988939ca5036f5be0bb2ef29bfa54eac7", 0x3d, 0xfffffffffffffffe) sendmsg$NFC_CMD_VENDOR(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="eddddae1c80061fd437c24260000", @ANYRES64=r4, @ANYBLOB="00000008000100", @ANYRES32=0x0, @ANYBLOB="08001d0003000000"], 0x24}, 0x1, 0x0, 0x0, 0x44854}, 0x90) r8 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xa7, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x9, 0x40, 0x1, {0x22, 0x561}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4e, 0x0, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0xfa, 0x2f, 0xd, 0x40, 0x2}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x812}}, {0x7b, &(0x7f0000000800)=ANY=[@ANYBLOB="7b03a83416aaedda2f83c0a6db52486b1fe447830b60d1b403c9b746369f7b5d6581d7891264245c7d14ea7d251108159ee40623870152237937ba1c24597d0f013833abaddbefa70b98065532abd52887c008a99cb5bc2c50b5799402ec2a33558d9415807c3927f46ebfc12acfb231024d6af584b98f378f46c99e9cb278c53371e6ae85b799d987a8a80ceaa76848d3b35dfad92e9efba96b91ca9cc89fcdd2ae0d2c53198e1f928d2c3d0b274efc9f330bd26e65641d08f6bb8785f35ee35d8326f290bd7a2fea474e90541b182ce508f9e28986663129333930ebbac86e21db4059f2be83f9670e0f500d9d68171177d228e06eefe8243b8248c65c372a84f81b091d9c7eb3561f53acf05308898595199d585742b808f15f3dd62a7a794a4080c2d6f6676c1219efd895fa5a7dd50fa25052d4e307beed45440a22f94c5543fc422dd89c6cc42c1fd624475c153bc40384dd07ea649cf02a60eaeca0fc2795f3fe0461"]}]}) syz_usb_control_io$hid(r8, &(0x7f00000004c0)={0x24, &(0x7f00000003c0)={0x0, 0x22, 0x30, {0x30, 0x28, "387fddfb9a1f31c65069bc7a80f22f8f5d5978499821889a2c31a271b4d2de4e01bc050e2133fcc3f141d3b9d796"}}, &(0x7f0000000400)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000440)={0x0, 0x22, 0x8, {[@global=@item_4={0x3, 0x1, 0x6, "a0abab92"}, @global=@item_012={0x2, 0x1, 0x1, "07d9"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x1, 0x1, {0x22, 0x10}}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000500)={0x60, 0x16, 0x6e, "0dc7e12a2c7a57197318f5007c0bfafe66c1d000cb040fce7365c4a84d25dbe5172b2e166d25c3a76fb1c6af2ecd893b6e8fe276f57bcf353ac4c8e371a07a0fea89e68e7a1cd4e4efb0aee5dee38c3da1b57b08119e82da895f97be44c9c0ae8b0d2fe92d272602a32790c45d58"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x57}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000600)={0x20, 0x1, 0x44, "a0daf3d7ad4c83ed2bacf0ba000fa2b7b7fb92204bf355503c78e2cf58b618359adc74997c217817d39d55f89e1e6d7be1579cca9de6a0dce9abd5e578b0f23547b99aa5"}, &(0x7f0000000680)={0x20, 0x3, 0x1, 0x3}}) lsm_list_modules(0x0, 0x0, 0x0) 11m29.715473814s ago: executing program 5 (id=3525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = getpid() syz_pidfd_open(r2, 0x0) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r1, 0x200, &(0x7f0000000140)={0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) 11m29.715100617s ago: executing program 1 (id=3526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_setup(0x8b8, &(0x7f0000000400)=0x0) io_submit(r6, 0x1, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r5, 0x0}]) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800", @ANYRESOCT=r3, @ANYRES16=r5], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = dup(r7) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}}}, 0x84) 11m29.713223606s ago: executing program 3 (id=3527): syz_open_dev$dri(0x0, 0x1f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet(0x2, 0x1, 0x100) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7e) r3 = io_uring_setup(0x6957, &(0x7f0000000700)={0x0, 0xc54b, 0x1, 0x20001, 0x2de}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000240)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000280)=[r3], 0x1) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xc, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x4, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x0, 0x1, 0x8001, 0x1]}) shutdown(r2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x9) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./proc\x00', 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)) 11m27.435834479s ago: executing program 5 (id=3528): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000280)=""/256, 0x100}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x2}, 0x60}], 0x1, 0x22, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000040)=0x10000001, 0x4) sendto$inet6(r4, &(0x7f0000000000)='\x00', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e20, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x18, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3fffd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a43"], 0x88) 11m27.435050214s ago: executing program 3 (id=3529): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000000), 0x804000, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ppoll(&(0x7f0000000000)=[{r3, 0x4}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 11m20.470065387s ago: executing program 6 (id=3530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000017c0)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x3, 0x4400, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x4, 0x6e, 0xff}}, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfff, 0x8}}, @void, @void, @val={0x76, 0x6, {0x7, 0x8, 0x4, 0xe}}}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x4880) 11m20.46810255s ago: executing program 3 (id=3531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) getrlimit(0x7, &(0x7f00000000c0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x1e, r4, &(0x7f0000000480)=""/138, 0x1001) 11m13.41692767s ago: executing program 34 (id=3522): r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="18", 0x1, 0x20008884, &(0x7f0000000080)={0x11, 0x18, r2, 0x1, 0xfd}, 0x14) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r4, 0x84, 0x2, 0x0, &(0x7f0000001080)=0xffffffffffffff15) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000300)=ANY=[@ANYBLOB="27c659d0", @ANYRES16=r7, @ANYBLOB="210727bd7000fbdbdf251100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000140)={"907c20bbaf5c58a8c7134424c246d47f8ec0f41f1dcffaca38e8f42366648e47", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_FSGEOMETRY_V4(r8, 0x8070587c, &(0x7f0000000400)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') name_to_handle_at(r10, &(0x7f0000000240)='./mnt\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00'/16], 0x0, 0x400) ioctl$VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f0000000240)=@overlay={0xcb0, 0xe, 0x4, 0x70000, 0xffff45f2, {}, {0x4, 0x1, 0xf0, 0x8, 0xfc, 0x2, "0e831651"}, 0x8, 0x3, {}, 0x5}) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffe000/0x1000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r11 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r12 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r12, 0x10e, 0xc, &(0x7f0000000280)=0x4, 0x4) sendmsg$netlink(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000042000106000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="8b9f7f14973cea7478492f4131c195feebbdaa4e253bf58dd4766b744936a29569d68a91acd1102c3338badca90e0ee21ac9ee"], 0x18}], 0x1}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000003f0007012bbd700000000000047c00000400fc80f85297a2e4cb76383953d819217b78d1243c"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 11m10.44621314s ago: executing program 35 (id=3528): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000280)=""/256, 0x100}, {&(0x7f0000002000)=""/4096, 0x1000}], 0x2}, 0x60}], 0x1, 0x22, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f0000000040)=0x10000001, 0x4) sendto$inet6(r4, &(0x7f0000000000)='\x00', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e20, 0xe, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r6}, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x18, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3fffd}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e000a43"], 0x88) 11m7.444182975s ago: executing program 36 (id=3526): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001000000"], 0x50}}, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_setup(0x8b8, &(0x7f0000000400)=0x0) io_submit(r6, 0x1, &(0x7f0000000c40)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r5, 0x0}]) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c800", @ANYRESOCT=r3, @ANYRES16=r5], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = dup(r7) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}}}, 0x84) 11m4.435843382s ago: executing program 37 (id=3530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000017c0)={0x90, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x3, 0x4400, @void, @void, @void, @void, @void, @val={0x5, 0x3, {0x4, 0x6e, 0xff}}, @void, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x4, 0x0, {0x7, 0x1f81, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xfff, 0x8}}, @void, @void, @val={0x76, 0x6, {0x7, 0x8, 0x4, 0xe}}}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xbc}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x90}}, 0x4880) 11m3.305965145s ago: executing program 38 (id=3531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) getrlimit(0x7, &(0x7f00000000c0)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000500)=""/102400, 0x19000) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r4 = add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0x1e, r4, &(0x7f0000000480)=""/138, 0x1001) 4m8.172556298s ago: executing program 8 (id=4563): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) landlock_create_ruleset(0x0, 0x0, 0x0) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$ARCH_MAP_VDSO_64(0x1e, r3, 0x2, 0x2003) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$NILFS_IOCTL_GET_VINFO(r6, 0xc0186e86, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xfffffffffffffffd, 0x5479, 0x103d, 0x1, 0x1, 0x32a, 0xffffffffffffffff, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x48, 0x2, 0x48, 0x6}, {0x28, 0xc, 0x85, 0xdffff038}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xfffbffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) move_pages(r3, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000440)={{0x3, 0x3, 0xfffffffd, 0x1, 0x12}, 0x101, 0xdf, 'id1\x00', 'timer1\x00', 0x0, 0xdf46, 0x4000000000000001, 0x6602, 0x1}) 4m3.874535659s ago: executing program 8 (id=4572): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp6\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x204100, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) read$FUSE(r2, &(0x7f00000061c0)={0x2020}, 0x204d) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) pread64(r0, &(0x7f0000000080)=""/195, 0xc3, 0x591f) 4m0.207342745s ago: executing program 8 (id=4578): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x81, 0x0, 'queue0\x00'}) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000880)={0x0, 0xfffffffe, 0x0, 0x4, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m59.263372215s ago: executing program 8 (id=4584): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) 3m57.958573474s ago: executing program 8 (id=4587): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0xe, 0x0, 0x0, [{}]}]}}, &(0x7f00000000c0)=""/140, 0x32, 0x8c, 0x1}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x1}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r5, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000180)={0xfffc, 0x6, 0xc, 0x80001000000, 0x7, 0x5, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x6}) setns(r2, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x12800180, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6f874c37fadb9a65, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) r6 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m57.1199589s ago: executing program 8 (id=4590): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 3m41.786200289s ago: executing program 39 (id=4590): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 18.894583259s ago: executing program 4 (id=5139): socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000200)={0x2c, 0x2, r3, 0x39}, 0x10) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) getpriority(0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306806f13"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) 15.823346743s ago: executing program 4 (id=5150): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000080)) r3 = add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x139, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder1\x00', 0x802, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbbfffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$inet(0x2, 0x3, 0x4) request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)='+-,&-}\x00', r3) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000540)={&(0x7f00000000c0), 0x10, &(0x7f0000000500)={&(0x7f0000000480)={0x6, 0xa1c, 0xfffffff9, {r7, r8/1000+60000}, {0x77359400}, {0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1, 0x1}, 0x14, 0x2, 0x0, 0x0, "ab5543e3e2ae113dd6fdbb8cd72335599ce3621bebf48d63959f2de983b705d977ea017074cc1c2907e5c1b17a7f39726f49ddcf9f4b477fb70c0f02ecc520f8"}}, 0x80}, 0x1, 0x0, 0x0, 0xa000}, 0x11) r9 = socket(0x2, 0x2, 0x1) sendmsg$NL80211_CMD_GET_STATION(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4001) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) ptrace$pokeuser(0x6, r10, 0x358, 0xffff8881f5c0a000) prctl$PR_SCHED_CORE(0x3e, 0x2003, r10, 0x0, &(0x7f00000005c0)) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000000)) 13.556500617s ago: executing program 9 (id=5154): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r1 = syz_open_dev$vim2m(&(0x7f0000000200), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000700)={0x1, @vbi={0xfffffffa, 0x3, 0x9, 0x32314d48, [0xfffffd81, 0x2], [0x3, 0x2], 0x1}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) 13.24448976s ago: executing program 9 (id=5158): r0 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r0, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x3}, {0x30, 0x1, 0x0, 0xfffff024}, {0x6, 0x2, 0x0, 0x5}]}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_BULK(r3, 0x5523, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES16], 0x0, 0x20000000, 0xfffffc3e, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) syz_emit_ethernet(0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbb86aaff000000000000000000fffd00000100907801000000d482ef00000000000000000600000000000000"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x1018042, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1f3) symlink(&(0x7f0000000000)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') 11.846672819s ago: executing program 9 (id=5160): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES8=r0, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r4 = socket(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e21, 0x400a, @dev={0xfe, 0x80, '\x00', 0xa7}, 0x20000002}, 0x1c) getsockopt$sock_buf(r4, 0x1, 0x19, &(0x7f0000000000)=""/218, &(0x7f0000000280)=0xda) setns(0xc9, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6b00}, 0x80) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, &(0x7f0000000040), 0x10) ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x70bd28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x81}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.861597924s ago: executing program 9 (id=5164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4001) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) inotify_init1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) unshare(0x22060600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.053051136s ago: executing program 2 (id=5167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0}, &(0x7f0000000ac0)=0x20000, &(0x7f0000000b00)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f0000000340)=r1}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340), 0xc) 8.764548948s ago: executing program 7 (id=5169): socket(0x2b, 0x1, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0xb68, 0xfff, 0x7, 0x0, 0x12, 0x3, 0x40, 0x4, 0x6b, 0x3, 0x7, 0x0, 0x7fffffffffffffff}, {0x7ff, 0x81ff, 0x9, 0x8, 0x10, 0x81, 0x4, 0x40, 0x5, 0x3c, 0x4, 0x9, 0x3}, {0xd3, 0x80b0, 0x5, 0xff, 0x84, 0x9, 0x6, 0xe, 0xe, 0x9, 0xe, 0x6, 0x4}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x0, 0x5, 0x40, 0x40, 0x0, 0x3, 0x2004cb, 0x4000000000000000, 0x2, 0x3, 0x0, 0x1, 0x0, 0x2, 0x9, 0x1], 0x80a0000, 0x450}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.051551812s ago: executing program 4 (id=5171): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x22008010) r3 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 6.968657192s ago: executing program 7 (id=5172): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@empty, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) exit(0xfffffffffffffffd) request_key(0x0, &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='\x00', 0x0) 6.830215252s ago: executing program 9 (id=5173): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002100000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101101) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000001580)={{0xb, 0x4, 0x20e951, 0x4, '\x00', 0x7}, 0x0, [0x96, 0x41, 0x97ab, 0xfffc000000000000, 0xb3, 0x5, 0x0, 0xc71, 0xfffffffffffffff1, 0x7f, 0xcc46, 0x1, 0x10, 0x6652, 0x0, 0x5, 0x8754, 0x1, 0x80000000, 0x830e, 0x4, 0xa, 0x6, 0xaf5f, 0x7, 0x7ff, 0xe0c, 0x4, 0x1, 0xfffffffffffffffd, 0x0, 0x7, 0x5, 0x200, 0x9, 0x0, 0x5, 0x5, 0x5, 0x1, 0x400000000000004, 0x7, 0xf23, 0x2, 0x1, 0x3, 0x20f68be3, 0x1, 0x9, 0x0, 0x1ff, 0x2811, 0x6, 0x8000000000000001, 0x9, 0xff, 0xb, 0x1, 0x101, 0xffffffff, 0x9, 0x100000001, 0xa, 0x3, 0x6, 0x2c5, 0x240000000000001, 0x4, 0x2, 0x3, 0x3, 0x800, 0x8, 0x3, 0x2, 0x7ff7ffffffffffff, 0x1, 0x60000003, 0x2, 0x3, 0x5, 0x100000000, 0xff, 0xa88, 0x7fff, 0x6, 0xfffffffffffffff5, 0x8, 0x4b5f7dc4, 0x1000000000000000, 0xf3c, 0x1, 0x101, 0x106, 0x2, 0x4, 0x2, 0xffff, 0x6, 0x8, 0x0, 0x10000, 0x72, 0x5, 0xb, 0x4, 0x8, 0x2004, 0x20000000002, 0x5, 0xffffffff, 0x7, 0x100000000, 0x4, 0xff, 0x4, 0x10, 0x100000000000008, 0x100000000, 0xfffffffeffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x0, 0xc84a, 0x4, 0x2, 0x0, 0x7]}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100fdffffbf00010000e000000200000000000000000000000000000000000000000000ffff7f000001000320003c00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c25080000000000020000000000000083000000000000002b06000000000000fcffffffffffffffff7f0000000000001f00000000000000ff0100000000000006000000fcffffff000000002abd700000000000020000fd2000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@empty, @in=@private=0xa010101, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x0, 0x1, 0x6, 0x8, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x6}, {{@in=@rand_addr=0x64010102, 0x4d6, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000, 0xffffffff}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 6.722555636s ago: executing program 4 (id=5174): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0xe00, 0x0) openat$loop_ctrl(0xffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000003000000ef05000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000280), 0x8000224d, r4}, 0x38) 5.900744459s ago: executing program 4 (id=5175): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x3) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0xa9d0e030cc28d73e) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004080)={0x2020}, 0x2020) r5 = socket(0x10, 0x803, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_io_uring_setup(0x574b, 0x0, 0x0, &(0x7f0000000180), 0x0) preadv(r6, 0x0, 0x0, 0x5fae, 0x5) getsockname$packet(r5, 0x0, 0x0) accept$alg(r5, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 5.874903855s ago: executing program 7 (id=5176): connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @remote, 0x4}, 0x1c) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x22042, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ptrace$setsig(0x4203, 0x0, 0x81, &(0x7f00000000c0)={0x16, 0x7, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.557925267s ago: executing program 7 (id=5177): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101140, 0x2d9) r1 = fanotify_init(0x0, 0x101000) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) read$FUSE(r1, &(0x7f0000002300)={0x2020}, 0x2020) 5.412726201s ago: executing program 2 (id=5178): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x200400c0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) 5.239114012s ago: executing program 2 (id=5179): mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000012c0)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write(r0, 0x0, 0x0) 5.130877212s ago: executing program 0 (id=5180): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0) 4.925204591s ago: executing program 2 (id=5181): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000200)) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x20046004}], 0x1, 0x40080) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_POLICE={0x48, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x10000000, 0x6ed, 0xfffffff8, 0x1000, {0x4, 0x2, 0x1, 0x6ca, 0x4}, {0xc, 0x2, 0x5, 0xfffc, 0x4, 0x8}, 0x78, 0xfffffffe, 0x6}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4000}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x43e0}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xa4}}, 0x24040084) 4.864403275s ago: executing program 0 (id=5182): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001d0001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.056707438s ago: executing program 0 (id=5183): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r4, 0x0, 0x80000038f9, 0x0) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x1) write(r1, &(0x7f0000000040), 0xffffff4a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r5, 0x0, 0xffff, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 3.925246158s ago: executing program 2 (id=5184): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000012380)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 3.159133115s ago: executing program 9 (id=5185): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r0 = open(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wWidth\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000540)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r1, &(0x7f00000006c0)='1843', 0x4) close(r1) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000007c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) symlink(&(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', &(0x7f0000000940)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlink(&(0x7f0000000ac0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x0) 3.075751816s ago: executing program 0 (id=5186): r0 = userfaultfd(0x80801) memfd_create(&(0x7f0000000540)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0x54) listen(r1, 0x3) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100"], 0x16) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.156448916s ago: executing program 4 (id=5187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x18, r5, 0x719, 0x70bd2e, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 2.075198887s ago: executing program 0 (id=5188): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0xffff7fff, 0x4) 2.028489918s ago: executing program 7 (id=5189): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48040) ioprio_set$pid(0x3, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000380)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) open$dir(0x0, 0x0, 0x44) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) r8 = dup(r7) write$FUSE_STATX(r8, &(0x7f0000003ac0)={0x14e, 0x0, 0x0, {0x2, 0x100, 0x0, '\x00', {0x1000, 0x6, 0x8, 0xffff, 0x0, 0x0, 0xa000, '\x00', 0xffffffff00000000, 0x2, 0x80000000, 0x1, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x4}, {0xdc, 0xffffffff}, 0x3, 0x7fff, 0xc68}}}, 0x130) 1.887179788s ago: executing program 0 (id=5190): sched_setscheduler(0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000200000010d118052d40000102030109026f0003010400070904000000010100000a2401c5000a0002010209040100000802000009040101"], 0x0) 1.010582578s ago: executing program 7 (id=5191): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xf6272000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = timerfd_create(0x1, 0x0) timerfd_settime(r0, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=5192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x24, 0x18, 0x1, 0x70bd2b, 0x0, {0x80, 0x20, 0x0, 0x9, 0x0, 0x4, 0x0, 0x5}, [@RTA_DST={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x0) kernel console output (not intermixed with test programs): ="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1644.007062][ T30] audit: type=1400 audit(1786975935.555:9147): avc: denied { open } for pid=27743 comm="syz.7.4395" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1644.095883][T21040] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1644.156715][T21040] usb 3-1: device descriptor read/8, error -71 [ 1644.263120][T27783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1644.329490][T27783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1644.445774][T21040] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1644.496408][T21040] usb 3-1: device descriptor read/8, error -71 [ 1644.544314][ T30] audit: type=1400 audit(1786975936.125:9148): avc: denied { read } for pid=27785 comm="syz.7.4404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1644.663436][T21040] usb usb3-port1: unable to enumerate USB device [ 1646.469129][ T30] audit: type=1400 audit(1786975938.055:9149): avc: denied { map } for pid=27801 comm="syz.0.4410" path="/dev/loop5" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1647.180553][T27811] FAULT_INJECTION: forcing a failure. [ 1647.180553][T27811] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.291950][T27811] CPU: 0 UID: 0 PID: 27811 Comm: syz.7.4413 Tainted: G L syzkaller #0 PREEMPT(full) [ 1647.291969][T27811] Tainted: [L]=SOFTLOCKUP [ 1647.291974][T27811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1647.291980][T27811] Call Trace: [ 1647.291985][T27811] [ 1647.291989][T27811] dump_stack_lvl+0x100/0x190 [ 1647.292008][T27811] should_fail_ex.cold+0x5/0xa [ 1647.292022][T27811] should_failslab+0xc2/0x120 [ 1647.292037][T27811] __kmalloc_noprof+0xfc/0x820 [ 1647.292050][T27811] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1647.292069][T27811] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1647.292087][T27811] genl_family_rcv_msg_doit+0xc7/0x300 [ 1647.292102][T27811] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1647.292120][T27811] ? bpf_lsm_capable+0x9/0x10 [ 1647.292131][T27811] ? security_capable+0x80/0x260 [ 1647.292146][T27811] ? ns_capable+0xd2/0xf0 [ 1647.292161][T27811] genl_rcv_msg+0x560/0x800 [ 1647.292176][T27811] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1647.292190][T27811] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 1647.292208][T27811] netlink_rcv_skb+0x159/0x420 [ 1647.292220][T27811] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1647.292234][T27811] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1647.292252][T27811] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1647.292264][T27811] genl_rcv+0x28/0x40 [ 1647.292276][T27811] netlink_unicast+0x585/0x850 [ 1647.292290][T27811] ? __pfx_netlink_unicast+0x10/0x10 [ 1647.292302][T27811] ? __pfx_sock_has_perm+0x10/0x10 [ 1647.292319][T27811] netlink_sendmsg+0x8b0/0xda0 [ 1647.292333][T27811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1647.292346][T27811] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1647.292364][T27811] ____sys_sendmsg+0xa4d/0xbe0 [ 1647.292374][T27811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1647.292387][T27811] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1647.292403][T27811] ___sys_sendmsg+0x190/0x1e0 [ 1647.292415][T27811] ? __pfx____sys_sendmsg+0x10/0x10 [ 1647.292425][T27811] ? __lock_acquire+0x49f/0x1a40 [ 1647.292439][T27811] ? get_pid_task+0x106/0x250 [ 1647.292465][T27811] __sys_sendmsg+0x160/0x210 [ 1647.292479][T27811] ? __pfx___sys_sendmsg+0x10/0x10 [ 1647.292501][T27811] do_syscall_64+0x115/0x870 [ 1647.292513][T27811] ? clear_bhb_loop+0x70/0xc0 [ 1647.292526][T27811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.292537][T27811] RIP: 0033:0x7ff73ad9e0d9 [ 1647.292547][T27811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1647.292557][T27811] RSP: 002b:00007ff73bc32028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1647.292568][T27811] RAX: ffffffffffffffda RBX: 00007ff73b025fa0 RCX: 00007ff73ad9e0d9 [ 1647.292575][T27811] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1647.292582][T27811] RBP: 00007ff73bc32090 R08: 0000000000000000 R09: 0000000000000000 [ 1647.292588][T27811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1647.292594][T27811] R13: 00007ff73b026038 R14: 00007ff73b025fa0 R15: 00007ffc65517008 [ 1647.292608][T27811] [ 1651.229976][ T30] audit: type=1326 audit(1786975942.816:9150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27860 comm="syz.0.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5a1643bcba code=0x7ffc0000 [ 1651.433900][ T30] audit: type=1326 audit(1786975942.856:9151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27860 comm="syz.0.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e0d9 code=0x7ffc0000 [ 1651.707068][ T30] audit: type=1326 audit(1786975942.856:9152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27860 comm="syz.0.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e0d9 code=0x7ffc0000 [ 1652.081929][ T30] audit: type=1326 audit(1786975942.856:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27860 comm="syz.0.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e0d9 code=0x7ffc0000 [ 1652.322312][ T30] audit: type=1326 audit(1786975942.866:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27860 comm="syz.0.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5a1643bcba code=0x7ffc0000 [ 1652.548344][ T30] audit: type=1326 audit(1786975942.866:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27860 comm="syz.0.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5a1559e0d9 code=0x7ffc0000 [ 1652.946870][ T30] audit: type=1326 audit(1786975942.876:9156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27860 comm="syz.0.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5a1643bcba code=0x7ffc0000 [ 1653.190410][ T30] audit: type=1326 audit(1786975942.876:9157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27860 comm="syz.0.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e0d9 code=0x7ffc0000 [ 1653.449722][ T30] audit: type=1326 audit(1786976198.889:9158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27860 comm="syz.0.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5a1643bcba code=0x7ffc0000 [ 1653.675001][ T30] audit: type=1326 audit(1786976198.889:9159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27860 comm="syz.0.4422" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e0d9 code=0x7ffc0000 [ 1655.620317][T27921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4441'. [ 1656.554964][T27931] netlink: 'syz.9.4443': attribute type 10 has an invalid length. [ 1656.728761][T27915] syz.7.4437 (27915): drop_caches: 2 [ 1657.045109][ T5715] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 1657.188927][T27943] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4446'. [ 1657.267326][ T5715] usb 10-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 1657.319067][ T5715] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1657.395108][ T5715] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1657.474098][ T5715] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1657.581563][ T5715] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.654963][ T5715] usb 10-1: config 0 descriptor?? [ 1659.613054][ T5715] usb 10-1: string descriptor 0 read error: -71 [ 1659.676420][ T5715] usbhid 10-1:0.0: can't add hid device: -22 [ 1659.721526][ T5715] usbhid 10-1:0.0: probe with driver usbhid failed with error -22 [ 1659.807453][ T5715] usb 10-1: USB disconnect, device number 14 [ 1660.206974][T23190] nvmet: Created nvm controller 134 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:f2ed1d14-511d-48f8-b1df-b31cec823893. [ 1660.337791][T27977] nvme nvme133: creating 1 I/O queues. [ 1660.344784][T27977] nvme nvme133: new ctrl: "testsubsys" [ 1661.943778][ T188] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1662.135643][ T188] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1662.222129][ T188] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1662.297446][ T188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.370856][ T188] usb 9-1: config 0 descriptor?? [ 1662.632655][T28002] syz.7.4460 (28002): drop_caches: 2 [ 1662.645859][ T188] usbhid 9-1:0.0: can't add hid device: -71 [ 1662.682648][ T188] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1662.758927][ T188] usb 9-1: USB disconnect, device number 27 [ 1663.142094][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1663.265888][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1664.034937][T28001] syz.9.4459 (28001): drop_caches: 2 [ 1665.875460][T28018] syz.2.4465 (28018): drop_caches: 2 [ 1667.171623][T28045] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4475'. [ 1668.938792][T28063] netlink: 'syz.9.4479': attribute type 10 has an invalid length. [ 1672.392104][T28078] syz.0.4483 (28078): drop_caches: 2 [ 1672.600512][T28074] syz.9.4482 (28074): drop_caches: 2 [ 1673.009745][T28089] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.4487'. [ 1673.757306][T28110] syzkaller0: entered promiscuous mode [ 1673.816756][T28110] syzkaller0: entered allmulticast mode [ 1673.896245][T28112] tipc: Started in network mode [ 1673.914894][T28115] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=28115 comm=syz.7.4494 [ 1673.975828][T28112] tipc: Node identity d60ceaa05f23, cluster identity 4711 [ 1674.087753][T28112] tipc: Enabled bearer , priority 0 [ 1674.139165][T28114] syz.8.4492 (28114): drop_caches: 2 [ 1674.198595][T28120] netlink: 'syz.7.4494': attribute type 1 has an invalid length. [ 1674.294038][T28120] netlink: 'syz.7.4494': attribute type 2 has an invalid length. [ 1674.375329][T28124] tipc: Resetting bearer [ 1674.436197][T28108] tipc: Resetting bearer [ 1674.617179][T28108] tipc: Disabling bearer [ 1675.332980][T28129] netlink: 'syz.9.4497': attribute type 10 has an invalid length. [ 1675.403168][T24487] tipc: Node number set to 2301618848 [ 1675.637598][T28135] syz.8.4499 (28135): drop_caches: 2 [ 1675.660097][T28138] tipc: MTU too low for tipc bearer [ 1677.418015][T28160] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4508'. [ 1677.514405][T28159] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1677.572341][T28166] bridge0: port 3(veth0) entered blocking state [ 1677.663535][T28166] bridge0: port 3(veth0) entered disabled state [ 1677.725072][T28166] veth0: entered allmulticast mode [ 1677.842195][T28166] veth0: entered promiscuous mode [ 1677.997367][T19820] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1678.008962][T25443] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1678.020562][T28166] bridge0: port 3(veth0) entered blocking state [ 1678.026865][T28166] bridge0: port 3(veth0) entered forwarding state [ 1678.143119][T19820] usb 10-1: device descriptor read/64, error -71 [ 1678.247118][T28177] 9pnet_fd: p9_fd_create_tcp (28177): problem connecting socket to 127.0.0.1 [ 1678.421158][T19820] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1678.620923][T19820] usb 10-1: device descriptor read/64, error -71 [ 1678.676566][ T30] kauditd_printk_skb: 183 callbacks suppressed [ 1678.676577][ T30] audit: type=1400 audit(1786976994.265:9343): avc: denied { getopt } for pid=28186 comm="syz.8.4517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1678.709054][T28187] xt_hashlimit: size too large, truncated to 1048576 [ 1678.773963][T28189] syz.0.4518 (28189): drop_caches: 2 [ 1678.794689][T19820] usb usb10-port1: attempt power cycle [ 1678.878055][ T30] audit: type=1326 audit(1786976994.465:9344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f01cb9eecba code=0x7ffc0000 [ 1679.080427][ T30] audit: type=1326 audit(1786976994.465:9345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cab9e0d9 code=0x7ffc0000 [ 1679.183567][T28198] syz.0.4519 (28198): drop_caches: 2 [ 1679.200796][T19820] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1679.271205][T19820] usb 10-1: device descriptor read/8, error -71 [ 1680.450393][ T30] audit: type=1326 audit(1786976994.465:9346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cab9e0d9 code=0x7ffc0000 [ 1680.702273][ T30] audit: type=1326 audit(1786976994.465:9347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cab9e0d9 code=0x7ffc0000 [ 1682.113615][ T30] audit: type=1326 audit(1786976994.465:9348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f01cb9eecba code=0x7ffc0000 [ 1682.278150][T28215] FAULT_INJECTION: forcing a failure. [ 1682.278150][T28215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1682.432105][T28215] CPU: 0 UID: 0 PID: 28215 Comm: syz.2.4523 Tainted: G L syzkaller #0 PREEMPT(full) [ 1682.432124][T28215] Tainted: [L]=SOFTLOCKUP [ 1682.432128][T28215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1682.432135][T28215] Call Trace: [ 1682.432139][T28215] [ 1682.432144][T28215] dump_stack_lvl+0x100/0x190 [ 1682.432162][T28215] should_fail_ex.cold+0x5/0xa [ 1682.432185][T28215] _copy_from_user+0x2e/0xd0 [ 1682.432202][T28215] copy_msghdr_from_user+0x9f/0x4c0 [ 1682.432215][T28215] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1682.432232][T28215] ___sys_sendmsg+0x106/0x1e0 [ 1682.432244][T28215] ? __pfx____sys_sendmsg+0x10/0x10 [ 1682.432254][T28215] ? __lock_acquire+0x49f/0x1a40 [ 1682.432268][T28215] ? get_pid_task+0x106/0x250 [ 1682.432293][T28215] __sys_sendmsg+0x160/0x210 [ 1682.432307][T28215] ? __pfx___sys_sendmsg+0x10/0x10 [ 1682.432328][T28215] do_syscall_64+0x115/0x870 [ 1682.432341][T28215] ? clear_bhb_loop+0x70/0xc0 [ 1682.432353][T28215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.432364][T28215] RIP: 0033:0x7f741839e0d9 [ 1682.432374][T28215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.432385][T28215] RSP: 002b:00007f7419306028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1682.432396][T28215] RAX: ffffffffffffffda RBX: 00007f7418625fa0 RCX: 00007f741839e0d9 [ 1682.432403][T28215] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1682.432410][T28215] RBP: 00007f7419306090 R08: 0000000000000000 R09: 0000000000000000 [ 1682.432416][T28215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1682.432422][T28215] R13: 00007f7418626038 R14: 00007f7418625fa0 R15: 00007ffe36bc6088 [ 1682.432436][T28215] [ 1682.435938][ T30] audit: type=1326 audit(1786976994.465:9349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cab9e0d9 code=0x7ffc0000 [ 1683.314972][ T188] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1683.531806][ T188] usb 3-1: Using ep0 maxpacket: 8 [ 1683.545946][ T188] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1683.567792][T25443] Bluetooth: hci2: unexpected event for opcode 0x0401 [ 1683.602337][ T188] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1683.661553][T28235] SQUASHFS error: Failed to read block 0x0: -5 [ 1683.678311][ T188] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.715630][T28235] unable to read squashfs_super_block [ 1683.732459][ T188] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1683.847863][ T188] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1683.918812][ T188] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1683.933689][ T188] usb 3-1: Product: syz [ 1683.974511][ T188] usb 3-1: Manufacturer: syz [ 1684.022897][ T188] usb 3-1: SerialNumber: syz [ 1684.150076][T28242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1684.197205][ T30] audit: type=1326 audit(1786976994.505:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f01cb9eecba code=0x7ffc0000 [ 1684.268788][T28242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1684.309639][ T188] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1684.365014][ T188] usb 3-1: USB disconnect, device number 83 [ 1684.395083][ T30] audit: type=1326 audit(1786976994.505:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f01cab9e0d9 code=0x7ffc0000 [ 1684.553681][ T30] audit: type=1326 audit(1786976994.535:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f01cb9eecba code=0x7ffc0000 [ 1684.743293][ T30] audit: type=1326 audit(1786976994.535:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cab9e0d9 code=0x7ffc0000 [ 1684.784842][T28247] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4534'. [ 1684.916860][T28250] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4535'. [ 1685.005428][ T30] audit: type=1326 audit(1786976994.535:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f01cab9de42 code=0x7ffc0000 [ 1685.220447][T19820] usb 3-1: new low-speed USB device number 84 using dummy_hcd [ 1685.258265][ T30] audit: type=1326 audit(1786976994.535:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f01cab9ded7 code=0x7ffc0000 [ 1685.291276][T28263] random: crng reseeded on system resumption [ 1685.420751][T19820] usb 3-1: Invalid ep0 maxpacket: 16 [ 1685.461403][ T30] audit: type=1326 audit(1786976994.535:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f01cab5add1 code=0x7ffc0000 [ 1685.592384][T19820] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 1685.670320][T28281] syz.0.4543 (28281): drop_caches: 2 [ 1685.710258][ T30] audit: type=1326 audit(1786976994.535:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f01cab9eec9 code=0x7ffc0000 [ 1685.840473][T19820] usb 3-1: Invalid ep0 maxpacket: 16 [ 1686.747137][T19820] usb usb3-port1: attempt power cycle [ 1686.840021][ T188] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1687.087248][ T30] audit: type=1326 audit(1786976994.535:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f01cab5ae3b code=0x7ffc0000 [ 1687.163711][ T188] usb 9-1: Using ep0 maxpacket: 8 [ 1687.226629][ T188] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1687.297592][ T188] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1687.353597][ T188] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1687.364397][T19820] usb 3-1: new low-speed USB device number 86 using dummy_hcd [ 1687.379411][ T30] audit: type=1326 audit(1786976994.535:9359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28186 comm="syz.8.4517" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01cab9e0d9 code=0x7ffc0000 [ 1687.453501][T19820] usb 3-1: Invalid ep0 maxpacket: 16 [ 1687.465723][ T188] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1687.534219][ T188] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1687.596674][ T188] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1687.620046][T19820] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 1687.681223][T19820] usb 3-1: Invalid ep0 maxpacket: 16 [ 1687.699015][ T188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.715964][T19820] usb usb3-port1: unable to enumerate USB device [ 1687.964970][ T188] usb 9-1: GET_CAPABILITIES returned 0 [ 1688.021983][ T188] usbtmc 9-1:16.0: can't read capabilities [ 1688.174736][T28309] tipc: MTU too low for tipc bearer [ 1688.451602][T28317] tipc: MTU too low for tipc bearer [ 1688.749908][T28321] nvme_fcloop: unknown parameter or missing value '00000000000000000000002 00000000000000000000177 00000000000000000000007' [ 1688.779098][T19820] IPVS: starting estimator thread 0... [ 1688.909857][T28323] IPVS: using max 21 ests per chain, 50400 per kthread [ 1689.069153][T21040] usb 9-1: USB disconnect, device number 28 [ 1689.310867][T19820] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1689.519684][T19820] usb 3-1: Using ep0 maxpacket: 32 [ 1689.557022][T19820] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1689.633288][T19820] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1689.701812][T19820] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1689.787061][T19820] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1689.845497][T19820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1689.871004][T28339] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4560'. [ 1689.899181][T19820] usb 3-1: Product: syz [ 1689.922433][T19820] usb 3-1: Manufacturer: syz [ 1689.964104][T19820] usb 3-1: SerialNumber: syz [ 1689.970297][T21040] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1690.000397][T19820] usb 3-1: config 0 descriptor?? [ 1690.079567][ T188] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 1690.147512][T28339] ipvlan2: entered allmulticast mode [ 1690.173549][T21040] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1690.257273][T21040] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.284698][T28339] syz_tun: entered allmulticast mode [ 1690.309740][ T188] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1690.345081][T21040] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.370866][ T188] usb 10-1: not running at top speed; connect to a high speed hub [ 1690.422737][T21040] usb 8-1: config 0 descriptor?? [ 1690.428113][ T188] usb 10-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 1690.446599][T19820] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1690.512291][ T188] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.581374][ T188] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1690.650564][T19820] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1690.686224][ T188] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1690.735144][T21040] usbhid 8-1:0.0: can't add hid device: -71 [ 1690.750637][T19820] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -32 [ 1690.774840][ T188] usb 10-1: Product: syz [ 1690.792851][T21040] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1690.820524][ T188] usb 10-1: Manufacturer: syz [ 1690.871738][ T188] usb 10-1: SerialNumber: syz [ 1690.962718][T21040] usb 8-1: USB disconnect, device number 18 [ 1691.077189][T19820] usb 3-1: USB disconnect, device number 88 [ 1691.340947][ T188] usb 10-1: unit 14 not found! [ 1691.370743][T21040] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1691.836110][T21040] usb 8-1: Using ep0 maxpacket: 32 [ 1692.686778][T21040] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1692.792421][ T188] usb 10-1: USB disconnect, device number 19 [ 1692.883314][T21040] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1692.902516][T24730] udevd[24730]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1692.959511][T21040] usb 8-1: can't read configurations, error -71 [ 1693.269712][ T188] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1693.382961][T28350] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4562'. [ 1693.469357][ T188] usb 10-1: Using ep0 maxpacket: 8 [ 1693.505497][ T188] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1693.572498][ T188] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 1693.631681][ T188] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 1693.695139][ T188] usb 10-1: config 0 has no interface number 0 [ 1693.742392][ T188] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1693.835830][ T188] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1693.924638][ T188] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1694.007476][ T188] usb 10-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1694.066167][ T188] usb 10-1: Product: syz [ 1694.093828][T28379] input: syz1 as /devices/virtual/input/input29 [ 1694.112609][ T188] usb 10-1: Manufacturer: syz [ 1694.153954][ T188] usb 10-1: config 0 descriptor?? [ 1694.165624][T28379] input: failed to attach handler leds to device input29, error: -6 [ 1694.209225][T28360] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1694.256680][T28377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1694.344692][T28382] nvme_fabrics: unknown parameter or missing value 'tran' in ctrl creation request [ 1694.449901][T28377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4569'. [ 1694.927226][ T188] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input30 [ 1696.597388][T21040] usb 10-1: USB disconnect, device number 20 [ 1696.597433][ C0] keyspan_remote 10-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1698.028434][T24487] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1698.229858][T24487] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1698.265271][T28399] syz.2.4573 (28399): drop_caches: 2 [ 1698.291857][T24487] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1698.337532][T24487] usb 10-1: Product: syz [ 1698.368073][T24487] usb 10-1: SerialNumber: syz [ 1698.400492][T24487] usb 10-1: config 0 descriptor?? [ 1698.443505][T24487] hso 10-1:0.0: Not our interface [ 1699.044470][T28407] netlink: 'syz.2.4575': attribute type 10 has an invalid length. [ 1699.146649][T28411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4577'. [ 1699.864411][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 1699.864421][ T30] audit: type=1400 audit(1786978295.457:9403): avc: denied { ioctl } for pid=28422 comm="syz.0.4580" path="socket:[177670]" dev="sockfs" ino=177670 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1700.784802][ T188] usb 10-1: USB disconnect, device number 21 [ 1701.978475][T24630] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1702.200472][T24630] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1702.287070][T24630] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1702.381633][T24630] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1702.483726][T24630] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1702.585220][T24630] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1702.685254][T28455] tipc: MTU too low for tipc bearer [ 1702.732073][T24630] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1702.784541][T24630] usb 8-1: Manufacturer: syz [ 1702.850711][T24630] usb 8-1: config 0 descriptor?? [ 1703.607453][T24630] usbhid 8-1:0.0: can't add hid device: -71 [ 1703.737367][T28468] FAULT_INJECTION: forcing a failure. [ 1703.737367][T28468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1703.750769][T28468] CPU: 0 UID: 0 PID: 28468 Comm: syz.9.4594 Tainted: G L syzkaller #0 PREEMPT(full) [ 1703.750787][T28468] Tainted: [L]=SOFTLOCKUP [ 1703.750791][T28468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1703.750797][T28468] Call Trace: [ 1703.750801][T28468] [ 1703.750806][T28468] dump_stack_lvl+0x100/0x190 [ 1703.750823][T28468] should_fail_ex.cold+0x5/0xa [ 1703.750838][T28468] _copy_from_user+0x2e/0xd0 [ 1703.750854][T28468] io_uring_setup+0xc0/0x160 [ 1703.750882][T28468] ? __pfx_io_uring_setup+0x10/0x10 [ 1703.750898][T28468] ? find_held_lock+0x2b/0x80 [ 1703.750908][T28468] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1703.750921][T28468] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1703.750943][T28468] ? ksys_write+0x1ac/0x250 [ 1703.750953][T28468] ? __pfx_ksys_write+0x10/0x10 [ 1703.750963][T28468] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1703.750977][T28468] __x64_sys_io_uring_setup+0xc2/0x170 [ 1703.750995][T28468] do_syscall_64+0x115/0x870 [ 1703.751007][T28468] ? clear_bhb_loop+0x70/0xc0 [ 1703.751020][T28468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.751031][T28468] RIP: 0033:0x7fad2b59e0d9 [ 1703.751041][T28468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.751052][T28468] RSP: 002b:00007fad297d4ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1703.751063][T28468] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fad2b59e0d9 [ 1703.751070][T28468] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 1703.751077][T28468] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 1703.751083][T28468] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 1703.751089][T28468] R13: 0000200000000b10 R14: 00007fad297d4fd8 R15: 0000000000000000 [ 1703.751102][T28468] [ 1704.153372][T24630] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1704.212439][T24630] usb 8-1: USB disconnect, device number 21 [ 1706.296937][T24630] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 1706.321554][T28488] syzkaller0: entered promiscuous mode [ 1706.369519][T28488] syzkaller0: entered allmulticast mode [ 1706.404070][T24630] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1706.467940][T28488] tipc: Started in network mode [ 1706.490963][T28488] tipc: Node identity 92b9fdad66a8, cluster identity 4711 [ 1706.571198][T28488] tipc: Enabled bearer , priority 0 [ 1706.654215][T28492] tipc: Resetting bearer [ 1706.733859][T28487] tipc: Resetting bearer [ 1706.772757][ T30] audit: type=1400 audit(1786978302.348:9404): avc: denied { ioctl } for pid=28470 comm="syz.7.4595" path="socket:[178045]" dev="sockfs" ino=178045 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1706.891671][T28487] tipc: Disabling bearer [ 1709.016100][T28501] NILFS (nbd0): device size too small [ 1709.360643][T24630] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1709.579268][T24630] usb 1-1: New USB device found, idVendor=0525, idProduct=0007, bcdDevice= 0.00 [ 1709.820554][T24630] usb 1-1: no configurations [ 1709.853440][T24630] usb 1-1: can't read configurations, error -22 [ 1710.026915][T24630] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1710.075739][T28515] syz.2.4605 (28515): drop_caches: 2 [ 1710.239897][T24630] usb 1-1: New USB device found, idVendor=0525, idProduct=0007, bcdDevice= 0.00 [ 1710.299280][T24630] usb 1-1: no configurations [ 1710.329569][T24630] usb 1-1: can't read configurations, error -22 [ 1710.348666][ T188] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 1710.388699][T24630] usb usb1-port1: attempt power cycle [ 1710.567482][ T188] usb 10-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1710.811953][ T30] audit: type=1400 audit(1786978306.338:9405): avc: denied { connect } for pid=28520 comm="syz.0.4607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1711.845198][ T188] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1712.113218][ T188] usb 10-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1712.178293][ T188] usb 10-1: Manufacturer: syz [ 1712.218483][ T188] usb 10-1: config 0 descriptor?? [ 1712.272857][ T188] hub 10-1:0.0: bad descriptor, ignoring hub [ 1713.052068][ T188] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1713.590562][ T188] usb 10-1: selecting invalid altsetting 1 [ 1713.648140][ T188] usb 10-1: Can not set alternate setting to 1, error: -22 [ 1713.710499][ T188] synaptics_usb 10-1:0.0: probe with driver synaptics_usb failed with error -22 [ 1713.857672][ T188] usb 10-1: USB disconnect, device number 22 [ 1715.151240][T28560] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4617'. [ 1715.264928][T28560] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4617'. [ 1715.596209][T28565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4619'. [ 1715.691293][T28565] mmap: syz.7.4619 (28565): VmData 37597184 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 1716.225654][T25443] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 1718.208646][ T4914] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1718.222409][ T4914] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1718.230423][ T4914] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1718.242284][ T4914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1718.252018][ T4914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1719.842985][T28632] fuse: Bad value for 'group_id' [ 1719.913176][T28632] fuse: Bad value for 'group_id' [ 1719.964719][T28637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=28637 comm=syz.2.4638 [ 1720.379870][ T4914] Bluetooth: hci1: command tx timeout [ 1720.602504][T28647] syz.7.4641 (28647): drop_caches: 2 [ 1720.983242][ T4914] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 1721.325890][ T188] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1721.525973][ T188] usb 3-1: device descriptor read/64, error -71 [ 1721.568957][T19592] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1721.662810][T19592] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.055539][ T188] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1722.455426][ T4914] Bluetooth: hci1: command tx timeout [ 1723.275059][ T188] usb 3-1: device descriptor read/64, error -71 [ 1723.824690][ T188] usb usb3-port1: attempt power cycle [ 1724.559384][ T4914] Bluetooth: hci1: command tx timeout [ 1724.566134][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1724.576834][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1724.630619][T19592] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1724.699401][T19592] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.059223][T19592] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1725.217847][T19592] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.628535][T28611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1725.698323][T28611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1725.759384][T28611] bridge_slave_0: entered allmulticast mode [ 1725.812235][T28611] bridge_slave_0: entered promiscuous mode [ 1726.619525][ T4914] Bluetooth: hci1: command tx timeout [ 1726.715940][T19592] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1726.744358][T28711] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4654'. [ 1726.803457][T19592] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1726.895998][T28611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.968533][T28611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1727.030207][T28611] bridge_slave_1: entered allmulticast mode [ 1727.077853][T28611] bridge_slave_1: entered promiscuous mode [ 1727.110685][T28720] netlink: 'syz.7.4656': attribute type 10 has an invalid length. [ 1727.219586][T28719] syzkaller0: entered promiscuous mode [ 1727.255465][T28719] syzkaller0: entered allmulticast mode [ 1727.296805][T28611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1727.377371][T28611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1727.434018][T28721] tipc: Started in network mode [ 1727.453698][T28721] tipc: Node identity f208e571c7a3, cluster identity 4711 [ 1727.465152][T24630] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1727.529585][T28721] tipc: Enabled bearer , priority 0 [ 1727.608245][T28723] tipc: Resetting bearer [ 1727.655266][T24630] usb 10-1: Using ep0 maxpacket: 32 [ 1727.687924][T24630] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1727.768694][T24630] usb 10-1: config 0 has an invalid interface number: 119 but max is 0 [ 1727.820739][T24630] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1727.919858][T24630] usb 10-1: config 0 has no interface number 0 [ 1727.971874][T24630] usb 10-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1727.989177][T28611] team0: Port device team_slave_0 added [ 1728.034737][T28718] tipc: Resetting bearer [ 1728.107478][T24630] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.165096][T24630] usb 10-1: Product: syz [ 1728.289666][T24630] usb 10-1: Manufacturer: syz [ 1728.305647][T28718] tipc: Disabling bearer [ 1728.321100][T24630] usb 10-1: SerialNumber: syz [ 1728.557832][T24630] usb 10-1: config 0 descriptor?? [ 1728.631554][T24630] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.119/input/input31 [ 1728.655179][T28611] team0: Port device team_slave_1 added [ 1729.090432][T24630] usb 10-1: USB disconnect, device number 23 [ 1729.119753][T28611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1729.188219][T28611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1729.463719][T28611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.662907][T19592] bridge_slave_1: left allmulticast mode [ 1729.674851][T21040] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1729.707133][T19592] bridge_slave_1: left promiscuous mode [ 1729.749762][T19592] bridge0: port 2(bridge_slave_1) entered disabled state [ 1729.821313][T19592] bridge_slave_0: left allmulticast mode [ 1729.954385][T19592] bridge_slave_0: left promiscuous mode [ 1729.964607][T21040] usb 8-1: Using ep0 maxpacket: 16 [ 1729.992401][T19592] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.176920][T21040] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1730.228653][T21040] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1730.286023][T21040] usb 8-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1730.359596][T21040] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1730.441112][T21040] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1730.513269][T21040] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1730.551297][T21040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.598961][T21040] usb 8-1: Product: syz [ 1730.627327][T21040] usb 8-1: Manufacturer: syz [ 1730.723170][T21040] usb 8-1: SerialNumber: syz [ 1730.753025][T21040] usb 8-1: config 0 descriptor?? [ 1730.804061][T28746] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1731.219890][T28746] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1731.303211][T21040] input: syz syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input32 [ 1731.386726][T19592] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1731.482984][T19592] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1731.587386][T19592] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1731.779156][T28766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1731.814383][T19592] bond0 (unregistering): Released all slaves [ 1732.005547][T28611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1732.012474][T28611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1732.121660][T28766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.298371][ T5686] usb 8-1: USB disconnect, device number 22 [ 1732.361336][T28611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.471336][T28764] tipc: Enabling of bearer rejected, failed to enable media [ 1732.787251][T19592] hsr_slave_0: left promiscuous mode [ 1732.841407][T19592] hsr_slave_1: left promiscuous mode [ 1732.890968][T19592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1732.957237][T19592] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.055065][T19592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1733.115965][T19592] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.209612][T19592] veth1_macvtap: left promiscuous mode [ 1733.276025][T19592] veth0_macvtap: left promiscuous mode [ 1733.328295][T19592] veth1_vlan: left promiscuous mode [ 1733.379955][T19592] veth0_vlan: left promiscuous mode [ 1734.133892][T19820] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1734.324034][T19820] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1734.397635][T19820] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1734.454284][T19820] usb 10-1: config 0 has no interface number 0 [ 1734.501169][T19820] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.577336][T19820] usb 10-1: config 0 descriptor?? [ 1734.640712][T19820] usb 10-1: selecting invalid altsetting 1 [ 1734.718269][T19592] team0 (unregistering): Port device team_slave_1 removed [ 1734.746333][T19820] dvb_ttusb_budget: ttusb_init_controller: error [ 1734.820335][T19820] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1734.829795][T19592] team0 (unregistering): Port device team_slave_0 removed [ 1735.101279][T19820] DVB: Unable to find symbol cx22700_attach() [ 1735.118544][T28815] netlink: 'syz.7.4678': attribute type 1 has an invalid length. [ 1735.126306][T28815] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4678'. [ 1735.307063][T19820] DVB: Unable to find symbol tda10046_attach() [ 1735.355783][T19820] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1735.522421][T28611] hsr_slave_0: entered promiscuous mode [ 1735.578094][T28611] hsr_slave_1: entered promiscuous mode [ 1735.628529][T28801] bond0: (slave dummy0): Releasing backup interface [ 1735.672590][T28801] bridge_slave_0: left allmulticast mode [ 1735.711854][T28801] bridge_slave_0: left promiscuous mode [ 1735.745472][T28801] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.789283][T28801] bridge_slave_1: left allmulticast mode [ 1735.816370][T28801] bridge_slave_1: left promiscuous mode [ 1735.852788][T28801] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.928088][T28801] bond0: (slave bond_slave_0): Releasing backup interface [ 1736.022560][T28801] bond0: (slave bond_slave_1): Releasing backup interface [ 1736.082679][T28801] team0: Port device team_slave_0 removed [ 1736.141960][T28801] team0: Port device team_slave_1 removed [ 1736.174333][T28801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.224178][T28801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.266507][T28801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1736.403374][T28801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.605055][T28801] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1736.677562][T28810] team0: Mode changed to "broadcast" [ 1736.713693][T28819] gretap1: entered promiscuous mode [ 1736.802039][T19820] usb 10-1: USB disconnect, device number 24 [ 1737.923939][T19820] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1738.134158][T19820] usb 10-1: Using ep0 maxpacket: 8 [ 1738.168812][T19820] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 1738.195531][ T30] audit: type=1400 audit(1786978845.790:9406): avc: denied { mount } for pid=28849 comm="syz.0.4690" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1738.261511][T19820] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 1739.274328][T19820] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 1739.513575][T19820] usb 10-1: config 0 has no interface number 0 [ 1739.558256][T19820] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1739.624950][ T4914] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 1739.657509][T19820] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1739.738223][T19820] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1739.817929][T19820] usb 10-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 1739.844187][T28855] syz.2.4688 (28855): drop_caches: 2 [ 1739.877432][T19820] usb 10-1: Product: syz [ 1739.919129][T19820] usb 10-1: Manufacturer: syz [ 1739.981589][T19820] usb 10-1: config 0 descriptor?? [ 1740.029065][T28844] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1740.141028][T28864] netlink: 'syz.7.4693': attribute type 10 has an invalid length. [ 1740.744488][T19820] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.21/input/input33 [ 1742.262094][T28611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1742.375851][T28611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1742.456188][T28611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1742.554907][T28611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1742.690099][ T5686] usb 10-1: USB disconnect, device number 25 [ 1742.697678][ C0] keyspan_remote 10-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 1742.734842][T28611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1742.760255][ T8660] nvmet: Created nvm controller 135 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:f2ed1d14-511d-48f8-b1df-b31cec823893. [ 1742.835772][T28611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1742.856964][T28883] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4699'. [ 1742.921968][T28611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1742.986150][T28611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1743.027326][T28873] nvme nvme134: creating 1 I/O queues. [ 1743.176616][T28873] nvme nvme134: new ctrl: "testsubsys" [ 1743.462645][T28611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.846565][T28611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1743.920328][T19592] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.927425][T19592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1744.042781][T19592] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.049871][T19592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1744.313254][T21040] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 1745.283080][T21040] usb 8-1: New USB device found, idVendor=17cc, idProduct=4711, bcdDevice=37.4c [ 1745.369841][T21040] usb 8-1: config 0 has an invalid interface number: 146 but max is 0 [ 1745.437824][T21040] usb 8-1: config 0 has no interface number 0 [ 1745.485872][T21040] usb 8-1: config 0 interface 146 has no altsetting 0 [ 1745.560512][T21040] usb 8-1: string descriptor 0 read error: -22 [ 1745.608128][T21040] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.769763][T21040] usb 8-1: config 0 descriptor?? [ 1746.005952][T21040] snd-usb-caiaq 8-1:0.146: can't set alt interface. [ 1746.918657][ T30] audit: type=1400 audit(1786978854.511:9407): avc: denied { create } for pid=28898 comm="syz.7.4702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1747.248265][T21040] usb 8-1: unable to init card! (ret=-5) [ 1747.311105][T21040] snd-usb-caiaq 8-1:0.146: probe with driver snd-usb-caiaq failed with error -5 [ 1747.324058][T28915] syz.2.4704 (28915): drop_caches: 2 [ 1747.807192][T21040] usb 8-1: USB disconnect, device number 23 [ 1747.975998][T28611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1748.820579][T28611] veth0_vlan: entered promiscuous mode [ 1748.905497][T28611] veth1_vlan: entered promiscuous mode [ 1749.039753][T28611] veth0_macvtap: entered promiscuous mode [ 1749.070072][T28956] netlink: 'syz.7.4713': attribute type 5 has an invalid length. [ 1749.100639][T28611] veth1_macvtap: entered promiscuous mode [ 1749.177697][T28611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1749.202247][T21040] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1749.248909][T28611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1749.382963][T19592] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.413123][T21040] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1749.453201][T19592] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.480619][T21040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.564761][ T8660] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.604764][T21040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.663839][ T8660] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1749.696322][T21040] usb 1-1: config 0 descriptor?? [ 1749.907940][T28964] netlink: 'syz.9.4717': attribute type 30 has an invalid length. [ 1749.946586][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1749.999827][T21040] usbhid 1-1:0.0: can't add hid device: -71 [ 1750.024117][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.041932][T21040] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1750.101606][T21040] usb 1-1: USB disconnect, device number 72 [ 1750.296710][ T8663] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1750.358261][ T8663] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1750.541840][T21040] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1750.933418][T21040] usb 1-1: Using ep0 maxpacket: 32 [ 1751.149291][ T188] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1751.855306][T21040] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1751.934896][T21040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.032221][T21040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.042342][ T188] usb 8-1: Using ep0 maxpacket: 16 [ 1752.055927][T28973] syz.9.4719 (28973): drop_caches: 2 [ 1752.084803][ T188] usb 8-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1752.355908][T21040] usb 1-1: config 0 descriptor?? [ 1753.315077][T21040] usb 1-1: can't set config #0, error -71 [ 1753.325048][ T188] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.382877][T21040] usb 1-1: USB disconnect, device number 73 [ 1753.398956][ T188] usb 8-1: Product: syz [ 1753.439928][ T188] usb 8-1: Manufacturer: syz [ 1753.491502][ T188] usb 8-1: SerialNumber: syz [ 1753.534021][ T188] usb 8-1: config 0 descriptor?? [ 1753.584581][ T188] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1753.667133][ T188] gspca_spca508: reg_read err -71 [ 1753.717072][ T188] gspca_spca508: reg_read err -71 [ 1754.419613][ T188] gspca_spca508: reg_read err -71 [ 1755.008857][T28996] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4727'. [ 1755.213474][ T188] gspca_spca508: reg_read err -71 [ 1755.254145][T28993] syz.4.4726 (28993): drop_caches: 2 [ 1755.262090][ T188] gspca_spca508: reg_read err -71 [ 1755.283708][T28996] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4727'. [ 1755.302778][ T188] gspca_spca508: reg write: error -71 [ 1755.394200][ T188] spca508 8-1:0.0: probe with driver spca508 failed with error -71 [ 1755.472578][ T188] usb 8-1: USB disconnect, device number 24 [ 1756.010750][T29005] usb usb8: usbfs: process 29005 (syz.7.4730) did not claim interface 2 before use [ 1756.172613][T29006] No such timeout policy "syz1" [ 1756.315189][T29008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1756.695867][T29018] netlink: 'syz.4.4732': attribute type 10 has an invalid length. [ 1756.900060][T29018] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1757.113215][T29027] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4736'. [ 1757.550562][ T188] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1758.010458][ T188] usb 10-1: Using ep0 maxpacket: 16 [ 1758.051153][ T188] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1758.123336][ T188] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1758.174998][ T188] usb 10-1: Product: syz [ 1758.185898][T29050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1758.207326][ T188] usb 10-1: Manufacturer: syz [ 1758.235549][ T188] usb 10-1: SerialNumber: syz [ 1758.270535][ T188] usb 10-1: config 0 descriptor?? [ 1758.362150][T29050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1758.397065][ T188] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1759.151948][ T188] gspca_spca508: reg_read err -110 [ 1759.302195][ T30] audit: type=1400 audit(1786979122.903:9408): avc: denied { read } for pid=29064 comm="syz.0.4747" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1759.831806][ T188] gspca_spca508: reg_read err -110 [ 1760.713066][ T188] gspca_spca508: reg_read err -32 [ 1761.005917][ T30] audit: type=1400 audit(1786979122.923:9409): avc: denied { open } for pid=29064 comm="syz.0.4747" path="/syzcgroup/unified/syz0" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 1761.040195][ T188] gspca_spca508: reg_read err -32 [ 1761.097198][ T188] gspca_spca508: reg_read err -32 [ 1761.155082][ T188] gspca_spca508: reg write: error -71 [ 1761.205565][ T188] spca508 10-1:0.0: probe with driver spca508 failed with error -71 [ 1761.301275][ T188] usb 10-1: USB disconnect, device number 26 [ 1761.481034][T29076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4751'. [ 1761.840115][ T188] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1761.930151][T28963] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1762.014095][T29084] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4754'. [ 1762.034523][ T188] usb 10-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.00 [ 1762.176049][ T188] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1762.199401][T28963] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1762.371324][T28963] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1762.381718][ T188] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1762.409095][T28963] usb 1-1: Product: syz [ 1762.426702][T28963] usb 1-1: SerialNumber: syz [ 1762.433477][ T188] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.470816][T28963] usb 1-1: config 0 descriptor?? [ 1762.652494][ T4914] Bluetooth: hci2: urb ffff8880419baa00 submission failed (90) [ 1762.742319][ T188] usb 10-1: USB disconnect, device number 27 [ 1762.763241][T28963] usb 1-1: USB disconnect, device number 74 [ 1763.357001][T29102] support for the xor transformation has been removed. [ 1765.279675][T23190] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1765.316012][T29126] netlink: 'syz.9.4764': attribute type 30 has an invalid length. [ 1765.356010][T23190] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1765.453365][T23190] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1765.739634][T23190] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1767.111365][ T30] audit: type=1400 audit(1786979642.708:9410): avc: denied { mounton } for pid=29138 comm="syz.2.4769" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1767.362687][T29141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.474020][T29141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1767.769225][ T188] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1768.089110][ T188] usb 1-1: Using ep0 maxpacket: 32 [ 1768.112006][ T188] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1768.159525][ T188] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1768.226193][ T188] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1768.308245][ T188] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1768.435469][ T188] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.467949][ T188] usb 1-1: Product: syz [ 1768.619806][ T188] usb 1-1: Manufacturer: syz [ 1768.701317][ T188] usb 1-1: SerialNumber: syz [ 1768.742293][ T188] usb 1-1: config 0 descriptor?? [ 1768.806094][ T30] audit: type=1326 audit(1786979644.399:9411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29162 comm="syz.7.4775" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ff73bc39cba code=0x0 [ 1769.228606][ T188] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 1769.431454][ T188] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1769.512043][ T188] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 1769.814192][T29172] syzkaller0: entered promiscuous mode [ 1769.864346][ T188] usb 1-1: USB disconnect, device number 75 [ 1769.949542][T29172] syzkaller0: entered allmulticast mode [ 1770.097483][T29181] tipc: Started in network mode [ 1770.871163][T29188] netlink: 'syz.9.4782': attribute type 10 has an invalid length. [ 1770.895832][T29181] tipc: Node identity ee780ac3b442, cluster identity 4711 [ 1771.054932][T29181] tipc: Enabled bearer , priority 0 [ 1771.129430][T29172] tipc: Resetting bearer [ 1771.195877][T29188] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1771.252655][T29171] tipc: Resetting bearer [ 1772.425234][T29194] netlink: 'syz.2.4783': attribute type 10 has an invalid length. [ 1772.638923][T29171] tipc: Disabling bearer [ 1772.941183][T24630] tipc: Node number set to 1513753283 [ 1773.819861][T29217] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1773.911002][T29217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4792'. [ 1773.946132][T29224] netlink: 'syz.4.4789': attribute type 10 has an invalid length. [ 1776.501048][T29245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1776.595792][T29245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1779.444379][T29270] netlink: 'syz.9.4806': attribute type 10 has an invalid length. [ 1779.899716][ T4914] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 1780.594059][ T4914] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 1782.446255][T29303] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4816'. [ 1782.510501][T29303] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4816'. [ 1784.760304][T29346] syzkaller0: entered promiscuous mode [ 1784.823658][T29346] syzkaller0: entered allmulticast mode [ 1784.895802][T29349] tipc: Enabled bearer , priority 0 [ 1784.976538][T29346] syzkaller0: mtu less than device minimum [ 1786.451452][T29366] netlink: 'syz.4.4834': attribute type 10 has an invalid length. [ 1786.462836][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1786.469191][ T30] audit: type=1400 audit(1786979662.061:9412): avc: denied { mounton } for pid=29361 comm="syz.4.4834" path="/17/config" dev="tmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1786.491843][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1786.498771][T28963] tipc: Node number set to 4094819757 [ 1786.942553][T29370] netlink: 'syz.0.4837': attribute type 10 has an invalid length. [ 1787.289980][T29377] Illegal XDP return value 4294967274 on prog (id 450) dev N/A, expect packet loss! [ 1788.321273][T29389] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4844'. [ 1788.395916][T29389] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4844'. [ 1789.475371][T29400] netlink: 'syz.7.4848': attribute type 10 has an invalid length. [ 1789.736352][T28963] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1789.956136][T28963] usb 10-1: Using ep0 maxpacket: 16 [ 1789.978224][T28963] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1790.003174][T29405] syzkaller0: entered promiscuous mode [ 1790.050871][T28963] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.098817][T28963] usb 10-1: Product: syz [ 1790.103268][T29405] syzkaller0: entered allmulticast mode [ 1790.118417][T29414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4854'. [ 1790.136548][T28963] usb 10-1: Manufacturer: syz [ 1790.166653][T28963] usb 10-1: SerialNumber: syz [ 1790.200079][T29414] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4854'. [ 1790.236152][T29415] tipc: Enabled bearer , priority 0 [ 1790.261592][T28963] usb 10-1: config 0 descriptor?? [ 1790.302346][T28963] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1790.387346][T29415] tipc: Resetting bearer [ 1790.550016][T29404] tipc: Resetting bearer [ 1790.894464][T28963] gspca_spca508: reg_read err -110 [ 1791.124062][T29404] tipc: Disabling bearer [ 1791.456137][T28963] gspca_spca508: reg_read err -110 [ 1791.500723][T28963] gspca_spca508: reg_read err -32 [ 1791.554437][T28963] gspca_spca508: reg_read err -32 [ 1791.609066][T28963] gspca_spca508: reg_read err -32 [ 1791.666293][T28963] gspca_spca508: reg write: error -32 [ 1791.682006][T29431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4857'. [ 1791.720609][T28963] spca508 10-1:0.0: probe with driver spca508 failed with error -32 [ 1792.108533][ T188] usb 10-1: USB disconnect, device number 28 [ 1792.125472][T29442] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4858'. [ 1792.237934][T29442] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4858'. [ 1793.059521][T29450] netlink: 'syz.0.4860': attribute type 10 has an invalid length. [ 1795.024484][T29464] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1795.538594][T29466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1795.604621][T29464] CPU: 0 UID: 0 PID: 29464 Comm: syz.0.4862 Tainted: G L syzkaller #0 PREEMPT(full) [ 1795.604642][T29464] Tainted: [L]=SOFTLOCKUP [ 1795.604647][T29464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1795.604655][T29464] Call Trace: [ 1795.604659][T29464] [ 1795.604664][T29464] dump_stack_lvl+0x100/0x190 [ 1795.604683][T29464] sysfs_warn_dup.cold+0x1c/0x28 [ 1795.604702][T29464] sysfs_create_dir_ns+0x24b/0x2b0 [ 1795.604717][T29464] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1795.604728][T29464] ? find_held_lock+0x2b/0x80 [ 1795.604738][T29464] ? kobject_add_internal+0x25f/0x930 [ 1795.604756][T29464] ? kobject_add_internal+0x25f/0x930 [ 1795.604773][T29464] ? class_dir_child_ns_type+0xd/0x60 [ 1795.604791][T29464] kobject_add_internal+0x2c8/0x930 [ 1795.604810][T29464] kobject_add+0x16a/0x1e0 [ 1795.604827][T29464] ? __pfx_kobject_add+0x10/0x10 [ 1795.604845][T29464] ? get_device_parent+0x1b3/0x4c0 [ 1795.604861][T29464] ? kobject_put+0xb9/0x640 [ 1795.604880][T29464] device_add+0x294/0x1970 [ 1795.604897][T29464] ? lockdep_init_map_type+0x5c/0x250 [ 1795.604911][T29464] ? __pfx_device_add+0x10/0x10 [ 1795.604927][T29464] ? lockdep_init_map_type+0x5c/0x250 [ 1795.604941][T29464] ? __init_waitqueue_head+0xca/0x150 [ 1795.604960][T29464] tty_register_device_attr+0x388/0x7f0 [ 1795.604977][T29464] ? lockdep_init_map_type+0x5c/0x250 [ 1795.604992][T29464] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1795.605009][T29464] ? tty_port_init+0x156/0x1c0 [ 1795.605024][T29464] gsm_activate_mux+0x155/0x2a0 [ 1795.605039][T29464] gsmld_ioctl+0xbbc/0x15c0 [ 1795.605059][T29464] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1795.605076][T29464] ? __ldsem_down_read_nested+0xf3/0x890 [ 1795.605095][T29464] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1795.605115][T29464] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1795.605130][T29464] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1795.605143][T29464] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1795.605158][T29464] tty_ioctl+0x11b4/0x1640 [ 1795.605172][T29464] ? __pfx_tty_ioctl+0x10/0x10 [ 1795.605186][T29464] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1795.605208][T29464] ? __fget_files+0x215/0x3d0 [ 1795.605219][T29464] ? hook_file_ioctl_common+0x140/0x440 [ 1795.605236][T29464] ? selinux_file_ioctl+0x13b/0x290 [ 1795.605252][T29464] ? selinux_file_ioctl+0xb6/0x290 [ 1795.605269][T29464] ? __pfx_tty_ioctl+0x10/0x10 [ 1795.605283][T29464] __x64_sys_ioctl+0x18e/0x210 [ 1795.605301][T29464] do_syscall_64+0x115/0x870 [ 1795.605314][T29464] ? clear_bhb_loop+0x70/0xc0 [ 1795.605328][T29464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.605340][T29464] RIP: 0033:0x7f5a1559e0d9 [ 1795.605349][T29464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.605360][T29464] RSP: 002b:00007f5a163f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1795.605372][T29464] RAX: ffffffffffffffda RBX: 00007f5a15826180 RCX: 00007f5a1559e0d9 [ 1795.605379][T29464] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000009 [ 1795.605385][T29464] RBP: 00007f5a15635024 R08: 0000000000000000 R09: 0000000000000000 [ 1795.605392][T29464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1795.605398][T29464] R13: 00007f5a15826218 R14: 00007f5a15826180 R15: 00007ffff0ad6918 [ 1795.605413][T29464] [ 1796.476033][T29471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4866'. [ 1797.622091][T29483] syz.4.4869 (29483): drop_caches: 2 [ 1799.000717][T29492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1799.121844][T29492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1799.213267][ T4914] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 1799.274535][T29464] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1800.687275][ T188] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1801.326408][ T188] usb 8-1: Using ep0 maxpacket: 32 [ 1801.362045][ T188] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1801.545993][ T188] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1801.663905][ T188] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1801.776087][ T188] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1801.782874][T29527] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4882'. [ 1801.856056][ T188] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.912943][T29527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4882'. [ 1801.943367][ T188] usb 8-1: Product: syz [ 1801.990255][ T188] usb 8-1: Manufacturer: syz [ 1802.036492][ T188] usb 8-1: SerialNumber: syz [ 1802.087683][ T188] usb 8-1: config 0 descriptor?? [ 1802.690318][ T188] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1802.741840][T29542] ipip0: entered promiscuous mode [ 1802.950877][ T188] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1803.097269][T29542] ipip0: entered allmulticast mode [ 1803.121297][ T188] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 1803.184456][T29542] team0: Device ipip0 is of different type [ 1803.276487][ T188] usb 8-1: USB disconnect, device number 25 [ 1803.569081][ T5686] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1803.783586][T29556] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4892'. [ 1803.886764][ T5686] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1803.938365][ T5686] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 1803.959486][T29558] netlink: 'syz.2.4893': attribute type 30 has an invalid length. [ 1804.000052][ T5686] usb 10-1: config 1 has no interface number 0 [ 1804.047320][ T5686] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1804.127997][ T5686] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1804.201706][ T5686] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.304963][ T5686] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1804.496452][ T5686] usb 10-1: Product: syz [ 1805.293257][ T5686] usb 10-1: Manufacturer: syz [ 1805.336454][ T5686] usb 10-1: SerialNumber: syz [ 1805.397402][T29547] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1805.680414][T29547] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1805.894243][ T4914] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 1806.030662][T29585] syzkaller0: entered promiscuous mode [ 1806.107906][T29585] syzkaller0: entered allmulticast mode [ 1806.133960][T28963] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1806.200569][T29591] tipc: Enabled bearer , priority 0 [ 1806.416049][T28963] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1806.584553][T28963] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1806.648014][T28963] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1806.722272][T28963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.805652][T28963] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 1806.872569][T28963] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 1806.940888][T29583] tipc: Resetting bearer [ 1806.947888][ T5686] sierra_net 10-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.9-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 1807.100102][T29583] tipc: Disabling bearer [ 1807.110381][T29582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.247474][T29582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.266763][ T5686] sierra_net 10-1:1.7 wwan0: Submit SYNC failed -71 [ 1807.322743][ T5686] sierra_net 10-1:1.7 wwan0: Send SYNC failed, status -71 [ 1807.504180][T29582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.740755][ T5686] sierra_net 10-1:1.7 wwan0: Submit SYNC failed -71 [ 1807.800773][T29582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.817869][ T5686] sierra_net 10-1:1.7 wwan0: Send SYNC failed, status -71 [ 1808.031204][ T5686] usb 10-1: USB disconnect, device number 29 [ 1808.329912][ T5686] sierra_net 10-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.9-1, Sierra Wireless USB-to-WWAN Modem [ 1808.567173][T29620] netlink: 'syz.9.4912': attribute type 30 has an invalid length. [ 1808.753669][ T5686] sierra_net 10-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 1810.352364][T28963] usb 1-1: USB disconnect, device number 76 [ 1810.428983][T28963] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1810.467412][ T5686] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1810.505334][T28963] spcp8x5 1-1:1.0: device disconnected [ 1810.526903][ T30] audit: type=1326 audit(1786979686.133:9413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29647 comm="syz.0.4922" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7f5a1643bcba code=0x0 [ 1810.715017][ T5686] usb 8-1: Using ep0 maxpacket: 32 [ 1810.756153][ T5686] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1810.827807][ T5686] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1810.921667][ T5686] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1811.009395][ T5686] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1811.061659][ T5686] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.111323][ T5686] usb 8-1: Product: syz [ 1811.139253][ T5686] usb 8-1: Manufacturer: syz [ 1811.168803][ T5686] usb 8-1: SerialNumber: syz [ 1811.202447][ T5686] usb 8-1: config 0 descriptor?? [ 1811.224050][T28963] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1811.424444][T28963] usb 10-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1811.486935][T28963] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.543343][T28963] usb 10-1: config 0 has no interfaces? [ 1811.581201][T28963] usb 10-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1811.626183][T28963] usb 10-1: Product: syz [ 1811.633551][ T188] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 1811.662796][T28963] usb 10-1: config 0 descriptor?? [ 1811.681685][ T5686] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1811.843621][ T188] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1811.895131][ T5686] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1811.920839][ T188] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1811.970860][ T5686] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -32 [ 1811.984078][ T188] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.649499][T29662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.658074][T29662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1812.669783][T24487] usb 10-1: USB disconnect, device number 30 [ 1812.766925][ T188] usb 3-1: config 0 has no interface number 0 [ 1812.818859][ T188] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1812.907556][ T188] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1812.935502][T24487] usb 8-1: USB disconnect, device number 26 [ 1812.961402][ T188] usb 3-1: Product: syz [ 1813.000174][ T188] usb 3-1: SerialNumber: syz [ 1813.040667][ T188] usb 3-1: config 0 descriptor?? [ 1813.068770][ T188] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 1813.349630][T29665] CIFS: Attempting to mount //127.0.0.1/share,ser=root [ 1813.397214][T29665] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1813.449325][T29665] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1813.512278][T24487] usb 3-1: USB disconnect, device number 92 [ 1815.589447][T29682] syz.4.4930 (29682): drop_caches: 2 [ 1815.852602][T24487] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1815.939213][ T30] audit: type=1400 audit(1786979691.544:9414): avc: denied { accept } for pid=29697 comm="syz.0.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1815.972940][T29698] support for the xor transformation has been removed. [ 1816.013293][ T188] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1816.043765][T24487] usb 8-1: Using ep0 maxpacket: 16 [ 1816.651285][T24487] usb 8-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1817.172767][ T188] usb 3-1: Using ep0 maxpacket: 16 [ 1817.341609][ T188] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1817.415848][T24487] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.480170][T24487] usb 8-1: Product: syz [ 1817.494279][ T188] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1817.569313][T24487] usb 8-1: Manufacturer: syz [ 1817.596358][T24487] usb 8-1: SerialNumber: syz [ 1817.613404][ T188] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.646041][T24487] usb 8-1: config 0 descriptor?? [ 1817.689378][ T188] usb 3-1: config 0 descriptor?? [ 1817.701855][T24487] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1817.741951][T29693] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1817.935717][T29711] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1817.954263][ T5715] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1818.058022][T29693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1818.142582][T29693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1818.152343][ T5715] usb 10-1: Using ep0 maxpacket: 16 [ 1818.187450][ T5715] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1818.264522][ T5715] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.273177][T24487] gspca_spca508: reg_read err -110 [ 1818.309827][ T5715] usb 10-1: Product: syz [ 1818.340633][ T5715] usb 10-1: Manufacturer: syz [ 1818.378478][ T5715] usb 10-1: SerialNumber: syz [ 1818.416097][ T5715] usb 10-1: config 0 descriptor?? [ 1818.440566][ T188] hid (null): unknown global tag 0xe [ 1818.449106][ T5686] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1818.483050][ T5715] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1818.531966][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unknown main item tag 0x0 [ 1818.598330][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unknown main item tag 0x0 [ 1818.655018][ T5686] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1818.670735][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unknown main item tag 0x0 [ 1818.711523][ T5715] gspca_spca508: reg_read err -32 [ 1818.742437][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 76, changing to 10 [ 1818.768087][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unknown main item tag 0x0 [ 1818.780773][ T5715] gspca_spca508: reg_read err -71 [ 1818.815518][T24487] gspca_spca508: reg_read err -110 [ 1818.839226][ T5715] gspca_spca508: reg_read err -71 [ 1818.859296][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unknown main item tag 0x0 [ 1818.874390][ T5686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1818.898879][T24487] gspca_spca508: reg_read err -32 [ 1818.906661][ T5715] gspca_spca508: reg_read err -71 [ 1818.944047][T24487] gspca_spca508: reg_read err -32 [ 1818.953071][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unknown main item tag 0x0 [ 1818.966059][ T5715] gspca_spca508: reg_read err -71 [ 1818.991691][T24487] gspca_spca508: reg_read err -32 [ 1818.999486][ T5715] gspca_spca508: reg write: error -71 [ 1819.006089][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.023987][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unknown main item tag 0x0 [ 1819.044472][T24487] gspca_spca508: reg write: error -32 [ 1819.051671][ T5715] spca508 10-1:0.0: probe with driver spca508 failed with error -71 [ 1819.089619][ T5686] usb 5-1: config 0 descriptor?? [ 1819.097770][T24487] spca508 8-1:0.0: probe with driver spca508 failed with error -32 [ 1819.117721][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unknown main item tag 0x0 [ 1819.158042][ T5715] usb 10-1: USB disconnect, device number 31 [ 1819.226032][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unknown main item tag 0x0 [ 1819.321072][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unknown main item tag 0x0 [ 1820.423218][T29722] syz.0.4940 (29722): drop_caches: 2 [ 1820.765720][T29726] support for the xor transformation has been removed. [ 1820.844847][ T5715] usb 8-1: USB disconnect, device number 27 [ 1820.863524][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: unexpected long global item [ 1821.784651][ T188] aquacomputer_d5next 0003:0C70:F00D.000C: probe with driver aquacomputer_d5next failed with error -22 [ 1822.408064][ T5686] usbhid 5-1:0.0: can't add hid device: -71 [ 1822.462020][ T188] usb 3-1: USB disconnect, device number 93 [ 1822.487545][ T5686] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1822.581110][ T5686] usb 5-1: USB disconnect, device number 58 [ 1824.134559][ T188] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1824.332013][ T188] usb 5-1: Using ep0 maxpacket: 32 [ 1824.374134][ T188] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1824.460273][ T188] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1824.533425][ T188] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1824.598064][ T188] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1824.640630][ T188] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.687933][ T188] usb 5-1: Product: syz [ 1824.715866][ T188] usb 5-1: Manufacturer: syz [ 1824.745356][ T188] usb 5-1: SerialNumber: syz [ 1824.785885][ T188] usb 5-1: config 0 descriptor?? [ 1825.244428][ T188] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1825.448680][ T188] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1825.510067][ T188] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 1825.671412][ T5686] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1825.788359][T21040] usb 5-1: USB disconnect, device number 59 [ 1825.892877][ T5686] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1825.947057][ T5686] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1825.994245][ T5686] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1826.063528][ T5686] usb 1-1: config 0 has no interface number 0 [ 1826.112933][ T5686] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1826.202913][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1826.263771][ T5686] usb 1-1: Product: syz [ 1826.289051][ T5686] usb 1-1: SerialNumber: syz [ 1826.323312][ T5686] usb 1-1: config 0 descriptor?? [ 1826.375300][ T5686] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1826.579076][T21040] usb 1-1: USB disconnect, device number 77 [ 1827.790630][ T12] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpr! [ 1827.841194][T29800] nvme nvme135: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpr" [ 1828.152497][T29811] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4969'. [ 1828.796926][T29822] futex_wake_op: syz.7.4971 tries to shift op by 144; fix this program [ 1829.552588][T29835] syzkaller0: entered promiscuous mode [ 1829.609906][T29835] syzkaller0: entered allmulticast mode [ 1829.798162][ T30] audit: type=1326 audit(1786980217.405:9415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29838 comm="syz.0.4979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5a1643bcba code=0x7ffc0000 [ 1830.099835][ T30] audit: type=1326 audit(1786980217.485:9416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29838 comm="syz.0.4979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5a1643bcba code=0x7ffc0000 [ 1832.252229][ T30] audit: type=1326 audit(1786980217.485:9417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29838 comm="syz.0.4979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e0d9 code=0x7ffc0000 [ 1832.443703][T29849] syzkaller0: entered promiscuous mode [ 1832.482284][T29849] syzkaller0: entered allmulticast mode [ 1832.596460][ T30] audit: type=1326 audit(1786980217.485:9418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29838 comm="syz.0.4979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a1559de42 code=0x7ffc0000 [ 1832.816356][ T30] audit: type=1326 audit(1786980217.485:9419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29838 comm="syz.0.4979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f5a1559ded7 code=0x7ffc0000 [ 1833.022052][ T30] audit: type=1326 audit(1786980217.485:9420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29838 comm="syz.0.4979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5a1555add1 code=0x7ffc0000 [ 1833.205183][ T30] audit: type=1326 audit(1786980217.485:9421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29838 comm="syz.0.4979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5a1559eec9 code=0x7ffc0000 [ 1833.300843][T29870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1833.375574][ T30] audit: type=1326 audit(1786980217.485:9422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29838 comm="syz.0.4979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f5a1555ae3b code=0x7ffc0000 [ 1833.411916][T29870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1833.537980][ T30] audit: type=1326 audit(1786980217.485:9423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29838 comm="syz.0.4979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1559e0d9 code=0x7ffc0000 [ 1833.701473][ T30] audit: type=1326 audit(1786980217.485:9424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29838 comm="syz.0.4979" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f5a1643bcba code=0x7ffc0000 [ 1834.362353][ T188] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1834.521264][ T188] usb 8-1: Using ep0 maxpacket: 32 [ 1834.544895][ T188] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1834.666229][ T188] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1834.732905][ T188] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1834.794961][ T188] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1834.828786][T29890] syz.4.4994 (29890): drop_caches: 2 [ 1834.850706][ T188] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.020213][ T5686] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1835.566740][ T188] usb 8-1: Product: syz [ 1836.121662][ T188] usb 8-1: Manufacturer: syz [ 1836.165147][ T188] usb 8-1: SerialNumber: syz [ 1836.289223][ T188] usb 8-1: config 0 descriptor?? [ 1836.500166][ T5686] usb 10-1: Using ep0 maxpacket: 16 [ 1836.533908][ T5686] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1837.186938][ T188] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1837.372646][ T5686] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.405215][ T188] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1837.450923][ T5686] usb 10-1: Product: syz [ 1837.474924][ T188] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 1837.485794][ T5686] usb 10-1: Manufacturer: syz [ 1837.516277][ T5686] usb 10-1: SerialNumber: syz [ 1837.558981][ T188] usb 8-1: USB disconnect, device number 28 [ 1837.583465][ T5686] usb 10-1: config 0 descriptor?? [ 1837.641417][ T5686] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1837.848510][ T5686] gspca_spca508: reg_read err -71 [ 1838.820035][T29918] netlink: 'syz.2.5000': attribute type 10 has an invalid length. [ 1838.857880][ T5686] gspca_spca508: reg_read err -71 [ 1838.993295][ T5686] gspca_spca508: reg_read err -71 [ 1839.037278][ T5686] gspca_spca508: reg_read err -71 [ 1839.241618][ T5686] gspca_spca508: reg_read err -71 [ 1839.289314][ T5686] gspca_spca508: reg write: error -71 [ 1839.338722][ T5686] spca508 10-1:0.0: probe with driver spca508 failed with error -71 [ 1839.352841][T29927] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1839.416164][ T5686] usb 10-1: USB disconnect, device number 32 [ 1839.443582][T29927] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1839.599488][T24487] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1839.809484][T24487] usb 8-1: Using ep0 maxpacket: 32 [ 1840.538008][T29937] netlink: 'syz.0.5009': attribute type 10 has an invalid length. [ 1840.573088][T24487] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1840.632195][T24487] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1840.726009][T24487] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1840.769351][T24630] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1840.793144][T29941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5011'. [ 1840.806995][T24487] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1840.826647][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 1840.826657][ T30] audit: type=1326 audit(1786980228.426:9485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29938 comm="syz.9.5010" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7fad2c378cba code=0x0 [ 1840.887480][T24487] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.936724][T24487] usb 8-1: Product: syz [ 1840.960870][T24487] usb 8-1: Manufacturer: syz [ 1840.994225][T24487] usb 8-1: SerialNumber: syz [ 1841.021252][T24630] usb 3-1: Using ep0 maxpacket: 32 [ 1841.035103][T24630] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1841.046753][T24487] usb 8-1: config 0 descriptor?? [ 1841.111153][T24630] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1841.189915][T24630] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1841.270641][T24630] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1841.321628][T24630] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.381611][T24630] usb 3-1: Product: syz [ 1841.415267][T24630] usb 3-1: Manufacturer: syz [ 1841.457161][T24630] usb 3-1: SerialNumber: syz [ 1841.492466][T24487] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 1841.509339][T24630] usb 3-1: config 0 descriptor?? [ 1841.882011][T24487] gs_usb 8-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1842.441993][T24630] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1842.935603][T24487] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -32 [ 1842.950990][T24630] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 1842.995621][T29952] syz.0.5013 (29952): drop_caches: 2 [ 1843.010182][T24630] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1843.027846][T24487] usb 8-1: USB disconnect, device number 29 [ 1843.108511][T24630] usb 3-1: USB disconnect, device number 94 [ 1843.737764][T28680] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpr! [ 1843.788163][T29959] nvme nvme135: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpr" [ 1844.516331][T29954] Bluetooth: hci1: command 0x0406 tx timeout [ 1844.850191][T29976] tipc: Enabling of bearer rejected, already enabled [ 1844.923141][T29979] syzkaller0: mtu less than device minimum [ 1845.386129][T29984] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5024'. [ 1847.331270][T29998] support for the xor transformation has been removed. [ 1847.431545][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1847.437873][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1847.693859][T30002] FAULT_INJECTION: forcing a failure. [ 1847.693859][T30002] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.706833][T30002] CPU: 0 UID: 0 PID: 30002 Comm: syz.0.5031 Tainted: G L syzkaller #0 PREEMPT(full) [ 1847.706850][T30002] Tainted: [L]=SOFTLOCKUP [ 1847.706854][T30002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1847.706860][T30002] Call Trace: [ 1847.706865][T30002] [ 1847.706869][T30002] dump_stack_lvl+0x100/0x190 [ 1847.706887][T30002] should_fail_ex.cold+0x5/0xa [ 1847.706901][T30002] should_failslab+0xc2/0x120 [ 1847.706917][T30002] __kmalloc_cache_noprof+0x91/0x6c0 [ 1847.706928][T30002] ? io_uring_setup.cold+0x6c/0x1cae [ 1847.706947][T30002] io_uring_setup.cold+0x6c/0x1cae [ 1847.706965][T30002] ? __pfx_io_uring_setup+0x10/0x10 [ 1847.706982][T30002] ? find_held_lock+0x2b/0x80 [ 1847.706992][T30002] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1847.707005][T30002] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1847.707025][T30002] ? ksys_write+0x1ac/0x250 [ 1847.707035][T30002] ? __pfx_ksys_write+0x10/0x10 [ 1847.707044][T30002] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1847.707058][T30002] __x64_sys_io_uring_setup+0xc2/0x170 [ 1847.707076][T30002] do_syscall_64+0x115/0x870 [ 1847.707089][T30002] ? clear_bhb_loop+0x70/0xc0 [ 1847.707102][T30002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.707113][T30002] RIP: 0033:0x7f5a1559e0d9 [ 1847.707122][T30002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.707132][T30002] RSP: 002b:00007f5a16412ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1847.707143][T30002] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f5a1559e0d9 [ 1847.707150][T30002] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 1847.707156][T30002] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 1847.707163][T30002] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 1847.707169][T30002] R13: 0000200000000b10 R14: 00007f5a16412fd8 R15: 0000000000000000 [ 1847.707182][T30002] [ 1850.583582][ T30] audit: type=1326 audit(1786980238.127:9486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30009 comm="syz.0.5033" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7f5a1643bcba code=0x0 [ 1852.642015][T30036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5040'. [ 1853.762049][T30059] FAULT_INJECTION: forcing a failure. [ 1853.762049][T30059] name failslab, interval 1, probability 0, space 0, times 0 [ 1853.775835][T30059] CPU: 0 UID: 0 PID: 30059 Comm: syz.2.5044 Tainted: G L syzkaller #0 PREEMPT(full) [ 1853.775853][T30059] Tainted: [L]=SOFTLOCKUP [ 1853.775857][T30059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1853.775863][T30059] Call Trace: [ 1853.775868][T30059] [ 1853.775872][T30059] dump_stack_lvl+0x100/0x190 [ 1853.775888][T30059] should_fail_ex.cold+0x5/0xa [ 1853.775902][T30059] should_failslab+0xc2/0x120 [ 1853.775917][T30059] __kmalloc_cache_noprof+0x91/0x6c0 [ 1853.775929][T30059] ? io_uring_setup.cold+0x6c/0x1cae [ 1853.775947][T30059] io_uring_setup.cold+0x6c/0x1cae [ 1853.775966][T30059] ? __pfx_io_uring_setup+0x10/0x10 [ 1853.775983][T30059] ? find_held_lock+0x2b/0x80 [ 1853.775993][T30059] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1853.776005][T30059] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1853.776026][T30059] ? ksys_write+0x1ac/0x250 [ 1853.776036][T30059] ? __pfx_ksys_write+0x10/0x10 [ 1853.776045][T30059] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1853.776059][T30059] __x64_sys_io_uring_setup+0xc2/0x170 [ 1853.776077][T30059] do_syscall_64+0x115/0x870 [ 1853.776090][T30059] ? clear_bhb_loop+0x70/0xc0 [ 1853.776103][T30059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.776114][T30059] RIP: 0033:0x7f741839e0d9 [ 1853.776124][T30059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1853.776134][T30059] RSP: 002b:00007f74192c3ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1853.776145][T30059] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f741839e0d9 [ 1853.776152][T30059] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 1853.776159][T30059] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 1853.776165][T30059] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 1853.776172][T30059] R13: 0000200000000b10 R14: 00007f74192c3fd8 R15: 0000000000000000 [ 1853.776185][T30059] [ 1854.546260][T21040] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1854.813935][T21040] usb 10-1: Using ep0 maxpacket: 16 [ 1854.869210][T21040] usb 10-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1855.301156][T21040] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1856.463080][T21040] usb 10-1: Product: syz [ 1856.500898][T21040] usb 10-1: Manufacturer: syz [ 1856.543891][T21040] usb 10-1: SerialNumber: syz [ 1856.620443][T30084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1856.651740][T21040] usb 10-1: config 0 descriptor?? [ 1856.702044][T21040] usb 10-1: can't set config #0, error -71 [ 1856.756336][T21040] usb 10-1: USB disconnect, device number 33 [ 1856.944472][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5051'. [ 1857.984514][T30089] syz.9.5053 (30089): drop_caches: 2 [ 1859.827984][T30114] FAULT_INJECTION: forcing a failure. [ 1859.827984][T30114] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.943016][T30114] CPU: 0 UID: 0 PID: 30114 Comm: syz.2.5058 Tainted: G L syzkaller #0 PREEMPT(full) [ 1859.943036][T30114] Tainted: [L]=SOFTLOCKUP [ 1859.943040][T30114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1859.943047][T30114] Call Trace: [ 1859.943051][T30114] [ 1859.943056][T30114] dump_stack_lvl+0x100/0x190 [ 1859.943073][T30114] should_fail_ex.cold+0x5/0xa [ 1859.943087][T30114] should_failslab+0xc2/0x120 [ 1859.943102][T30114] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 1859.943117][T30114] ? __alloc_skb+0x5b7/0x710 [ 1859.943130][T30114] ? __alloc_skb+0x140/0x710 [ 1859.943145][T30114] __alloc_skb+0x140/0x710 [ 1859.943157][T30114] ? __alloc_skb+0x5b7/0x710 [ 1859.943169][T30114] ? __pfx___alloc_skb+0x10/0x10 [ 1859.943186][T30114] netlink_alloc_large_skb+0x69/0x150 [ 1859.943199][T30114] netlink_sendmsg+0x680/0xda0 [ 1859.943214][T30114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1859.943227][T30114] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1859.943245][T30114] ____sys_sendmsg+0xa4d/0xbe0 [ 1859.943255][T30114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1859.943268][T30114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1859.943284][T30114] ___sys_sendmsg+0x190/0x1e0 [ 1859.943296][T30114] ? __pfx____sys_sendmsg+0x10/0x10 [ 1859.943306][T30114] ? __lock_acquire+0x49f/0x1a40 [ 1859.943320][T30114] ? get_pid_task+0x106/0x250 [ 1859.943344][T30114] __sys_sendmsg+0x160/0x210 [ 1859.943358][T30114] ? __pfx___sys_sendmsg+0x10/0x10 [ 1859.943380][T30114] do_syscall_64+0x115/0x870 [ 1859.943392][T30114] ? clear_bhb_loop+0x70/0xc0 [ 1859.943406][T30114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.943417][T30114] RIP: 0033:0x7f741839e0d9 [ 1859.943426][T30114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1859.943437][T30114] RSP: 002b:00007f7419306028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1859.943447][T30114] RAX: ffffffffffffffda RBX: 00007f7418625fa0 RCX: 00007f741839e0d9 [ 1859.943454][T30114] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1859.943461][T30114] RBP: 00007f7419306090 R08: 0000000000000000 R09: 0000000000000000 [ 1859.943467][T30114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1859.943473][T30114] R13: 00007f7418626038 R14: 00007f7418625fa0 R15: 00007ffe36bc6088 [ 1859.943491][T30114] [ 1862.420421][T30127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5061'. [ 1863.383429][T30123] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1864.387898][T30145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1864.670223][T30145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1865.731495][T30168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5075'. [ 1866.356496][T21040] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1866.550767][T21040] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 1866.628040][T21040] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1866.676302][T21040] usb 3-1: Product: syz [ 1866.725438][T21040] usb 3-1: config 0 descriptor?? [ 1866.785051][T21040] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1866.941194][T21040] usb 3-1: Detected FT232H [ 1867.875049][T21040] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1867.957240][T21040] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1868.016662][T21040] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 1868.400995][T21040] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1868.480520][T21040] usb 3-1: USB disconnect, device number 95 [ 1868.586306][T21040] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1868.683007][T21040] ftdi_sio 3-1:0.0: device disconnected [ 1869.285930][T21040] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1869.499705][T21040] usb 10-1: Using ep0 maxpacket: 16 [ 1869.540091][T21040] usb 10-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1869.586500][T24487] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1869.623796][T21040] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1869.678317][T21040] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.729950][T21040] usb 10-1: config 0 descriptor?? [ 1869.767885][T30207] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1869.800611][T24487] usb 3-1: Using ep0 maxpacket: 32 [ 1869.918956][T24487] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1870.178135][T24630] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1870.232231][T24487] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1870.257412][T30207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.319212][T24487] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1870.352575][T30207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.403343][T24487] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1870.415804][T24630] usb 8-1: Using ep0 maxpacket: 16 [ 1870.459540][T24630] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1870.484024][T24487] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.883857][T21040] hid (null): unknown global tag 0xe [ 1870.931482][T24630] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1870.945940][T24487] usb 3-1: Product: syz [ 1870.957120][T21040] hid_parser_main: 52 callbacks suppressed [ 1870.957132][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0 [ 1870.988898][T24487] usb 3-1: Manufacturer: syz [ 1871.020440][T24487] usb 3-1: SerialNumber: syz [ 1871.031819][T24630] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.054350][T24487] usb 3-1: config 0 descriptor?? [ 1871.068576][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0 [ 1871.110977][T24630] usb 8-1: config 0 descriptor?? [ 1871.146761][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0 [ 1871.160459][T30227] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1871.231014][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0 [ 1871.399828][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0 [ 1871.460664][T30227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.484537][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0 [ 1871.526176][T24487] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 1871.537517][T30227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.563532][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0 [ 1871.587531][ T8660] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discover! [ 1871.608215][T24487] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 1871.651580][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0 [ 1871.800649][T30240] nvme nvme135: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discover" [ 1872.029232][T24630] usbhid 8-1:0.0: can't add hid device: -71 [ 1872.035727][T24487] usb 3-1: USB disconnect, device number 96 [ 1872.058284][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0 [ 1872.078533][T24630] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1872.141470][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unknown main item tag 0x0 [ 1872.176035][T24630] usb 8-1: USB disconnect, device number 30 [ 1872.211932][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: unexpected long global item [ 1872.283147][T21040] aquacomputer_d5next 0003:0C70:F00D.000D: probe with driver aquacomputer_d5next failed with error -22 [ 1872.398606][T21040] usb 10-1: USB disconnect, device number 34 [ 1872.844649][T30253] syzkaller0: entered promiscuous mode [ 1872.891399][T30253] syzkaller0: entered allmulticast mode [ 1872.955591][T30256] tipc: Enabled bearer , priority 0 [ 1873.021506][T30253] tipc: Resetting bearer [ 1873.129723][T30252] tipc: Resetting bearer [ 1873.145262][T21040] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1873.324331][T30252] tipc: Disabling bearer [ 1873.385306][T21040] usb 5-1: Using ep0 maxpacket: 16 [ 1873.424123][T21040] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1873.539909][T21040] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1873.643433][T21040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1873.942152][T21040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1874.007699][T21040] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1874.076791][T30271] support for the xor transformation has been removed. [ 1874.085163][T21040] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1874.192077][T21040] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1875.448575][T21040] usb 5-1: Manufacturer: syz [ 1875.511200][T21040] usb 5-1: config 0 descriptor?? [ 1875.976693][T21040] rc_core: IR keymap rc-hauppauge not found [ 1876.041177][T21040] Registered IR keymap rc-empty [ 1876.066860][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.147499][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.218697][T21040] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1876.338885][T21040] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input34 [ 1876.509900][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.586221][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.655682][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.735109][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.805809][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.873517][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1876.935675][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1877.004815][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1877.075050][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1877.136500][T21040] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1877.205614][T21040] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1877.270872][T21040] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1877.363904][T21040] usb 5-1: USB disconnect, device number 60 [ 1908.448145][T30304] futex_wake_op: syz.2.5112 tries to shift op by 144; fix this program [ 1908.482113][T30303] syz.7.5113 (30303): drop_caches: 2 [ 1908.877338][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1908.996553][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1912.283968][T30330] FAULT_INJECTION: forcing a failure. [ 1912.283968][T30330] name failslab, interval 1, probability 0, space 0, times 0 [ 1912.400027][T30330] CPU: 0 UID: 0 PID: 30330 Comm: syz.9.5118 Tainted: G L syzkaller #0 PREEMPT(full) [ 1912.400046][T30330] Tainted: [L]=SOFTLOCKUP [ 1912.400051][T30330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1912.400058][T30330] Call Trace: [ 1912.400062][T30330] [ 1912.400067][T30330] dump_stack_lvl+0x100/0x190 [ 1912.400085][T30330] should_fail_ex.cold+0x5/0xa [ 1912.400099][T30330] should_failslab+0xc2/0x120 [ 1912.400114][T30330] __kmalloc_noprof+0xfc/0x820 [ 1912.400128][T30330] ? tomoyo_encode2+0xfb/0x3c0 [ 1912.400141][T30330] tomoyo_encode2+0xfb/0x3c0 [ 1912.400153][T30330] tomoyo_encode+0x29/0x50 [ 1912.400162][T30330] tomoyo_realpath_from_path+0x18c/0x690 [ 1912.400176][T30330] tomoyo_path_number_perm+0x23c/0x580 [ 1912.400191][T30330] ? tomoyo_path_number_perm+0x22e/0x580 [ 1912.400207][T30330] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1912.400235][T30330] ? find_held_lock+0x2b/0x80 [ 1912.400245][T30330] ? __fget_files+0x215/0x3d0 [ 1912.400256][T30330] ? hook_file_ioctl_common+0x140/0x440 [ 1912.400268][T30330] ? __fget_files+0x215/0x3d0 [ 1912.400281][T30330] ? __fget_files+0x21f/0x3d0 [ 1912.400294][T30330] security_file_ioctl+0xd3/0x230 [ 1912.400311][T30330] __x64_sys_ioctl+0xb7/0x210 [ 1912.400328][T30330] do_syscall_64+0x115/0x870 [ 1912.400340][T30330] ? clear_bhb_loop+0x70/0xc0 [ 1912.400353][T30330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1912.400364][T30330] RIP: 0033:0x7fad2b59e0d9 [ 1912.400374][T30330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1912.400385][T30330] RSP: 002b:00007fad297f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1912.400396][T30330] RAX: ffffffffffffffda RBX: 00007fad2b825fa0 RCX: 00007fad2b59e0d9 [ 1912.400403][T30330] RDX: 0000000000000000 RSI: 000000000000127f RDI: 0000000000000003 [ 1912.400409][T30330] RBP: 00007fad297f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1912.400416][T30330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1912.400422][T30330] R13: 00007fad2b826038 R14: 00007fad2b825fa0 R15: 00007ffeda500b18 [ 1912.400435][T30330] [ 1912.405859][T30330] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1912.953456][ T30] audit: type=1400 audit(1786980300.574:9487): avc: denied { shutdown } for pid=30331 comm="syz.7.5119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1913.023555][T30338] netlink: 'syz.0.5121': attribute type 4 has an invalid length. [ 1913.436903][ T30] audit: type=1400 audit(1786980301.054:9488): avc: denied { mounton } for pid=30346 comm="syz.2.5123" path="/324/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1913.711859][T30351] syzkaller0: entered promiscuous mode [ 1913.754706][T30351] syzkaller0: entered allmulticast mode [ 1913.806936][T30352] tipc: Enabled bearer , priority 0 [ 1913.894721][T30351] tipc: Resetting bearer [ 1913.980889][T30350] tipc: Resetting bearer [ 1914.111023][T30347] isofs_fill_super: bread failed, dev=mtdblock0, iso_blknum=64, block=128 [ 1914.128100][T30350] tipc: Disabling bearer [ 1915.529466][T21040] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1915.720250][T21040] usb 1-1: Using ep0 maxpacket: 16 [ 1915.773703][T21040] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1915.967583][T21040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1916.243351][T21040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1916.258771][T30373] support for the xor transformation has been removed. [ 1916.300837][T21040] usb 1-1: config 0 descriptor?? [ 1917.687623][T21040] usb 1-1: can't set config #0, error -71 [ 1917.753962][T21040] usb 1-1: USB disconnect, device number 78 [ 1917.949456][T24630] usb 8-1: new full-speed USB device number 31 using dummy_hcd [ 1918.151810][T24630] usb 8-1: not running at top speed; connect to a high speed hub [ 1918.287099][T24630] usb 8-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1918.503581][T24630] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1918.595324][T24630] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.656152][T30393] support for the xor transformation has been removed. [ 1918.663971][T24630] usb 8-1: Product: ࠚ [ 1918.695571][T24630] usb 8-1: Manufacturer: 鰬弪픺칹⤪㴱❏凈玹ꟛ쵝ꓣ鎨ᜮ럹㼣ᛄ硡茼幰ﭓ䄖촽糿ꕲﲯ泏遤캰釂붜᫅抨啰傄⩜徔맄ᵗ妅ᕣ㎒ᔑ淁㐼懝⅝Ƅ婃ꗃ掑맺睘똏蹺㛴諒帳ᷓ膧⪡꺉ꆪᡸ勭䛳㤀᩾뗍գ콜빯㟬ᎋ庋粹䰣ꄾ쏳乌ࡿࣘ䘝䂢虹⿇앋핥낡㖮ቩ⩉қ뿽 [ 1920.056479][T24630] usb 8-1: SerialNumber: syz [ 1920.069098][T24487] usb 10-1: new full-speed USB device number 35 using dummy_hcd [ 1920.106956][T30379] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1920.279529][T24487] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1920.370526][T24487] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1920.413705][T24630] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1920.541752][T24487] usb 10-1: config 0 has no interface number 0 [ 1920.582615][T24487] usb 10-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1920.704418][T24487] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1920.799528][T24487] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1920.868102][T24630] usb 8-1: USB disconnect, device number 31 [ 1920.890637][T24487] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1920.943186][T24487] usb 10-1: Product: syz [ 1920.983368][T24487] usb 10-1: SerialNumber: syz [ 1921.032507][T24487] usb 10-1: config 0 descriptor?? [ 1921.123437][T24487] cm109 10-1:0.8: invalid payload size 0, expected 4 [ 1921.201011][T24487] input: CM109 USB driver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.8/input/input35 [ 1921.322680][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1921.332307][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1921.339843][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1921.348625][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1921.356421][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1921.363950][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1921.371454][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1921.378938][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1921.386101][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1921.393798][ C0] cm109 10-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1921.578089][T24487] usb 10-1: USB disconnect, device number 35 [ 1921.578133][ C0] cm109 10-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1921.617472][T24487] cm109 10-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1921.637092][T30416] udevd[30416]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1922.923773][ T30] audit: type=1326 audit(1786980310.545:9489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30433 comm="syz.7.5146" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7ff73bc39cba code=0x0 [ 1923.077827][ T30] audit: type=1326 audit(1786980310.665:9490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30436 comm="syz.9.5147" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7fad2c378cba code=0x0 [ 1923.114404][T24487] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1923.318400][T24487] usb 3-1: Using ep0 maxpacket: 16 [ 1923.339256][T24487] usb 3-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1923.423676][T24487] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1923.517790][T24487] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.607332][T24487] usb 3-1: config 0 descriptor?? [ 1923.664605][T30432] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1924.071827][T30456] tmpfs: Bad value for 'huge' [ 1924.199876][T24487] hid_parser_main: 52 callbacks suppressed [ 1924.199891][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: unknown main item tag 0x0 [ 1924.314465][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: unknown main item tag 0x0 [ 1924.333518][T30459] syz.0.5151 (30459): drop_caches: 2 [ 1924.386796][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: unknown main item tag 0x0 [ 1925.653314][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: unknown main item tag 0x0 [ 1925.737384][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: unknown main item tag 0x0 [ 1925.849355][T30464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5152'. [ 1925.860217][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: unknown main item tag 0x0 [ 1925.917591][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: unknown main item tag 0x0 [ 1925.993818][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: unknown main item tag 0x0 [ 1926.091916][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: unknown main item tag 0x0 [ 1926.190542][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: unknown main item tag 0x0 [ 1926.347395][T30478] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5156'. [ 1926.361950][T30477] support for the xor transformation has been removed. [ 1926.369863][T24487] aquacomputer_d5next 0003:0C70:F00D.000E: hidraw0: USB HID v0.08 Device [HID 0c70:f00d] on usb-dummy_hcd.2-1/input0 [ 1926.758408][T30482] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5159'. [ 1927.836996][ T30] audit: type=1400 audit(1786980315.446:9491): avc: denied { write } for pid=30481 comm="syz.2.5159" name="ports" dev="configfs" ino=3516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1927.920883][T24487] usb 3-1: USB disconnect, device number 97 [ 1937.344223][ T30] audit: type=1400 audit(1786980324.907:9492): avc: denied { accept } for pid=30565 comm="syz.4.5175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1938.626404][ T5686] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1938.836953][ T5686] usb 1-1: Using ep0 maxpacket: 16 [ 1938.865512][ T5686] usb 1-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 1938.939270][ T5686] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1939.024504][ T5686] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1939.097693][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1939.142173][ T5686] usb 1-1: Product: syz [ 1939.168125][ T5686] usb 1-1: Manufacturer: syz [ 1939.208172][ T5686] usb 1-1: SerialNumber: syz [ 1939.468607][ T5686] usb 1-1: 0:2 : does not exist [ 1939.507315][ T30] audit: type=1400 audit(1786980327.127:9493): avc: denied { write } for pid=30578 comm="syz.9.5185" name="0x409" dev="configfs" ino=19048 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1939.631858][T30580] [ 1939.634171][T30580] ====================================================== [ 1939.641154][T30580] WARNING: possible circular locking dependency detected [ 1939.648175][T30580] syzkaller #0 Tainted: G L [ 1939.654121][T30580] ------------------------------------------------------ [ 1939.661106][T30580] syz.9.5185/30580 is trying to acquire lock: [ 1939.667137][T30580] ffffffff903ca368 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_w_width_store+0x12c/0x370 [ 1939.677716][T30580] [ 1939.677716][T30580] but task is already holding lock: [ 1939.685045][T30580] ffff888074199270 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1939.694315][T30580] [ 1939.694315][T30580] which lock already depends on the new lock. [ 1939.694315][T30580] [ 1939.704681][T30580] [ 1939.704681][T30580] the existing dependency chain (in reverse order) is: [ 1939.713667][T30580] [ 1939.713667][T30580] -> #3 (&p->frag_sem){++++}-{4:4}: [ 1939.721022][T30580] lock_acquire+0x1b9/0x370 [ 1939.726022][T30580] down_write_killable+0x93/0x250 [ 1939.731537][T30580] configfs_rmdir+0x3fa/0x950 [ 1939.736715][T30580] vfs_rmdir+0x328/0x8a0 [ 1939.741463][T30580] filename_rmdir+0x31a/0x5c0 [ 1939.746632][T30580] __x64_sys_unlinkat+0xf5/0x130 [ 1939.752063][T30580] do_syscall_64+0x115/0x870 [ 1939.757149][T30580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.763538][T30580] [ 1939.763538][T30580] -> #2 (&sb->s_type->i_mutex_key#26){++++}-{4:4}: [ 1939.772198][T30580] lock_acquire+0x1b9/0x370 [ 1939.777198][T30580] down_write+0x8b/0x1f0 [ 1939.781935][T30580] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1939.788321][T30580] usbg_make_tpg+0x261/0x620 [ 1939.793404][T30580] target_fabric_make_tpg+0xab/0x8c0 [ 1939.799183][T30580] configfs_mkdir+0x51e/0xb70 [ 1939.804353][T30580] vfs_mkdir+0x361/0x850 [ 1939.809096][T30580] filename_mkdirat+0x48b/0x5e0 [ 1939.814438][T30580] __x64_sys_mkdir+0x6b/0x90 [ 1939.819519][T30580] do_syscall_64+0x115/0x870 [ 1939.824600][T30580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.830981][T30580] [ 1939.830981][T30580] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 1939.838589][T30580] lock_acquire+0x1b9/0x370 [ 1939.843583][T30580] __mutex_lock+0x1a4/0x1bd0 [ 1939.848662][T30580] tcm_set_name+0x29/0xb0 [ 1939.853489][T30580] function_make+0x21c/0x3f0 [ 1939.858599][T30580] configfs_mkdir+0x51e/0xb70 [ 1939.863782][T30580] vfs_mkdir+0x361/0x850 [ 1939.868522][T30580] filename_mkdirat+0x48b/0x5e0 [ 1939.873867][T30580] __x64_sys_mkdir+0x6b/0x90 [ 1939.878955][T30580] do_syscall_64+0x115/0x870 [ 1939.884035][T30580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.890416][T30580] [ 1939.890416][T30580] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1939.898632][T30580] check_prev_add+0xeb/0xe60 [ 1939.903714][T30580] __lock_acquire+0x136c/0x1a40 [ 1939.909072][T30580] lock_acquire+0x1b9/0x370 [ 1939.914074][T30580] __mutex_lock+0x1a4/0x1bd0 [ 1939.919161][T30580] uvcg_frame_w_width_store+0x12c/0x370 [ 1939.925198][T30580] configfs_write_iter+0x302/0x4e0 [ 1939.930806][T30580] vfs_write+0x6ac/0x1050 [ 1939.935632][T30580] ksys_write+0x12a/0x250 [ 1939.940454][T30580] do_syscall_64+0x115/0x870 [ 1939.945538][T30580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1939.951923][T30580] [ 1939.951923][T30580] other info that might help us debug this: [ 1939.951923][T30580] [ 1939.962129][T30580] Chain exists of: [ 1939.962129][T30580] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#26 --> &p->frag_sem [ 1939.962129][T30580] [ 1939.976524][T30580] Possible unsafe locking scenario: [ 1939.976524][T30580] [ 1939.983938][T30580] CPU0 CPU1 [ 1939.989270][T30580] ---- ---- [ 1939.994601][T30580] rlock(&p->frag_sem); [ 1939.998811][T30580] lock(&sb->s_type->i_mutex_key#26); [ 1940.006758][T30580] lock(&p->frag_sem); [ 1940.013397][T30580] lock(gadget_subsys.su_mutex); [ 1940.018398][T30580] [ 1940.018398][T30580] *** DEADLOCK *** [ 1940.018398][T30580] [ 1940.026506][T30580] 4 locks held by syz.9.5185/30580: [ 1940.031674][T30580] #0: ffff88802728b5f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1940.040683][T30580] #1: ffff88801e70c450 (sb_writers#16){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1940.049698][T30580] #2: ffff88807b926080 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 1940.059502][T30580] #3: ffff888074199270 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 1940.069226][T30580] [ 1940.069226][T30580] stack backtrace: [ 1940.075096][T30580] CPU: 0 UID: 0 PID: 30580 Comm: syz.9.5185 Tainted: G L syzkaller #0 PREEMPT(full) [ 1940.075113][T30580] Tainted: [L]=SOFTLOCKUP [ 1940.075117][T30580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1940.075124][T30580] Call Trace: [ 1940.075130][T30580] [ 1940.075135][T30580] dump_stack_lvl+0x100/0x190 [ 1940.075150][T30580] print_circular_bug.cold+0x178/0x1c7 [ 1940.075168][T30580] check_noncircular+0x146/0x160 [ 1940.075180][T30580] ? kernel_text_address+0x8d/0x100 [ 1940.075195][T30580] check_prev_add+0xeb/0xe60 [ 1940.075208][T30580] __lock_acquire+0x136c/0x1a40 [ 1940.075223][T30580] lock_acquire+0x1b9/0x370 [ 1940.075236][T30580] ? uvcg_frame_w_width_store+0x12c/0x370 [ 1940.075249][T30580] ? __pfx___might_resched+0x10/0x10 [ 1940.075262][T30580] __mutex_lock+0x1a4/0x1bd0 [ 1940.075279][T30580] ? uvcg_frame_w_width_store+0x12c/0x370 [ 1940.075291][T30580] ? uvcg_frame_w_width_store+0x12c/0x370 [ 1940.075303][T30580] ? _kstrtoull+0x13c/0x1f0 [ 1940.075314][T30580] ? __pfx___mutex_lock+0x10/0x10 [ 1940.075328][T30580] ? kstrtou16+0xde/0x130 [ 1940.075337][T30580] ? __pfx_kstrtou16+0x10/0x10 [ 1940.075348][T30580] ? __pfx___might_resched+0x10/0x10 [ 1940.075361][T30580] ? uvcg_frame_w_width_store+0x12c/0x370 [ 1940.075372][T30580] uvcg_frame_w_width_store+0x12c/0x370 [ 1940.075384][T30580] ? __pfx_uvcg_frame_w_width_store+0x10/0x10 [ 1940.075396][T30580] ? configfs_write_iter+0x388/0x4e0 [ 1940.075410][T30580] configfs_write_iter+0x302/0x4e0 [ 1940.075424][T30580] vfs_write+0x6ac/0x1050 [ 1940.075433][T30580] ? __pfx_configfs_write_iter+0x10/0x10 [ 1940.075447][T30580] ? __pfx_vfs_write+0x10/0x10 [ 1940.075460][T30580] ksys_write+0x12a/0x250 [ 1940.075469][T30580] ? __pfx_ksys_write+0x10/0x10 [ 1940.075478][T30580] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 1940.075491][T30580] do_syscall_64+0x115/0x870 [ 1940.075503][T30580] ? clear_bhb_loop+0x70/0xc0 [ 1940.075514][T30580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.075525][T30580] RIP: 0033:0x7fad2b59e0d9 [ 1940.075535][T30580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1940.075546][T30580] RSP: 002b:00007fad297d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1940.075557][T30580] RAX: ffffffffffffffda RBX: 00007fad2b826090 RCX: 00007fad2b59e0d9 [ 1940.075564][T30580] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000004 [ 1940.075570][T30580] RBP: 00007fad2b635024 R08: 0000000000000000 R09: 0000000000000000 [ 1940.075577][T30580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1940.075583][T30580] R13: 00007fad2b826128 R14: 00007fad2b826090 R15: 00007ffeda500b18 [ 1940.075592][T30580] [ 1940.353392][ T5686] usb-storage 1-1:1.1: USB Mass Storage device detected [ 1940.633489][ T30] audit: type=1400 audit(1786980327.197:9494): avc: denied { write } for pid=30578 comm="syz.9.5185" name="uncompressed" dev="configfs" ino=7895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1940.716046][ T30] audit: type=1400 audit(1786980327.217:9495): avc: denied { write } for pid=30578 comm="syz.9.5185" name="yuyv" dev="configfs" ino=202715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1940.770661][ T30] audit: type=1400 audit(1786980327.247:9496): avc: denied { create } for pid=30578 comm="syz.9.5185" name="serialnumber" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 1940.835971][ T30] audit: type=1400 audit(1786980327.257:9497): avc: denied { write } for pid=30578 comm="syz.9.5185" name="720p" dev="configfs" ino=202716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1941.411967][T30588] kvm: MWAIT instruction emulated as NOP! [ 1941.862976][ T30] audit: type=1400 audit(1786980329.417:9498): avc: denied { execute } for pid=30591 comm="syz.4.5193" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=202814 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1942.165421][ T5686] usb 1-1: USB disconnect, device number 79 [ 1942.671193][T30315] udevd[30315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1942.966812][ T30] audit: type=1400 audit(1786980330.597:9499): avc: denied { write } for pid=30578 comm="syz.9.5185" name="720p" dev="configfs" ino=202716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1943.468205][T29954] Bluetooth: hci5: command 0x0406 tx timeout