last executing test programs: 15.246058898s ago: executing program 1 (id=5444): io_setup(0x10000, &(0x7f0000000800)=0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) io_cancel(r0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) read$FUSE(r5, 0x0, 0x0) write$FUSE_STATX(r5, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, 0x0, {0x9, 0xc1, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, 0x0, 0x0, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xffffffa8, 0x2, 0x10000000}}}, 0x130) splice(r5, 0x0, r7, 0x0, 0x2000, 0x8) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, 0x0) 11.994068118s ago: executing program 2 (id=5452): io_setup(0x10000, &(0x7f0000000800)=0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) io_cancel(r0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) read$FUSE(r5, 0x0, 0x0) write$FUSE_STATX(r5, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, 0x0, {0x9, 0xc1, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, 0x0, 0x0, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xffffffa8, 0x2, 0x10000000}}}, 0x130) splice(r5, 0x0, r7, 0x0, 0x2000, 0x8) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, 0x0) 11.903560835s ago: executing program 1 (id=5453): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20000000) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r3, r6, 0xfffffffffffffc01, 0x0) tee(r3, r6, 0x60000000000, 0x0) socket(0x1f, 0x3, 0xfa) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(&(0x7f0000000480)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r8 = fcntl$dupfd(r7, 0x0, r7) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r10, 0x4008ae48, &(0x7f00000000c0)=0xeeee0000) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x10400, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 11.231422723s ago: executing program 2 (id=5455): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) setrlimit(0x5, &(0x7f00000000c0)={0x1b000, 0x7fffffffffffffff}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r2}) r3 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000001340)={0x2c, &(0x7f0000000000)={0x0, 0x24, 0x41, {0x41, 0x23, "7f9c77aab99c8231f23ac864ca56808e7aad677c802810cfc0a6a65b72c03635fb151accd60d7f9652083a142531b7baa816f4ad7854f7988d808f1884e687"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r2, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2022}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r2, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf58}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000040)=@assoc_value, 0x8) setsockopt(r0, 0x0, 0x1000, &(0x7f00000003c0)="6000aa2b8cc834e3d81107ab02a25bd61367e7cb8e5ab744d2776d3ae0eb780a5657c7630467fd86bcb7744c8f860fe5c89f63d91fbb882c5bde5b15299ba99a908cc56a4b7d20b74b3c3b3ff774544be46a170074c0c3bf4893218ee9ac7c4303aa4b", 0x63) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8d, 0x870, 0x1, 0x1, 0xd59f82, 0x19f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x1, {0x45, 0x80}, 0xcd, 0x3}}) 10.080340059s ago: executing program 0 (id=5456): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r1 = socket(0x40000000015, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x77f31000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x28}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_tcp_int(r7, 0x6, 0x1, 0x0, &(0x7f0000000240)) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000580)="303e3080020000000900f190c937dc6b14243b0402e8886ff204d830fa5b3ba026b4fb64", 0x24, r8) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(0x3) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000000000000a00000000000005ff02000000000000000000000000000102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x110) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) 9.155900685s ago: executing program 0 (id=5457): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f00000004c0), &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000380)={0x3, 0x2, 0x29, &(0x7f0000000340)=""/41}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 9.140090949s ago: executing program 4 (id=5458): io_setup(0x10000, &(0x7f0000000800)=0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) io_cancel(r0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) read$FUSE(r5, 0x0, 0x0) write$FUSE_STATX(r5, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, 0x0, {0x9, 0xc1, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, 0x0, 0x0, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xffffffa8, 0x2, 0x10000000}}}, 0x130) splice(r5, 0x0, r7, 0x0, 0x2000, 0x8) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, 0x0) 8.447482623s ago: executing program 1 (id=5460): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)}], 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioperm(0x6, 0x2, 0x8) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x400) r2 = gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000200)='!se\xf7ih,\x17i\xeb-\xed\xacP\xe6lNn\x00xseqinux\x10', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0xff7f000000000000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet(r1, 0x0, 0x60) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x5}}}, 0x24}}, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 8.026022507s ago: executing program 2 (id=5461): syz_open_dev$dri(&(0x7f0000000000), 0x9000000000, 0x141782) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) futex_waitv(&(0x7f0000010040), 0x0, 0x0, 0x0, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000100c0), 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000010000)) socket(0x2b, 0x80801, 0x1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x52) sendmmsg$sock(r4, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x206c) 7.95559333s ago: executing program 3 (id=5462): io_setup(0x10000, &(0x7f0000000800)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) io_cancel(r0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) read$FUSE(r5, 0x0, 0x0) write$FUSE_STATX(r5, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, 0x0, {0x9, 0xc1, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, 0x0, 0x0, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xffffffa8, 0x2, 0x10000000}}}, 0x130) splice(r5, 0x0, r7, 0x0, 0x2000, 0x8) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, 0x0) 7.947030249s ago: executing program 1 (id=5463): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21401, 0x0) r2 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100feff"], 0xc8) sendmsg$sock(r4, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x2, 0x8200002, 0x131}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) 7.895842461s ago: executing program 4 (id=5464): syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x62, 0xa1, 0xb, 0x40, 0xc45, 0x1010, 0xe6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x32, 0x0, 0x1, 0x97, 0x40, 0xa4, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x3ff, 0x0, 0x7e}}]}}]}}]}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x94) chdir(0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc0100000002000000020000"], 0xe0}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x19, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0xffffffffffffffc7}}], 0x1, 0x20008000) recvmmsg(r6, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000a00)=""/92, 0x5c}], 0x1}, 0x2}], 0x2, 0x0, 0x0) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 7.435585673s ago: executing program 0 (id=5465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21401, 0x0) r2 = socket(0x1d, 0x2, 0x6) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xffffffff, 0xbde, 0xb, 0x10000}}) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, &(0x7f0000000240), 0x0, 0x7000, 0x0, 0x3) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r4, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) io_uring_setup(0x598, &(0x7f0000000300)={0x0, 0x77ae, 0x2, 0x8200002, 0x131}) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000013c0)={0x200, 0x2, 0x2, {0x5, @vbi={0xb5, 0x0, 0x3, 0x20363159, [0x0, 0x8000000], [0x8200, 0x1]}}, 0x4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) ioctl$VIDIOC_QBUF(r7, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "230700dd"}, 0x0, 0x2, {}, 0x58603}) 6.422879255s ago: executing program 3 (id=5466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000440)={0x28, 0x0, 0xffffffff}, 0x10) listen(r10, 0x0) 5.588859789s ago: executing program 2 (id=5467): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8844) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(r1, 0x8, &(0x7f0000000340)=0x2) getgroups(0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r6, 0x0, 0x0, 0xfe, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r8, 0x0, 0x1, 0x64, 0x1000007, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8000, 0xfffffffe}}) 5.380805192s ago: executing program 3 (id=5468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000900)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x1408009, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000240)={0x3, 0xf, 0x1, 0x6, 0x9, 0x3}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x400) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r5, &(0x7f0000000440)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f00000005c0)={&(0x7f0000000b00)=@canfd={{0x0, 0x1, 0x0, 0x1}, 0x12, 0x6, 0x0, 0x0, "41aa852ed0ee53ae210696985995de3bb842da1d072d09fc23839199cfdd79ce5b8fd9f8c96b59f6550648cb7ddc3acb99961b8c5a1f2624e07c9ff92be5eff9"}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x80) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) r7 = dup2(r3, r2) syz_fuse_handle_req(r7, &(0x7f0000001440)="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", 0x2000, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x54) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2b8180, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r9, 0x4b4e, 0x1c) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r10 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r10, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) ioctl$BLKTRACESETUP(r8, 0xc0481273, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r11, 0x6, &(0x7f00000001c0)={0x2}) 4.478662268s ago: executing program 2 (id=5469): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000280)={@my=0x1}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0xd) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000002, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x1}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r6) r7 = socket(0x1e, 0x1, 0x0) connect$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r7, &(0x7f0000000080), 0x2000011a) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040810}, 0x0) waitid(0x1, 0x0, 0x0, 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x3) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) 4.478079387s ago: executing program 4 (id=5470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088010000c800c000bcc54c9024db1c80a80aebfe561dc2b985f114a679d64d4954a95e4c375e92a7ebde8000a629713f2d78022b1a92504efc099b0e1be3b654e18a959cd41fdfda0daa9b1706e97f3549d3a12d7610d990b08e1998d78cb11ae7dedcdf2347462ba32dab781a40f587381a3cf3c622a6c98be11e5c4323bfde7c5"], 0x3c}}, 0x20000810) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x4c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r3, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}, @TCA_FW_INDEV={0x14, 0x3, 'xfrm0\x00'}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r7, 0x11, 0x4, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) r8 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r8, &(0x7f0000000280), 0x9) r9 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r12 = openat$cgroup_ro(r10, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r14 = openat$cgroup_procs(r13, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r14, &(0x7f0000000080)=r11, 0x12) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x100, 0x1000000, 0x0, {0x0, 0x0, 0x4, 0x0, 0x84a0, 0x1a725}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4652d}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r15}, &(0x7f0000000140), &(0x7f0000000200)}, 0x20) 4.473248034s ago: executing program 1 (id=5471): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x14, 0x0) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000100000850000005000000095000000000000", @ANYRESDEC=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, 0x0, 0x0, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.291021779s ago: executing program 0 (id=5472): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = syz_open_pts(0xffffffffffffffff, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet6_icmp(0xa, 0x2, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='hpfs\x00', 0x4080, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffbf00010000fe88000a000000000000000000000001ac1414aa000000000000000000000000000107944e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0060f50000"], 0x140}, 0x1, 0x0, 0x0, 0x8885}, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r6, @ANYRES64, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) dup(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000002400)={[{0x3, 0xce, 0xfa, 0x5, 0x3, 0x96, 0x6, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x9, 0x1, 0x6, 0x5, 0x7, 0x6, 0x2, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x7f, 0x8, 0xb, 0x42, 0xf4, 0x4, 0x200}], 0xfffffffe}) getpid() 4.29013684s ago: executing program 3 (id=5473): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f00000004c0), &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 3.077818921s ago: executing program 0 (id=5474): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x8146, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x100080, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r5 = socket(0x1d, 0x2, 0x6) r6 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r6, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_j1939(r5, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000280)={0x0, 0xa}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x10, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@jmp={0x5, 0x0, 0x7, 0xb, 0x5, 0x80, 0x10}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0xffffffffffffffff, &(0x7f0000000100)={0x38, 0x0, 0x20, 0x6, 0x1, 0x0, 0x9, 0xdc14, 0x9, 0x4}, 0x0) 2.966636908s ago: executing program 4 (id=5475): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f00000004c0), &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000380)={0x3, 0x2, 0x29, &(0x7f0000000340)=""/41}) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 1.885738656s ago: executing program 3 (id=5476): io_setup(0x10000, &(0x7f0000000800)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) io_setup(0x7a, &(0x7f0000000000)) io_cancel(r0, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x2, 0xffffffffffffffff) read$FUSE(r5, 0x0, 0x0) write$FUSE_STATX(r5, &(0x7f0000002140)={0x130, 0xfffffffffffffffe, 0x0, {0x9, 0xc1, 0x0, '\x00', {0x100, 0x1, 0x9, 0x7, 0x0, 0x0, 0x8000, '\x00', 0x2a8, 0x80000000, 0x5, 0x6, {0x3, 0x7}, {0x4, 0x3e3}, {0x1, 0x1}, {0x1, 0x51bb}, 0xff, 0xffffffa8, 0x2, 0x10000000}}}, 0x130) splice(r5, 0x0, r7, 0x0, 0x2000, 0x8) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x4f, 0x0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r8, 0xae80, 0x0) io_setup(0x9, &(0x7f0000002e40)) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, 0x0) 1.360001472s ago: executing program 2 (id=5477): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x881) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000140), 0x4) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000040)=0x10, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x19033) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r6, 0x0, 0x480, 0x0, &(0x7f0000000080)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r7}, 0x38) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 1.280342366s ago: executing program 4 (id=5478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) sendmsg$nl_route_sched(r8, 0x0, 0x800) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000440)={0x28, 0x0, 0xffffffff}, 0x10) listen(r10, 0x0) 639.861992ms ago: executing program 1 (id=5479): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) r3 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x10003, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, 0x0) close(0xffffffffffffffff) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) getrlimit(0x8, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x401, 0x181, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x29, 0xffff, 0x1, 0x3fd, 0x4000009, 0x200, 0xe2de, 0xaaa1, 0xffffffff, 0x4, 0x40000, 0x7, 0xf58, 0x6]}) ioctl$COMEDI_INSN(r8, 0x8028640c, 0x0) dup(r7) socket$nl_netfilter(0x10, 0x3, 0xc) 364.663763ms ago: executing program 4 (id=5480): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) sysinfo(&(0x7f0000000000)=""/196) r4 = socket(0x11, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000380)={&(0x7f0000000180)=@ieee802154={0x24, @long={0x3, 0x2}}, 0x80, 0x0}, 0x54c98c283c2f347e) r5 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000980)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r2, &(0x7f00000098c0), 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r8, &(0x7f0000001640)=[{&(0x7f0000000140)=""/249, 0xf9}], 0x1) write$evdev(r8, &(0x7f0000000040)=[{{}, 0x0, 0x9}], 0x18) preadv(r7, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/127, 0x7f}], 0x1, 0x0, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 164.34945ms ago: executing program 0 (id=5481): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4, 0x0, 0xff}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r8}, 0x18) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}}], 0x1, 0x4000804) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) 0s ago: executing program 3 (id=5482): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) move_pages(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f00000004c0), &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x6) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000500)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) kernel console output (not intermixed with test programs): 092.551270][T26898] ipip0: entered allmulticast mode [ 2092.785384][T26904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4473'. [ 2093.184743][ T30] audit: type=1400 audit(2092.772:4054): avc: denied { ioctl } for pid=26899 comm="syz.3.4473" path="socket:[87079]" dev="sockfs" ino=87079 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2095.248988][T26476] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2095.491319][T26476] usb 4-1: Using ep0 maxpacket: 32 [ 2095.501761][T26476] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2095.509926][T26476] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2095.541860][T18427] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2095.596417][T26476] usb 4-1: config 0 has no interface number 0 [ 2095.613214][T26476] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2095.829230][T26476] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2095.979415][T18427] usb 2-1: Using ep0 maxpacket: 8 [ 2095.987297][T18427] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 2095.996217][T18427] usb 2-1: config 0 has no interface number 0 [ 2096.016843][T26476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.082190][T26476] usb 4-1: config 0 descriptor?? [ 2096.102481][T26476] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 2096.191722][T26941] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 2096.238792][T18427] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 2096.248714][T18427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2096.259611][T18427] usb 2-1: Product: syz [ 2096.265279][T18427] usb 2-1: Manufacturer: syz [ 2096.274565][T18427] usb 2-1: SerialNumber: syz [ 2096.530621][T26923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2096.588953][T26469] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 2096.709982][T26923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2096.872243][T18427] usb 2-1: config 0 descriptor?? [ 2096.882739][T26469] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2096.893146][T26469] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2096.902601][T26469] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 2096.915123][T26469] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2096.931323][T26469] usb 5-1: config 0 descriptor?? [ 2096.938700][T26469] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2096.949112][T26469] dvb-usb: bulk message failed: -22 (3/0) [ 2097.061207][T26469] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2097.090376][T26469] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2097.101483][T26469] usb 5-1: media controller created [ 2097.107433][T26469] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2097.118152][T26947] netlink: 'syz.2.4481': attribute type 1 has an invalid length. [ 2097.149988][T26941] dibusb: i2c wr: len=61 is too big! [ 2097.149988][T26941] [ 2097.171998][T26941] netlink: 'syz.4.4480': attribute type 6 has an invalid length. [ 2097.180337][T26469] dvb-usb: bulk message failed: -22 (6/0) [ 2097.186091][T26469] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2097.197275][T26941] netlink: 'syz.4.4480': attribute type 7 has an invalid length. [ 2097.207246][T26941] netlink: 'syz.4.4480': attribute type 8 has an invalid length. [ 2097.247848][T26469] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 2097.277279][T26469] dvb-usb: schedule remote query interval to 150 msecs. [ 2097.361394][T26469] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2097.561852][T26469] dvb-usb: bulk message failed: -22 (1/0) [ 2097.567602][T26469] dvb-usb: error while querying for an remote control event. [ 2097.586731][T18427] msi2500 2-1:0.246: Registered as swradio24 [ 2097.593394][T18427] msi2500 2-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 2097.909141][T26469] dvb-usb: bulk message failed: -22 (1/0) [ 2097.915883][T26469] dvb-usb: error while querying for an remote control event. [ 2098.400996][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.442866][T18427] dvb-usb: bulk message failed: -22 (1/0) [ 2098.519237][T18427] dvb-usb: error while querying for an remote control event. [ 2098.743128][T18427] dvb-usb: bulk message failed: -22 (1/0) [ 2098.749486][T18427] dvb-usb: error while querying for an remote control event. [ 2098.774339][T26966] netlink: 'syz.0.4483': attribute type 4 has an invalid length. [ 2098.782227][T26966] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.4483'. [ 2099.349559][T26476] usb 5-1: USB disconnect, device number 32 [ 2099.418099][T26476] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2099.440490][T26966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4483'. [ 2099.477640][T18427] usb 4-1: USB disconnect, device number 37 [ 2100.250293][T26476] usb 2-1: USB disconnect, device number 36 [ 2100.758705][T26988] snd_dummy snd_dummy.0: control 0:-1:0:syz0:0 is already present [ 2100.794889][ T30] audit: type=1326 audit(2100.732:4055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26980 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2100.900283][ T30] audit: type=1326 audit(2100.742:4056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26980 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2100.923239][ C0] vkms_vblank_simulate: vblank timer overrun [ 2100.990185][ T30] audit: type=1326 audit(2100.742:4057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26980 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2101.276081][ T30] audit: type=1326 audit(2100.742:4058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26980 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2101.352805][ T30] audit: type=1326 audit(2100.742:4059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26980 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2101.587051][ T30] audit: type=1326 audit(2100.742:4060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26980 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2101.620197][ T30] audit: type=1326 audit(2100.742:4061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26980 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2101.672690][ T30] audit: type=1326 audit(2100.742:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26980 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2101.833697][ T30] audit: type=1326 audit(2100.742:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26980 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2101.856647][ C0] vkms_vblank_simulate: vblank timer overrun [ 2102.059000][ T30] audit: type=1326 audit(2100.742:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26980 comm="syz.3.4488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2102.818004][T27007] infiniband syz2: set down [ 2102.822553][T27007] infiniband syz2: added veth1_to_team [ 2102.829056][T27007] syz2: rxe_create_qp: returned err = -2 [ 2102.834687][T27007] infiniband syz2: Couldn't create ib_mad QP1 [ 2102.841124][T27007] infiniband syz2: Couldn't open port 1 [ 2102.864215][T27007] RDS/IB: syz2: added [ 2102.868200][T27007] smc: adding ib device syz2 with port count 1 [ 2102.874369][T27007] smc: ib device syz2 port 1 has no pnetid [ 2103.276370][T27012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4495'. [ 2103.969012][T27013] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 2104.033409][T27017] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4497'. [ 2106.621449][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2106.641627][ T30] audit: type=1400 audit(2106.593:4078): avc: denied { create } for pid=27044 comm="syz.3.4501" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 2107.657143][T27066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4505'. [ 2108.891460][T27071] 9pnet_virtio: no channels available for device syz [ 2109.218706][T27076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4506'. [ 2109.312262][T27082] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2109.327121][T27082] netlink: 'syz.1.4507': attribute type 10 has an invalid length. [ 2109.375820][ T30] audit: type=1400 audit(2109.303:4079): avc: denied { setopt } for pid=27073 comm="syz.1.4507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2110.182586][T27073] delete_channel: no stack [ 2110.209025][ T30] audit: type=1400 audit(2110.153:4080): avc: denied { remount } for pid=27077 comm="syz.3.4508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2111.030844][T27102] dlm: no local IP address has been set [ 2111.052727][T27102] dlm: cannot start dlm midcomms -107 [ 2111.439067][T18427] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 2111.494249][T27102] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2111.527407][ T6162] Bluetooth: hci5: Frame reassembly failed (-84) [ 2111.604187][T18427] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2111.738137][T18427] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2111.749238][T18427] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2111.758369][T18427] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.863667][T18427] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2111.873023][T18427] usb 2-1: invalid MIDI out EP 0 [ 2111.941660][T26814] udevd[26814]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2111.971091][T18427] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2113.446722][T19509] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2114.259882][T27130] siw: device registration error -23 [ 2114.756695][T18427] usb 2-1: USB disconnect, device number 37 [ 2115.001767][T27136] qrtr: Invalid version 0 [ 2116.790234][T27173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4524'. [ 2116.969985][T27173] tipc: Disabling bearer [ 2117.401425][ T30] audit: type=1400 audit(2117.333:4081): avc: denied { getopt } for pid=27178 comm="syz.2.4526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2117.585802][ T30] audit: type=1326 audit(2117.483:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27181 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a678f6c9 code=0x7ffc0000 [ 2117.633450][ T30] audit: type=1326 audit(2117.483:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27181 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a678f6c9 code=0x7ffc0000 [ 2117.747562][ T30] audit: type=1326 audit(2117.483:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27181 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe2a678f6c9 code=0x7ffc0000 [ 2117.773305][ T30] audit: type=1326 audit(2117.483:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27181 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a678f6c9 code=0x7ffc0000 [ 2117.796734][ T30] audit: type=1326 audit(2117.493:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27181 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a678f6c9 code=0x7ffc0000 [ 2117.860050][T27192] gfs2: gfs2 mount does not exist [ 2118.579422][T27195] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 2118.589216][T27195] SELinux: failed to load policy [ 2119.282789][ T30] audit: type=1326 audit(2117.493:4087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27181 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe2a678f6c9 code=0x7ffc0000 [ 2119.306114][ T30] audit: type=1326 audit(2117.493:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27181 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a678f6c9 code=0x7ffc0000 [ 2119.333587][ T30] audit: type=1326 audit(2117.493:4089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27181 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a678f6c9 code=0x7ffc0000 [ 2119.449024][ T30] audit: type=1326 audit(2117.493:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27181 comm="syz.4.4525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fe2a678f6c9 code=0x7ffc0000 [ 2123.037494][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 2123.067847][T27261] macsec0: entered promiscuous mode [ 2123.073235][T27261] team0: entered promiscuous mode [ 2123.078337][T27261] team_slave_0: entered promiscuous mode [ 2123.084812][T27261] team_slave_1: entered promiscuous mode [ 2123.718823][ T30] audit: type=1400 audit(2122.973:4118): avc: denied { bind } for pid=27255 comm="syz.0.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2123.851380][T27261] macsec0: entered allmulticast mode [ 2123.857152][T27261] team0: entered allmulticast mode [ 2123.867884][T27262] qrtr: Invalid version 0 [ 2123.950407][T27268] gfs2: gfs2 mount does not exist [ 2124.509211][T27261] team_slave_0: entered allmulticast mode [ 2124.515031][T27261] team_slave_1: entered allmulticast mode [ 2124.689610][T27261] team0: Device macsec0 is already an upper device of the team interface [ 2124.805791][T27261] team0: left allmulticast mode [ 2124.836272][T27261] team_slave_0: left allmulticast mode [ 2124.946257][T27261] team_slave_1: left allmulticast mode [ 2125.047752][T27261] team0: left promiscuous mode [ 2125.078914][T27261] team_slave_0: left promiscuous mode [ 2125.084375][T27261] team_slave_1: left promiscuous mode [ 2126.244633][ T30] audit: type=1400 audit(2126.213:4119): avc: denied { append } for pid=27282 comm="syz.3.4543" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 2126.267046][ C1] vkms_vblank_simulate: vblank timer overrun [ 2126.576346][T27295] netlink: 'syz.1.4545': attribute type 21 has an invalid length. [ 2126.852363][T27299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4545'. [ 2130.541899][ T30] audit: type=1400 audit(2130.503:4120): avc: denied { listen } for pid=27310 comm="syz.4.4549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2130.630591][T27337] gfs2: gfs2 mount does not exist [ 2131.255343][T27341] fuse: Bad value for 'fd' [ 2131.508657][T27347] siw: device registration error -23 [ 2132.173976][T27349] Set syz0 is full, maxelem 0 reached [ 2134.152693][T27374] netlink: 'syz.3.4562': attribute type 10 has an invalid length. [ 2134.205947][T27377] netlink: 'syz.3.4562': attribute type 10 has an invalid length. [ 2134.213864][T27377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4562'. [ 2134.282884][T27377] batadv0: entered allmulticast mode [ 2134.336997][T27377] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 2134.510126][T27376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4559'. [ 2134.766437][T27381] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 2134.780531][T27381] team0: Port device batadv3 added [ 2136.588931][ T30] audit: type=1400 audit(2136.053:4121): avc: denied { getopt } for pid=27389 comm="syz.0.4566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2137.158191][T27416] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 2137.164724][T27416] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2137.179153][ T30] audit: type=1400 audit(2137.003:4122): avc: denied { connect } for pid=27396 comm="syz.1.4567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2137.609067][T27416] vhci_hcd vhci_hcd.0: Device attached [ 2137.619038][T26471] usb 42-1: SetAddress Request (2) to port 0 [ 2137.629058][T26471] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2138.316789][T27417] vhci_hcd: connection reset by peer [ 2138.322589][T15090] vhci_hcd: stop threads [ 2138.326890][T15090] vhci_hcd: release socket [ 2138.331573][T15090] vhci_hcd: disconnect device [ 2138.858256][T27439] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2139.191823][T26476] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2139.504019][T27443] Failed to initialize the IGMP autojoin socket (err -2) [ 2139.898564][T26476] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 2139.986041][T27449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4577'. [ 2140.019936][T27449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4577'. [ 2140.356933][T26476] usb 4-1: config 0 has no interface number 0 [ 2140.376076][T26476] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2140.460611][T26476] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2140.470272][T26476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.487393][T26476] usb 4-1: Product: syz [ 2140.498948][T26476] usb 4-1: Manufacturer: syz [ 2140.518922][T26476] usb 4-1: SerialNumber: syz [ 2140.549213][T26476] usb 4-1: config 0 descriptor?? [ 2140.576129][T26476] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 2140.711502][T27456] overlayfs: failed lookup in lower (newroot/912, name='bus', err=-40): overlapping layers [ 2140.723228][T27456] overlayfs: failed lookup in lower (newroot/912, name='bus', err=-40): overlapping layers [ 2143.109646][T26471] usb 42-1: device descriptor read/8, error -110 [ 2144.721926][T26476] usb 4-1: USB disconnect, device number 38 [ 2144.735818][T26476] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 2144.880901][T26471] usb usb42-port1: attempt power cycle [ 2145.705296][T27488] lo: left promiscuous mode [ 2145.711058][T27488] tunl0: left promiscuous mode [ 2145.715843][T27488] tunl0: left allmulticast mode [ 2145.725238][T27488] gre0: left promiscuous mode [ 2145.729983][T27488] gre0: left allmulticast mode [ 2145.736451][T27488] gretap0: left promiscuous mode [ 2145.741467][T27488] gretap0: left allmulticast mode [ 2145.748115][T27488] erspan0: left promiscuous mode [ 2145.753164][T27488] erspan0: left allmulticast mode [ 2145.760674][T27488] ip_vti0: left promiscuous mode [ 2145.786118][T27490] fuse: Bad value for 'fd' [ 2145.833906][T27488] ip_vti0: left allmulticast mode [ 2145.866953][T27495] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2145.882344][T27488] ip6_vti0: left promiscuous mode [ 2145.887871][T27488] ip6_vti0: left allmulticast mode [ 2145.895710][T27488] sit0: left promiscuous mode [ 2145.900554][T27488] sit0: left allmulticast mode [ 2145.909352][T27488] ip6tnl0: left promiscuous mode [ 2145.914463][T27488] ip6tnl0: left allmulticast mode [ 2145.923179][T27488] ip6gre0: left promiscuous mode [ 2145.928445][T27488] ip6gre0: left allmulticast mode [ 2145.936766][T27488] syz_tun: left promiscuous mode [ 2145.942871][T27488] syz_tun: left allmulticast mode [ 2145.950338][T27488] ip6gretap0: left promiscuous mode [ 2145.956355][T27488] ip6gretap0: left allmulticast mode [ 2145.964698][T27488] vcan0: left promiscuous mode [ 2145.969879][T27488] vcan0: left allmulticast mode [ 2145.977904][T27488] bond0: left allmulticast mode [ 2145.983454][T27488] bond_slave_0: left allmulticast mode [ 2145.989047][T27488] bond_slave_1: left allmulticast mode [ 2146.000473][T27488] team0: left allmulticast mode [ 2146.005452][T27488] team_slave_0: left allmulticast mode [ 2146.011415][T27488] team_slave_1: left allmulticast mode [ 2146.021451][T27488] dummy0: left promiscuous mode [ 2146.026871][T27488] dummy0: left allmulticast mode [ 2146.035146][T27488] nlmon0: left promiscuous mode [ 2146.040355][T27488] nlmon0: left allmulticast mode [ 2146.062297][T26471] usb usb42-port1: unable to enumerate USB device [ 2146.071450][T27488] caif0: left promiscuous mode [ 2146.076375][T27488] caif0: left allmulticast mode [ 2146.081480][T27488] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2146.751580][T27504] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4588'. [ 2147.896297][T27520] gfs2: gfs2 mount does not exist [ 2150.258984][T26477] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2150.594597][T26477] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2150.602767][T26477] usb 2-1: config 0 has no interface number 0 [ 2150.609001][T26477] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2150.685559][T26477] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2150.939020][T26477] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.947027][T26477] usb 2-1: Product: syz [ 2150.969269][T26477] usb 2-1: Manufacturer: syz [ 2150.987915][T26477] usb 2-1: SerialNumber: syz [ 2151.088525][T26477] usb 2-1: config 0 descriptor?? [ 2151.111308][T26477] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 2152.350463][T27560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4599'. [ 2152.375809][T27560] Failed to initialize the IGMP autojoin socket (err -2) [ 2153.675999][T26471] usb 2-1: USB disconnect, device number 38 [ 2153.697163][T26471] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 2154.237938][T27602] gfs2: gfs2 mount does not exist [ 2155.948295][T27620] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[27620] [ 2156.597194][T27630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2158.368062][T27656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2158.377593][T27656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2158.393582][T27656] nfs4: Unknown parameter '\--{.[%++&-!{-){@' [ 2158.415441][T27656] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2158.872319][T27660] fuse: Bad value for 'user_id' [ 2158.877254][T27660] fuse: Bad value for 'user_id' [ 2158.901168][T27660] ipip0: entered promiscuous mode [ 2158.910037][T27660] ipip0: entered allmulticast mode [ 2159.426785][T27668] gfs2: gfs2 mount does not exist [ 2160.090260][T27670] gfs2: gfs2 mount does not exist [ 2160.247775][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.839400][ T30] audit: type=1326 audit(2161.816:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.1.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87e98f6c9 code=0x7ffc0000 [ 2162.033631][ T30] audit: type=1326 audit(2161.816:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.1.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd87e98f6c9 code=0x7ffc0000 [ 2162.688991][ T30] audit: type=1326 audit(2161.816:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.1.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87e98f6c9 code=0x7ffc0000 [ 2162.848027][ T30] audit: type=1326 audit(2161.816:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.1.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fd87e98f6c9 code=0x7ffc0000 [ 2162.870883][ C0] vkms_vblank_simulate: vblank timer overrun [ 2162.901158][ T30] audit: type=1326 audit(2161.816:4127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.1.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87e98f6c9 code=0x7ffc0000 [ 2162.924063][ C0] vkms_vblank_simulate: vblank timer overrun [ 2163.129025][ T30] audit: type=1326 audit(2161.816:4128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.1.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fd87e98f6c9 code=0x7ffc0000 [ 2163.154868][ T30] audit: type=1326 audit(2161.816:4129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.1.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87e98f6c9 code=0x7ffc0000 [ 2163.237751][ T30] audit: type=1326 audit(2161.816:4130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.1.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd87e98df10 code=0x7ffc0000 [ 2163.562175][T27704] bridge0: port 1(gretap0) entered blocking state [ 2163.569279][T27704] bridge0: port 1(gretap0) entered disabled state [ 2163.576685][T27704] gretap0: entered allmulticast mode [ 2163.592442][T27704] gretap0: entered promiscuous mode [ 2163.691867][T27704] netlink: 'syz.4.4623': attribute type 1 has an invalid length. [ 2163.699744][T27704] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4623'. [ 2163.905921][ T30] audit: type=1326 audit(2161.816:4131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.1.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd87e98f6c9 code=0x7ffc0000 [ 2163.929255][ T30] audit: type=1326 audit(2161.816:4132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27677 comm="syz.1.4619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd87e98f6c9 code=0x7ffc0000 [ 2169.038536][T27761] nvme_fabrics: missing parameter 'transport=%s' [ 2169.061846][T27761] nvme_fabrics: missing parameter 'nqn=%s' [ 2169.480108][T27760] smc: adding net device bond0 with user defined pnetid SYZ2 [ 2171.480500][T27788] gfs2: gfs2 mount does not exist [ 2171.893560][T27789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4640'. [ 2171.945250][T27789] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2171.945250][T27789] program syz.4.4640 not setting count and/or reply_len properly [ 2173.143136][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 2173.143149][ T30] audit: type=1326 audit(2173.116:4138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27797 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e218f6c9 code=0x7ffc0000 [ 2173.368191][ T30] audit: type=1326 audit(2173.116:4139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27797 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e218f6c9 code=0x7ffc0000 [ 2173.392146][ T30] audit: type=1326 audit(2173.156:4140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27797 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f44e218f6c9 code=0x7ffc0000 [ 2173.415433][ T30] audit: type=1326 audit(2173.156:4141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27797 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e218f6c9 code=0x7ffc0000 [ 2173.539644][ T30] audit: type=1326 audit(2173.156:4142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27797 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e218f6c9 code=0x7ffc0000 [ 2173.563622][ T30] audit: type=1326 audit(2173.166:4143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27797 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f44e218f6c9 code=0x7ffc0000 [ 2173.586713][ T30] audit: type=1326 audit(2173.166:4144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27797 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e218f6c9 code=0x7ffc0000 [ 2173.610450][ T30] audit: type=1326 audit(2173.166:4145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27797 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e218f6c9 code=0x7ffc0000 [ 2174.118262][ T30] audit: type=1326 audit(2173.206:4146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27797 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44e218f6c9 code=0x7ffc0000 [ 2174.176850][ T30] audit: type=1326 audit(2173.206:4147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27797 comm="syz.0.4643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e218f6c9 code=0x7ffc0000 [ 2174.199833][ C1] vkms_vblank_simulate: vblank timer overrun [ 2174.512485][T27819] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4646'. [ 2177.420756][T26477] libceph: mon0 (1)[c::]:6789 connect error [ 2177.524281][T27845] ceph: No mds server is up or the cluster is laggy [ 2179.838698][T27870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4657'. [ 2181.020484][T27887] gfs2: gfs2 mount does not exist [ 2181.436979][T27870] tipc: Resetting bearer [ 2181.832482][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 2181.832497][ T30] audit: type=1400 audit(2181.796:4160): avc: denied { write } for pid=27891 comm="syz.3.4663" path="socket:[92259]" dev="sockfs" ino=92259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2182.064669][T27901] Failed to initialize the IGMP autojoin socket (err -2) [ 2182.206835][ T30] audit: type=1400 audit(2182.126:4161): avc: denied { bind } for pid=27897 comm="syz.1.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2185.480304][T27940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4675'. [ 2185.549479][T27941] gfs2: gfs2 mount does not exist [ 2186.091750][T27942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4675'. [ 2187.018033][T27960] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 2187.025957][T27960] batadv2: entered promiscuous mode [ 2187.060243][T27960] team0: Port device batadv2 added [ 2188.701227][T27976] overlayfs: missing 'lowerdir' [ 2188.718509][T27976] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2188.725009][T27976] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2188.748987][T27976] vhci_hcd vhci_hcd.0: Device attached [ 2189.051082][T27984] gfs2: gfs2 mount does not exist [ 2189.101963][T26471] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 2189.430415][T27978] vhci_hcd: connection closed [ 2189.431712][T27594] vhci_hcd: stop threads [ 2189.453155][T27594] vhci_hcd: release socket [ 2189.462327][T27594] vhci_hcd: disconnect device [ 2189.557103][T27987] qrtr: Invalid version 0 [ 2189.666021][T27990] fuse: Bad value for 'fd' [ 2190.391476][ T30] audit: type=1400 audit(2190.366:4162): avc: denied { mount } for pid=27988 comm="syz.2.4685" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 2191.003511][T28006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4689'. [ 2191.575993][T28016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4691'. [ 2191.889958][ T30] audit: type=1400 audit(2191.854:4163): avc: denied { create } for pid=28017 comm="syz.1.4693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 2193.585316][T28043] Failed to initialize the IGMP autojoin socket (err -2) [ 2194.619176][T26476] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 2194.650867][T26471] vhci_hcd: vhci_device speed not set [ 2194.843676][T26476] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2194.851894][T26476] usb 2-1: config 0 has no interface number 0 [ 2194.869734][T26476] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2195.111948][T26476] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2195.180552][T26476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2195.263250][T26476] usb 2-1: Product: syz [ 2195.267439][T26476] usb 2-1: Manufacturer: syz [ 2195.272074][T26476] usb 2-1: SerialNumber: syz [ 2195.300603][T26476] usb 2-1: config 0 descriptor?? [ 2195.336982][T26476] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 2195.437366][T28062] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4703'. [ 2197.217996][T28062] bond5: Unable to set up delay as MII monitoring is disabled [ 2197.345467][T28062] bond5 (unregistering): Released all slaves [ 2197.458977][T26476] usb 2-1: USB disconnect, device number 39 [ 2197.483810][T28081] netlink: 'syz.3.4706': attribute type 25 has an invalid length. [ 2197.496375][T26476] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 2198.934949][T28096] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4709'. [ 2201.608966][T26477] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2201.891812][T26477] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 2201.902196][T26477] usb 4-1: config 0 has no interface number 0 [ 2201.908272][T26477] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2202.548719][T26477] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2202.684898][T26477] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2202.693045][T26477] usb 4-1: Product: syz [ 2202.698355][T26477] usb 4-1: Manufacturer: syz [ 2203.230301][T26477] usb 4-1: SerialNumber: syz [ 2203.258976][T26471] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 2203.259861][T26477] usb 4-1: config 0 descriptor?? [ 2203.278761][T26477] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 2203.448904][T26471] usb 2-1: Using ep0 maxpacket: 16 [ 2203.497148][T28142] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 2203.509231][T28142] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4721'. [ 2203.530000][T26471] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.562603][T26471] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2203.643436][T26471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.652292][T26471] usb 2-1: Product: syz [ 2203.656703][T26471] usb 2-1: Manufacturer: syz [ 2203.662697][T26471] usb 2-1: SerialNumber: syz [ 2203.697812][T26471] usb 2-1: config 0 descriptor?? [ 2203.820704][T28152] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4723'. [ 2203.960667][T28153] netlink: 'syz.2.4722': attribute type 1 has an invalid length. [ 2204.015036][T28154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4722'. [ 2204.358524][ T30] audit: type=1400 audit(2204.328:4164): avc: denied { mount } for pid=28143 comm="syz.2.4722" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 2204.434659][T28153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2204.786560][T26471] usb 4-1: USB disconnect, device number 39 [ 2204.956730][T26471] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 2205.493011][T18427] usb 2-1: USB disconnect, device number 40 [ 2205.504660][T28154] bond0 (unregistering): Released all slaves [ 2205.772941][T28174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4726'. [ 2205.797879][T28174] Failed to initialize the IGMP autojoin socket (err -2) [ 2207.130914][T28184] ubi: mtd0 is already attached to ubi31 [ 2207.585969][T28194] gfs2: gfs2 mount does not exist [ 2208.028954][T28187] Failed to initialize the IGMP autojoin socket (err -2) [ 2208.375177][T28198] vlan0: entered allmulticast mode [ 2208.428372][T28204] overlayfs: missing 'lowerdir' [ 2208.617000][ T30] audit: type=1400 audit(2208.584:4165): avc: denied { getopt } for pid=28199 comm="syz.3.4733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2208.821285][ T30] audit: type=1400 audit(2208.794:4166): avc: denied { connect } for pid=28211 comm="syz.4.4735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2208.929413][ T30] audit: type=1400 audit(2208.814:4167): avc: denied { bind } for pid=28211 comm="syz.4.4735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2210.998992][T26469] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2211.079567][T28243] gfs2: gfs2 mount does not exist [ 2211.642161][T26469] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2211.653333][T26469] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2211.664278][T26469] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2211.890825][T26469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.927572][T26469] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2211.934982][T26469] usb 4-1: invalid MIDI out EP 0 [ 2212.031337][T28251] siw: device registration error -23 [ 2212.468503][T28235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.479256][T28235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2212.722512][T28253] Failed to initialize the IGMP autojoin socket (err -2) [ 2212.879745][T26469] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2213.009860][T28257] udevd[28257]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2213.031835][T28261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2213.040678][T28261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2213.937283][ T30] audit: type=1326 audit(2213.884:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.3.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2213.991476][T26476] usb 4-1: USB disconnect, device number 40 [ 2214.198894][ T30] audit: type=1326 audit(2213.884:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.3.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2214.281460][ T30] audit: type=1326 audit(2214.034:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.3.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2214.745218][ T30] audit: type=1326 audit(2214.034:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.3.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2214.787157][ T30] audit: type=1326 audit(2214.034:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28230 comm="syz.3.4740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2215.014700][T28291] dlm: no local IP address has been set [ 2215.020348][T28291] dlm: cannot start dlm midcomms -107 [ 2215.052119][T28291] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2215.115727][T15090] Bluetooth: hci5: Frame reassembly failed (-84) [ 2215.488208][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4754'. [ 2215.512913][T28300] Failed to initialize the IGMP autojoin socket (err -2) [ 2217.119213][T19509] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2218.575308][T28318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4757'. [ 2218.611906][T28318] : entered promiscuous mode [ 2218.714611][T28330] fuse: Bad value for 'fd' [ 2220.438175][T28358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2220.800207][T28363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4769'. [ 2220.868912][ T30] audit: type=1400 audit(2220.782:4173): avc: denied { accept } for pid=28360 comm="syz.4.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2221.558036][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.143732][T28378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4772'. [ 2222.155250][T28378] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4772'. [ 2224.240997][T28394] fuse: Bad value for 'fd' [ 2224.400111][T28402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4776'. [ 2224.409411][T28402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4776'. [ 2224.418437][T28402] netlink: 50 bytes leftover after parsing attributes in process `syz.0.4776'. [ 2224.473078][T28402] netlink: 'syz.0.4776': attribute type 16 has an invalid length. [ 2224.481067][T28402] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.4776'. [ 2225.090206][T28411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4778'. [ 2225.099269][T28411] netlink: 'syz.3.4778': attribute type 30 has an invalid length. [ 2225.754846][T28416] batman_adv: batadv0: Adding interface: gretap1 [ 2225.761252][T28416] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2225.786601][T28416] batman_adv: batadv0: Interface activated: gretap1 [ 2227.059491][T28429] siw: device registration error -23 [ 2229.107816][T28446] netlink: 'syz.4.4787': attribute type 1 has an invalid length. [ 2229.115616][T28446] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4787'. [ 2230.695654][T28463] gretap0: left allmulticast mode [ 2230.700820][T28463] gretap0: left promiscuous mode [ 2230.705978][T28463] bridge0: port 1(gretap0) entered disabled state [ 2230.727365][T28463] tipc: Resetting bearer [ 2230.791699][T28463] team_slave_0: left allmulticast mode [ 2230.916833][T28463] team0: Port device team_slave_0 removed [ 2230.953547][T28463] team_slave_1: left allmulticast mode [ 2230.960604][T28470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4791'. [ 2231.117972][T28463] team0: Port device team_slave_1 removed [ 2231.598238][T28473] block device autoloading is deprecated and will be removed. [ 2231.620208][ T30] audit: type=1400 audit(2231.192:4174): avc: denied { write } for pid=28466 comm="syz.0.4792" name="file0" dev="tmpfs" ino=5447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2231.667642][T28463] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2231.696502][ T30] audit: type=1400 audit(2231.192:4175): avc: denied { open } for pid=28466 comm="syz.0.4792" path="/955/file0" dev="tmpfs" ino=5447 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2231.726532][T28465] team0: No ports can be present during mode change [ 2231.919150][T26469] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 2232.112694][T26469] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 2232.123775][T26469] usb 5-1: config 0 has no interface number 0 [ 2232.129968][T26469] usb 5-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2232.183507][T26469] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 2232.232755][T26469] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 2232.259041][T26469] usb 5-1: Product: syz [ 2232.268334][T26469] usb 5-1: SerialNumber: syz [ 2232.363524][T26469] usb 5-1: config 0 descriptor?? [ 2232.374163][T26469] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 2232.544272][T28470] team0 (unregistering): left allmulticast mode [ 2232.550956][T28470] batadv1: left allmulticast mode [ 2232.568245][T28470] team0 (unregistering): Port device batadv1 removed [ 2234.164196][T28490] rdma_rxe: rxe_newlink: failed to add wg2 [ 2234.381896][ T30] audit: type=1400 audit(2234.352:4176): avc: denied { remount } for pid=28475 comm="syz.4.4793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2234.382220][T26476] usb 5-1: USB disconnect, device number 33 [ 2234.632863][ T30] audit: type=1400 audit(2234.602:4177): avc: denied { read } for pid=28499 comm="syz.0.4800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2235.537718][T28514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2235.710997][T28517] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.4802'. [ 2235.724072][T28517] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2235.868891][T26476] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 2236.422803][T26469] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 2236.610486][T26469] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2236.739222][T28527] fuse: Bad value for 'fd' [ 2236.791883][T26469] usb 5-1: config 0 has no interface number 0 [ 2236.811592][T26469] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2236.870269][T26469] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2236.897479][T26469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.955992][T26476] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 2236.965126][T26469] usb 5-1: Product: syz [ 2236.965670][T26476] usb 2-1: config 0 has no interface number 0 [ 2236.993945][T26476] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 2237.042605][T28532] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 2237.054552][T28532] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 2237.080666][T28535] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2237.090048][T28532] kvm: requested 116495 ns i8254 timer period limited to 200000 ns [ 2237.138189][T26469] usb 5-1: Manufacturer: syz [ 2237.174252][T26469] usb 5-1: SerialNumber: syz [ 2237.242047][T26469] usb 5-1: config 0 descriptor?? [ 2237.253141][T26476] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2237.265022][T26469] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 2237.271014][T26476] usb 2-1: config 0 interface 113 has no altsetting 0 [ 2237.406659][T26476] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 2237.419230][T26476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2237.433665][T26476] usb 2-1: Product: syz [ 2237.438461][T26476] usb 2-1: Manufacturer: syz [ 2237.448389][T26476] usb 2-1: SerialNumber: syz [ 2238.104363][T26476] usb 2-1: config 0 descriptor?? [ 2238.209469][ C0] usb 2-1: NFC: Urb failure (status -71) [ 2238.355761][T26476] usb 2-1: NFC: Unable to get FW version [ 2238.385041][T26476] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 2238.409139][T26469] usb 5-1: USB disconnect, device number 34 [ 2238.694708][T28544] Failed to initialize the IGMP autojoin socket (err -2) [ 2238.725072][T26476] usb 2-1: USB disconnect, device number 41 [ 2238.732762][T26469] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 2240.023345][T28556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4811'. [ 2240.040817][T28556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4811'. [ 2240.301397][T26476] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2240.538873][T26476] usb 2-1: Using ep0 maxpacket: 16 [ 2241.009744][T26476] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2241.023054][T26476] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2241.690941][T26476] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 2241.699037][T26476] usb 2-1: SerialNumber: syz [ 2241.742048][T28570] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2241.814521][T26476] usb 2-1: can't set config #1, error -71 [ 2241.855100][T26476] usb 2-1: USB disconnect, device number 42 [ 2242.002548][T28572] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.4815'. [ 2242.011725][T28572] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2242.373726][T28582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28582 comm=syz.0.4818 [ 2242.428819][T28586] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 2242.773425][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4821'. [ 2242.809399][T28595] Failed to initialize the IGMP autojoin socket (err -2) [ 2243.609891][T28603] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4822'. [ 2244.164618][T28616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4824'. [ 2244.313232][ T30] audit: type=1400 audit(2244.112:4178): avc: denied { ioctl } for pid=28613 comm="syz.3.4824" path="socket:[95108]" dev="sockfs" ino=95108 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 2244.402741][ T30] audit: type=1400 audit(2244.362:4179): avc: denied { ioctl } for pid=28606 comm="syz.4.4825" path="socket:[95114]" dev="sockfs" ino=95114 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2245.771385][T28633] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4829'. [ 2246.218880][ T30] audit: type=1400 audit(2246.102:4180): avc: denied { relabelfrom } for pid=28634 comm="syz.1.4830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2246.261095][ T30] audit: type=1400 audit(2246.102:4181): avc: denied { relabelto } for pid=28634 comm="syz.1.4830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2247.252884][T28630] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4828'. [ 2247.587835][T28657] binder: 28652:28657 ioctl c0306201 0 returned -14 [ 2249.874844][T28674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4836'. [ 2249.981100][T28675] Failed to initialize the IGMP autojoin socket (err -2) [ 2250.497526][T28684] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 2250.504056][T28684] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2250.529170][T28684] vhci_hcd vhci_hcd.0: Device attached [ 2250.819032][T26479] usb 40-1: SetAddress Request (2) to port 0 [ 2250.852973][T28697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4841'. [ 2250.987160][T26479] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2251.176551][T28702] netlink: 'syz.4.4843': attribute type 3 has an invalid length. [ 2251.186767][T28689] vhci_hcd: connection reset by peer [ 2251.199516][T20730] vhci_hcd: stop threads [ 2251.203824][T20730] vhci_hcd: release socket [ 2251.212067][T20730] vhci_hcd: disconnect device [ 2251.221490][T28702] netlink: 830 bytes leftover after parsing attributes in process `syz.4.4843'. [ 2251.240817][ T30] audit: type=1400 audit(2251.208:4182): avc: denied { accept } for pid=28699 comm="syz.4.4843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 2252.069584][T28708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4846'. [ 2252.442149][T26471] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2252.573000][T28724] input: syz1 as /devices/virtual/input/input33 [ 2253.770202][T26471] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2253.778418][T26471] usb 2-1: config 0 has no interface number 0 [ 2254.231720][T26471] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2254.250846][T26471] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2254.260198][T26471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2254.268242][T26471] usb 2-1: Product: syz [ 2254.272759][T26471] usb 2-1: Manufacturer: syz [ 2254.277405][T26471] usb 2-1: SerialNumber: syz [ 2254.289603][T26471] usb 2-1: config 0 descriptor?? [ 2254.300423][T26471] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 2255.671442][T28740] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.4853'. [ 2255.849903][T28745] tmpfs: Unknown parameter 'uid0x0000000000000000' [ 2255.953301][T26476] usb 2-1: USB disconnect, device number 43 [ 2255.961379][T26476] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 2255.981815][T28750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4854'. [ 2256.097359][T26479] usb 40-1: device descriptor read/8, error -110 [ 2256.159055][T28752] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4856'. [ 2256.834565][T26479] usb usb40-port1: attempt power cycle [ 2257.680557][T26479] usb usb40-port1: unable to enumerate USB device [ 2261.538861][T26476] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 2262.092523][T26476] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 2262.137444][T26476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.152954][T26476] usb 4-1: Product: syz [ 2262.157245][T26476] usb 4-1: Manufacturer: syz [ 2262.163554][T26476] usb 4-1: SerialNumber: syz [ 2262.173989][T26476] usb 4-1: config 0 descriptor?? [ 2262.876475][T26476] usb 4-1: ignoring: not an USB2CAN converter [ 2263.094686][T28820] Bluetooth: MGMT ver 1.23 [ 2264.206414][T26471] usb 4-1: USB disconnect, device number 41 [ 2265.268913][T28852] siw: device registration error -23 [ 2265.781486][T28857] overlayfs: failed to clone upperpath [ 2266.971341][T28869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4881'. [ 2267.216757][T28874] batadv4: entered promiscuous mode [ 2267.456098][T26469] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2267.612386][T26469] usb 2-1: Using ep0 maxpacket: 8 [ 2267.643436][T26469] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2267.658264][T26469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2267.687000][T26469] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2267.694918][ T30] audit: type=1326 audit(2267.578:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28875 comm="syz.4.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a678f6c9 code=0x7fc00000 [ 2267.727780][T26469] pvrusb2: ********** [ 2267.733538][T26469] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2267.749389][T26469] pvrusb2: Important functionality might not be entirely working. [ 2267.758683][T26469] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2267.773460][T26469] pvrusb2: ********** [ 2267.949115][T26469] usb 2-1: USB disconnect, device number 44 [ 2267.955995][ T2334] pvrusb2: Invalid write control endpoint [ 2268.413145][ T30] audit: type=1326 audit(2268.388:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28875 comm="syz.4.4882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe2a678f6c9 code=0x7fc00000 [ 2268.479799][ T2334] pvrusb2: Invalid write control endpoint [ 2268.485762][ T2334] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2268.497513][ T2334] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2268.505734][ T2334] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2268.516566][ T2334] pvrusb2: Device being rendered inoperable [ 2268.526536][ T2334] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2268.545176][ T2334] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2268.562711][ T2334] pvrusb2: Attached sub-driver cx25840 [ 2268.568945][ T2334] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2268.579392][ T2334] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2268.606029][ T30] audit: type=1400 audit(2268.578:4185): avc: denied { create } for pid=28886 comm="syz.2.4884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2268.650291][ T30] audit: type=1400 audit(2268.578:4186): avc: denied { setopt } for pid=28886 comm="syz.2.4884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2268.715009][ T30] audit: type=1400 audit(2268.688:4187): avc: denied { ioctl } for pid=28886 comm="syz.2.4884" path="socket:[96636]" dev="sockfs" ino=96636 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2268.871323][T28895] netlink: 'syz.3.4886': attribute type 1 has an invalid length. [ 2268.957366][T26479] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2269.184135][ T30] audit: type=1400 audit(2268.908:4188): avc: denied { create } for pid=28893 comm="syz.3.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2269.206359][T26479] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2269.379028][T26479] usb 5-1: config 0 has no interface number 0 [ 2269.398084][T26479] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2269.880654][ T30] audit: type=1400 audit(2268.968:4189): avc: denied { write } for pid=28893 comm="syz.3.4886" path="socket:[95705]" dev="sockfs" ino=95705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2269.972280][T26479] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2269.996152][T26479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.008833][ T30] audit: type=1400 audit(2269.028:4190): avc: denied { accept } for pid=28893 comm="syz.3.4886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2270.286090][T26479] usb 5-1: Product: syz [ 2270.320865][T26479] usb 5-1: Manufacturer: syz [ 2270.359379][T26479] usb 5-1: SerialNumber: syz [ 2270.470051][T26479] usb 5-1: config 0 descriptor?? [ 2270.511829][T26479] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 2270.676098][T28914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4891'. [ 2270.806123][T28914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2270.806146][T28914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2270.832384][T28914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2270.832482][T28914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2271.706414][T28922] wireguard: wireguard0: Could not create IPv4 socket [ 2271.713531][T28922] wireguard0: entered promiscuous mode [ 2271.719167][T28922] wireguard0: entered allmulticast mode [ 2271.855651][T26469] usb 5-1: USB disconnect, device number 35 [ 2271.868946][T26469] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 2273.511241][ T30] audit: type=1400 audit(2273.378:4191): avc: denied { ioctl } for pid=28937 comm="syz.4.4896" path="socket:[95867]" dev="sockfs" ino=95867 ioctlcmd=0xf510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 2273.840479][T28945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4897'. [ 2273.853176][T28945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4897'. [ 2274.779425][T28942] netlink: 'syz.4.4896': attribute type 1 has an invalid length. [ 2274.787143][T28942] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4896'. [ 2274.980590][T28957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4900'. [ 2274.999224][T28957] Failed to initialize the IGMP autojoin socket (err -2) [ 2275.061468][ T30] audit: type=1326 audit(2274.998:4192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28951 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2275.086583][ T30] audit: type=1326 audit(2274.998:4193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28951 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2275.242531][ T30] audit: type=1326 audit(2274.998:4194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28951 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2275.323726][ T30] audit: type=1326 audit(2274.998:4195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28951 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2275.468700][ T30] audit: type=1326 audit(2274.998:4196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28951 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2275.492102][ T30] audit: type=1326 audit(2274.998:4197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28951 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2276.124545][ T30] audit: type=1326 audit(2274.998:4198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28951 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2276.158155][ T30] audit: type=1326 audit(2275.008:4199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28951 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2276.439152][ T30] audit: type=1326 audit(2275.008:4200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28951 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2277.725062][T28978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4906'. [ 2278.022152][T28982] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 2278.030846][T28982] overlayfs: failed to set xattr on upper [ 2278.036638][T28982] overlayfs: ...falling back to redirect_dir=nofollow. [ 2278.043609][T28982] overlayfs: ...falling back to index=off. [ 2278.049494][T28982] overlayfs: ...falling back to uuid=null. [ 2278.103145][T28983] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 2279.320999][T28996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4910'. [ 2279.332955][T28996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4910'. [ 2281.296420][T29025] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2282.163673][T29029] input: syz1 as /devices/virtual/input/input34 [ 2282.721245][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.409244][T29053] netlink: 176 bytes leftover after parsing attributes in process `syz.0.4921'. [ 2285.222307][T29066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4923'. [ 2287.538537][T29096] binder: 29091:29096 ioctl c0306201 2000000001c0 returned -14 [ 2289.142252][T29111] binder: 29093:29111 ioctl c0306201 0 returned -14 [ 2289.885409][T29121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4931'. [ 2290.006651][T29121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4931'. [ 2290.522140][T29120] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2291.238834][T29131] rdma_rxe: rxe_newlink: failed to add wg2 [ 2300.401676][T29230] siw: device registration error -23 [ 2301.552181][T29225] Set syz1 is full, maxelem 65536 reached [ 2303.007427][T29255] input: syz0 as /devices/virtual/input/input35 [ 2303.196204][T29257] netlink: 'syz.4.4961': attribute type 10 has an invalid length. [ 2305.208085][T29257] team0: left promiscuous mode [ 2305.758919][T29257] team_slave_0: left promiscuous mode [ 2306.282900][T29257] team_slave_1: left promiscuous mode [ 2306.297539][T29257] team0: left allmulticast mode [ 2306.303316][T29257] team_slave_0: left allmulticast mode [ 2306.308953][T29257] team_slave_1: left allmulticast mode [ 2307.993835][T29295] Failed to initialize the IGMP autojoin socket (err -2) [ 2309.262135][T29308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4972'. [ 2309.273363][T29308] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4972'. [ 2309.967449][T29312] netlink: 'syz.1.4973': attribute type 4 has an invalid length. [ 2311.270978][T29326] siw: device registration error -23 [ 2311.869766][T29334] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4979'. [ 2311.968869][T29334] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2312.242845][T29338] NILFS (nbd3): device size too small [ 2314.882628][T26476] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2314.925151][T29363] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4985'. [ 2315.101609][T26476] usb 4-1: Using ep0 maxpacket: 16 [ 2316.194723][T26476] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2316.203424][T26476] usb 4-1: can't read configurations, error -71 [ 2316.756668][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 2316.756684][ T30] audit: type=1400 audit(2316.728:4239): avc: denied { attach_queue } for pid=29370 comm="syz.0.4988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2317.085281][T29394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'. [ 2317.096714][T29394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4991'. [ 2319.033644][T29414] vlan3: entered promiscuous mode [ 2319.038812][T29414] bridge0: entered promiscuous mode [ 2319.045821][T29414] vlan3: entered allmulticast mode [ 2319.051118][T29414] bridge0: entered allmulticast mode [ 2320.123596][T29443] Failed to initialize the IGMP autojoin socket (err -2) [ 2321.163782][T29454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5005'. [ 2322.360574][T29462] tipc: Resetting bearer [ 2322.366236][T29462] tipc: Resetting bearer [ 2322.584961][T29461] ceph: No mds server is up or the cluster is laggy [ 2322.591821][T26469] libceph: mon0 (1)[c::]:6789 connect error [ 2323.746773][T29481] delete_channel: no stack [ 2323.940423][ T30] audit: type=1400 audit(2323.908:4240): avc: denied { remount } for pid=29477 comm="syz.2.5010" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2324.059108][T29488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5012'. [ 2324.071171][T29488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5012'. [ 2325.160445][T29494] 9pnet_virtio: no channels available for device syz [ 2325.930360][T29500] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 2325.937130][T29500] /dev/nullb0: Can't open blockdev [ 2326.822396][T26479] libceph: mon0 (1)[c::]:6789 connect error [ 2326.849214][T26469] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2327.008913][ T30] audit: type=1400 audit(2326.976:4241): avc: denied { audit_write } for pid=29517 comm="syz.0.5017" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 2327.085568][T29518] ceph: No mds server is up or the cluster is laggy [ 2327.098842][T26479] libceph: mon0 (1)[c::]:6789 connect error [ 2327.098944][T26469] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2327.155729][T26469] usb 5-1: config 0 has no interface number 0 [ 2327.164049][T26469] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2327.404167][T26469] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2327.428894][T26469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.438871][T26469] usb 5-1: Product: syz [ 2327.443170][T26469] usb 5-1: Manufacturer: syz [ 2327.447964][T26469] usb 5-1: SerialNumber: syz [ 2328.041717][T26469] usb 5-1: config 0 descriptor?? [ 2328.084621][T26469] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 2328.713318][T29539] siw: device registration error -23 [ 2330.297099][T26479] usb 5-1: USB disconnect, device number 36 [ 2330.315405][T26479] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 2330.412633][T29550] 9pnet_fd: Insufficient options for proto=fd [ 2330.558872][ T30] audit: type=1800 audit(2330.526:4242): pid=29552 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.5026" name="/newroot/1014/file0" dev="tmpfs" ino=5674 res=0 errno=0 [ 2331.818558][ T30] audit: type=1326 audit(2331.786:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2332.212071][ T30] audit: type=1326 audit(2331.786:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2332.241008][ T30] audit: type=1326 audit(2331.786:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2332.264864][ T30] audit: type=1326 audit(2331.786:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2332.680134][ T30] audit: type=1326 audit(2331.786:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2332.710930][ T30] audit: type=1326 audit(2331.786:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2332.829268][ T30] audit: type=1326 audit(2331.816:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2332.866624][T29572] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5031'. [ 2333.007094][T29572] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 2333.015397][ T30] audit: type=1326 audit(2331.816:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2333.039721][ T30] audit: type=1326 audit(2331.816:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29561 comm="syz.2.5027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb38d18f6c9 code=0x7ffc0000 [ 2333.083447][T29580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5032'. [ 2335.228826][T26469] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2335.658821][T26469] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2336.254355][T26469] usb 5-1: config 0 has no interface number 0 [ 2336.392119][T26469] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2336.434242][T26469] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2336.443585][T26469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2336.453673][T26469] usb 5-1: Product: syz [ 2336.457867][T26469] usb 5-1: Manufacturer: syz [ 2336.472595][T26469] usb 5-1: SerialNumber: syz [ 2336.499267][T26469] usb 5-1: config 0 descriptor?? [ 2337.093194][T26469] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 2338.332940][T29641] Failed to initialize the IGMP autojoin socket (err -2) [ 2338.919800][T26469] usb 5-1: USB disconnect, device number 37 [ 2338.935551][T26469] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 2339.899222][T29659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5048'. [ 2339.908250][T29659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5048'. [ 2339.917282][T29659] netlink: 50 bytes leftover after parsing attributes in process `syz.4.5048'. [ 2340.062246][T29659] netlink: 'syz.4.5048': attribute type 16 has an invalid length. [ 2340.070138][T29659] netlink: 'syz.4.5048': attribute type 3 has an invalid length. [ 2340.077880][T29659] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.5048'. [ 2344.161099][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.558795][T26469] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2344.735351][T26469] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2344.744655][T26469] usb 2-1: config 0 has no interface number 0 [ 2344.754729][T26469] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2344.783296][T26469] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2344.798341][T26469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2344.811166][T26469] usb 2-1: Product: syz [ 2344.819481][T26469] usb 2-1: Manufacturer: syz [ 2344.828793][T26469] usb 2-1: SerialNumber: syz [ 2344.837854][T26469] usb 2-1: config 0 descriptor?? [ 2344.849274][T26469] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 2345.427242][T29710] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 2345.433784][T29710] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2345.441706][T29710] vhci_hcd vhci_hcd.0: Device attached [ 2345.698857][T29711] vhci_hcd: connection closed [ 2345.731130][T26479] usb 42-1: SetAddress Request (6) to port 0 [ 2345.734340][ T36] vhci_hcd: stop threads [ 2345.915211][ T36] vhci_hcd: release socket [ 2345.919918][ T36] vhci_hcd: disconnect device [ 2345.925678][T26479] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd [ 2345.969550][T26479] usb 42-1: enqueue for inactive port 0 [ 2346.325318][T29724] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2346.477787][T26479] usb usb42-port1: attempt power cycle [ 2347.118192][T26479] usb usb42-port1: unable to enumerate USB device [ 2348.049900][T26479] usb 2-1: USB disconnect, device number 45 [ 2348.079610][T26479] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 2348.579448][T29752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5066'. [ 2348.610960][T29752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5066'. [ 2349.081998][T29759] netlink: 'syz.1.5068': attribute type 4 has an invalid length. [ 2349.390614][T29765] Failed to initialize the IGMP autojoin socket (err -2) [ 2349.887892][T29770] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2349.899996][T29770] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5070'. [ 2350.059168][T26476] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 2350.539027][T26476] usb 2-1: config 7 has an invalid interface number: 54 but max is 0 [ 2350.547138][T26476] usb 2-1: config 7 has no interface number 0 [ 2350.582083][T26476] usb 2-1: too many endpoints for config 7 interface 54 altsetting 53: 57, using maximum allowed: 30 [ 2350.670061][T26476] usb 2-1: config 7 interface 54 altsetting 53 has 0 endpoint descriptors, different from the interface descriptor's value: 57 [ 2350.689103][T29779] jfs: Unknown parameter '0' [ 2350.817530][T26476] usb 2-1: config 7 interface 54 has no altsetting 0 [ 2350.865081][T29783] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5071'. [ 2350.876357][T29783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5071'. [ 2350.885801][T29783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5071'. [ 2351.092714][T26476] usb 2-1: string descriptor 0 read error: -22 [ 2351.099003][T26476] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 2351.109455][T26476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2352.009998][T29791] gfs2: gfs2 mount does not exist [ 2352.362536][T29798] gfs2: gfs2 mount does not exist [ 2352.503282][T26476] usb 2-1: USB disconnect, device number 46 [ 2353.160138][T29809] macvtap0: entered promiscuous mode [ 2353.166072][T29809] macvtap0: entered allmulticast mode [ 2353.171577][T29809] veth1_vlan: entered allmulticast mode [ 2354.479613][T26469] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 2354.642524][T26469] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 2354.652778][T26469] usb 2-1: config 9 has no interfaces? [ 2354.681425][T26469] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 2354.690619][T26469] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.769791][T26469] usb 2-1: Product: syz [ 2354.781768][T26469] usb 2-1: Manufacturer: syz [ 2354.792312][T26469] usb 2-1: SerialNumber: syz [ 2355.036230][T29832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5083'. [ 2355.051434][T29832] Failed to initialize the IGMP autojoin socket (err -2) [ 2355.142545][T29835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2355.152311][T29835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2355.557620][T26469] usb 2-1: USB disconnect, device number 47 [ 2356.729563][T29857] gfs2: gfs2 mount does not exist [ 2356.805711][T29856] hpfs: hpfs_map_sector(): read error [ 2357.505771][T29870] fuse: Bad value for 'fd' [ 2357.832522][T29877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5090'. [ 2357.844368][T29877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5090'. [ 2358.227400][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 2358.227413][ T30] audit: type=1400 audit(2358.170:4255): avc: denied { ioctl } for pid=29873 comm="syz.3.5091" path="/995/file0" dev="tmpfs" ino=5646 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2358.823393][T29882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5092'. [ 2360.145488][ T30] audit: type=1400 audit(2360.030:4256): avc: denied { ioctl } for pid=29894 comm="syz.3.5096" path="socket:[101430]" dev="sockfs" ino=101430 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2360.237226][ T30] audit: type=1800 audit(2360.190:4257): pid=29899 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.5097" name="bus" dev="overlay" ino=5900 res=0 errno=0 [ 2360.874159][T29918] gfs2: gfs2 mount does not exist [ 2361.300710][T29922] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.5099'. [ 2361.316406][T29922] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2361.509297][ T30] audit: type=1400 audit(2361.470:4258): avc: denied { read } for pid=29925 comm="syz.2.5101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2361.588813][ T30] audit: type=1400 audit(2361.530:4259): avc: denied { setopt } for pid=29925 comm="syz.2.5101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 2365.243741][T29957] Set syz1 is full, maxelem 65536 reached [ 2366.647106][T29977] ipvlan1: entered promiscuous mode [ 2366.715486][ T30] audit: type=1400 audit(2366.480:4260): avc: denied { mounton } for pid=29972 comm="syz.1.5110" path="/1016/file0" dev="tmpfs" ino=5677 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2366.753984][T29981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5108'. [ 2366.771618][ C0] vkms_vblank_simulate: vblank timer overrun [ 2368.162844][T29988] tipc: Enabled bearer , priority 0 [ 2368.546434][T29999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5112'. [ 2368.736451][T30003] gfs2: gfs2 mount does not exist [ 2368.858023][T30007] tmpfs: Bad value for 'nr_blocks' [ 2368.866000][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5114'. [ 2368.904496][T30007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5114'. [ 2368.944673][ T30] audit: type=1400 audit(2368.910:4261): avc: denied { ioctl } for pid=30001 comm="syz.4.5114" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 2371.877593][T30035] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2372.337914][T30042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 2372.344445][T30042] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2372.352217][T30042] vhci_hcd vhci_hcd.0: Device attached [ 2372.658802][T26476] usb 36-1: SetAddress Request (2) to port 0 [ 2372.685609][T30043] vhci_hcd: connection closed [ 2372.691921][T26476] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2372.699736][T15090] vhci_hcd: stop threads [ 2372.708385][T15090] vhci_hcd: release socket [ 2372.712897][T15090] vhci_hcd: disconnect device [ 2372.826745][T30052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5123'. [ 2372.838042][T30052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5123'. [ 2373.222850][T26476] usb 36-1: enqueue for inactive port 0 [ 2373.687889][T26476] usb usb36-port1: attempt power cycle [ 2374.805618][T30074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5128'. [ 2374.817105][T30074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5128'. [ 2375.089912][T26476] usb usb36-port1: unable to enumerate USB device [ 2375.849509][T30089] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5131'. [ 2375.911063][T30089] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2376.160629][T30096] binder: 30092:30096 ioctl c0306201 0 returned -14 [ 2376.732851][ T30] audit: type=1400 audit(2376.600:4262): avc: denied { map } for pid=30099 comm="syz.3.5135" path="socket:[102479]" dev="sockfs" ino=102479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2377.599044][ T30] audit: type=1400 audit(2376.600:4263): avc: denied { read accept } for pid=30099 comm="syz.3.5135" path="socket:[102479]" dev="sockfs" ino=102479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2377.795340][T30107] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2378.116982][T30115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5137'. [ 2378.128204][T30115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5137'. [ 2378.145960][ T30] audit: type=1400 audit(2378.050:4264): avc: denied { connect } for pid=30106 comm="syz.1.5136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2378.938878][T26469] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 2379.124862][T26469] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2379.233931][T30124] overlayfs: overlapping lowerdir path [ 2379.316427][T30125] overlayfs: failed to verify upper (1022/file0, ino=5725, err=-116) [ 2379.324900][T30125] overlayfs: failed to verify index dir 'upper' xattr [ 2379.331748][T30125] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 2379.561695][T26469] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2379.579917][T26469] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2379.589929][T26469] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2379.721631][T26469] usb 4-1: Product: syz [ 2379.731392][T26469] usb 4-1: Manufacturer: syz [ 2380.266293][T30136] dlm: no local IP address has been set [ 2380.271951][T30136] dlm: cannot start dlm midcomms -107 [ 2380.303623][T30136] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 2380.337041][T26469] usb 4-1: SerialNumber: syz [ 2380.342734][ T36] Bluetooth: hci5: Frame reassembly failed (-84) [ 2380.391933][T26469] usb 4-1: config 0 descriptor?? [ 2380.512407][T26469] usb 4-1: selecting invalid altsetting 0 [ 2381.528358][T30144] geneve2: entered promiscuous mode [ 2381.533842][T30144] geneve2: entered allmulticast mode [ 2381.626549][T30157] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5145'. [ 2381.657154][T30157] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2381.718749][T30152] netlink: 'syz.2.5144': attribute type 1 has an invalid length. [ 2382.250494][T30163] Failed to initialize the IGMP autojoin socket (err -2) [ 2382.399341][T19509] Bluetooth: hci5: command 0x1003 tx timeout [ 2382.504146][T27109] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2383.087040][T26469] usb 4-1: USB disconnect, device number 44 [ 2383.701188][T30178] netlink: 'syz.0.5150': attribute type 1 has an invalid length. [ 2385.008645][T30201] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5155'. [ 2385.397219][ T30] audit: type=1400 audit(2385.320:4265): avc: denied { accept } for pid=30185 comm="syz.2.5152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2388.875612][T30225] macvtap1: entered promiscuous mode [ 2388.890620][T30225] macvtap1: entered allmulticast mode [ 2389.219196][T30225] veth1_vlan: entered allmulticast mode [ 2389.327363][T30227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5160'. [ 2389.402058][T30237] Failed to initialize the IGMP autojoin socket (err -2) [ 2389.772021][T30243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5161'. [ 2389.826929][T30243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5161'. [ 2389.919148][ T30] audit: type=1400 audit(2389.730:4266): avc: denied { bind } for pid=30238 comm="syz.0.5161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2390.106380][T30246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5163'. [ 2390.118151][T30246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5163'. [ 2390.458899][ T30] audit: type=1400 audit(2389.810:4267): avc: denied { connect } for pid=30238 comm="syz.0.5161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2391.563392][T30258] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5166'. [ 2391.573500][T30258] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2395.373061][T30312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5177'. [ 2395.418558][T30303] Failed to initialize the IGMP autojoin socket (err -2) [ 2395.780792][T30331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5182'. [ 2395.801478][T30331] : renamed from bridge_slave_0 (while UP) [ 2397.612664][ T30] audit: type=1400 audit(2397.544:4268): avc: denied { getopt } for pid=30342 comm="syz.3.5187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 2398.847170][T30370] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 2398.854443][T30370] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 2398.861155][T30370] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 2399.449069][T30378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14134 sclass=netlink_route_socket pid=30378 comm=syz.0.5194 [ 2399.486812][T30378] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5194'. [ 2399.599556][T30381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5195'. [ 2399.710195][T30383] Failed to initialize the IGMP autojoin socket (err -2) [ 2401.640038][ T30] audit: type=1400 audit(2401.614:4269): avc: denied { execute } for pid=30398 comm="syz.1.5199" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2402.123079][ T30] audit: type=1400 audit(2401.844:4270): avc: denied { create } for pid=30399 comm="syz.3.5200" name="#16e" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2402.148437][ T30] audit: type=1400 audit(2401.844:4271): avc: denied { link } for pid=30399 comm="syz.3.5200" name="#16e" dev="tmpfs" ino=5765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2402.194937][T30406] bond4 (unregistering): Released all slaves [ 2402.225560][T30409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5198'. [ 2402.297915][ T30] audit: type=1400 audit(2401.844:4272): avc: denied { rename } for pid=30399 comm="syz.3.5200" name="#16f" dev="tmpfs" ino=5765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 2403.519128][T30421] gfs2: gfs2 mount does not exist [ 2404.399655][T26469] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2404.556174][T26469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2404.567390][T26469] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2404.595308][T26469] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2404.634624][T26469] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2404.821645][T30439] Failed to initialize the IGMP autojoin socket (err -2) [ 2404.907448][T26469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2404.952813][T26469] usb 2-1: config 0 descriptor?? [ 2405.623744][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2405.652077][T26469] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2406.037054][T26469] usb 2-1: USB disconnect, device number 48 [ 2406.252531][T30449] MINIX-fs: unable to read superblock [ 2406.325653][T30450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5208'. [ 2406.334704][T30450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5208'. [ 2408.372666][T30446] fido_id[30446]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 2409.775198][T30455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5209'. [ 2409.788266][T30455] Failed to initialize the IGMP autojoin socket (err -2) [ 2409.968943][T30464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5213'. [ 2409.978238][T30464] netlink: 'syz.4.5213': attribute type 30 has an invalid length. [ 2411.037997][T19509] Bluetooth: hci5: command 0x1003 tx timeout [ 2411.045799][T27109] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2412.010551][T30486] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5215'. [ 2413.232970][T30464] nfs4: Unknown parameter 'dev/cpu/#/msr' [ 2416.431580][T30520] Failed to initialize the IGMP autojoin socket (err -2) [ 2418.110014][T30536] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 2418.117668][T30536] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2421.308194][T30570] /dev/nullb0: Can't open blockdev [ 2421.341671][T30570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5232'. [ 2421.547491][T30570] Failed to initialize the IGMP autojoin socket (err -2) [ 2421.889133][T30574] siw: device registration error -23 [ 2422.609667][T30586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5236'. [ 2422.619036][T30586] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5236'. [ 2423.700261][T19509] Bluetooth: hci5: sending frame failed (-49) [ 2423.768827][T27109] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 2425.738447][T30614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5241'. [ 2425.749629][T30614] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5241'. [ 2426.468206][T30616] bridge4: entered promiscuous mode [ 2426.473492][T30616] bridge4: entered allmulticast mode [ 2426.480055][T30616] team0: Port device bridge4 added [ 2426.525220][T30621] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5242'. [ 2426.637055][T30616] bridge0: port 4(team0) entered blocking state [ 2426.643448][T30616] bridge0: port 4(team0) entered disabled state [ 2426.649937][T30616] team0: entered allmulticast mode [ 2426.655051][T30616] team_slave_0: entered allmulticast mode [ 2426.660773][T30616] team_slave_1: entered allmulticast mode [ 2426.666482][T30616] batadv3: entered allmulticast mode [ 2426.672868][T30616] team0: entered promiscuous mode [ 2426.677896][T30616] team_slave_0: entered promiscuous mode [ 2426.683614][T30616] team_slave_1: entered promiscuous mode [ 2426.689366][T30616] batadv3: entered promiscuous mode [ 2426.695542][T30616] bridge0: port 4(team0) entered blocking state [ 2426.701828][T30616] bridge0: port 4(team0) entered forwarding state [ 2426.766814][ T8638] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 2426.776051][ T8638] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 2429.344481][T30658] syzkaller0: entered promiscuous mode [ 2429.466819][T30658] syzkaller0: entered allmulticast mode [ 2430.155568][T30665] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2430.163564][T30665] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 2430.178045][T30665] F2FS-fs (loop7): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 2430.211090][T30665] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 2430.706805][T30673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5255'. [ 2431.056196][T30673] tipc: Enabled bearer , priority 0 [ 2431.329010][T30680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5257'. [ 2431.416543][T30680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5257'. [ 2431.681163][T30680] overlayfs: conflicting options: userxattr,metacopy=on [ 2431.830846][T30692] gfs2: gfs2 mount does not exist [ 2434.366783][T30717] netlink: 'syz.0.5264': attribute type 1 has an invalid length. [ 2434.374652][T30717] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5264'. [ 2434.509830][ T30] audit: type=1400 audit(2434.326:4273): avc: denied { ioctl } for pid=30710 comm="syz.0.5264" path="socket:[105815]" dev="sockfs" ino=105815 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 2434.711493][ T30] audit: type=1400 audit(2434.686:4274): avc: denied { accept } for pid=30719 comm="syz.3.5267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2435.138245][T30731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5268'. [ 2435.334993][ T30] audit: type=1400 audit(2435.296:4275): avc: denied { mounton } for pid=30722 comm="syz.4.5266" path="/1083/file1" dev="autofs" ino=105064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 2435.545486][T30740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5268'. [ 2436.306249][T30751] Failed to initialize the IGMP autojoin socket (err -2) [ 2436.753198][T30763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5273'. [ 2436.765345][T30763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5273'. [ 2437.177229][T30764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5272'. [ 2438.187108][T30794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5278'. [ 2438.326218][T30799] Failed to initialize the IGMP autojoin socket (err -2) [ 2439.164728][T30807] blktrace: Concurrent blktraces are not allowed on sg0 [ 2439.664297][T30819] gfs2: gfs2 mount does not exist [ 2440.654381][T30838] netlink: 7 bytes leftover after parsing attributes in process `syz.0.5282'. [ 2440.663399][T30838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5282'. [ 2440.672504][T30838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5282'. [ 2441.678862][T26469] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2441.859997][ T30] audit: type=1326 audit(2441.806:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30846 comm="syz.3.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2441.922677][ T30] audit: type=1326 audit(2441.806:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30846 comm="syz.3.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2441.945638][ C0] vkms_vblank_simulate: vblank timer overrun [ 2441.972674][ T30] audit: type=1326 audit(2441.806:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30846 comm="syz.3.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2441.995640][ C0] vkms_vblank_simulate: vblank timer overrun [ 2442.002347][ T30] audit: type=1326 audit(2441.806:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30846 comm="syz.3.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2442.102255][ T30] audit: type=1326 audit(2441.806:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30846 comm="syz.3.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2442.145712][T26469] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2442.177178][T26469] usb 5-1: config 0 has no interface number 0 [ 2442.189052][T26469] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2442.211273][ T30] audit: type=1326 audit(2441.806:4281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30846 comm="syz.3.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2442.317275][ T30] audit: type=1326 audit(2441.816:4282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30846 comm="syz.3.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2442.422841][ T30] audit: type=1326 audit(2441.816:4283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30846 comm="syz.3.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2442.445770][ C0] vkms_vblank_simulate: vblank timer overrun [ 2442.638794][T26469] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2442.647974][T26469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2442.676720][ T30] audit: type=1326 audit(2441.816:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30846 comm="syz.3.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2442.708791][T26469] usb 5-1: Product: syz [ 2442.719250][T26469] usb 5-1: Manufacturer: syz [ 2442.775487][ T30] audit: type=1326 audit(2441.816:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30846 comm="syz.3.5287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1a0e58f6c9 code=0x7ffc0000 [ 2442.798308][ C0] vkms_vblank_simulate: vblank timer overrun [ 2442.958270][T26469] usb 5-1: SerialNumber: syz [ 2443.017597][T26469] usb 5-1: config 0 descriptor?? [ 2443.084614][T26469] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 2444.532925][T30874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'. [ 2444.558521][T30874] Failed to initialize the IGMP autojoin socket (err -2) [ 2445.209430][T26469] usb 5-1: USB disconnect, device number 38 [ 2445.253799][T26469] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 2446.070272][T30879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'. [ 2446.096446][T30877] bridge8: entered promiscuous mode [ 2446.101705][T30877] bridge8: entered allmulticast mode [ 2446.108073][T30877] team0: Port device bridge8 added [ 2446.220949][T30877] bridge0: port 2(team0) entered blocking state [ 2446.227268][T30877] bridge0: port 2(team0) entered disabled state [ 2446.234015][T30877] team0: entered allmulticast mode [ 2446.239197][T30877] team_slave_0: entered allmulticast mode [ 2446.244913][T30877] team_slave_1: entered allmulticast mode [ 2446.251417][T30877] team0: entered promiscuous mode [ 2446.256437][T30877] team_slave_0: entered promiscuous mode [ 2446.262170][T30877] team_slave_1: entered promiscuous mode [ 2446.279833][T30892] Failed to initialize the IGMP autojoin socket (err -2) [ 2448.367710][T30924] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5301'. [ 2449.123854][T30929] netlink: 'syz.4.5301': attribute type 1 has an invalid length. [ 2449.131793][T30929] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5301'. [ 2449.164461][T30929] netlink: 'syz.4.5301': attribute type 1 has an invalid length. [ 2450.078288][T30940] /dev/nullb0: Can't open blockdev [ 2450.178175][T30940] netlink: 'syz.0.5313': attribute type 4 has an invalid length. [ 2450.384716][T30946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5304'. [ 2450.899259][T30929] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2451.020879][T30948] Failed to initialize the IGMP autojoin socket (err -2) [ 2451.100486][T30947] Failed to initialize the IGMP autojoin socket (err -2) [ 2451.127948][T30952] overlayfs: failed to resolve './cgroup/file0': -2 [ 2452.532240][T30972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5310'. [ 2453.056240][T30975] netlink: 'syz.2.5311': attribute type 1 has an invalid length. [ 2453.524036][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 2453.875491][ T30] audit: type=1800 audit(2453.496:4311): pid=30982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5312" name="bus" dev="tmpfs" ino=5970 res=0 errno=0 [ 2455.851482][T31002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2456.762455][T31019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5319'. [ 2458.208195][T31029] tmpfs: Unknown parameter '' [ 2459.007840][ T30] audit: type=1400 audit(2458.746:4312): avc: denied { ioctl } for pid=31030 comm="syz.3.5325" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 2459.845236][T31042] overlayfs: failed to clone lowerpath [ 2460.725408][T31062] fuse: Bad value for 'fd' [ 2461.535845][T26469] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2461.760006][T26469] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2461.784067][T26469] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2461.807273][T26469] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2462.014025][T26469] usb 4-1: config 0 descriptor?? [ 2462.074012][T26469] pwc: Askey VC010 type 2 USB webcam detected. [ 2462.309446][T31076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2462.454743][T31081] Failed to initialize the IGMP autojoin socket (err -2) [ 2463.160143][T31093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2464.498790][T18427] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2464.670038][T18427] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 2464.714169][T18427] usb 2-1: config 0 has no interface number 0 [ 2464.732988][T18427] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2464.761305][T18427] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2464.778694][T18427] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2464.819468][T26469] pwc: recv_control_msg error -71 req 02 val 2b00 [ 2464.827524][T18427] usb 2-1: Product: syz [ 2464.911237][T18427] usb 2-1: Manufacturer: syz [ 2464.918797][T26469] pwc: recv_control_msg error -71 req 02 val 2700 [ 2464.936270][T18427] usb 2-1: SerialNumber: syz [ 2464.947557][T26469] pwc: recv_control_msg error -71 req 02 val 2c00 [ 2464.954643][T18427] usb 2-1: config 0 descriptor?? [ 2464.965983][T18427] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 2464.974876][T26469] pwc: recv_control_msg error -71 req 04 val 1000 [ 2464.991148][T26469] pwc: recv_control_msg error -71 req 04 val 1300 [ 2465.017382][T26469] pwc: recv_control_msg error -71 req 04 val 1400 [ 2465.030077][T26469] pwc: recv_control_msg error -71 req 02 val 2000 [ 2465.047189][T26469] pwc: recv_control_msg error -71 req 02 val 2100 [ 2465.155000][T26469] pwc: recv_control_msg error -71 req 04 val 1500 [ 2465.274798][T26469] pwc: recv_control_msg error -71 req 02 val 2500 [ 2465.288557][T26469] pwc: recv_control_msg error -71 req 02 val 2400 [ 2465.306047][T26469] pwc: recv_control_msg error -71 req 02 val 2600 [ 2465.332777][T26469] pwc: recv_control_msg error -71 req 02 val 2900 [ 2465.361863][T31115] 9pnet_fd: Insufficient options for proto=fd [ 2465.371519][ T30] audit: type=1400 audit(2465.321:4313): avc: denied { listen } for pid=31110 comm="syz.3.5341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 2465.403100][T26469] pwc: recv_control_msg error -71 req 02 val 2800 [ 2465.431274][T26469] pwc: recv_control_msg error -71 req 04 val 1100 [ 2465.449122][T26469] pwc: recv_control_msg error -71 req 04 val 1200 [ 2465.467624][T26469] pwc: Registered as video103. [ 2465.485993][T26469] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input36 [ 2465.588332][T26469] usb 4-1: USB disconnect, device number 45 [ 2466.271111][T31129] gfs2: gfs2 mount does not exist [ 2466.712751][T31132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2467.114441][T31136] sd 0:0:1:0: PR command failed: 1026 [ 2467.120111][T31136] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2467.126968][T31136] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2467.279784][ T30] audit: type=1400 audit(2467.075:4314): avc: denied { write } for pid=31131 comm="syz.4.5345" name="file0" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 2467.311953][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2467.342522][T30841] usb 2-1: USB disconnect, device number 49 [ 2467.362344][T30841] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 2468.015018][T31150] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2468.186053][T31158] devpts: Unknown parameter 'tracefs' [ 2468.395122][ T30] audit: type=1400 audit(2468.155:4315): avc: denied { remount } for pid=31154 comm="syz.4.5350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2468.431268][ T30] audit: type=1400 audit(2468.235:4316): avc: denied { mount } for pid=31154 comm="syz.4.5350" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2470.040585][T31170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5352'. [ 2471.689723][T31190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5357'. [ 2471.777826][ T30] audit: type=1400 audit(2471.745:4317): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 2471.800504][T31194] Failed to initialize the IGMP autojoin socket (err -2) [ 2472.407842][ T30] audit: type=1400 audit(2472.375:4318): avc: denied { create } for pid=31202 comm="syz.0.5360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 2472.513720][ T30] audit: type=1400 audit(2472.455:4319): avc: denied { mounton } for pid=31205 comm="syz.2.5359" path="/1078/file0" dev="tmpfs" ino=6016 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 2473.223892][T31208] block device autoloading is deprecated and will be removed. [ 2473.483959][T31206] orangefs_mount: mount request failed with -4 [ 2476.055159][T31243] netlink: 'syz.3.5369': attribute type 1 has an invalid length. [ 2476.221461][T31243] bond4: entered promiscuous mode [ 2476.226726][T31243] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2476.359592][T31252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5370'. [ 2476.369199][T31252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5370'. [ 2476.702151][T31249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2476.719149][T31249] bond4: (slave vcan2): The slave device specified does not support setting the MAC address [ 2476.828787][T31249] bond4: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 2477.010404][T31249] bond4: (slave vcan2): making interface the new active one [ 2477.084258][T31249] vcan2: entered promiscuous mode [ 2477.084466][T31243] overlayfs: failed lookup in lower (newroot/1052, name='bus', err=-40): overlapping layers [ 2477.090713][T31249] bond4: (slave vcan2): Enslaving as an active interface with an up link [ 2477.395862][T31270] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.5372'. [ 2477.423999][T31270] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2479.638732][T26469] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2479.810252][T26469] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2479.818460][T26469] usb 5-1: config 0 has no interface number 0 [ 2479.824760][T26469] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2479.850675][T26469] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2479.862251][T26469] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2479.879581][T26469] usb 5-1: Product: syz [ 2479.883775][T26469] usb 5-1: Manufacturer: syz [ 2479.888374][T26469] usb 5-1: SerialNumber: syz [ 2479.908440][T26469] usb 5-1: config 0 descriptor?? [ 2479.929677][T26469] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 2480.021228][T31303] sp0: Synchronizing with TNC [ 2480.059759][T31303] sp0: Found TNC [ 2480.312867][T31310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5380'. [ 2482.459340][T30841] usb 5-1: USB disconnect, device number 39 [ 2482.473722][T30841] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 2482.564062][T31327] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5385'. [ 2482.580890][T31327] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 2484.934374][T31346] tc_dump_action: action bad kind [ 2486.197588][T18427] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 2486.606837][T18427] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 2486.616046][T18427] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 2486.626313][T18427] usb 4-1: Product: syz [ 2486.756956][T18427] usb 4-1: Manufacturer: syz [ 2486.919878][T18427] usb 4-1: SerialNumber: syz [ 2486.934125][T18427] usb 4-1: config 0 descriptor?? [ 2486.961687][T18427] ch341 4-1:0.0: ch341-uart converter detected [ 2487.317533][T31364] veth1_vlan: left allmulticast mode [ 2488.363432][T27594] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2488.372439][T27594] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2488.381478][T27594] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 2488.390387][T27594] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2488.399372][T27594] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2488.408325][T27594] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 2488.417253][T27594] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2488.426468][T27594] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2488.436075][T27594] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 2488.457439][T27594] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2488.466385][T27594] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 2488.475439][T27594] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 2488.484610][T18427] usb 4-1: failed to send control message: -110 [ 2488.494024][T31377] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5397'. [ 2488.704730][T18427] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 2488.965085][T18427] usb 4-1: USB disconnect, device number 46 [ 2488.984888][T18427] ch341 4-1:0.0: device disconnected [ 2489.168787][T26469] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2489.515630][T31394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5401'. [ 2489.525189][T31394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5401'. [ 2489.592192][T18427] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2489.659928][T26469] usb 2-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 2489.679983][T26469] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2489.709777][T26469] usb 2-1: config 0 descriptor?? [ 2489.738608][T26469] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input37 [ 2489.788904][T18427] usb 5-1: Using ep0 maxpacket: 32 [ 2489.805526][T18427] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2489.832671][T18427] usb 5-1: config 0 has no interface number 0 [ 2489.855303][T18427] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2489.881580][T18427] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2489.900289][T18427] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 2489.917828][T18427] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2489.956226][T18427] usb 5-1: config 0 descriptor?? [ 2490.247936][T31396] mac80211_hwsim hwsim4 pim6reg1: entered promiscuous mode [ 2490.255480][T31396] mac80211_hwsim hwsim4 pim6reg1: entered allmulticast mode [ 2490.267017][T31396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2490.276696][T31396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2490.448694][ T30] audit: type=1400 audit(2490.355:4320): avc: denied { append } for pid=31380 comm="syz.1.5398" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 2490.567842][T31405] ptrace attach of "./syz-executor exec"[5806] was attempted by "./syz-executor exec"[31405] [ 2490.663329][T18427] uclogic 0003:28BD:0094.000D: pen parameters not found [ 2490.768076][T18427] uclogic 0003:28BD:0094.000D: interface is invalid, ignoring [ 2491.961737][T30841] usb 2-1: USB disconnect, device number 50 [ 2492.610654][T18427] usb 5-1: USB disconnect, device number 40 [ 2493.165664][T31433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5410'. [ 2494.232928][T31449] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2494.244780][T31449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5412'. [ 2494.255858][T31449] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5412'. [ 2494.620524][T31455] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 2494.653537][T31455] lo: entered promiscuous mode [ 2494.658395][T31455] lo: entered allmulticast mode [ 2494.672030][T31455] tunl0: entered promiscuous mode [ 2494.677133][T31455] tunl0: entered allmulticast mode [ 2494.687759][T31455] gre0: entered promiscuous mode [ 2494.692810][T31455] gre0: entered allmulticast mode [ 2494.718266][T31455] erspan0: entered promiscuous mode [ 2494.723913][T31455] erspan0: entered allmulticast mode [ 2494.740062][T31455] ip_vti0: entered promiscuous mode [ 2494.745335][T31455] ip_vti0: entered allmulticast mode [ 2494.780474][T31455] ip6_vti0: entered promiscuous mode [ 2494.785831][T31455] ip6_vti0: entered allmulticast mode [ 2494.803677][T31455] sit0: entered promiscuous mode [ 2494.808731][T31455] sit0: entered allmulticast mode [ 2494.832080][T31455] ip6tnl0: entered promiscuous mode [ 2494.837357][T31455] ip6tnl0: entered allmulticast mode [ 2494.848666][T31455] ip6gre0: entered promiscuous mode [ 2494.853929][T31455] ip6gre0: entered allmulticast mode [ 2494.865185][T31455] syz_tun: entered promiscuous mode [ 2494.871789][T31455] ip6gretap0: entered promiscuous mode [ 2494.877290][T31455] ip6gretap0: entered allmulticast mode [ 2494.884901][T31455] 8021q: adding VLAN 0 to HW filter on device team0 [ 2494.892455][T31455] nlmon0: entered promiscuous mode [ 2494.897578][T31455] nlmon0: entered allmulticast mode [ 2494.917973][T31455] caif0: entered promiscuous mode [ 2494.923080][T31455] caif0: entered allmulticast mode [ 2494.928183][T31455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2495.607614][T31464] binder: 31463:31464 ioctl c0306201 0 returned -14 [ 2496.015320][T31473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5419'. [ 2496.615260][T31473] Failed to initialize the IGMP autojoin socket (err -2) [ 2500.171049][ T30] audit: type=1800 audit(2500.145:4321): pid=31534 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.5434" name="bus" dev="tmpfs" ino=6112 res=0 errno=0 [ 2500.362353][T31536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5432'. [ 2501.011413][T31539] binder: 31531:31539 ioctl c0306201 0 returned -14 [ 2501.478962][T30841] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2501.633402][T31556] netlink: 'syz.3.5437': attribute type 1 has an invalid length. [ 2501.828745][T30841] usb 5-1: Using ep0 maxpacket: 32 [ 2502.233912][T30841] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 2502.452454][T30841] usb 5-1: config 0 has no interface number 0 [ 2502.458534][T30841] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2502.529770][T30841] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2502.551348][T30841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2502.620937][T31555] Failed to initialize the IGMP autojoin socket (err -2) [ 2502.639097][T30841] usb 5-1: Product: syz [ 2502.643791][T30841] usb 5-1: Manufacturer: syz [ 2502.650175][T30841] usb 5-1: SerialNumber: syz [ 2502.691036][T31556] macvlan2: entered promiscuous mode [ 2502.696397][T31556] macvlan2: entered allmulticast mode [ 2502.703370][T31556] bond5: entered promiscuous mode [ 2502.709398][T31556] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2502.812478][T30841] usb 5-1: config 0 descriptor?? [ 2502.824688][T30841] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2502.834534][T30841] em28xx 5-1:0.132: Video interface 132 found: [ 2503.058113][T31556] bond5: left promiscuous mode [ 2503.180601][T30841] em28xx 5-1:0.132: unknown em28xx chip ID (0) [ 2503.243608][T30841] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 2503.265218][T30841] em28xx 5-1:0.132: board has no eeprom [ 2503.339886][T30841] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2503.347809][T30841] em28xx 5-1:0.132: analog set to bulk mode. [ 2503.354276][T26479] em28xx 5-1:0.132: Registering V4L2 extension [ 2503.442280][T30841] usb 5-1: USB disconnect, device number 41 [ 2503.621721][T30841] em28xx 5-1:0.132: Disconnecting em28xx [ 2503.710950][T31579] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2503.844303][T26479] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 2503.851913][T26479] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 2503.859472][T26479] em28xx 5-1:0.132: No AC97 audio processor [ 2503.879399][T26479] usb 5-1: Decoder not found [ 2503.883973][T26479] em28xx 5-1:0.132: failed to create media graph [ 2503.909090][T26479] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 2504.170165][T26479] em28xx 5-1:0.132: Remote control support is not available for this card. [ 2504.178915][T30841] em28xx 5-1:0.132: Closing input extension [ 2504.213955][T30841] em28xx 5-1:0.132: Freeing device [ 2504.228737][T18427] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2504.565856][T18427] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 2504.576645][T18427] usb 4-1: config 0 has no interface number 0 [ 2504.764734][T18427] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2505.027228][T18427] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2505.183686][T18427] usb 4-1: Product: syz [ 2505.195149][T18427] usb 4-1: Manufacturer: syz [ 2505.223854][T18427] usb 4-1: SerialNumber: syz [ 2505.231052][T18427] usb 4-1: config 0 descriptor?? [ 2505.244993][T18427] yurex 4-1:0.50: Could not find endpoints [ 2506.654598][T31614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5451'. [ 2506.663929][T31614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5451'. [ 2507.271858][T30841] usb 4-1: USB disconnect, device number 47 [ 2511.119707][T18427] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2511.303527][T18427] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 2511.311741][T18427] usb 5-1: config 0 has no interface number 0 [ 2511.317829][T18427] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2511.336623][T18427] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2511.346057][T18427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2511.355162][T18427] usb 5-1: Product: syz [ 2511.364171][T18427] usb 5-1: Manufacturer: syz [ 2511.371348][T18427] usb 5-1: SerialNumber: syz [ 2511.385626][T18427] usb 5-1: config 0 descriptor?? [ 2512.314818][T18427] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 2512.570954][T31691] gfs2: gfs2 mount does not exist [ 2513.530742][T31695] overlayfs: missing 'workdir' [ 2513.605557][T31695] overlayfs: failed to clone upperpath [ 2513.896353][T30841] usb 5-1: USB disconnect, device number 42 [ 2513.929157][T31698] SQUASHFS error: Failed to read block 0x0: -5 [ 2513.935651][T31698] unable to read squashfs_super_block [ 2513.981233][T30841] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 2514.276139][T31700] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31700 comm=syz.4.5470 [ 2514.509020][T31700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5470'. [ 2514.663188][T31713] hpfs: hpfs_map_sector(): read error [ 2517.658741][T31751] gfs2: gfs2 mount does not exist [ 2518.207438][T31753] Failed to initialize the IGMP autojoin socket (err -2) [ 2518.515196][ T30] audit: type=1326 audit(2518.475:4322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31754 comm="syz.1.5479" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd87e98f6c9 code=0x0 [ 2518.689002][T31761] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5480'. [ 2518.811192][T31763] comedi comedi3: c6xdigio: I/O port conflict (0x401,3) [ 2518.814184][T31763] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000007: 0000 [#1] SMP KASAN NOPTI [ 2518.814207][T31763] KASAN: null-ptr-deref in range [0x0000000000000038-0x000000000000003f] [ 2518.814224][T31763] CPU: 0 UID: 0 PID: 31763 Comm: syz.1.5479 Not tainted syzkaller #0 PREEMPT(full) [ 2518.814242][T31763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2518.814252][T31763] RIP: 0010:kernfs_root+0x67/0x2a0 [ 2518.814276][T31763] Code: 89 c6 e8 3c f4 57 ff 58 85 db 0f 85 b7 00 00 00 e8 ee f8 57 ff 48 8d 7d 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1a 02 00 00 48 8b 5d 30 e8 66 92 fb 08 31 ff 41 [ 2518.814292][T31763] RSP: 0018:ffffc9000bf7f910 EFLAGS: 00010202 [ 2518.814306][T31763] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc9000f8ca000 [ 2518.814317][T31763] RDX: 0000000000000007 RSI: ffffffff826514b2 RDI: 0000000000000038 [ 2518.814327][T31763] RBP: 0000000000000008 R08: 0000000000000001 R09: 0000000000000000 [ 2518.814337][T31763] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1e6a80 [ 2518.814347][T31763] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88814c28a800 [ 2518.814356][T31763] FS: 00007fd87f7c56c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 2518.814373][T31763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2518.814382][T31763] CR2: 0000001b2fbfbff8 CR3: 0000000033fbd000 CR4: 00000000003526f0 [ 2518.814391][T31763] Call Trace: [ 2518.814397][T31763] [ 2518.814405][T31763] kernfs_remove_by_name_ns+0x2e/0x110 [ 2518.814428][T31763] driver_remove_file+0x4a/0x60 [ 2518.814446][T31763] bus_remove_driver+0x224/0x2c0 [ 2518.814467][T31763] driver_unregister+0x76/0xb0 [ 2518.814482][T31763] comedi_device_detach_locked+0x12f/0xa50 [ 2518.814505][T31763] comedi_device_detach+0x67/0xb0 [ 2518.814522][T31763] comedi_device_attach+0x43d/0x900 [ 2518.814541][T31763] do_devconfig_ioctl+0x1b1/0x710 [ 2518.814562][T31763] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 2518.814588][T31763] ? comedi_unlocked_ioctl+0x1639/0x2f00 [ 2518.814604][T31763] comedi_unlocked_ioctl+0x165d/0x2f00 [ 2518.814620][T31763] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 2518.814636][T31763] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2518.814655][T31763] ? do_vfs_ioctl+0x128/0x14f0 [ 2518.814675][T31763] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2518.814693][T31763] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 2518.814713][T31763] ? lockdep_hardirqs_on+0x7c/0x110 [ 2518.814735][T31763] ? hook_file_ioctl_common+0x145/0x410 [ 2518.814757][T31763] ? selinux_file_ioctl+0x180/0x270 [ 2518.814772][T31763] ? selinux_file_ioctl+0xb4/0x270 [ 2518.814789][T31763] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 2518.814805][T31763] __x64_sys_ioctl+0x18e/0x210 [ 2518.814827][T31763] do_syscall_64+0xcd/0xfa0 [ 2518.814842][T31763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2518.814858][T31763] RIP: 0033:0x7fd87e98f6c9 [ 2518.814869][T31763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2518.814882][T31763] RSP: 002b:00007fd87f7c5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2518.814895][T31763] RAX: ffffffffffffffda RBX: 00007fd87ebe6180 RCX: 00007fd87e98f6c9 [ 2518.814905][T31763] RDX: 0000200000000080 RSI: 0000000040946400 RDI: 000000000000000b [ 2518.814914][T31763] RBP: 00007fd87ea11f91 R08: 0000000000000000 R09: 0000000000000000 [ 2518.814923][T31763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2518.814931][T31763] R13: 00007fd87ebe6218 R14: 00007fd87ebe6180 R15: 00007fff868001d8 [ 2518.814946][T31763] [ 2518.814951][T31763] Modules linked in: [ 2518.814983][T31763] ---[ end trace 0000000000000000 ]--- [ 2518.815012][T31763] RIP: 0010:kernfs_root+0x67/0x2a0 [ 2518.815051][T31763] Code: 89 c6 e8 3c f4 57 ff 58 85 db 0f 85 b7 00 00 00 e8 ee f8 57 ff 48 8d 7d 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 1a 02 00 00 48 8b 5d 30 e8 66 92 fb 08 31 ff 41 [ 2518.815096][T31763] RSP: 0018:ffffc9000bf7f910 EFLAGS: 00010202 [ 2518.815141][T31763] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: ffffc9000f8ca000 [ 2518.815163][T31763] RDX: 0000000000000007 RSI: ffffffff826514b2 RDI: 0000000000000038 [ 2518.815190][T31763] RBP: 0000000000000008 R08: 0000000000000001 R09: 0000000000000000 [ 2518.815202][T31763] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8c1e6a80 [ 2518.815243][T31763] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88814c28a800 [ 2518.815283][T31763] FS: 00007fd87f7c56c0(0000) GS:ffff888124a08000(0000) knlGS:0000000000000000 [ 2518.815513][T31763] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2518.815527][T31763] CR2: 0000001b2fbfbff8 CR3: 0000000033fbd000 CR4: 00000000003526f0 [ 2518.815542][T31763] Kernel panic - not syncing: Fatal exception [ 2518.815741][T31763] Kernel Offset: disabled