last executing test programs: 8m40.227165478s ago: executing program 2 (id=756): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x10000000000002, 0x400, 0x0, 0xa, 0x1, 0x1, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6780820040000000000000033324dbdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f246eb000200", "b7324536181c208220000000b901000000e5ffffff002db267e6a281befc00", [0x40004]}) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000440)={0x100000001, {{0xa, 0xce22, 0xffffffff, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) close(0x3) 8m40.184399975s ago: executing program 2 (id=757): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x7) r1 = epoll_create1(0x80000) close(0x3) epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8m39.269238044s ago: executing program 2 (id=783): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000008700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff0000000000000000000000000000000000000000000000020000000000000000fcffffff000000000000000000000000d23ee651c9a3101d8bd4e1682deb778d5a01c7d79157ec3a528597a1c66d92db32f6b807195c7bac0fd831134c"], 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xfffffffffffffffd}}, [@mark={0xc, 0x15, {0x35075a, 0x5d21841b}}]}, 0xc4}}, 0x0) 8m39.235600748s ago: executing program 2 (id=784): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='devtmpfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00') 8m39.126598898s ago: executing program 2 (id=785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) 8m38.796824721s ago: executing program 2 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 8m38.552588211s ago: executing program 32 (id=790): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 6m57.365301533s ago: executing program 5 (id=2447): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) lseek(r0, 0x0, 0x0) 6m57.302486605s ago: executing program 5 (id=2448): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xfdfdffff, 0x0, 0x100, 0x0, 0x13, "7a58beca3900000000000000000000000200"}) 6m56.745048517s ago: executing program 5 (id=2454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 6m55.704942791s ago: executing program 5 (id=2463): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x8) 6m55.605370715s ago: executing program 5 (id=2465): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185100}) creat(&(0x7f0000000000)='./file0\x00', 0x0) io_uring_enter(r0, 0x7277, 0x0, 0x28, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m55.053301934s ago: executing program 5 (id=2469): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m54.975132071s ago: executing program 33 (id=2469): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m13.011152463s ago: executing program 0 (id=3046): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f0000000280)={0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) 6m12.922976028s ago: executing program 0 (id=3048): timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r1}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 6m12.816688971s ago: executing program 0 (id=3050): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r1 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(r0, 0x1) 6m12.632273014s ago: executing program 0 (id=3053): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x20000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 6m12.598064957s ago: executing program 0 (id=3056): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r0, 0x46bc, 0x3, 0x20, 0x0, 0x0) 6m11.673241881s ago: executing program 0 (id=3071): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000180)={0x20, 0x10, 0x1, 'F'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 6m11.590827126s ago: executing program 34 (id=3071): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000180)={0x20, 0x10, 0x1, 'F'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 5m32.010092148s ago: executing program 4 (id=3543): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) socket(0x15, 0x4, 0xfffffffd) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 5m30.880509566s ago: executing program 4 (id=3548): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba00000000000000000000000000004000"}) r1 = syz_open_pts(r0, 0x20800) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x44) 5m30.560025398s ago: executing program 4 (id=3551): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x23a, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x1}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 5m30.484991845s ago: executing program 4 (id=3552): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x3, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) syz_open_dev$vbi(0x0, 0x0, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20008000) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b0001000000000000000000ac1414aa000000000000000000000000fc01000000000000000000000000000000000000000000000000008001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000c0008"], 0xd8}}, 0x8814) 5m30.401032865s ago: executing program 4 (id=3553): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 5m30.31370048s ago: executing program 4 (id=3555): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) 5m15.199814903s ago: executing program 35 (id=3555): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) pselect6(0x40, &(0x7f00000002c0)={0x4, 0xffff, 0x645b, 0x5, 0x854c, 0x5, 0x67, 0x5}, 0x0, &(0x7f00000005c0)={0x9, 0x6, 0x3, 0x6, 0xd, 0x10000, 0x4, 0x5}, &(0x7f0000000600)={0x0, 0x989680}, 0x0) 11.835454088s ago: executing program 6 (id=5570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x100, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 11.01080362s ago: executing program 6 (id=5575): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x7, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x800000000d2}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 10.060944382s ago: executing program 6 (id=5578): bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) 9.01724606s ago: executing program 6 (id=5581): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 8.111912668s ago: executing program 6 (id=5584): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.109943653s ago: executing program 8 (id=5585): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0) 7.142025964s ago: executing program 8 (id=5587): mount$tmpfs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000080), 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB='inode32=']) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180200007700000000000000362faafc0feff8626f0000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x77, 0xfffffffffffffe2b, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.073123525s ago: executing program 1 (id=5589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0xe903, 0x0, 0x0, 0x41100, 0x44}, 0x94) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 7.0533592s ago: executing program 3 (id=5590): bpf$ITER_CREATE(0xb, 0x0, 0x0) openat$tun(0xffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) 6.797657015s ago: executing program 7 (id=5591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 5.644157893s ago: executing program 3 (id=5592): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0xa) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r3, r4, 0x3, 0x0) 5.545194173s ago: executing program 8 (id=5593): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e40), 0x40080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sg(0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r1) r2 = eventfd(0x200003) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 5.431071471s ago: executing program 7 (id=5594): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r1 = dup(r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r2, 0x0) write$binfmt_script(r1, &(0x7f0000000240)={'#! ', './file1', [{0x20, '\xd3\xf0@\x8bt\xcc\xd3\x1ah\xbe\x80\xd1\xac/\x99u\x7f\x92^?\x82\x98\x04D\x059\x9b\xf2.\xe9C\x99\rg\xd39\xbf\x177H\"\xc7vB5\x8f\xf8\f\xa4\xc7\xecEk\xa1\xf7\xb5\x04>$|\x99\xaf\xd8g\f\x00I\xc8\x93\xf2\xafI\xb0\xd02\x99\x87\xf3n\x81@KqE\x8a\x7f\xf7\xa7J\x9a\x93;\xc4\xa0\xf6\x8f\x05\xbf7\xb9\xba\xdb\xdaE\xffS\x9f\xdeC\x875:\xb6\xcb*\x02y4A\xdb\xbc\xff9\xe9\xa1\x97\xbd\xd9\xd90c\x17\x8c=E\xc1,\xea\xde\x98\x01p\xb5j6\xca\xc2\"B\x00\xba\xe9-\xd8Z\x8a0\xd8\x8a\xc3Y|\xb9\xcf\xa7b'}]}, 0xb2) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0xfe, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xa, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 5.305069355s ago: executing program 1 (id=5595): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 5.291508204s ago: executing program 3 (id=5596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) execve(&(0x7f0000019240)='./file0\x00', &(0x7f0000019300)={[], 0x7000000}, &(0x7f0000019100)={[&(0x7f0000000200)=' ']}) 4.256263193s ago: executing program 3 (id=5597): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) unshare(0x480) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfc, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0x9, 0x1, 0x4}}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x1401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x8000, 0x0}) 4.230067125s ago: executing program 8 (id=5598): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$vsock_stream(0x28, 0x1, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x20003, 0x1, 0x2}, 0x0, &(0x7f0000000500)={0x3ff, 0x0, 0x8, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465e, 0x100, 0x2, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) 4.02381748s ago: executing program 7 (id=5599): r0 = userfaultfd(0x80001) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @none, 0x6}, 0xa) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x4000}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "74ded75f"}]}}, 0x0}, 0x0) 3.903076902s ago: executing program 1 (id=5600): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) fcntl$dupfd(r0, 0x406, r0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xfda9, 0x800, 0xffffffff, 0xbfe00000}, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000080), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd70000700000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40c89}, 0x8004) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, 0x0, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000000080)={0x20, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0xffffff7f00000000}]}]}, 0x20}], 0x1, 0x0, 0x0, 0x2000}, 0x0) 3.901886544s ago: executing program 3 (id=5601): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x6f2}, 0x18) openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}}, 0x0) 3.585407058s ago: executing program 1 (id=5602): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) 3.45846415s ago: executing program 7 (id=5603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 2.034683497s ago: executing program 7 (id=5604): socket$igmp(0x2, 0x3, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008005}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2.019109938s ago: executing program 1 (id=5605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1.944321408s ago: executing program 8 (id=5606): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$9p(&(0x7f0000001900), 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 1.329954922s ago: executing program 6 (id=5607): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 1.32856126s ago: executing program 7 (id=5608): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) 278.431863ms ago: executing program 1 (id=5609): syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) bpf$MAP_CREATE(0x0, 0x0, 0x48) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) 617.778µs ago: executing program 3 (id=5610): socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r3, &(0x7f0000000600), 0xfec8) recvmmsg(r3, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x11}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 0s ago: executing program 8 (id=5611): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) recvfrom$inet6(r0, &(0x7f0000000100)=""/19, 0xff1, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): 32: 2537*4kB (UME) 1418*8kB (UME) 947*16kB (UME) 639*32kB (UME) 492*64kB (UME) 292*128kB (UME) 192*256kB (UME) 107*512kB (UME) 28*1024kB (UME) 4*2048kB (UM) 196*4096kB (UM) = 1069572kB [ 353.449114][T15873] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 353.460630][T15873] Node 1 Normal: 198*4kB (UME) 51*8kB (UME) 58*16kB (UME) 213*32kB (UME) 61*64kB (UE) 15*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 941*4096kB (M) = 3879088kB [ 353.478882][T15873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.488403][T15873] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 353.497708][T15873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 353.507269][T15873] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 353.516537][T15873] 101300 total pagecache pages [ 353.521307][T15873] 0 pages in swap cache [ 353.525434][T15873] Free swap = 124996kB [ 353.529586][T15873] Total swap = 124996kB [ 353.533722][T15873] 2097051 pages RAM [ 353.537508][T15873] 0 pages HighMem/MovableOnly [ 353.542186][T15873] 428392 pages reserved [ 353.546309][T15873] 0 pages cma reserved [ 353.551658][ T5889] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 353.563371][ T5889] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 353.579197][ T5889] em28xx 9-1:0.0: couldn't setup AC97 register 6 [ 353.587472][ T5889] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 353.599048][ T5889] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 353.625312][ T5889] usb 9-1: USB disconnect, device number 3 [ 353.733378][T15877] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 354.057480][ T30] audit: type=1400 audit(1759525215.842:965): avc: denied { watch watch_reads } for pid=15882 comm="syz.3.4034" path="/proc/1726/task/1727/fd" dev="proc" ino=65039 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 354.720014][ T30] audit: type=1326 audit(1759525216.512:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15895 comm="syz.8.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18d398eec9 code=0x7fc00000 [ 355.428060][ T30] audit: type=1326 audit(1759525217.212:967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15895 comm="syz.8.4038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f18d398eec9 code=0x7fc00000 [ 355.794260][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4052'. [ 355.993671][T15942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15942 comm=syz.1.4056 [ 356.016643][T15942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15942 comm=syz.1.4056 [ 356.132188][T15942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15942 comm=syz.1.4056 [ 356.145454][T15942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15942 comm=syz.1.4056 [ 356.158321][T15942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15942 comm=syz.1.4056 [ 356.185298][T15942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15942 comm=syz.1.4056 [ 356.198106][T15942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15942 comm=syz.1.4056 [ 356.211441][T15942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15942 comm=syz.1.4056 [ 356.224153][T15942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15942 comm=syz.1.4056 [ 356.264674][T15942] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15942 comm=syz.1.4056 [ 356.797752][T15966] ref_ctr_offset mismatch. inode: 0xef8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x28 [ 356.975994][T15971] overlayfs: failed to clone upperpath [ 357.218532][T15976] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4067'. [ 357.611528][T15981] overlayfs: failed to clone upperpath [ 357.638639][ T30] audit: type=1800 audit(1759525219.422:968): pid=15983 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4070" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 358.237346][ T30] audit: type=1400 audit(1759525220.022:969): avc: denied { write } for pid=15990 comm="syz.1.4073" path="socket:[65675]" dev="sockfs" ino=65675 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 358.701604][ T5950] Process accounting resumed [ 358.734920][T16018] Process accounting resumed [ 358.787834][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4082'. [ 359.101704][T16038] netlink: 'syz.3.4087': attribute type 1 has an invalid length. [ 359.180835][T16038] 8021q: adding VLAN 0 to HW filter on device bond4 [ 359.215447][T16042] erspan0: entered allmulticast mode [ 359.252446][T16042] bond4: (slave erspan0): making interface the new active one [ 359.267993][T16042] bond4: (slave erspan0): Enslaving as an active interface with an up link [ 359.611637][T16069] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 359.618400][T16069] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 359.630892][T16069] vhci_hcd vhci_hcd.0: Device attached [ 359.640084][T16070] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 359.651495][ T36] vhci_hcd: stop threads [ 359.660668][ T36] vhci_hcd: release socket [ 359.665141][ T36] vhci_hcd: disconnect device [ 359.824572][T16077] netlink: 452 bytes leftover after parsing attributes in process `syz.6.4100'. [ 360.188588][ T30] audit: type=1400 audit(1759525221.972:970): avc: denied { bind } for pid=16078 comm="syz.7.4101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 360.490680][T16099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4109'. [ 360.969243][T16115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4116'. [ 361.030571][T16115] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.043619][T16120] vlan1: entered allmulticast mode [ 361.056079][T16120] bond1: (slave vlan1): Error -34 calling dev_set_mtu [ 361.618949][ T5950] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 361.768871][ T5950] usb 7-1: Using ep0 maxpacket: 8 [ 361.800251][ T5950] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 361.820069][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.839172][ T5950] usb 7-1: Product: syz [ 361.868999][ T5950] usb 7-1: Manufacturer: syz [ 361.894071][ T5950] usb 7-1: SerialNumber: syz [ 361.925450][ T5950] usb 7-1: config 0 descriptor?? [ 362.141891][ T5950] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 362.413405][T16179] fuse: Bad value for 'fd' [ 362.606645][T16185] hsr0: entered promiscuous mode [ 362.614008][T16185] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4141'. [ 362.623607][T16185] hsr_slave_0: left promiscuous mode [ 362.630471][T16185] hsr_slave_1: left promiscuous mode [ 362.662627][T16185] hsr0 (unregistering): left promiscuous mode [ 362.759206][ T5950] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 362.771814][ T5950] usb 7-1: USB disconnect, device number 14 [ 362.837611][T16192] netlink: 'syz.1.4144': attribute type 10 has an invalid length. [ 363.240933][ C1] net_ratelimit: 10 callbacks suppressed [ 363.240950][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 363.254685][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 363.261525][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 363.268052][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 363.274638][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 363.281229][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 363.287988][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 363.294679][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 363.301968][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 363.361846][T16223] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4155'. [ 365.276451][ T30] audit: type=1804 audit(1759525227.062:971): pid=16283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.4178" name="file0" dev="tmpfs" ino=1190 res=1 errno=0 [ 365.300304][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4180'. [ 365.305288][ T30] audit: type=1800 audit(1759525227.062:972): pid=16283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4178" name="file0" dev="tmpfs" ino=1190 res=0 errno=0 [ 365.716333][T16320] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 365.731971][ T30] audit: type=1400 audit(1759525227.522:973): avc: denied { relabelto } for pid=16318 comm="syz.7.4192" name="file0" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 365.758966][ T30] audit: type=1400 audit(1759525227.522:974): avc: denied { associate } for pid=16318 comm="syz.7.4192" name="file0" dev="tmpfs" ino=1213 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 365.786259][ C0] vkms_vblank_simulate: vblank timer overrun [ 365.798350][ T30] audit: type=1400 audit(1759525227.592:975): avc: denied { rmdir } for pid=13303 comm="syz-executor" name="file0" dev="tmpfs" ino=1213 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 365.824644][ C0] vkms_vblank_simulate: vblank timer overrun [ 366.666985][T16338] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4200'. [ 366.761428][ T30] audit: type=1804 audit(1759525228.542:976): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.4201" name="file0" dev="tmpfs" ino=1234 res=1 errno=0 [ 366.762678][T16340] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 366.798318][T16340] ref_ctr increment failed for inode: 0x4d2 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888033974b40 [ 367.181866][T16361] netlink: 'syz.3.4210': attribute type 1 has an invalid length. [ 367.238535][T16361] 8021q: adding VLAN 0 to HW filter on device bond5 [ 367.264322][T16366] bond5: (slave veth7): Enslaving as an active interface with a down link [ 367.340834][T16361] bond5: (slave dummy0): making interface the new active one [ 367.361469][T16361] dummy0: entered promiscuous mode [ 367.367409][T16361] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 367.883848][T16366] bond5 (unregistering): (slave veth7): Releasing active interface [ 367.905009][T16366] bond5 (unregistering): (slave dummy0): Releasing active interface [ 367.928240][T16366] bond5 (unregistering): Released all slaves [ 368.880462][ T30] audit: type=1400 audit(1759525230.642:977): avc: denied { search } for pid=16420 comm="getty" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.917678][ T30] audit: type=1400 audit(1759525230.672:978): avc: denied { read } for pid=16420 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 368.983960][ T30] audit: type=1400 audit(1759525230.772:979): avc: denied { create } for pid=16428 comm="syz.3.4235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 369.027650][ T30] audit: type=1400 audit(1759525230.812:980): avc: denied { map } for pid=16429 comm="syz.8.4237" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 369.190177][ T5889] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 369.361885][ T5889] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 369.372574][ T5889] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 369.392246][ T5889] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 369.410217][ T5889] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 369.427791][ T5889] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 369.475868][ T5889] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 369.485552][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.501095][ T5889] usb 7-1: Product: syz [ 369.505342][ T5889] usb 7-1: Manufacturer: syz [ 369.526556][ T5889] cdc_wdm 7-1:1.0: skipping garbage [ 369.532542][ T5889] cdc_wdm 7-1:1.0: skipping garbage [ 369.545307][ T5889] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 369.554817][ T5889] cdc_wdm 7-1:1.0: Unknown control protocol [ 369.957460][ T5889] usb 7-1: USB disconnect, device number 15 [ 372.457131][T16517] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 372.561463][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 372.561480][ T30] audit: type=1400 audit(1759525234.352:982): avc: denied { node_bind } for pid=16525 comm="syz.7.4275" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 372.613310][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d95e800: rx timeout, send abort [ 372.624138][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d95e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 372.638613][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d95ec00: rx timeout, send abort [ 372.647105][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807d95ec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 374.402730][T16556] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.568933][ T5950] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 374.912635][T16577] overlayfs: failed to clone lowerpath [ 375.014630][ T5950] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.028828][ T5950] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 375.083042][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.115915][ T5950] usb 7-1: config 0 descriptor?? [ 375.127962][ T5950] pwc: Askey VC010 type 2 USB webcam detected. [ 375.638806][ T5950] pwc: recv_control_msg error -32 req 02 val 2b00 [ 375.649092][ T5950] pwc: recv_control_msg error -32 req 02 val 2700 [ 375.661583][ T5950] pwc: recv_control_msg error -32 req 02 val 2c00 [ 375.672900][ T5950] pwc: recv_control_msg error -32 req 04 val 1000 [ 376.088708][ T5950] pwc: recv_control_msg error -71 req 04 val 1400 [ 376.116198][ T5950] pwc: recv_control_msg error -71 req 02 val 2000 [ 376.131756][ T5950] pwc: recv_control_msg error -71 req 02 val 2100 [ 376.151552][ T5950] pwc: recv_control_msg error -71 req 04 val 1500 [ 376.164939][ T5950] pwc: recv_control_msg error -71 req 02 val 2500 [ 376.275998][ T5950] pwc: recv_control_msg error -71 req 02 val 2400 [ 376.290125][ T5950] pwc: recv_control_msg error -71 req 02 val 2600 [ 376.305227][ T5950] pwc: recv_control_msg error -71 req 02 val 2900 [ 376.314701][ T5950] pwc: recv_control_msg error -71 req 02 val 2800 [ 376.325230][ T5950] pwc: recv_control_msg error -71 req 04 val 1100 [ 376.360647][ T5950] pwc: recv_control_msg error -71 req 04 val 1200 [ 376.371819][ T5950] pwc: Registered as video103. [ 376.378271][ T5950] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input46 [ 376.399690][ T5950] usb 7-1: USB disconnect, device number 16 [ 376.417974][T16609] overlayfs: failed to clone upperpath [ 376.497172][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4304'. [ 376.580891][ T30] audit: type=1400 audit(1759525238.362:983): avc: denied { setattr } for pid=16612 comm="syz.8.4305" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 377.180803][ T5889] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 377.340146][ T5889] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 377.348525][ T5889] usb 4-1: config 1 has no interface number 0 [ 377.359638][ T5889] usb 4-1: config 1 interface 105 has no altsetting 0 [ 377.378590][ T5889] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 377.398128][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.410041][ T5889] usb 4-1: Product: syz [ 377.414241][ T5889] usb 4-1: Manufacturer: syz [ 377.423012][ T5889] usb 4-1: SerialNumber: syz [ 377.480802][ T30] audit: type=1400 audit(1759525239.272:984): avc: denied { create } for pid=16670 comm="syz.7.4328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 377.644938][ T5889] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 378.016708][ T5950] usb 4-1: USB disconnect, device number 43 [ 378.022248][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.028998][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.451771][T16757] tipc: Started in network mode [ 380.569524][T16757] tipc: Node identity 4, cluster identity 4711 [ 380.575744][T16757] tipc: Node number set to 4 [ 381.601316][ T30] audit: type=1400 audit(1759525243.392:985): avc: denied { bind } for pid=16793 comm="syz.7.4369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 381.631740][T16793] delete_channel: no stack [ 381.730571][T16798] overlayfs: failed to clone upperpath [ 381.849452][ T845] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 381.862670][ T845] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 382.064107][T16817] overlayfs: failed to clone upperpath [ 382.094885][T16817] overlayfs: failed to clone upperpath [ 382.118981][ T30] audit: type=1400 audit(1759525243.902:986): avc: denied { transfer } for pid=16818 comm="syz.3.4380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 382.269828][ T30] audit: type=1400 audit(1759525244.062:987): avc: denied { ioctl } for pid=16824 comm="syz.3.4383" path="socket:[68903]" dev="sockfs" ino=68903 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 383.236279][ T30] audit: type=1400 audit(1759525245.012:988): avc: denied { write } for pid=16838 comm="syz.6.4389" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 383.781499][T16846] ptrace attach of "./syz-executor exec"[16848] was attempted by "./syz-executor exec"[16846] [ 384.149113][ T5904] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 384.342096][ T5904] usb 9-1: Using ep0 maxpacket: 8 [ 384.356488][ T5904] usb 9-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 384.432340][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.448811][ T5904] usb 9-1: Product: syz [ 384.461583][ T5904] usb 9-1: Manufacturer: syz [ 384.466802][ T5904] usb 9-1: SerialNumber: syz [ 384.484596][T16872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'. [ 384.497009][T16872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'. [ 384.509932][T16872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'. [ 384.520859][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4400'. [ 384.554641][ T5904] usb 9-1: config 0 descriptor?? [ 384.573421][ T5904] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 384.633221][T16872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'. [ 384.642623][T16872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'. [ 384.692349][T16872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'. [ 384.701524][T16872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4400'. [ 385.061058][T16872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'. [ 385.071304][T16872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4400'. [ 386.095383][T16907] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 386.428773][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 386.682794][ T5904] gspca_sonixj: reg_w1 err -71 [ 386.718422][ T5904] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 386.791344][ T5904] usb 9-1: USB disconnect, device number 4 [ 387.087946][ T30] audit: type=1400 audit(1759525248.852:989): avc: denied { accept } for pid=16917 comm="syz.1.4416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 387.200700][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.210978][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 387.220066][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.230239][ T24] usb 4-1: config 0 descriptor?? [ 387.270319][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 387.452446][T16935] vlan2: entered allmulticast mode [ 387.457639][T16935] gretap0: entered allmulticast mode [ 387.648459][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 387.774462][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 387.782356][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 387.789784][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 387.797254][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 387.804282][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 387.815297][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 388.040378][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 388.087984][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 388.302698][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 388.313603][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 388.321822][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 388.328697][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 388.339825][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 388.347231][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 388.358854][ T24] pwc: Registered as video103. [ 388.471500][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input47 [ 388.491969][ T24] usb 4-1: USB disconnect, device number 44 [ 388.571194][T16953]  [ 391.672795][ T30] audit: type=1400 audit(1759525253.462:990): avc: denied { create } for pid=17028 comm="syz.6.4459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 391.675652][T17029] __nla_validate_parse: 5 callbacks suppressed [ 391.675667][T17029] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4459'. [ 391.713013][ T30] audit: type=1400 audit(1759525253.462:991): avc: denied { ioctl } for pid=17028 comm="syz.6.4459" path="socket:[69565]" dev="sockfs" ino=69565 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 391.715911][T17029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.770655][ T5904] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 391.782535][T17029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.853666][T17033] overlayfs: failed to clone upperpath [ 391.908526][T17035] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.4461'. [ 391.942414][ T5904] usb 9-1: config 14 has an invalid interface number: 21 but max is 0 [ 391.963852][ T5904] usb 9-1: config 14 has no interface number 0 [ 391.978879][ T5904] usb 9-1: config 14 interface 21 has no altsetting 0 [ 391.996902][ T5904] usb 9-1: string descriptor 0 read error: -22 [ 392.027816][ T5904] usb 9-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 392.092576][ T5904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.111393][ T5904] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.118395][ T5904] usb 9-1: MIDIStreaming interface descriptor not found [ 393.143804][ T5904] usb 9-1: USB disconnect, device number 5 [ 393.608777][ T5950] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 393.758773][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 393.765333][ T5950] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 393.823669][ T5950] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 393.833275][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 393.865919][ T5950] usb 4-1: Product: syz [ 393.875242][ T5950] usb 4-1: Manufacturer: syz [ 393.881181][ T5950] usb 4-1: SerialNumber: syz [ 393.889866][ T5950] usb 4-1: config 0 descriptor?? [ 393.897653][T17061] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 394.247452][ T5950] usb 4-1: USB disconnect, device number 45 [ 394.290589][T17072] netlink: 'syz.7.4475': attribute type 10 has an invalid length. [ 394.310254][T17072] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 395.056205][ T30] audit: type=1400 audit(1759525256.812:992): avc: denied { create } for pid=17082 comm="syz.3.4479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 395.136262][ T30] audit: type=1400 audit(1759525256.812:993): avc: denied { bind } for pid=17082 comm="syz.3.4479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 396.400740][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4492'. [ 396.648910][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ef87000: rx timeout, send abort [ 396.986379][T17101] syz.8.4483: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=syz8,mems_allowed=0-1 [ 397.007125][T17101] CPU: 1 UID: 0 PID: 17101 Comm: syz.8.4483 Not tainted syzkaller #0 PREEMPT(full) [ 397.007143][T17101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 397.007150][T17101] Call Trace: [ 397.007154][T17101] [ 397.007158][T17101] dump_stack_lvl+0x16c/0x1f0 [ 397.007180][T17101] warn_alloc+0x248/0x3a0 [ 397.007199][T17101] ? __pfx_warn_alloc+0x10/0x10 [ 397.007223][T17101] ? veth_dev_init+0x37c/0x570 [ 397.007235][T17101] ? __vmalloc_node_noprof+0xad/0xf0 [ 397.007253][T17101] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 397.007273][T17101] ? veth_dev_init+0x37c/0x570 [ 397.007286][T17101] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 397.007308][T17101] __kvmalloc_node_noprof+0x431/0x9c0 [ 397.007321][T17101] ? veth_dev_init+0x37c/0x570 [ 397.007332][T17101] ? veth_dev_init+0x37c/0x570 [ 397.007341][T17101] ? __pfx_netdev_lock_cmp_fn+0x10/0x10 [ 397.007360][T17101] ? veth_dev_init+0x37c/0x570 [ 397.007374][T17101] veth_dev_init+0x37c/0x570 [ 397.007390][T17101] ? kasan_save_track+0x14/0x30 [ 397.007403][T17101] ? __pfx_veth_dev_init+0x10/0x10 [ 397.007414][T17101] register_netdevice+0x650/0x2270 [ 397.007436][T17101] ? __pfx_register_netdevice+0x10/0x10 [ 397.007454][T17101] ? dev_addr_mod+0x316/0x540 [ 397.007469][T17101] veth_newlink+0x44d/0xa00 [ 397.007481][T17101] ? __pfx_veth_newlink+0x10/0x10 [ 397.007516][T17101] ? irqentry_exit+0x3b/0x90 [ 397.007531][T17101] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.007548][T17101] ? __pfx_veth_newlink+0x10/0x10 [ 397.007561][T17101] ? rtnl_newlink+0xb8d/0x2000 [ 397.007578][T17101] ? __pfx_veth_newlink+0x10/0x10 [ 397.007590][T17101] rtnl_newlink+0xc45/0x2000 [ 397.007610][T17101] ? __pfx_rtnl_newlink+0x10/0x10 [ 397.007627][T17101] ? __pfx___schedule+0x10/0x10 [ 397.007646][T17101] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.007665][T17101] ? preempt_schedule_thunk+0x16/0x30 [ 397.007685][T17101] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 397.007700][T17101] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 397.007720][T17101] ? __pfx_rtnl_newlink+0x10/0x10 [ 397.007737][T17101] rtnetlink_rcv_msg+0x95e/0xe90 [ 397.007760][T17101] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.007780][T17101] ? __pfx___schedule+0x10/0x10 [ 397.007794][T17101] ? lockdep_hardirqs_on+0x7c/0x110 [ 397.007811][T17101] netlink_rcv_skb+0x158/0x420 [ 397.007836][T17101] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 397.007865][T17101] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.007905][T17101] netlink_unicast+0x5a7/0x870 [ 397.007926][T17101] ? __pfx_netlink_unicast+0x10/0x10 [ 397.007943][T17101] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 397.007965][T17101] netlink_sendmsg+0x8c8/0xdd0 [ 397.007985][T17101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.008009][T17101] ____sys_sendmsg+0xa98/0xc70 [ 397.008022][T17101] ? copy_msghdr_from_user+0x10a/0x160 [ 397.008039][T17101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.008050][T17101] ? rcu_is_watching+0x12/0xc0 [ 397.008073][T17101] ___sys_sendmsg+0x134/0x1d0 [ 397.008090][T17101] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.008123][T17101] __sys_sendmsg+0x16d/0x220 [ 397.008139][T17101] ? __pfx___sys_sendmsg+0x10/0x10 [ 397.008154][T17101] ? __pfx___schedule+0x10/0x10 [ 397.008177][T17101] do_syscall_64+0xcd/0x4e0 [ 397.008194][T17101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.008206][T17101] RIP: 0033:0x7f18d398eec9 [ 397.008215][T17101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.008226][T17101] RSP: 002b:00007f18d1bcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.008238][T17101] RAX: ffffffffffffffda RBX: 00007f18d3be6090 RCX: 00007f18d398eec9 [ 397.008245][T17101] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 397.008252][T17101] RBP: 00007f18d3a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 397.008258][T17101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.008265][T17101] R13: 00007f18d3be6128 R14: 00007f18d3be6090 R15: 00007ffcaa1543b8 [ 397.008279][T17101] [ 397.008287][T17101] Mem-Info: [ 397.149843][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ef87800: rx timeout, send abort [ 397.159660][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ef87000: abort rx timeout. Force session deactivation [ 397.423812][T17101] active_anon:27711 inactive_anon:0 isolated_anon:0 [ 397.423812][T17101] active_file:21317 inactive_file:40742 isolated_file:0 [ 397.423812][T17101] unevictable:18695 dirty:485 writeback:0 [ 397.423812][T17101] slab_reclaimable:12553 slab_unreclaimable:119910 [ 397.423812][T17101] mapped:29511 shmem:23387 pagetables:1450 [ 397.423812][T17101] sec_pagetables:0 bounce:0 [ 397.423812][T17101] kernel_misc_reclaimable:0 [ 397.423812][T17101] free:1223455 free_pcp:26191 free_cma:0 [ 397.469500][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.480470][T17101] Node 0 active_anon:110844kB inactive_anon:0kB active_file:85208kB inactive_file:162768kB unevictable:73244kB isolated(anon):0kB isolated(file):0kB mapped:117984kB dirty:1924kB writeback:0kB shmem:92012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12016kB pagetables:5676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 397.513440][T17101] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 397.568742][T17101] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.598574][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.607857][T17101] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 397.613646][T17101] Node 0 DMA32 free:997880kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:111044kB inactive_anon:0kB active_file:85208kB inactive_file:162768kB unevictable:73244kB writepending:1924kB zspages:0kB present:3129332kB managed:2548068kB mlocked:0kB bounce:0kB free_pcp:71100kB local_pcp:26324kB free_cma:0kB [ 397.647139][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.649939][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804ef87800: abort rx timeout. Force session deactivation [ 397.663777][T17101] lowmem_reserve[]: 0 0 0 0 0 [ 397.668484][T17101] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.697673][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.703777][T17101] lowmem_reserve[]: 0 0 0 0 0 [ 397.710424][T17101] Node 1 Normal free:3880380kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32800kB local_pcp:7648kB free_cma:0kB [ 397.742756][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.748844][T17101] lowmem_reserve[]: 0 0 0 0 0 [ 397.753525][T17101] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 397.766256][T17101] Node 0 DMA32: 431*4kB (UME) 361*8kB (UME) 564*16kB (UME) 686*32kB (UME) 285*64kB (UME) 177*128kB (UME) 111*256kB (UME) 110*512kB (UME) 27*1024kB (UME) 5*2048kB (UM) 195*4096kB (UM) = 997828kB [ 397.785365][T17101] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 397.796820][T17101] Node 1 Normal: 201*4kB (UME) 51*8kB (UME) 58*16kB (UME) 227*32kB (UME) 72*64kB (UE) 16*128kB (UME) 5*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 941*4096kB (M) = 3880380kB [ 397.815067][T17101] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.825737][T17101] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.835739][T17101] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.845336][T17101] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 397.854780][T17101] 102345 total pagecache pages [ 397.859589][T17101] 0 pages in swap cache [ 397.863722][T17101] Free swap = 124996kB [ 397.867861][T17101] Total swap = 124996kB [ 397.872554][T17101] 2097051 pages RAM [ 397.876365][T17101] 0 pages HighMem/MovableOnly [ 397.881067][T17101] 428392 pages reserved [ 397.885206][T17101] 0 pages cma reserved [ 398.875409][T17159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4500'. [ 398.880928][ T30] audit: type=1400 audit(1759525260.662:994): avc: denied { read } for pid=17158 comm="syz.1.4500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 398.948724][ T30] audit: type=1400 audit(1759525260.722:995): avc: denied { name_connect } for pid=17162 comm="syz.3.4501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 398.985911][ T30] audit: type=1400 audit(1759525260.722:996): avc: denied { write } for pid=17162 comm="syz.3.4501" laddr=::ffff:172.20.20.68 lport=48284 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 399.030374][ T30] audit: type=1400 audit(1759525260.722:997): avc: denied { setopt } for pid=17162 comm="syz.3.4501" laddr=::ffff:172.20.20.68 lport=48284 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 399.853246][T17192] tipc: Enabling of bearer rejected, failed to enable media [ 401.861083][ T845] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 402.043410][ T845] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 402.058064][ T845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.094640][ T845] usb 4-1: Product: syz [ 402.108773][ T845] usb 4-1: Manufacturer: syz [ 402.322873][ T845] usb 4-1: SerialNumber: syz [ 402.785927][T17268] kvm: pic: non byte write [ 402.916275][ T845] rtl8150 4-1:1.0: couldn't reset the device [ 402.922613][ T845] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 402.938521][ T845] usb 4-1: USB disconnect, device number 46 [ 403.114999][T17275] overlayfs: failed to clone upperpath [ 403.154839][T17275] overlayfs: failed to clone lowerpath [ 403.729845][T17294] overlayfs: failed to clone upperpath [ 404.849308][ T30] audit: type=1400 audit(1759525266.632:998): avc: denied { name_bind } for pid=17314 comm="syz.1.4548" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 405.622237][T17336] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000011 [ 406.164037][T17351] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4561'. [ 406.206787][T17351] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.225978][T17354] netlink: 'syz.1.4562': attribute type 1 has an invalid length. [ 406.234098][T17354] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4562'. [ 406.243714][ T30] audit: type=1400 audit(1759525268.012:999): avc: denied { create } for pid=17353 comm="syz.1.4562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 406.266265][T17351] bridge_slave_1: left allmulticast mode [ 406.272652][T17351] bridge_slave_1: left promiscuous mode [ 406.280321][T17351] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.287567][ T30] audit: type=1400 audit(1759525268.012:1000): avc: denied { write } for pid=17353 comm="syz.1.4562" path="socket:[70488]" dev="sockfs" ino=70488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 406.708898][T17366] tipc: Enabling of bearer rejected, failed to enable media [ 406.908917][ T5874] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 407.108938][ T5874] usb 9-1: Using ep0 maxpacket: 32 [ 407.136794][ T5874] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 407.218788][ T5874] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 407.234488][ T5874] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 407.245736][ T5874] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 407.294087][ T5874] usb 9-1: config 0 interface 0 has no altsetting 0 [ 407.316715][ T5874] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 407.329275][ T5874] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 407.366954][ T5874] usb 9-1: Product: syz [ 407.381561][ T5874] usb 9-1: Manufacturer: syz [ 407.403600][ T5874] usb 9-1: SerialNumber: syz [ 407.422789][ T5874] usb 9-1: config 0 descriptor?? [ 407.439097][ T5874] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 407.469194][ T5874] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 407.506065][ T30] audit: type=1804 audit(1759525269.292:1001): pid=17386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.7.4575" name="file0" dev="ramfs" ino=71203 res=1 errno=0 [ 407.704411][ T5889] usb 9-1: USB disconnect, device number 6 [ 407.741081][ T5889] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 407.860945][T17392] netlink: 'syz.1.4577': attribute type 4 has an invalid length. [ 409.490559][ T30] audit: type=1326 audit(1759525271.232:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17411 comm="syz.6.4585" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab5d8eec9 code=0x7fc00000 [ 410.141586][T17444] netlink: 'syz.3.4595': attribute type 4 has an invalid length. [ 410.638903][ T5950] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 410.813098][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 410.841713][ T5950] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 410.861234][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.880058][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4602'. [ 410.882343][ T5950] usb 4-1: config 0 descriptor?? [ 410.966286][ T5950] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 411.004242][T17461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4602'. [ 411.013351][ T54] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.023430][ T54] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.046964][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4602'. [ 411.119483][T17464] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4602'. [ 411.202400][ T2128] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.239693][ T2128] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.610747][T17466] netlink: 'syz.7.4603': attribute type 1 has an invalid length. [ 411.719622][T17466] netlink: 'syz.7.4603': attribute type 2 has an invalid length. [ 411.750899][T17466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4603'. [ 413.170163][ T5950] gspca_sonixj: reg_r err -71 [ 413.174962][ T5950] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 413.184212][ T5950] usb 4-1: USB disconnect, device number 47 [ 413.835005][ T30] audit: type=1400 audit(1759525275.622:1003): avc: denied { mounton } for pid=17501 comm="syz.8.4615" path="/136/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.442733][T17541] overlayfs: failed to clone upperpath [ 416.682973][T17547] overlayfs: failed to clone upperpath [ 417.374817][ T30] audit: type=1400 audit(1759525279.152:1004): avc: denied { getopt } for pid=17536 comm="syz.7.4628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 418.008741][ T5823] Bluetooth: latency 3388 > 499 [ 419.672080][ T2128] failed while handling packet from 1:16385 [ 419.672137][ T2128] failed while handling packet from 1:16385 [ 419.697429][ T2128] failed while handling packet from 1:16385 [ 419.738141][T17603] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4650'. [ 419.828304][ T2128] failed while handling packet from 1:16385 [ 419.828349][ T2128] failed while handling packet from 1:16385 [ 419.834357][ T2128] failed while handling packet from 1:16385 [ 419.840332][ T2128] failed while handling packet from 1:16385 [ 419.846247][ T2128] failed while handling packet from 1:16385 [ 419.856067][ T2128] failed while handling packet from 1:16385 [ 419.862221][ T2128] failed while handling packet from 1:16385 [ 419.868151][ T2128] failed while handling packet from 1:16385 [ 419.912619][ T2128] failed while handling packet from 1:16385 [ 419.919752][ T2128] failed while handling packet from 1:16385 [ 419.960347][ T2128] failed while handling packet from 1:16385 [ 419.988220][ T2128] failed while handling packet from 1:16385 [ 420.000804][ T2128] failed while handling packet from 1:16385 [ 420.011121][ T2128] failed while handling packet from 1:16385 [ 420.032056][ T2128] failed while handling packet from 1:16385 [ 420.033498][ T5823] Bluetooth: hci5: command tx timeout [ 420.044510][ T2128] failed while handling packet from 1:16385 [ 420.097000][ T2128] failed while handling packet from 1:16385 [ 420.126043][ T2128] failed while handling packet from 1:16385 [ 420.132814][ T2128] failed while handling packet from 1:16385 [ 420.146490][ T2128] failed while handling packet from 1:16385 [ 420.154000][ T2128] failed while handling packet from 1:16385 [ 420.160782][ T2128] failed while handling packet from 1:16385 [ 420.166876][ T2128] failed while handling packet from 1:16385 [ 420.181906][ T2128] failed while handling packet from 1:16385 [ 420.189853][ T2128] failed while handling packet from 1:16385 [ 420.204626][ T2128] failed while handling packet from 1:16385 [ 420.212151][ T2128] failed while handling packet from 1:16385 [ 420.218098][ T2128] failed while handling packet from 1:16385 [ 420.225006][ T2128] failed while handling packet from 1:16385 [ 420.231009][ T2128] failed while handling packet from 1:16385 [ 420.236990][ T2128] failed while handling packet from 1:16385 [ 420.243008][ T2128] failed while handling packet from 1:16385 [ 420.407111][ T2128] failed while handling packet from 1:16385 [ 420.422548][ T2128] failed while handling packet from 1:16385 [ 420.439262][ T2128] failed while handling packet from 1:16385 [ 420.446303][ T2128] failed while handling packet from 1:16385 [ 420.460933][ T2128] failed while handling packet from 1:16385 [ 420.477468][ T2128] failed while handling packet from 1:16385 [ 420.493617][ T2128] failed while handling packet from 1:16385 [ 420.505912][ T2128] failed while handling packet from 1:16385 [ 420.518573][ T2128] failed while handling packet from 1:16385 [ 420.532098][ T2128] failed while handling packet from 1:16385 [ 420.545387][ T2128] failed while handling packet from 1:16385 [ 420.557000][ T2128] failed while handling packet from 1:16385 [ 420.569741][ T2128] failed while handling packet from 1:16385 [ 420.582484][ T2128] failed while handling packet from 1:16385 [ 420.595067][ T2128] failed while handling packet from 1:16385 [ 420.607647][ T2128] failed while handling packet from 1:16385 [ 420.622661][ T2128] failed while handling packet from 1:16385 [ 420.636480][ T2128] failed while handling packet from 1:16385 [ 420.650459][ T2128] failed while handling packet from 1:16385 [ 420.663108][ T2128] failed while handling packet from 1:16385 [ 420.684279][ T2128] failed while handling packet from 1:16385 [ 420.715291][ T2128] failed while handling packet from 1:16385 [ 420.744063][ T2128] failed while handling packet from 1:16385 [ 420.763653][ T2128] failed while handling packet from 1:16385 [ 420.790744][ T2128] failed while handling packet from 1:16385 [ 420.821553][ T2128] failed while handling packet from 1:16385 [ 420.852771][ T2128] failed while handling packet from 1:16385 [ 420.877804][ T2128] failed while handling packet from 1:16385 [ 420.903581][ T2128] failed while handling packet from 1:16385 [ 420.920667][ T2128] failed while handling packet from 1:16385 [ 420.938819][ T2128] failed while handling packet from 1:16385 [ 421.077406][ T2128] failed while handling packet from 1:16385 [ 421.093764][ T30] audit: type=1400 audit(1759525282.862:1005): avc: denied { cmd } for pid=17629 comm="syz.3.4660" path="/823/file0" dev="tmpfs" ino=4353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=io_uring permissive=1 [ 421.100460][ T2128] failed while handling packet from 1:16385 [ 421.768829][ T2128] failed while handling packet from 1:16385 [ 421.774789][ T2128] failed while handling packet from 1:16385 [ 421.829794][ T2128] failed while handling packet from 1:16385 [ 421.888009][ T2128] failed while handling packet from 1:16385 [ 421.905640][ T2128] failed while handling packet from 1:16385 [ 421.921952][ T2128] failed while handling packet from 1:16385 [ 421.927898][ T2128] failed while handling packet from 1:16385 [ 421.975378][ T2128] failed while handling packet from 1:16385 [ 421.998270][ T2128] failed while handling packet from 1:16385 [ 422.027813][ T2128] failed while handling packet from 1:16385 [ 422.048403][ T2128] failed while handling packet from 1:16385 [ 422.058234][ T2128] failed while handling packet from 1:16385 [ 422.068367][ T2128] failed while handling packet from 1:16385 [ 422.142747][ T2128] failed while handling packet from 1:16385 [ 422.157822][ T2128] failed while handling packet from 1:16385 [ 422.186911][ T2128] failed while handling packet from 1:16385 [ 422.206512][ T2128] failed while handling packet from 1:16385 [ 422.218780][ T2128] failed while handling packet from 1:16385 [ 422.234640][ T2128] failed while handling packet from 1:16385 [ 422.250214][ T2128] failed while handling packet from 1:16385 [ 422.286632][ T2128] failed while handling packet from 1:16385 [ 422.300887][ T2128] failed while handling packet from 1:16385 [ 422.517086][ T2128] failed while handling packet from 1:16385 [ 422.531554][ T2128] failed while handling packet from 1:16385 [ 422.611593][ T2128] failed while handling packet from 1:16385 [ 422.693916][ T2128] failed while handling packet from 1:16385 [ 422.719555][ T2128] failed while handling packet from 1:16385 [ 422.721224][T17656] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4667'. [ 422.748637][ T2128] failed while handling packet from 1:16385 [ 422.751914][ T2128] failed while handling packet from 1:16385 [ 422.774994][T17656] selinux_netlink_send: 51 callbacks suppressed [ 422.775007][T17656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17656 comm=syz.8.4667 [ 422.829356][ T2128] failed while handling packet from 1:16385 [ 422.829405][ T2128] failed while handling packet from 1:16385 [ 422.868908][ T2128] failed while handling packet from 1:16385 [ 422.879804][ T2128] failed while handling packet from 1:16385 [ 422.894606][ T2128] failed while handling packet from 1:16385 [ 422.967842][ T2128] failed while handling packet from 1:16385 [ 423.128793][ T2128] failed while handling packet from 1:16385 [ 423.134750][ T2128] failed while handling packet from 1:16385 [ 423.178787][ T2128] failed while handling packet from 1:16385 [ 423.220025][ T2128] failed while handling packet from 1:16385 [ 423.228816][ T2128] failed while handling packet from 1:16385 [ 423.234758][ T2128] failed while handling packet from 1:16385 [ 423.240662][T17662] sg_write: data in/out 91/14 bytes for SCSI command 0x0-- guessing data in; [ 423.240662][T17662] program syz.3.4669 not setting count and/or reply_len properly [ 423.367320][ T2128] failed while handling packet from 1:16385 [ 423.367348][ T2128] failed while handling packet from 1:16385 [ 423.391661][ T2128] failed while handling packet from 1:16385 [ 423.436784][ T2128] failed while handling packet from 1:16385 [ 423.505592][T17670] tipc: Enabling of bearer rejected, failed to enable media [ 423.660697][ T2128] failed while handling packet from 1:16385 [ 423.660744][ T2128] failed while handling packet from 1:16385 [ 423.686295][ T2128] failed while handling packet from 1:16385 [ 423.761497][ T2128] failed while handling packet from 1:16385 [ 423.783846][ T2128] failed while handling packet from 1:16385 [ 423.805784][ T2128] failed while handling packet from 1:16385 [ 423.865435][ T2128] failed while handling packet from 1:16385 [ 423.886869][ T2128] failed while handling packet from 1:16385 [ 423.967667][ T2128] failed while handling packet from 1:16385 [ 423.982122][ T2128] failed while handling packet from 1:16385 [ 424.051380][ T2128] failed while handling packet from 1:16385 [ 424.091963][ T2128] failed while handling packet from 1:16385 [ 424.122987][ T2128] failed while handling packet from 1:16385 [ 424.158781][ T2128] failed while handling packet from 1:16385 [ 424.186699][ T2128] failed while handling packet from 1:16385 [ 424.194939][ T2128] failed while handling packet from 1:16385 [ 424.201044][ T2128] failed while handling packet from 1:16385 [ 424.209489][ T2128] failed while handling packet from 1:16385 [ 424.215581][ T2128] failed while handling packet from 1:16385 [ 424.221915][ T2128] failed while handling packet from 1:16385 [ 424.228000][ T2128] failed while handling packet from 1:16385 [ 424.236366][ T2128] failed while handling packet from 1:16385 [ 424.307239][ T2128] failed while handling packet from 1:16385 [ 424.371566][ T2128] failed while handling packet from 1:16385 [ 424.431115][ T2128] failed while handling packet from 1:16385 [ 424.600646][ T2128] failed while handling packet from 1:16385 [ 424.606639][ T2128] failed while handling packet from 1:16385 [ 424.612923][ T2128] failed while handling packet from 1:16385 [ 424.619099][ T2128] failed while handling packet from 1:16385 [ 424.625349][ T2128] failed while handling packet from 1:16385 [ 424.632177][ T2128] failed while handling packet from 1:16385 [ 424.638585][ T2128] failed while handling packet from 1:16385 [ 425.254262][ T2128] failed while handling packet from 1:16385 [ 425.260549][ T2128] failed while handling packet from 1:16385 [ 425.411095][ T2128] failed while handling packet from 1:16385 [ 425.561268][ T2128] failed while handling packet from 1:16385 [ 425.573294][ T2128] failed while handling packet from 1:16385 [ 426.104446][ T2128] failed while handling packet from 1:16385 [ 426.117949][ T2128] failed while handling packet from 1:16385 [ 426.142084][ T2128] failed while handling packet from 1:16385 [ 426.162963][ T2128] failed while handling packet from 1:16385 [ 426.217222][ T2128] failed while handling packet from 1:16385 [ 426.253913][ T2128] failed while handling packet from 1:16385 [ 426.268903][ T2128] failed while handling packet from 1:16385 [ 426.274847][ T2128] failed while handling packet from 1:16385 [ 426.308826][ T2128] failed while handling packet from 1:16385 [ 426.378394][ T2128] failed while handling packet from 1:16385 [ 426.428854][ T2128] failed while handling packet from 1:16385 [ 426.564936][ T2128] failed while handling packet from 1:16385 [ 426.606258][ T2128] failed while handling packet from 1:16385 [ 426.650820][ T2128] failed while handling packet from 1:16385 [ 426.682025][ T2128] failed while handling packet from 1:16385 [ 426.693389][ T2128] failed while handling packet from 1:16385 [ 426.706997][ T2128] failed while handling packet from 1:16385 [ 426.736851][ T2128] failed while handling packet from 1:16385 [ 426.782352][T17708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4682'. [ 426.800355][T17709] 9pnet_fd: p9_fd_create_unix (17709): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 426.832769][ T2128] failed while handling packet from 1:16385 [ 426.983520][ T2128] failed while handling packet from 1:16385 [ 427.025818][T17713] overlayfs: failed to clone upperpath [ 427.041280][ T2128] failed while handling packet from 1:16385 [ 427.041632][ T2128] failed while handling packet from 1:16385 [ 427.117429][ T2128] failed while handling packet from 1:16385 [ 427.143018][ T2128] failed while handling packet from 1:16385 [ 427.159945][ T2128] failed while handling packet from 1:16385 [ 427.175710][ T2128] failed while handling packet from 1:16385 [ 427.190082][ T2128] failed while handling packet from 1:16385 [ 427.230615][T17721] overlayfs: failed to clone upperpath [ 427.414017][T17723] netlink: 'syz.8.4689': attribute type 1 has an invalid length. [ 427.418859][ T2128] failed while handling packet from 1:16385 [ 427.422052][T17723] netlink: 236 bytes leftover after parsing attributes in process `syz.8.4689'. [ 427.424223][ T2128] failed while handling packet from 1:16385 [ 427.428967][T17723] netlink: 'syz.8.4689': attribute type 1 has an invalid length. [ 427.471707][T17723] 8021q: adding VLAN 0 to HW filter on device bond1 [ 427.632267][ T2128] failed while handling packet from 1:16385 [ 427.632310][ T2128] failed while handling packet from 1:16385 [ 427.643858][ T2128] failed while handling packet from 1:16385 [ 427.658743][ T2128] failed while handling packet from 1:16385 [ 427.669469][ T2128] failed while handling packet from 1:16385 [ 427.671813][T17726] delete_channel: no stack [ 427.675527][ T30] audit: type=1400 audit(1759525289.462:1006): avc: denied { connect } for pid=17726 comm="syz.1.4688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 427.713884][ T2128] failed while handling packet from 1:16385 [ 427.713928][ T2128] failed while handling packet from 1:16385 [ 427.729641][ T2128] failed while handling packet from 1:16385 [ 427.735852][ T2128] failed while handling packet from 1:16385 [ 427.742917][ T2128] failed while handling packet from 1:16385 [ 427.749436][ T2128] failed while handling packet from 1:16385 [ 427.755632][ T2128] failed while handling packet from 1:16385 [ 427.780476][T17732] netlink: 'syz.6.4691': attribute type 1 has an invalid length. [ 427.799840][T17732] netlink: 'syz.6.4691': attribute type 4 has an invalid length. [ 427.808429][ T2128] failed while handling packet from 1:16385 [ 427.808468][ T2128] failed while handling packet from 1:16385 [ 427.812945][T17732] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.4691'. [ 427.833021][ T2128] failed while handling packet from 1:16385 [ 427.833045][ T2128] failed while handling packet from 1:16385 [ 427.839874][ T2128] failed while handling packet from 1:16385 [ 427.845871][ T2128] failed while handling packet from 1:16385 [ 427.852142][ T2128] failed while handling packet from 1:16385 [ 427.858122][ T2128] failed while handling packet from 1:16385 [ 427.864436][ T2128] failed while handling packet from 1:16385 [ 427.870431][ T2128] failed while handling packet from 1:16385 [ 427.876652][ T2128] failed while handling packet from 1:16385 [ 427.883175][ T2128] failed while handling packet from 1:16385 [ 427.890136][ T2128] failed while handling packet from 1:16385 [ 427.896300][ T2128] failed while handling packet from 1:16385 [ 427.902481][ T2128] failed while handling packet from 1:16385 [ 427.908735][ T2128] failed while handling packet from 1:16385 [ 427.916133][ T2128] failed while handling packet from 1:16385 [ 427.931876][ T2128] failed while handling packet from 1:16385 [ 427.937950][ T2128] failed while handling packet from 1:16385 [ 427.947196][ T2128] failed while handling packet from 1:16385 [ 427.959076][ T2128] failed while handling packet from 1:16385 [ 427.965017][ T2128] failed while handling packet from 1:16385 [ 427.975389][ T2128] failed while handling packet from 1:16385 [ 427.985494][ T2128] failed while handling packet from 1:16385 [ 427.992048][ T2128] failed while handling packet from 1:16385 [ 428.000387][ T2128] failed while handling packet from 1:16385 [ 428.006388][ T2128] failed while handling packet from 1:16385 [ 428.012574][ T2128] failed while handling packet from 1:16385 [ 428.019555][ T2128] failed while handling packet from 1:16385 [ 428.025871][ T2128] failed while handling packet from 1:16385 [ 428.035932][ T2128] failed while handling packet from 1:16385 [ 428.042156][ T2128] failed while handling packet from 1:16385 [ 428.049242][ T2128] failed while handling packet from 1:16385 [ 428.055830][ T2128] failed while handling packet from 1:16385 [ 428.061963][ T2128] failed while handling packet from 1:16385 [ 428.068027][ T2128] failed while handling packet from 1:16385 [ 428.074677][ T2128] failed while handling packet from 1:16385 [ 428.081439][ T2128] failed while handling packet from 1:16385 [ 428.087809][ T2128] failed while handling packet from 1:16385 [ 428.093821][ T2128] failed while handling packet from 1:16385 [ 428.100059][ T2128] failed while handling packet from 1:16385 [ 428.106623][ T2128] failed while handling packet from 1:16385 [ 433.384114][ T5823] Bluetooth: hci0: command 0x0406 tx timeout [ 434.748807][ T30] audit: type=1326 audit(1759525296.482:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17784 comm="syz.3.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac12b8eec9 code=0x7fc00000 [ 435.030601][T17807] SELinux: failed to load policy [ 435.489337][T17818] tipc: Failed to remove unknown binding: 66,1,1/0:1903058302/1903058304 [ 435.493504][T17822] input: syz1 as /devices/virtual/input/input48 [ 435.503281][T17818] tipc: Failed to remove unknown binding: 66,1,1/0:1903058302/1903058304 [ 435.608773][ T30] audit: type=1400 audit(1759525297.392:1008): avc: denied { audit_write } for pid=17817 comm="syz.6.4719" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 435.963982][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 435.970200][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 436.239166][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 436.246857][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 436.761766][ T845] libceph: connect (1)[c::]:6789 error -101 [ 436.772843][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 436.791818][T17847] ceph: No mds server is up or the cluster is laggy [ 437.471207][T17887] Set syz0 is full, maxelem 0 reached [ 439.078793][ T30] audit: type=1400 audit(1759525556.880:1009): avc: denied { read } for pid=17902 comm="syz.8.4749" name="file0" dev="tmpfs" ino=948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 439.536411][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.542816][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.401754][T17969] syzkaller1: entered promiscuous mode [ 441.407478][T17969] syzkaller1: entered allmulticast mode [ 444.327044][T18014] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 444.404940][T18014] block device autoloading is deprecated and will be removed. [ 446.276633][T18020] Mount JFS Failure: -5 [ 446.339494][T18038] 9pnet_fd: p9_fd_create_unix (18038): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 446.653820][T17762] Bluetooth: hci5: command 0x0406 tx timeout [ 446.744875][ C0] vkms_vblank_simulate: vblank timer overrun [ 447.075771][ T5823] Bluetooth: hci0: unexpected cc 0x203e length: 2 > 1 [ 447.084859][ T5823] Bluetooth: hci0: unexpected event for opcode 0x203e [ 447.313247][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4795'. [ 448.609273][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4799'. [ 448.647506][T18064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4799'. [ 451.144252][ T5823] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 451.174417][ T5823] Bluetooth: hci0: Injecting HCI hardware error event [ 451.184141][ T5823] Bluetooth: hci0: hardware error 0x00 [ 451.691058][T18108] input: syz1 as /devices/virtual/input/input49 [ 452.121165][T18116] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4814'. [ 453.176275][T18130] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 453.189349][T18130] overlayfs: failed to set xattr on upper [ 453.216843][T18130] overlayfs: ...falling back to redirect_dir=nofollow. [ 453.242248][T18130] overlayfs: ...falling back to metacopy=off. [ 453.248807][T18130] overlayfs: ...falling back to uuid=null. [ 453.270562][ T845] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 453.348836][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4822'. [ 453.368154][T18137] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.379693][ T5823] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 453.386793][T18137] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 44002 - 0 [ 453.396762][T18137] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.412767][T18142] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4822'. [ 453.422637][T18142] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4822'. [ 453.430570][ T845] usb 7-1: Using ep0 maxpacket: 8 [ 453.433907][T18142] netlink: 'syz.3.4822': attribute type 6 has an invalid length. [ 453.454656][ T845] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.464702][T18142] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4822'. [ 453.468244][ T845] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.669119][ T845] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.673179][T18137] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.689395][T18137] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 44002 - 0 [ 453.703642][ T845] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.703648][T18137] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.703697][ T845] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 453.750420][ T845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.836944][T18137] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 453.871813][T18137] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 44002 - 0 [ 453.882159][T18137] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 453.971025][ T845] usb 7-1: usb_control_msg returned -32 [ 453.991608][ T845] usbtmc 7-1:16.0: can't read capabilities [ 454.015458][T18137] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.030367][ T5874] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 454.098567][T18137] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 44002 - 0 [ 454.135195][T18137] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 454.157622][T18152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4827'. [ 454.166877][T18152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4827'. [ 454.191710][T18152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4827'. [ 454.233893][T18152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4827'. [ 454.316021][ T5874] usb 9-1: Using ep0 maxpacket: 32 [ 454.323167][ T5874] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.333534][ T5874] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.360611][ T5874] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 454.370351][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.383911][ T5874] usb 9-1: config 0 descriptor?? [ 454.400641][ T5874] hub 9-1:0.0: bad descriptor, ignoring hub [ 454.406620][ T5874] hub 9-1:0.0: probe with driver hub failed with error -5 [ 454.417823][ T64] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.423206][ T5874] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 454.437112][ T64] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 44002 - 0 [ 454.453713][T18152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4827'. [ 454.468418][T18152] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4827'. [ 454.478593][ T64] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 454.499967][ T190] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.509028][ T190] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 44002 - 0 [ 454.517496][ T190] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 454.533445][ T190] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.542517][ T190] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 44002 - 0 [ 454.551054][ T190] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 454.571981][ T190] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.582354][ T190] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 44002 - 0 [ 454.590846][ T190] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 454.654055][T18159] binder_alloc: 18158: pid 18158 spamming oneway? 1 buffers allocated for a total size of 4096 [ 454.887235][ T24] usb 9-1: reset high-speed USB device number 7 using dummy_hcd [ 455.416153][ T30] audit: type=1326 audit(1759525573.218:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18167 comm="syz.7.4832" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235cf8eec9 code=0x0 [ 456.659831][ T845] usb 7-1: USB disconnect, device number 17 [ 456.762590][T18181] overlayfs: failed to clone upperpath [ 456.955024][ T5874] usb 9-1: USB disconnect, device number 7 [ 457.514503][T18191] overlayfs: failed to clone upperpath [ 457.924161][T18208] overlayfs: statfs failed on './file0' [ 459.719794][T18232] binder: 18231:18232 ioctl 40046210 0 returned -14 [ 459.985021][T18237] overlayfs: failed to clone upperpath [ 460.194875][T18242] __nla_validate_parse: 6 callbacks suppressed [ 460.194894][T18242] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4856'. [ 460.342512][T18242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4856'. [ 460.360218][T18242] bond4 (unregistering): Released all slaves [ 460.387232][T18246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4856'. [ 461.763209][ T30] audit: type=1326 audit(1759525579.552:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18259 comm="syz.7.4859" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f235cf8eec9 code=0x0 [ 462.174901][T18272] ieee802154 phy0 wpan0: encryption failed: -22 [ 462.520454][ T30] audit: type=1326 audit(1759525580.322:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18274 comm="syz.6.4864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ab5d8eec9 code=0x0 [ 463.851409][T18293] overlayfs: upper fs does not support file handles, falling back to index=off. [ 464.496850][T18301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4871'. [ 465.571528][T18313] net veth1_virt_wifi »»»»»»: renamed from virt_wifi0 [ 467.043716][ T5874] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 467.109034][ T845] libceph: connect (1)[c::]:6789 error -101 [ 467.303870][ T845] libceph: mon0 (1)[c::]:6789 connect error [ 468.258512][T18337] ceph: No mds server is up or the cluster is laggy [ 468.265392][ T5874] usb 7-1: Using ep0 maxpacket: 32 [ 468.277509][ T5874] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 468.419351][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.460674][ T5874] usb 7-1: Product: syz [ 468.522894][ T5874] usb 7-1: Manufacturer: syz [ 468.531205][ T5874] usb 7-1: SerialNumber: syz [ 468.546193][ T5874] usb 7-1: config 0 descriptor?? [ 468.564476][ T5874] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 469.187365][T18353] overlayfs: failed to clone upperpath [ 469.556704][T18374] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4894'. [ 470.168619][T18385] ref_ctr increment failed for inode: 0x46d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888078a035c0 [ 471.022533][ T30] audit: type=1326 audit(1759525588.836:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.7.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235cf8eec9 code=0x7fc00000 [ 471.056754][ T5874] gspca_stk1135: reg_w 0x2ff err -71 [ 471.063467][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 471.069791][ T5874] gspca_stk1135: Sensor write failed [ 471.085308][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 471.126241][ T30] audit: type=1326 audit(1759525588.836:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18404 comm="syz.8.4904" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18d398eec9 code=0x0 [ 471.153689][ T5874] gspca_stk1135: Sensor write failed [ 471.175276][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 471.219055][ T5874] gspca_stk1135: Sensor read failed [ 471.239787][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 471.253893][ T5874] gspca_stk1135: Sensor read failed [ 471.260664][ T30] audit: type=1400 audit(1759525589.066:1015): avc: denied { watch watch_reads } for pid=18407 comm="syz.1.4905" path="/" dev="ramfs" ino=75220 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 471.261226][ T5874] gspca_stk1135: Detected sensor type unknown (0x0) [ 471.310149][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 471.317093][ T5874] gspca_stk1135: Sensor read failed [ 471.323261][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 471.329683][ T5874] gspca_stk1135: Sensor read failed [ 471.334993][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 471.341570][ T5874] gspca_stk1135: Sensor write failed [ 471.346851][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 471.353311][ T5874] gspca_stk1135: Sensor write failed [ 471.382462][ T5874] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 471.393683][ T5874] usb 7-1: USB disconnect, device number 18 [ 471.939858][ T30] audit: type=1326 audit(1759525589.747:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18401 comm="syz.7.4903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f235cf8eec9 code=0x7fc00000 [ 472.193952][T18424] syz_tun: entered allmulticast mode [ 472.212249][T18424] dvmrp1: entered allmulticast mode [ 472.274734][T18426] bridge_slave_0: left allmulticast mode [ 472.280601][T18426] bridge_slave_0: left promiscuous mode [ 472.286446][T18426] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.304984][T18426] bridge_slave_1: left allmulticast mode [ 472.311988][T18426] bridge_slave_1: left promiscuous mode [ 472.318551][T18426] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.338560][T18426] bond0: (slave bond_slave_0): Releasing backup interface [ 472.356308][T18426] bond0: (slave bond_slave_1): Releasing backup interface [ 472.371851][T18426] team0: Port device team_slave_0 removed [ 472.382247][T18426] team0: Port device team_slave_1 removed [ 472.389059][T18426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.396692][T18426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.406816][T18426] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.510531][T18427] team0: Mode changed to "activebackup" [ 472.521083][T18421] syz_tun: left allmulticast mode [ 473.662543][T18460] IPVS: length: 22 != 8 [ 474.294581][T18484] input: syz1 as /devices/virtual/input/input50 [ 474.360179][T18484] input: failed to attach handler leds to device input50, error: -6 [ 474.544020][ T30] audit: type=1400 audit(1759525592.358:1017): avc: denied { create } for pid=18490 comm="syz.3.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 474.615340][ T30] audit: type=1400 audit(1759525592.418:1018): avc: denied { allowed } for pid=18490 comm="syz.3.4931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 476.445574][T18526] netlink: 'syz.6.4942': attribute type 1 has an invalid length. [ 476.479844][T18526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.508119][T18526] veth5: entered promiscuous mode [ 476.516494][T18526] bond4: (slave veth5): Enslaving as an active interface with a down link [ 476.527352][T18526] bond4: entered allmulticast mode [ 477.617478][T18550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4947'. [ 477.998254][ T845] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 478.017295][T18567] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4954'. [ 478.284091][ T845] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 478.293461][ T845] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.307434][ T845] usb 9-1: config 0 descriptor?? [ 478.485576][T18565] netlink: 'syz.1.4953': attribute type 10 has an invalid length. [ 478.498100][T18565] syz_tun: left allmulticast mode [ 478.515014][T18565] syz_tun: entered allmulticast mode [ 478.528563][T18565] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 481.027650][ T845] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 481.046107][ T845] asix 9-1:0.0: probe with driver asix failed with error -71 [ 481.487066][ T5874] IPVS: starting estimator thread 0... [ 481.493077][ T845] usb 9-1: USB disconnect, device number 8 [ 481.586338][T18617] IPVS: using max 45 ests per chain, 108000 per kthread [ 481.821912][T18627] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 481.968476][T18642] netlink: 'syz.8.4975': attribute type 1 has an invalid length. [ 481.977936][ T30] audit: type=1400 audit(1759525599.782:1019): avc: denied { ioctl } for pid=18641 comm="syz.8.4975" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 482.041789][T18642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 482.100928][T18647] bond2: (slave geneve2): making interface the new active one [ 482.119228][T18647] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 482.233043][T18653] overlayfs: failed to clone upperpath [ 483.200728][ T30] audit: type=1326 audit(1759525601.002:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18651 comm="syz.1.4978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 484.095100][ T30] audit: type=1400 audit(1759525601.893:1021): avc: denied { write } for pid=18693 comm="syz.3.4990" path="socket:[75671]" dev="sockfs" ino=75671 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 486.895553][ T5889] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 487.055106][ T5889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 487.062419][ T5889] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 487.071526][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.087344][ T5889] usb 4-1: config 0 descriptor?? [ 488.585168][ T5889] isku 0003:1E7D:3264.0024: hidraw0: USB HID vf.fe Device [HID 1e7d:3264] on usb-dummy_hcd.3-1/input0 [ 488.859990][ T30] audit: type=1400 audit(1759525606.675:1022): avc: denied { write } for pid=18758 comm="syz.1.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 489.902728][ T5874] usb 4-1: USB disconnect, device number 48 [ 491.256489][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5019'. [ 493.160533][ T5874] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 493.309901][ T30] audit: type=1400 audit(1759525611.127:1023): avc: denied { getopt } for pid=18814 comm="syz.7.5024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 493.369587][ T5874] usb 7-1: Using ep0 maxpacket: 32 [ 493.539477][ T5874] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 493.652050][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.668619][ T5874] usb 7-1: Product: syz [ 493.678309][ T5874] usb 7-1: Manufacturer: syz [ 493.687175][ T5874] usb 7-1: SerialNumber: syz [ 493.703182][ T5874] usb 7-1: config 0 descriptor?? [ 493.720945][ T5874] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 494.789807][ T5932] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 495.022881][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.038411][ T5932] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 495.056843][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.073518][ T5932] usb 4-1: config 0 descriptor?? [ 495.605980][ T5932] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 495.628501][ T5932] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0025/input/input51 [ 495.864190][T18845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.873558][ T5932] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 495.900781][T18845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.182305][ T30] audit: type=1400 audit(1759525614.009:1024): avc: denied { nlmsg_read } for pid=18864 comm="syz.8.5042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 496.214601][ T5874] gspca_stk1135: reg_w 0x300 err -71 [ 496.221352][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 496.227705][ T5874] gspca_stk1135: Sensor write failed [ 496.239332][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 496.245884][ T5874] gspca_stk1135: Sensor write failed [ 496.251956][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 496.258353][ T5874] gspca_stk1135: Sensor read failed [ 496.276044][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 496.286128][ T5874] gspca_stk1135: Sensor read failed [ 496.304120][ T5874] gspca_stk1135: Detected sensor type unknown (0x0) [ 496.429049][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 496.435412][ T5874] gspca_stk1135: Sensor read failed [ 496.444308][ T5950] usb 4-1: USB disconnect, device number 49 [ 496.499478][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 496.549777][ T5874] gspca_stk1135: Sensor read failed [ 496.564381][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 496.570850][ T5874] gspca_stk1135: Sensor write failed [ 496.576173][ T5874] gspca_stk1135: serial bus timeout: status=0x00 [ 496.582957][ T5874] gspca_stk1135: Sensor write failed [ 496.588296][ T5874] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 496.599020][ T5874] usb 7-1: USB disconnect, device number 19 [ 497.140075][ T30] audit: type=1326 audit(1759525614.969:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.1.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 497.250584][ T30] audit: type=1326 audit(1759525614.969:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.1.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 497.329900][ T30] audit: type=1326 audit(1759525614.969:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.1.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 497.375097][T18894] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5053'. [ 497.390968][T18896] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 497.467370][ T30] audit: type=1326 audit(1759525614.969:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.1.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 497.491605][T18894] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.498773][T18894] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.509172][ T30] audit: type=1326 audit(1759525614.969:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.1.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 497.808390][ T30] audit: type=1326 audit(1759525614.969:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.1.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 497.907048][ T30] audit: type=1326 audit(1759525614.969:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.1.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 498.098211][ T30] audit: type=1326 audit(1759525614.969:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.1.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 498.127226][ T30] audit: type=1326 audit(1759525614.969:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18866 comm="syz.1.5043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 498.590876][T18919] Set syz1 is full, maxelem 65536 reached [ 500.870961][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.877325][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.315156][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 502.315172][ T30] audit: type=1326 audit(1759525620.002:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.1.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7ffc0000 [ 502.431721][ T30] audit: type=1326 audit(1759525620.002:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.1.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7ffc0000 [ 502.600828][ T30] audit: type=1326 audit(1759525620.002:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.1.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f62f1b8eec9 code=0x7ffc0000 [ 502.648540][ T30] audit: type=1326 audit(1759525620.002:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.1.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7ffc0000 [ 502.672557][ T30] audit: type=1326 audit(1759525620.002:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.1.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7ffc0000 [ 502.708585][ T30] audit: type=1326 audit(1759525620.002:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.1.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f62f1b8eec9 code=0x7ffc0000 [ 502.738250][ T30] audit: type=1326 audit(1759525620.002:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.1.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7ffc0000 [ 502.860003][ T30] audit: type=1326 audit(1759525620.002:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.1.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62f1b8eec9 code=0x7ffc0000 [ 502.925660][ T30] audit: type=1326 audit(1759525620.002:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.1.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7ffc0000 [ 503.011149][ T30] audit: type=1326 audit(1759525620.002:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18948 comm="syz.1.5070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f62f1b8eec9 code=0x7ffc0000 [ 503.156380][ T845] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 503.306919][ T845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 503.318556][ T845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 503.355911][ T845] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 503.396347][ T845] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 503.405706][ T845] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.429926][ T845] usb 9-1: Product: syz [ 503.451082][ T845] usb 9-1: Manufacturer: syz [ 503.488809][ T845] usb 9-1: SerialNumber: syz [ 503.516078][ T845] usb 9-1: config 0 descriptor?? [ 503.737371][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5079'. [ 503.769898][ T845] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 503.974967][ T845] usb 9-1: USB disconnect, device number 9 [ 505.858463][T19025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 507.206038][T19045] ptrace attach of "./syz-executor exec"[11786] was attempted by "./syz-executor exec"[19045] [ 508.149754][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 508.149771][ T30] audit: type=1800 audit(1759525625.975:1084): pid=19051 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5098" name="/" dev="9p" ino=2 res=0 errno=0 [ 508.466190][ T30] audit: type=1400 audit(1759525626.075:1085): avc: denied { ioctl } for pid=19052 comm="syz.8.5100" path="socket:[77251]" dev="sockfs" ino=77251 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 512.471456][ T30] audit: type=1326 audit(1759525630.297:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19109 comm="syz.1.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 513.179379][ T30] audit: type=1326 audit(1759525631.007:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19109 comm="syz.1.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62f1b8eec9 code=0x7fc00000 [ 513.559419][T19130] XFS (nbd6): SB validate failed with error -5. [ 513.852814][T19148] netlink: 'syz.1.5126': attribute type 1 has an invalid length. [ 513.861079][T19148] netlink: 'syz.1.5126': attribute type 4 has an invalid length. [ 513.869028][T19148] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.5126'. [ 514.437530][T19159] program syz.6.5132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 514.533901][T19159] netlink: 'syz.6.5132': attribute type 10 has an invalid length. [ 514.817550][T19159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.987408][T19159] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 522.795483][T19257] openvswitch: netlink: Message has 5380 unknown bytes. [ 522.832013][T19257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.101023][ T30] audit: type=1800 audit(1759525641.923:1088): pid=19276 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.5171" name="/" dev="9p" ino=2 res=0 errno=0 [ 525.424113][T19297] netlink: 'syz.1.5178': attribute type 1 has an invalid length. [ 525.457628][T19297] bond2: entered promiscuous mode [ 525.465995][T19297] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.570866][T19326] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5183'. syzkaller syzkaller login: [ 528.349519][T19363] netlink: 'syz.7.5197': attribute type 1 has an invalid length. [ 528.963302][T19373] netlink: 'syz.3.5201': attribute type 10 has an invalid length. [ 530.140038][T19402] netlink: 'syz.8.5210': attribute type 39 has an invalid length. [ 531.831605][ T5950] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 532.511088][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 532.528236][ T5950] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.538608][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 532.557646][T19429] veth0: entered promiscuous mode [ 532.563439][T19428] veth0: left promiscuous mode [ 532.840804][ T5950] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 532.868527][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.026688][ T5950] usb 4-1: config 0 descriptor?? [ 533.060978][ T5950] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 537.121900][T19488] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5235'. [ 537.232546][ T5932] usb 4-1: USB disconnect, device number 50 [ 537.947280][T19500] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5238'. [ 538.078696][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 538.651015][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 538.663602][ T24] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 538.675811][ T24] usb 7-1: config 0 has no interface number 0 [ 538.686627][ T24] usb 7-1: config 0 interface 184 has no altsetting 0 [ 538.820547][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 538.829771][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.837812][ T24] usb 7-1: Product: syz [ 539.316325][ T24] usb 7-1: Manufacturer: syz [ 539.320998][ T24] usb 7-1: SerialNumber: syz [ 539.327630][ T24] usb 7-1: config 0 descriptor?? [ 539.335312][ T24] smsc75xx v1.0.0 [ 540.174874][T19528] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 540.338540][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 540.367061][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 540.566405][T19537] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5248'. [ 540.619619][T19538] Invalid source name [ 540.623659][T19538] UBIFS error (pid: 19538): cannot open "./file0", error -22 [ 541.176242][T19541] netlink: 'syz.7.5250': attribute type 10 has an invalid length. [ 541.221852][T19541] team0: Port device geneve1 added [ 541.246832][T19541] netlink: 'syz.7.5250': attribute type 17 has an invalid length. [ 541.254806][T19541] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5250'. [ 541.323222][T19545] binder: BINDER_SET_CONTEXT_MGR already set [ 541.346553][T19545] binder: 19544:19545 ioctl 4018620d 200000000040 returned -16 [ 542.709167][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71 [ 542.734748][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71 [ 542.826106][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 542.836046][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 542.889843][ T24] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 543.312639][ T24] usb 7-1: USB disconnect, device number 20 [ 543.346800][T19568] syz_tun: entered allmulticast mode [ 543.352963][T19568] netlink: 60 bytes leftover after parsing attributes in process `syz.8.5258'. [ 543.363634][T19567] syz_tun: left allmulticast mode [ 543.693569][T19577] bond0: (slave batadv0): Releasing backup interface [ 543.822982][T19577] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 544.292602][T19581] team0: Mode changed to "loadbalance" [ 544.352735][T19577] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5262'. [ 545.340715][T19600] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 545.665681][T19607] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5271'. [ 545.866590][T19609] pimreg: entered allmulticast mode [ 545.899994][ T30] audit: type=1326 audit(1759525663.564:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19608 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab5d8eec9 code=0x7ffc0000 [ 545.994555][ T30] audit: type=1326 audit(1759525663.564:1090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19608 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab5d8eec9 code=0x7ffc0000 [ 546.026387][ T30] audit: type=1326 audit(1759525663.564:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19608 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ab5d8eec9 code=0x7ffc0000 [ 546.051143][ T30] audit: type=1326 audit(1759525663.564:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19608 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab5d8eec9 code=0x7ffc0000 [ 546.163397][ T30] audit: type=1326 audit(1759525663.564:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19608 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab5d8eec9 code=0x7ffc0000 [ 546.234992][ T30] audit: type=1326 audit(1759525663.574:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19608 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3ab5d8eec9 code=0x7ffc0000 [ 546.272465][ T30] audit: type=1326 audit(1759525663.574:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19608 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab5d8eec9 code=0x7ffc0000 [ 546.305908][ T30] audit: type=1326 audit(1759525663.574:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19608 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab5d8eec9 code=0x7ffc0000 [ 546.329919][ T30] audit: type=1326 audit(1759525663.704:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19608 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3ab5d8eec9 code=0x7ffc0000 [ 546.998366][ T30] audit: type=1326 audit(1759525663.704:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19608 comm="syz.6.5272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab5d8eec9 code=0x7ffc0000 [ 547.073402][T19608] pimreg: left allmulticast mode [ 557.218457][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 557.218474][ T30] audit: type=1400 audit(1759525675.069:1117): avc: denied { write } for pid=19749 comm="syz.3.5312" path="socket:[79342]" dev="sockfs" ino=79342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 560.934531][ T30] audit: type=1400 audit(1759525678.791:1118): avc: denied { bind } for pid=19797 comm="syz.3.5325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 562.735328][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.741709][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.015589][ T5889] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 563.255491][ T5889] usb 9-1: Using ep0 maxpacket: 32 [ 563.265322][ T5889] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 563.504340][ T5889] usb 9-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 563.865589][ T5889] usb 9-1: config 0 has no interface number 0 [ 563.986374][ T5889] usb 9-1: config 0 interface 133 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 1024 [ 564.137079][ T5889] usb 9-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 564.167526][ T5889] usb 9-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 564.218686][ T5889] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 564.230237][ T5889] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.255102][ T5889] usb 9-1: Product: syz [ 564.259325][ T5889] usb 9-1: Manufacturer: syz [ 564.259335][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 564.259501][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 564.263909][ T5889] usb 9-1: SerialNumber: syz [ 564.265832][ T5889] usb 9-1: config 0 descriptor?? [ 564.306557][T19818] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 564.393566][T19835] ceph: No mds server is up or the cluster is laggy [ 564.550573][ T5889] usb 9-1: probing VID:PID(0424:012C) [ 564.570500][ T5889] usb 9-1: vub300 testing BULK OUT EndPoint(0) 0B [ 564.585311][ T5889] usb 9-1: Could not find two sets of bulk-in/out endpoint pairs [ 564.593103][ T5889] vub300 9-1:0.133: probe with driver vub300 failed with error -22 [ 564.609880][ T5889] usb 9-1: USB disconnect, device number 10 [ 564.954735][ T5950] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 565.188199][ T30] audit: type=1400 audit(1759525683.043:1119): avc: denied { create } for pid=19855 comm="syz.8.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 565.243372][T19857] overlayfs: failed to resolve './file1': -2 [ 565.249744][ T5950] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 565.259703][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.299585][ T30] audit: type=1400 audit(1759525683.153:1120): avc: denied { ioctl } for pid=19855 comm="syz.8.5344" path="socket:[79558]" dev="sockfs" ino=79558 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 565.326084][ T5950] usb 4-1: config 0 descriptor?? [ 565.335675][ T5950] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 566.598658][T19868] dvmrp8: entered allmulticast mode [ 566.626930][T19868] dvmrp8: left allmulticast mode [ 567.186858][ T30] audit: type=1326 audit(1759525685.044:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19877 comm="syz.8.5353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f18d398eec9 code=0x0 [ 567.782497][ T5950] gspca_stv06xx: HDCS-1020 sensor detected [ 568.093694][ T5950] STV06xx 4-1:0.0: probe with driver STV06xx failed with error -71 [ 568.127086][ T5950] usb 4-1: USB disconnect, device number 51 [ 568.485731][T19907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5360'. [ 569.052543][ T30] audit: type=1400 audit(1759525686.905:1122): avc: denied { ioctl } for pid=19912 comm="syz.3.5363" path="socket:[79939]" dev="sockfs" ino=79939 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 570.651065][T19945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.661484][T19945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.820784][T19945] vlan2: left allmulticast mode [ 571.831157][T19945] gretap0: left allmulticast mode [ 571.906672][ T64] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.926953][ T64] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.968267][ T64] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.179505][ T64] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.540041][ T30] audit: type=1400 audit(1759525690.237:1123): avc: denied { ioctl } for pid=19962 comm="syz.1.5375" path="socket:[80001]" dev="sockfs" ino=80001 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 576.216560][T19998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5384'. [ 576.263868][T19998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.908044][T19998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 576.928644][T19998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.266519][T20005] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 577.275793][T20005] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 578.427926][ T30] audit: type=1400 audit(1759525696.100:1124): avc: denied { append } for pid=20021 comm="syz.6.5392" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 578.817897][T20031] Invalid option length (1032005) for dns_resolver key [ 580.039362][ T5950] libceph: connect (1)[c::]:6789 error -101 [ 580.333848][ T5950] libceph: mon0 (1)[c::]:6789 connect error [ 580.340546][T20044] ceph: No mds server is up or the cluster is laggy [ 580.869681][T20068] binder: BINDER_SET_CONTEXT_MGR already set [ 581.394510][T20068] binder: 20067:20068 ioctl 4018620d 200000004a80 returned -16 [ 585.177012][T20115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5416'. [ 585.491166][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5416'. [ 586.095320][T20134] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 586.852618][T20141] 9pnet_fd: Insufficient options for proto=fd [ 590.191247][T20184] wg1: entered promiscuous mode [ 590.196871][T20184] wg1: entered allmulticast mode [ 593.710532][T20220] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5445'. [ 594.906985][ T5950] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 595.125907][ T30] audit: type=1804 audit(1759525712.988:1125): pid=20234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.5452" name="bus" dev="ramfs" ino=81162 res=1 errno=0 [ 595.422584][ T30] audit: type=1804 audit(1759525712.988:1126): pid=20234 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.1.5452" name="bus" dev="ramfs" ino=81162 res=1 errno=0 [ 595.482590][ T5950] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 595.523255][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.542753][ T5950] usb 7-1: config 0 descriptor?? [ 595.573440][ T5950] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 596.421848][ T30] audit: type=1400 audit(1759525713.849:1127): avc: denied { checkpoint_restore } for pid=20243 comm="syz.8.5454" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 596.657303][T20251] overlayfs: missing 'lowerdir' [ 597.401516][T20249] tipc: Enabled bearer , priority 0 [ 597.511447][T20265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5461'. [ 597.956939][ T5889] usb 7-1: USB disconnect, device number 21 [ 599.720747][T20294] trusted_key: encrypted_key: hex blob is missing [ 600.323277][T20288] syz.8.5466 (20288): drop_caches: 2 [ 601.277009][T20325] ptrace attach of "./syz-executor exec"[5818] was attempted by " [ 602.229369][ T5950] IPVS: starting estimator thread 0... [ 602.320417][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.495895][T20336] IPVS: using max 44 ests per chain, 105600 per kthread [ 602.555436][T20351] netlink: 'syz.1.5487': attribute type 9 has an invalid length. [ 603.880408][T17762] Bluetooth: hci5: command 0x0406 tx timeout [ 604.561418][ T30] audit: type=1400 audit(1759525722.433:1128): avc: denied { read } for pid=20384 comm="syz.6.5498" lport=40207 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 605.790129][T20413] overlayfs: failed to clone upperpath [ 606.420331][ T5950] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 606.573772][ T5950] usb 4-1: Using ep0 maxpacket: 32 [ 606.580378][ T5950] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 606.588778][ T5950] usb 4-1: config 0 has no interface number 0 [ 606.723474][ T5950] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 606.749910][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.768193][ T5950] usb 4-1: Product: syz [ 606.772449][ T5950] usb 4-1: Manufacturer: syz [ 606.777184][ T5950] usb 4-1: SerialNumber: syz [ 606.784021][ T5950] usb 4-1: config 0 descriptor?? [ 607.070808][ T5950] smsc95xx v2.0.0 [ 607.562772][ T5950] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 607.576152][ T5950] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 609.595286][ T5950] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 609.922387][ T5950] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 609.964545][ T5950] usb 4-1: USB disconnect, device number 52 [ 612.496479][T20499] netlink: 'syz.3.5529': attribute type 12 has an invalid length. [ 613.960191][T20527] tipc: Started in network mode [ 613.965091][T20527] tipc: Node identity 8abb878e814c, cluster identity 4711 [ 613.972724][T20527] tipc: Enabled bearer , priority 0 [ 614.742818][T20527] syzkaller0: entered promiscuous mode [ 614.748748][T20527] syzkaller0: entered allmulticast mode [ 614.797869][T20527] tipc: Resetting bearer [ 614.816126][T20525] tipc: Resetting bearer [ 614.981733][T20525] tipc: Disabling bearer [ 615.745657][T20557] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 616.998769][ T5889] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 617.168484][ T5889] usb 4-1: Using ep0 maxpacket: 8 [ 617.269304][ T5889] usb 4-1: unable to get BOS descriptor or descriptor too short [ 617.292293][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 617.308285][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 617.780619][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 617.791545][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 617.802310][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 617.813119][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 617.824401][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 617.838673][ T5889] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 617.848132][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.856196][ T5889] usb 4-1: Product: syz [ 617.860466][ T5889] usb 4-1: Manufacturer: syz [ 617.866149][ T5889] usb 4-1: SerialNumber: syz [ 617.985748][ T5889] usb 4-1: config 0 descriptor?? [ 617.998149][T20563] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 618.489511][ T5889] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.610430][ T5889] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 619.629303][ T5889] usb 4-1: USB disconnect, device number 53 [ 620.873246][T20607] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 621.274842][ T30] audit: type=1400 audit(1759525739.151:1129): avc: denied { execute_no_trans } for pid=20605 comm="syz.6.5562" path="/file1" dev="ramfs" ino=81969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 622.349463][ T30] audit: type=1400 audit(1759525740.222:1130): avc: denied { create } for pid=20614 comm="syz.3.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 622.388906][ T30] audit: type=1400 audit(1759525740.232:1131): avc: denied { listen } for pid=20614 comm="syz.3.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 622.416015][ T30] audit: type=1400 audit(1759525740.232:1132): avc: denied { accept } for pid=20614 comm="syz.3.5565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 623.529734][T20645] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.5575'. [ 623.585698][T20645] netlink: zone id is out of range [ 623.901686][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.103144][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.114532][T20645] netlink: zone id is out of range [ 624.130230][T20645] netlink: zone id is out of range [ 624.158161][T20645] netlink: get zone limit has 8 unknown bytes [ 625.646276][ T30] audit: type=1800 audit(1759525743.514:1133): pid=20670 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5581" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 626.327494][T20675] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 626.451514][T20675] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20001 [ 626.481731][T20675] netlink: 'syz.7.5583': attribute type 1 has an invalid length. [ 627.368471][T20689] tmpfs: Unexpected value for 'inode32' [ 627.478899][T20691] netlink: 'syz.1.5589': attribute type 1 has an invalid length. [ 627.612432][T20694] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5588'. [ 627.640843][T20698] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 627.765955][ T30] audit: type=1400 audit(1759525745.595:1134): avc: denied { read } for pid=20695 comm="syz.3.5590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 628.258557][T20700] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 628.326121][T20705] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 628.827845][T20700] bond3 (unregistering): Released all slaves [ 629.303707][ T845] kernel write not supported for file [eventfd] (pid: 845 comm: kworker/0:2) [ 630.428035][T20724] usb usb7: usbfs: process 20724 (syz.3.5597) did not claim interface 0 before use [ 632.734426][T20749] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 633.692621][T20759] ptrace attach of "./syz-executor exec"[14991] was attempted by ""[20759] [ 633.978544][T20756] warn_alloc: 1 callbacks suppressed [ 633.978563][T20756] syz.6.5607: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0-1 [ 634.003820][T20756] CPU: 1 UID: 0 PID: 20756 Comm: syz.6.5607 Not tainted syzkaller #0 PREEMPT(full) [ 634.003849][T20756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 634.003861][T20756] Call Trace: [ 634.003868][T20756] [ 634.003875][T20756] dump_stack_lvl+0x16c/0x1f0 [ 634.003911][T20756] warn_alloc+0x248/0x3a0 [ 634.003947][T20756] ? __pfx_warn_alloc+0x10/0x10 [ 634.003990][T20756] ? hash_ipmark_create+0x561/0x13c0 [ 634.004019][T20756] ? __vmalloc_node_noprof+0xad/0xf0 [ 634.004049][T20756] __vmalloc_node_range_noprof+0xfe2/0x1480 [ 634.004073][T20756] ? hash_ipmark_create+0x4e3/0x13c0 [ 634.004104][T20756] ? hash_ipmark_create+0x561/0x13c0 [ 634.004134][T20756] ? lockdep_hardirqs_on+0x7c/0x110 [ 634.004159][T20756] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 634.004189][T20756] ? ___kmalloc_large_node+0xed/0x160 [ 634.004218][T20756] __kvmalloc_node_noprof+0x431/0x9c0 [ 634.004239][T20756] ? hash_ipmark_create+0x561/0x13c0 [ 634.004266][T20756] ? hash_ipmark_create+0x561/0x13c0 [ 634.004297][T20756] ? hash_ipmark_create+0x561/0x13c0 [ 634.004321][T20756] hash_ipmark_create+0x561/0x13c0 [ 634.004350][T20756] ? __pfx_hash_ipmark_create+0x10/0x10 [ 634.004377][T20756] ip_set_create+0x7e4/0x14d0 [ 634.004414][T20756] ? __pfx_ip_set_create+0x10/0x10 [ 634.004460][T20756] ? find_held_lock+0x2b/0x80 [ 634.004497][T20756] nfnetlink_rcv_msg+0x9fc/0x1200 [ 634.004531][T20756] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 634.004558][T20756] ? __lock_acquire+0x62e/0x1ce0 [ 634.004608][T20756] ? avc_has_perm_noaudit+0x149/0x3b0 [ 634.004638][T20756] netlink_rcv_skb+0x158/0x420 [ 634.004669][T20756] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 634.004694][T20756] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.004736][T20756] ? ns_capable+0xd7/0x110 [ 634.004763][T20756] nfnetlink_rcv+0x1b3/0x430 [ 634.004785][T20756] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 634.004814][T20756] netlink_unicast+0x5a7/0x870 [ 634.004846][T20756] ? __pfx_netlink_unicast+0x10/0x10 [ 634.004874][T20756] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 634.004911][T20756] netlink_sendmsg+0x8c8/0xdd0 [ 634.004944][T20756] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.004985][T20756] ____sys_sendmsg+0xa98/0xc70 [ 634.005007][T20756] ? copy_msghdr_from_user+0x10a/0x160 [ 634.005033][T20756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.005066][T20756] ___sys_sendmsg+0x134/0x1d0 [ 634.005095][T20756] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.005156][T20756] __sys_sendmsg+0x16d/0x220 [ 634.005183][T20756] ? __pfx___sys_sendmsg+0x10/0x10 [ 634.005208][T20756] ? __x64_sys_futex+0x1e0/0x4c0 [ 634.005246][T20756] do_syscall_64+0xcd/0x4e0 [ 634.005275][T20756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.005294][T20756] RIP: 0033:0x7f3ab5d8eec9 [ 634.005310][T20756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.005329][T20756] RSP: 002b:00007f3ab6cb8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.005348][T20756] RAX: ffffffffffffffda RBX: 00007f3ab5fe6180 RCX: 00007f3ab5d8eec9 [ 634.005360][T20756] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 634.005371][T20756] RBP: 00007f3ab5e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 634.005382][T20756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.005393][T20756] R13: 00007f3ab5fe6218 R14: 00007f3ab5fe6180 R15: 00007ffd17b03f58 [ 634.005420][T20756] [ 634.005432][T20756] Mem-Info: [ 634.347745][T20756] active_anon:34900 inactive_anon:0 isolated_anon:0 [ 634.347745][T20756] active_file:20980 inactive_file:41174 isolated_file:0 [ 634.347745][T20756] unevictable:20743 dirty:213 writeback:0 [ 634.347745][T20756] slab_reclaimable:13090 slab_unreclaimable:112567 [ 634.347745][T20756] mapped:35240 shmem:31779 pagetables:1447 [ 634.347745][T20756] sec_pagetables:0 bounce:0 [ 634.347745][T20756] kernel_misc_reclaimable:0 [ 634.347745][T20756] free:1220349 free_pcp:23289 free_cma:0 [ 634.393644][T20756] Node 0 active_anon:137300kB inactive_anon:0kB active_file:83860kB inactive_file:164496kB unevictable:81436kB isolated(anon):0kB isolated(file):0kB mapped:140900kB dirty:852kB writeback:0kB shmem:123280kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12012kB pagetables:5664kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 634.426086][T20756] Node 1 active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 634.459874][T20756] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.493729][T20756] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 634.499500][T20756] Node 0 DMA32 free:983344kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB free_highatomic:0KB active_anon:141900kB inactive_anon:0kB active_file:83860kB inactive_file:164496kB unevictable:81436kB writepending:852kB zspages:0kB present:3129332kB managed:2548068kB mlocked:0kB bounce:0kB free_pcp:57800kB local_pcp:40532kB free_cma:0kB [ 634.533733][T20756] lowmem_reserve[]: 0 0 0 0 0 [ 634.538450][T20756] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 634.567771][T20756] lowmem_reserve[]: 0 0 0 0 0 [ 634.572582][T20756] Node 1 Normal free:3882516kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:60kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32676kB local_pcp:5988kB free_cma:0kB [ 634.605055][T20756] lowmem_reserve[]: 0 0 0 0 0 [ 634.609889][T20756] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 634.624032][T20756] Node 0 DMA32: 36*4kB (UME) 355*8kB (UE) 458*16kB (U) 888*32kB (UME) 449*64kB (UME) 130*128kB (UME) 140*256kB (UME) 97*512kB (UME) 33*1024kB (UME) 5*2048kB (UME) 186*4096kB (UM) = 975496kB [ 634.642893][T20756] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 634.654418][T20756] Node 1 Normal: 5*4kB (UME) 10*8kB (UME) 33*16kB (UME) 255*32kB (UME) 91*64kB (UE) 24*128kB (UME) 7*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 941*4096kB (M) = 3882516kB [ 634.672555][T20756] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.682115][T20756] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 634.691406][T20756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 634.700947][T20756] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 634.710242][T20756] 113107 total pagecache pages [ 634.714984][T20756] 0 pages in swap cache [ 634.719115][T20756] Free swap = 124996kB [ 634.723335][T20756] Total swap = 124996kB [ 634.727472][T20756] 2097051 pages RAM [ 634.731295][T20756] 0 pages HighMem/MovableOnly [ 634.735950][T20756] 428392 pages reserved [ 634.740102][T20756] 0 pages cma reserved [ 739.387245][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 739.394255][ C0] rcu: (detected by 0, t=10502 jiffies, g=88229, q=229 ncpus=2) [ 739.401971][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10487 (4295011128-4295000641), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 739.415334][ C0] rcu: rcu_preempt kthread starved for 10487 jiffies! g88229 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 739.426527][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 739.436477][ C0] rcu: RCU grace-period kthread stack dump: [ 739.442343][ C0] task:rcu_preempt state:R running task stack:27816 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 739.455823][ C0] Call Trace: [ 739.459087][ C0] [ 739.462009][ C0] __schedule+0x1190/0x5de0 [ 739.466520][ C0] ? __lock_acquire+0x62e/0x1ce0 [ 739.471450][ C0] ? __pfx___schedule+0x10/0x10 [ 739.476296][ C0] ? find_held_lock+0x2b/0x80 [ 739.480971][ C0] ? schedule+0x2d7/0x3a0 [ 739.485297][ C0] schedule+0xe7/0x3a0 [ 739.489357][ C0] schedule_timeout+0x123/0x290 [ 739.494198][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 739.499559][ C0] ? __pfx_process_timeout+0x10/0x10 [ 739.504843][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 739.510640][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 739.516091][ C0] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 739.520846][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 739.526118][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.531308][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 739.536231][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 739.541077][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 739.546881][ C0] rcu_gp_kthread+0x26d/0x380 [ 739.551546][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 739.556732][ C0] ? rcu_is_watching+0x12/0xc0 [ 739.561493][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 739.566701][ C0] ? __kthread_parkme+0x19e/0x250 [ 739.571714][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 739.576898][ C0] kthread+0x3c2/0x780 [ 739.580957][ C0] ? __pfx_kthread+0x10/0x10 [ 739.585535][ C0] ? rcu_is_watching+0x12/0xc0 [ 739.590290][ C0] ? __pfx_kthread+0x10/0x10 [ 739.594867][ C0] ret_from_fork+0x56a/0x730 [ 739.599445][ C0] ? __pfx_kthread+0x10/0x10 [ 739.604026][ C0] ret_from_fork_asm+0x1a/0x30 [ 739.608792][ C0] [ 739.611797][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 739.618100][ C0] Sending NMI from CPU 0 to CPUs 1: [ 739.623286][ C1] NMI backtrace for cpu 1 [ 739.623298][ C1] CPU: 1 UID: 0 PID: 20760 Comm: syz.7.5608 Not tainted syzkaller #0 PREEMPT(full) [ 739.623313][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 739.623321][ C1] RIP: 0010:__hrtimer_run_queues+0x80a/0xad0 [ 739.623341][ C1] Code: 84 49 fd ff ff e8 26 34 13 00 e8 21 e5 83 ff e9 3f fd ff ff e8 17 34 13 00 e8 52 4d f8 ff 31 ff 41 89 c5 89 c6 e8 e6 2e 13 00 <45> 84 ed 0f 85 9c fa ff ff e8 f8 33 13 00 44 0f b6 2d d9 a1 9f 0e [ 739.623354][ C1] RSP: 0018:ffffc90000a08e40 EFLAGS: 00000046 [ 739.623365][ C1] RAX: 0000000000010001 RBX: ffff8880b8727d80 RCX: ffffffff81a801aa [ 739.623374][ C1] RDX: ffff88802d582480 RSI: 0000000000000000 RDI: 0000000000000001 [ 739.623382][ C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 739.623389][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880b8727c80 [ 739.623397][ C1] R13: 0000000000000001 R14: ffff88806d7ec340 R15: 0000000000000001 [ 739.623405][ C1] FS: 00007f235de3a6c0(0000) GS:ffff888124f85000(0000) knlGS:0000000000000000 [ 739.623419][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.623428][ C1] CR2: 0000000000000000 CR3: 000000007b89b000 CR4: 00000000003526f0 [ 739.623436][ C1] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 739.623444][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 739.623452][ C1] Call Trace: [ 739.623457][ C1] [ 739.623465][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 739.623482][ C1] ? read_tsc+0x9/0x20 [ 739.623503][ C1] hrtimer_interrupt+0x397/0x8e0 [ 739.623525][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 739.623542][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 739.623561][ C1] [ 739.623565][ C1] [ 739.623570][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 739.623585][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 739.623602][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 da 48 f6 48 89 df e8 3e 2e 49 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 85 39 39 f6 65 8b 05 9e 2d 2b 08 85 c0 74 16 5b [ 739.623615][ C1] RSP: 0018:ffffc9000c5c7858 EFLAGS: 00000246 [ 739.623626][ C1] RAX: 0000000000000006 RBX: ffff888035170f80 RCX: 0000000000000006 [ 739.623634][ C1] RDX: 0000000000000000 RSI: ffffffff8d82091b RDI: ffffffff8bd010c0 [ 739.623642][ C1] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000001 [ 739.623650][ C1] R10: ffffffff905f3497 R11: 0000000000000001 R12: ffff888035170e00 [ 739.623658][ C1] R13: ffff888035170fc0 R14: ffff888035170968 R15: ffff888059955000 [ 739.623674][ C1] __unix_dgram_recvmsg+0x315/0xc30 [ 739.623690][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 739.623708][ C1] ? iovec_from_user+0xbb/0x140 [ 739.623723][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 739.623736][ C1] ____sys_recvmsg+0x5f6/0x6b0 [ 739.623753][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 739.623770][ C1] ? kfree+0x252/0x6d0 [ 739.623791][ C1] ___sys_recvmsg+0x114/0x1a0 [ 739.623810][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 739.623833][ C1] ? __pfx___might_resched+0x10/0x10 [ 739.623853][ C1] do_recvmmsg+0x2fe/0x750 [ 739.623877][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 739.623896][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 739.623921][ C1] ? find_held_lock+0x2b/0x80 [ 739.623940][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 739.623959][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 739.623981][ C1] do_syscall_64+0xcd/0x4e0 [ 739.624000][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.624013][ C1] RIP: 0033:0x7f235cf8eec9 [ 739.624025][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 739.624037][ C1] RSP: 002b:00007f235de3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 739.624049][ C1] RAX: ffffffffffffffda RBX: 00007f235d1e6090 RCX: 00007f235cf8eec9 [ 739.624059][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 739.624067][ C1] RBP: 00007f235d011f91 R08: 0000000000000000 R09: 0000000000000000 [ 739.624076][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 739.624084][ C1] R13: 00007f235d1e6128 R14: 00007f235d1e6090 R15: 00007ffd5d86d458 [ 739.624097][ C1]