last executing test programs: 1m33.094094573s ago: executing program 3 (id=150): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2713, &(0x7f0000000100)=""/10, &(0x7f0000000000)=0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}, 0x1, 0x0, 0x300000000000000, 0x4008880}, 0x800) 1m31.652676739s ago: executing program 3 (id=162): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = getpid() process_vm_writev(r1, &(0x7f0000001800)=[{&(0x7f00000001c0)=""/62, 0x3e}, {0x0}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/133, 0x85}, {&(0x7f0000000580)=""/168, 0xa8}, {&(0x7f0000000640)=""/159, 0x9f}, {&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/75, 0x4b}], 0x9, &(0x7f0000001940)=[{&(0x7f0000001980)=""/36, 0x24}, {0x0}], 0x2, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$midi(0x6, 0xff, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x944, 0x204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x1, 0x1, 0x0, 0x170, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x8, 0x1, 0x3, 0x20, 0x9, [@ms_header={0x7, 0x24, 0x1, 0xb, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x5, 0x8}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x87, 0xff}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x62, 0x7}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x5, 0x4, 0x0, {0x13, 0x25, 0x1, 0xf, "bf763b2c68a248e62947f3cf087673"}}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x30, 0x9, 0x82, {0x7, 0x25, 0x1, 0x3, "3b44a1"}}}, {{0x9, 0x5, 0xa, 0x10, 0x3bf, 0x5, 0xd, 0x0, {0x11, 0x25, 0x1, 0xd, "dd4a3a3cbc48634a831886f650"}}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x5, 0xf, 0x14, {0xe, 0x25, 0x1, 0xa, "d8c50eb400fb45b0f752"}}}, {{0x9, 0x5, 0x7, 0x0, 0x220, 0xfb, 0xa, 0x1, {0xc, 0x25, 0x1, 0x8, "6a661c6fd92be004"}}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x7, 0x3, 0x4, {0x11, 0x25, 0x1, 0xd, "5e2e1d5da8a4f82c4ca84e1fc4"}}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xff, 0x14, 0x5e, {0x14, 0x25, 0x1, 0x10, "73a23e6eb7e7f8265d72745ab76d192a"}}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x1, 0x9, 0x7, {0x10, 0x25, 0x1, 0xc, "6c8872088a74a99000a40b5f"}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x9, 0xef, 0xc0, 0x20, 0x66}, 0x1a, &(0x7f0000000200)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x8, 0x8, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x2, 0x2, 0x81, 0xe}]}}) 1m28.519246458s ago: executing program 3 (id=172): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x0) socket(0x25, 0x800, 0x7) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000040)={0x1, @output={0x0, 0x1, {0x6, 0x1}, 0x9, 0x20}}) 1m28.133955445s ago: executing program 3 (id=175): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r0, 0x4, 0x4000) fadvise64(r0, 0x9, 0x2, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a52bfb0821048f79548601020301090237000100000000090400000002fe1700052406"], 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYBLOB="d6cc80dceaf2063131b5cd38f0b3b12af7990dcf26219755f31ac75e3674f7a9b95b79d8b970f6158b4501984b27d6c0bc7b69954596e5a21459ea6b2a810d7a4cf8e6be4cbe7c5b0d1691cf2052ed5773bb5f7e3ee1c16c9f3ae328ed93a133099a8368924bf4343d440daf1b72cb162ee934773fc22a4eb5647eeb81a725e27239e5615254db97782bcbd49f649341279d01a23325307aa301f77c592d83c2543bb7775b3d5df8ec18299015"], 0x0, 0x26, 0x0, 0x0, 0x40000000}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@broadcast, @local, @void, {@arp={0x806, @generic={0x200, 0x890d, 0x6, 0x4, 0x2, @remote, "5b5eb95c", @broadcast, "47708809"}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xd}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) 1m25.830027812s ago: executing program 3 (id=185): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000001640)="7463044da55cc1dbedd5f32238056465c9069ce16a97b8c70d385b40fb10a9e2a6c703389efd79a11212c294b69e00877ce42563ecb1cb4a7f68cb05bd98814558f085d9b49ea4081fede90cb8d42a4602a54e633971fe2b14fac36482b0f979335185855a50198f4868eedc10ced634ec4f2ceb3da67c48dc2ebcec44043de507b7c0eb51236bbbb113af627e57224bf11928631071defba4c7e75bc6c9cc18970e7220e68ba96dede54d43b5878e85f27eb0f44a6b5f21633ce31eedf31b40b770e43dfb8307b133b2f414a8eccb57a782f94fbf76691769e0f8add0c62292e387d820053601ae6acbc1258b02fb49b70fe967230e3713ce4ca608c6f16044a3d709fdd229a3161af141743755f3e4b06548848bc02b369bc68e6fdd4da83321996c0385f8665e27af2d46e2dab24889a08244d623fe8c0d8a8de54713f9b347738f9a68d945690fac9b0bfd20bbf9932365a39e5146b9f850a53ef4f57144cc23f00d0f9bf0b95ce84e21549255bc26716c5d2e1b814f2e4d507dee6f183cd4b144600a5ef9d60e1a59d479a0e77b7d51cea06f8e64675896eee2fc7c61717cdafae069f6b1839f2076b5313011cb22afbfa1810e118f5768e8c50837513c24bb1c2332244effd4a884a181535ede8a9c7b434f15b621974cc7f1732ad11e82f1ad5b0d949802493a8094776bea5ae3732ad9e947f527dd89be871bb35ad46925eff36b0f00463542d75aa0ff64234fc0e490d7a646290ad15328ae948b5886c23a594d5fe46b779bbc4c35d912e06fd74cdf60706df0a3cc5b69ba0b6b7b934a0a4d617d700887aeea4131919692f1bb26f18029eeaff86a765828c273305d97700aff602d338feb72de43595b3b4a69055aa5c762fdf2b8294a32fd74fc842aaa0a5ba7bc9461f1e2071beef69421f9153011d6a9783fda20176dfbe6409fe2f71e3f1396835542a2a7b627c36416cb3d33526722c57e6284f9662aaa441ca73419f29a9e5af84545f993de6c3d8b51a659c9af6d2a2e9094c8a5bf3965964b87cc66bad0673546af46489575c338aa55bdcdec903dca3195465e438481685694106592b4e30c2bcd730ea9394d521a1a3a5eca3163821860c44ebc401b9334fde013df5879dcffe6fb157aeb33db8011f9cfb6764d4b6f488c12576bf66848f85216621fd7bc65f1e76bb555228b7db22d5c99903e542eb7b03391d5396afbb9f91b244008a139dfaeae1ca72495a51cfbcb2a96c8fa1e5a502bec8c7cd5b66d8b520b2589ad1fff0c25e446fe9d076e802e5a34ca1fefd62a1a14a23e08b1937d095640b824dae51e3729f47963d1a6c9d485cd8fd4fb81979d286b908806d94dce42217faecd84d88cbce7d1b68905633474eacda849c33369ab1b40eed0b1b0b8c2857c4587650d698c3ab6b765ecf75aca2229fe2328acc3aa06f29d328abfb47e6f2f5d41e7c6776f0fa73028f8161f76220b4cf5f0d5ab5fe65d086e3d4c5eadca050c06b9e218ac9bcbb70e774cf5c900efc6a4f05926e7996d2488db1f8e68b9c088cb04bff8fdb14f6a9221e2990c89fc607aec0d9bc68abe477a701d3d5cdfc6802c8957b097b525f94e8b90a0614e4bdaf4628e423a752ee6cfff6a5aaf950d63b76b90293ecdfc542296cdfbbffcc9550988b9179060d949a755d0fe9e62bc79093107bbb1a793fa2ea314a6f80638239a330ee0ab595210d3dca52902b95d7a46d9c5f0f863b6f98d617e14313f1338d817b6d601b86bfb6093610bf1094cbe8b50de21603f3c390300c286613ac456669ed2084fcca7b9e2e82c0bf14e776ca0cbdfd3860e1dbedb66dc27d644ee91e13b4df021b42c4f6541ebb1bed01a5191ef83b4179c72afaec807fcccd7f896a0cf5fa1511231173edbde07c631353676ea39ee9caad1177a45a80b1ea584f11d1162037d7e1aa6fea386754eef96272eeefbb7d413dcd962b4cfe86ec061dee1f1d714f1b24859f62f9e70f9db2a4ac0f078092d6d50aef8c9ce20d0fde07dac447ee8953435444d74ac301a97b82e47f0f46f6cb3eb57fbd5b2698fdcb7ea30ba649991ea118fb328be38e601a7720349e12b87cfeff82dcea7cfbfcab47cd59605b17d74396d6618b48a3abaed3237e43c9a1dff55736ae1c2bb3fbc283b5a546bf3c39e47edcd800a19c61a5f9f3c84d6fbfdc82f785fabbdb2d8802273ed3768073f1696249728351e4856f3bb15bac709d7f26bb554c8765f9b8b796314c4582ecf578b42605f80ca82481d80fbae38ecdc08ca97033636a929ef2f595f22ade4f58f4804a239fa277b4d02c5d8e488d21224af429e15c2fd97593b8c1703995a9d321c4b16af137cb274cd6798c30984afbc6957d143246871e9a1cf3b1a175fa29b91d989185737da9085ab816b3d7bb449791dec02b39ae59fc7652f0db9b917f8331b558cbbf92bfa66c719120f48555de473886bfb4eb7e4601b44c8208731db9cd5928b1ba0b6b6bef797295700cd2e6be766c0437e79c95b04341474870310f7bbf0fbcdfaf749fdc83adf601efb36326c9c711c9b57987690e1270320ff3efad24b65825550d9035505d4bf6b36fb694cb327606bf6102485153d665e5b8ecbd3cc91c8c143eecc49b6d46869e74904b4f3e6b96e0c918f4323e6e105479f831eceb787b883c2ac7f2f4127f7a15cd0253ef634f2124d246b7e60d16b69dfe40025d4aa873e7315848ac680ceb2abcd7b9bb8b1f70fe1cb131eabdf53aa0a6d36f8645b97e1d3a833af4aeb9aa71f17b97509b30973b20b1e322375dc5e82a3bde46ebafab58b9e6beca45ba84f3e2621160c60cfd5045d1b960281cfa9343ed54b9c5cae9711db90bab4c1fbb27c9c8d4d9bb988f164af88c6b8fa54454adaaf654e5677b4bd16d0b1642f0c403257e8b05f6880e54e45d27ba46f3dd6e666ecd1350207ade74c9e4f1a0d04c7724243b476ed52444806d2fcd4938a20b2d0005164a5d5a563773c3aa077214c8ec6b00f66aec817b759ae0b7213249123deb91fe7aa57b5fa5e0f4e3dadfc64e6db08f5cab450e8fb21583ce11aa81a144900000040000000004da09da9275f25f59fc82fac9cf2f4c8defaea620c4716c092d4c988088352422a93e82d28712a061b6fe440636178d7de695874dac9007f3a6759fe425278544519599fc3df245b8746b781dfa9f82ab32de93bb5e4db562abb71a993eb201b0c2e12b4f59d11cd01ded04b1818eee21fb42225aa9d81b7b6a4ad3d541acaeec7dffd928bdaf1cc46ece0e93b177c2345dd6a1e4604734eac746b59937b4c155ee58aecc49aba5acf58cd84baeb0e02906770a13fe06348d4cecf17a308033f9dfb543960b88b9937c195e31e9e0167ac50ae277b31434ab6acdd61a511147f948e6b900f5ac4907a2a3c8202ef2c8b3f37515dad3a5eb9276d771f052aec50262cfc4d50a38361fc2fedb22c5cadbdfa8a07fc04b62bf8c13191f1f08bbf3d7eb262534a554bcab4788d38949a1295661175ed74c7f549d4d2f79dc3250ef8071f915015379926be319c4c118f76e3d3a5eac509a3c425815cf03ebf52bf7cb479aeb7ed61b157f1e26c68b975b63439b70e665f000a48c5663a682cecc0219169a0bccccab43b2cc058b6b1b2fe15d5ce26a36c1d16cc599cd70726e920eb55daf10d7eaeb0b4a7da9ec7b5e710e939126e852b9564b8d43a2e98d867ac61665a96f8d990a58bb47b1bcbc79ebc45286c53bb7df0956f88580907b88b0655f6a87fab933bff86170d97dcb4d118117fba68ae892bfa16145d46f356e6f50000000000000061b02d4330e93ccada5a4456241f7ca16d9e5bc9644d30be4dfbc0866d027384b361d4c3578fd3eaf79a022949937cdb0828df5908a7e46d48f1c587e56d3304ea9b22e5ee8ff822e4a3be72525ba3fd3e9e874786bf476634e939396a2a81a1b30567e7d54974c384714e11252e9864edb0098d31b41b9d779edbbaff0421432bbb6a75ec0bb8e1c822e536d78a0626b7a9a79dc9a5c49f8bea7b86cd4aefa385bf9a08295c6c027a8a19ba156906f56736868496f26815f925eff74adb5550d66268264fb3e495be155cf7a7c5db6f76d7cd930aade653df6bd309d473349543acdc73d3f6806b03e882837077d927df6f53241400f9af8230c6bfdbfc369f666fa8d89209b5cc8525c144224fb0092e34e82f3eebcc314bfb8436886751703db6fed2678dcebaa135213ff99cab454845f36158f7803ba5c27d5a8cde3388e589856a1d2779fbb482d5e1a9fdae2f271e24d51a1a385935016cadb014ca6bb6be8c7172106e9331368adcee8b7ed0a1b7934383066e4d8c6ea0ab8a047e99ae1e264fbbb0f827b14153c850265a957ea1f919f1f19a4fd9f125104aced5bcb9f3ff0ffea11ef33d1059fdccd4dbf9ae476ac2d89dcbbe1c3af3b220f408203fd2d02a7f0d3012ec4093bc7e3aea63e5a6f6d94313a6e2c3b11350a9a1cd38bd3f1cdddc84ed9ba425755d02ef8b42a9de03b9542c3f4ff39b389ebe109ff4edf95ee49abd166bc0ded990021f288ecfba0e1bd9fb10e3e9959e4bea7161ef74a19e41b1f9b51632dfbbba1db2f53cbdaa50b3f6dca8125ab74f3fb479fdc0f896bf068af39324b04ab4cdd2349b315d55ddcf162a1092bb602a2be4b8d94a9c42d078c10322b1f85de9caa35b5f5e5d6a4e0e11e5f5929e8c268b29528268c67f22daa2305e6954b7a48c50733fdfa5640f23086efd084fb5b7e7442c2e8274d8aaa1fd5e398b1560d793444fb970df9ee28e072086c2b2b062b5a0ca127a81f5cd2a0a3fd2b4f855a51d33c1a70d8727a8199e4291a160fe65c254e2289a6c73d7aaf4e18a45be7eb01771eccd88a2322b2795be4c1080dafdff6328a735e946a8a87ef3b72a2d6e2206e8adb325b38802884006c091f6d998eff908148fc4553fa50d41100a", 0xdb6}], 0x1) r2 = getpid() (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000f1000000000000000000000850000008700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) (async) r8 = syz_open_dev$loop(&(0x7f0000000140), 0xd, 0x6aa502) (async) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') ioctl$LOOP_SET_FD(r8, 0x4c00, r9) (async) sendto$inet(r7, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e22, @multicast1}, 0x3) (async) sendto$inet(r7, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r10 = socket(0x10, 0x803, 0x0) (async) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x3e, &(0x7f0000000340)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x72bd28, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x8084) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r10) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) (async) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) 1m25.056553243s ago: executing program 3 (id=192): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001e0001"], 0x48}, 0x1, 0x0, 0xe000000, 0x4040041}, 0x4000000) 1m24.751015794s ago: executing program 32 (id=192): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001e0001"], 0x48}, 0x1, 0x0, 0xe000000, 0x4040041}, 0x4000000) 23.597919781s ago: executing program 1 (id=457): socket$netlink(0x10, 0x3, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$netlink(0x10, 0x3, 0x15) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x2, 0x6, 0x26, 0x84080, 0xffffffffffffffff}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000380)={r1, &(0x7f0000000140)='*\\\'%,]@#&\x00', 0x20200, &(0x7f00000001c0)={@_ha_fsid={[0x6, 0xf32039e]}, {0x8, 0xa, 0x9, 0x800}}, 0x6, 0x0, &(0x7f0000000300)=0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x0, 0x2002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x7ff}, 0x0) socket$inet(0x2, 0x3, 0x9) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0506020000000000000000000007140000001100010000000000000000000000000abf08bfba86d940a23b5f8f0800b5c2522473ad089eb3d4040fc86fa5760f8692707c6259e5e1fa5dceca1730e4de7a2786974036740b1deb991601c408dcc2e639f6cb8cedec0dfc688e28b5cbbe662b3e3a36de87224299b6955337562eb68ac0a8c3a022aa45fb3d9a50ac3e88e0ece968fba6f0c9"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) 23.247840107s ago: executing program 0 (id=458): unshare(0x64000600) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e20, 0x7bc, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}}}, &(0x7f0000000400)=0x84) r4 = fcntl$dupfd(r1, 0x0, r1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000100)=0xeea, 0x4) write$FUSE_ATTR(r4, &(0x7f0000000280)={0x78, 0xfffffffffffffff5, 0x0, {0x2, 0x3, 0x0, {0x0, 0x6, 0x400000000000000b, 0x0, 0x7ff, 0x2, 0x2, 0xd, 0x5, 0xa000, 0xa40, 0x0, 0x0, 0x3001, 0x2}}}, 0xffffff03) getpeername$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) (async) setsockopt$sock_int(r0, 0x1, 0x27, &(0x7f0000000000)=0x3, 0x4) 23.090012872s ago: executing program 5 (id=460): add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x30841, 0x109) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400480d}, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x100000001, 0x2, 0x3, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x4000000000000000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x4], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, 0x0) setresgid(0x0, 0xee01, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090400206d041cc340000000000109022400010000"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c4000000190001002dbd7000fedbdf2500000004000000000000000000000000e00000010000000000000000000000004e24000000000005020000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000c0000000310000000001f1000000000000000000200000000000000000000000000000002000000000000000000000000000000030000000000000000000000002000000200000000000000000000000000000800000000000000000c000800c7"], 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000087e051e2000000000000109022d00010000800009040000090300010009210400000022280009058103400000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 22.015704089s ago: executing program 0 (id=462): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000500)=[{0x0}], 0x1, 0x890, 0x8) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket(0x28, 0x5, 0x0) (async) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001ec0), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r2}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x230}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r4 = memfd_create(&(0x7f0000000d40)='[\v\xdbX\xae[\x1a\x02\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91\x05||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbduu\xc3\xf8\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDf\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\xa0 \xadA\xe3\xee\x8f$\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%iC}n\rSF\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe28\xc0\xf4\xee\x19\xce\xedX\x8d\rmq\t\xb5$\xef\xa6N\x9e\x0f@\xdfo\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82~\xb7\xb1<\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xb69\xd3\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb92Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83D\x99\xf3j\xaf\xd0Fd\x81\xbe\xbf\by\x7f\xd8X?\n\xf8P&!\x9d0F\x8dp\xf9:?1\xe8T\x13\xfb\x89\xac\\\xd4\xa9\xa3\xac\x80\xddd\xed\xb1I\xfcz\x9aQ\x03\xcdO\xdfn^\xb4\x97\xd1\x8a%\x8d\xce\xafg\xa2W|v\xc2\x99\x97X\xd7\x8b\x82Z\xa7\xac\xa4\xb1P\x8c\xfd^\xb8=\xd6Q\xdb\x05\x8a\xe2\xed\xaaR\xd9\x1a\xd8\x92\xc8\x1b\xe6f\xd6\xb7rp\x8e\xd7I\xd0lN\xbd\x89\xac&)<\x9d\x8b\xcb\x93p\x90a\xef\xd0?\x02\x93\x83\xb9\xe4b\xfc1@\xde\xd8&\xd0\x8f\xa6G\xe0\xc9\xe9Z\xb4PG\xcf\xed\xf5\x94\x89\x9a\xa8\xd7\x02\xac\x9d\x1b\x9am\x82L\a,;\xcd\x11,\xf9\xe6\xe1\fa\xfe\xdc\xc0A\xc3\xda\x8f$\x87<\xef\xe2\xc2xP\xfc\xd4\xefX\x8doK\x8aa\x98.\x82!\xf9\rS\x04\xd2\xb4I\x1d=\xf9<\xb0?l\xa5\t\xd1j\"\x1e\xe5\xe0\xad\x14\x97\xde\xa3\x97\x9a\x9bq\'\xd4\xbc4\xf2\x9a\xa9\xa5\xb5\x8f\xdfD\xdf\xf9\xdc\xc3\xce\x90\f\xd9_y_\xda\x13p0\x02I\\~aT\xd4\x91\xa2\xb3\xb4\xa9\xdc\x90)\xac\xc6\x01\xf3\x98\x8e\xe2\xc2\f\xa0Yv\xb4\xa9\x99\x85\xd9t\xb9\x9ax@11\b\xba\xc0\xf1/\x1b\xfc\x93\xd8y\x89\xc6bO=w\xd5?C\x01e\x02z\xed[\x12\xd0{\xbc9\xd2Xm\xbe3h\x10\x00\xdfP\xfc\x01\xa19\xea\xae+c\xea\x1a.\x9ap\x0f<+t\x81\x84\xc3r\xcd\xdb\xa6\x84\x8a;l\x018\xda?\x90\xdd#\xaaM\xdcEV(u\xe1\x15\x8b\x88>\x06\x03\xb0\x18\xf6\x86\x88\xf7b\xc1C\xd4\xb3/\tf1\xdbr\xe4\xef\xe9\xa0\xdfht\xa7?\xc1\x13\xee\xa8d=@dN\x83\xbal\xc5\xb9\xbe\x80+y\xf5\xf3WH\x8fg\x00'/1641, 0x7) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 21.420616324s ago: executing program 2 (id=463): syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005c3f6b200304a4bc23d701020301090212000197ff00000904d4"], 0x0) 21.282126802s ago: executing program 1 (id=464): openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x7, 0xfa11, 0x7ff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000"], 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a0506020000000000000000000007140000001100010000000000000000000000000abf08bfba86d940a23b5f8f0800b5c2522473ad089eb3d4040fc86fa5760f8692707c6259e5e1fa5dceca1730e4de7a2786974036740b1deb991601c408dcc2e639f6cb8cedec0dfc688e28b5cbbe662b3e3a36de87224299b6955337562eb68ac0a8c3a022aa45fb3d9a50ac3e88e0ece968fba6f0c908b78c856a05e43bbedc523138c6cdaa615d04187794605d52"], 0x3c}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4b, 0x1, 0xffffffff, 0x6, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000f400000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = socket$kcm(0xa, 0x922000000003, 0x11) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b040000000000000000020000004000048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000150900010073797a30000000000900020073797a32000000001400000011"], 0x94}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000040)=0x1000) ioctl$SNDCTL_DSP_SYNC(r7, 0x5001, 0x0) 21.22840288s ago: executing program 0 (id=465): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000840)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0xfff2, 0x0, 0x11}, 0x800) 20.89408232s ago: executing program 0 (id=468): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x3}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x12, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640), 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x63, &(0x7f0000000400)=[{0x6, 0x3, 0x8, 0x7fff0006}]}) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT=r2, @ANYRESHEX=r1], 0x44}}, 0x4000a006) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000004c0)=@assoc_value, &(0x7f0000000480)=0x8) fremovexattr(r5, &(0x7f0000000040)=@known='system.posix_acl_default\x00') fanotify_mark(0xffffffffffffffff, 0x459, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10108}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a01080000000000f700000700000908000b4000000001080007006e61740008000a400000000000000200000a00"/84], 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0006}]}) 20.079174637s ago: executing program 4 (id=469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000380)={0x73622a85, 0x1100, 0xffeffffffffffffd}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000, 0x48, 0x18, &(0x7f0000000500)={@flat=@binder={0x73622a85, 0xa, 0x3, 0xf0ff}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 19.969267989s ago: executing program 4 (id=470): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xe, 0x5, 0x6, 0x4}, 0x10) unshare(0x20060400) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) syz_emit_ethernet(0x22a, &(0x7f0000000300)={@local, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x1f0, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x1, 0x0, 0x27a2, {0x5, 0x6, "54c03a", 0x402, 0x88, 0x1, @loopback, @rand_addr=' \x01\x00', [@fragment={0x3b, 0x0, 0xc, 0x0, 0x0, 0x3, 0x65}, @hopopts={0xc, 0x2b, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0x116, "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"}, @calipso={0x7, 0x38, {0x2, 0xc, 0xff, 0x7fff, [0x0, 0xfffffffffffffffc, 0x91bc, 0xffffffffffffffff, 0x8, 0xe]}}]}, @dstopts={0x32, 0x9, '\x00', [@ra={0x5, 0x2, 0x1c8c}, @calipso={0x7, 0x48, {0x0, 0x10, 0x5, 0x8, [0xfffffffffffffffb, 0xe5, 0x5, 0x40, 0x7ab, 0x0, 0x100, 0x0]}}]}]}}}}}}}, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r3, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r5}) ftruncate(r4, 0x1000006) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 19.454204294s ago: executing program 1 (id=471): r0 = socket$qrtr(0x2a, 0x2, 0x0) write$binfmt_script(r0, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) 19.357226732s ago: executing program 4 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x6, 0x4, 0x3, 0xd, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000b000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000fc007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000001a00)={r4}, 0xc) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xc, 0x0, &(0x7f0000000340)) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$XFS_IOC_BULKSTAT(0xffffffffffffffff, 0x8040587f, &(0x7f0000000580)={{0x214, 0x2, 0x49, 0x8001, 0x800}, 0x0}) 18.735461621s ago: executing program 5 (id=473): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syslog(0xa, &(0x7f0000000180)=""/216, 0xffffffffffffff47) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = dup(r0) fstat(r0, &(0x7f0000000340)) fstat(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000240)='hugetlbfs\x00', 0x2200890, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060300000000000000000000000000140007800800114000000000050015000400000005000100060000000500050002000000050004000100000013000300686173683a6e65742c696661636500000900020073797a32b1b935e5"], 0x60}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() prlimit64(r4, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r6, 0x6, &(0x7f0000000200)={0xffffffff, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) socket(0xa, 0x5, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) semget$private(0x0, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) fcntl$dupfd(r7, 0x406, r7) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/uts\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r8, &(0x7f0000002780)={0x2020}, 0x5ecfb203) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f0000000080)) 18.696285493s ago: executing program 2 (id=474): r0 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848350000005e14060200fe00000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x20008800) 17.979396967s ago: executing program 4 (id=475): r0 = socket$nl_rdma(0x10, 0x3, 0x14) read(r0, &(0x7f0000000040)=""/64, 0xe) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000040)={'veth0_to_batadv\x00', @random="010000201000"}) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="100000000914e73f"], 0x4e}}, 0x20008000) 17.122719717s ago: executing program 2 (id=476): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x101005) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000f40)="aefdda9d045800005a90f57f07703aefeef64ebbee07962cfff3f878f5772e11b44e65d76641cb090052e436dd2a6fc3", 0x30}, {&(0x7f0000000180)="530000002412ffa0270c8e5300000d00a2ed18f1e79bfffffffffffffffff500a55991b8f7d9ea5761cfc05bdc12c22913a248d9fc8fae5638e1588cb3db91fa10748c1427761af70d62f728303bcba70000000000000000", 0x58}], 0x2) 17.026072968s ago: executing program 5 (id=477): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d00030000000080000000000000000000000700000000000000080000000000400005000000000000000204"], 0x78) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 16.706533853s ago: executing program 4 (id=478): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4d8, 0x218, 0x218, 0x0, 0x2b0, 0x180, 0x440, 0x440, 0x440, 0x440, 0x440, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x218, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@private1, [], @ipv4=@private, [0x0, 0xffffffff], @ipv6=@private1, [0x0, 0x0, 0xff], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3001}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2b0}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x3000000, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x1, 0x81}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x2]}, {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) 16.696987771s ago: executing program 2 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_9p2000}]}}) r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4046040) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, 0xffffffffffffffff, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) socket$packet(0x11, 0x3, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b40)=@nat={'nat\x00', 0x62, 0x5, 0x398, 0x188, 0x188, 0xffffffff, 0xe0, 0x188, 0x328, 0x328, 0xffffffff, 0x328, 0x328, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x2, {0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast, @port, @gre_key}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'nr0\x00', 'macvlan0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8840) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000600)=""/117, 0x75}, {&(0x7f0000000380)=""/33, 0x21}, {0x0}], 0x4}, 0x4000000b}], 0x2, 0x10, 0x0) migrate_pages(r0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x15) 15.593135225s ago: executing program 5 (id=480): syz_emit_ethernet(0x46, &(0x7f0000010440)={@multicast, @multicast, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @broadcast, @private1={0xfc, 0x1, '\x00', 0x1}, @broadcast, @empty}}}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x800, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) add_key$keyring(&(0x7f0000010340), &(0x7f0000010380)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) read$FUSE(r0, &(0x7f0000012380)={0x2020}, 0x2020) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000340)={[0x200000000000d45, 0x800001000005, 0xffffeffffffffff8, 0x1, 0xfffc, 0x0, 0x1000000000000007, 0xa, 0x0, 0x6, 0x200000000000, 0x8, 0x401, 0x0, 0x9, 0xffffffffffffffff], 0x2000, 0x20000}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_CAP_SYNC_REGS(r2, 0x4068aea3, &(0x7f0000000000)) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000080)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) ptrace$setregs(0xd, r3, 0x2, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r6, 0x4004af07, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) ptrace$cont(0x21, r3, 0x8, 0x4) 15.321305785s ago: executing program 4 (id=481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fchmodat(r2, &(0x7f0000000300)='.\x00', 0xffffffd3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}], 0x1, 0x20040140) listen(r4, 0xfff) syz_clone3(&(0x7f0000000900)={0x0, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x25, {r2}}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x8c}}, 0x4) accept(r2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="db2cd7a2b21e186440c1598edf3aaf63dfa2f5cb08000b22d35345caedc526609d9a3304005225a7af21b25c387b2216002af0b604a1153e71a7c319dd71f59d1ee23a5854a2b98bc2b8ccb71dfef4a470b82ebde6debbc4c86ce79bd1954d885ca6da7256203e8491", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x4, 0x0}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000010000)='cgroup\x00') lseek(r8, 0x201, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x1017, 0xc, 0x9, 0x7, 0x1, 0x5}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="07000000000000002f001045", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) syz_open_dev$dri(&(0x7f00000002c0), 0x0, 0x8100) 15.32006972s ago: executing program 1 (id=482): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r3, &(0x7f0000000000)="a5", 0x1) r4 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r2, 0x0, r4, 0x0, 0xcea5, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bond\x00', 0x0}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r6, 0x540a, 0x2) ppoll(&(0x7f0000000240)=[{r6, 0xc400}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000200)=0x18) r7 = ioctl$TIOCGPTPEER(r6, 0x5441, 0xb3d) ioctl$TCXONC(r7, 0x540a, 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x88}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x5}]}}]}, 0x50}}, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000000000010000001300000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) 15.118105774s ago: executing program 0 (id=483): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x82000714) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrandom(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=ANY=[@ANYBLOB="500000000104010800000000000000000a00000808000440000000060500010004000000080005400000800008000540000000030500010001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f72"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070601030000000000000000010000000500010007000000a54cebfa95a0e9c041"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) 14.060875922s ago: executing program 2 (id=484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r1, 0x5, &(0x7f0000000100)=0x3fea) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20000044) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x4800) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000001c0)=0xfffffff8, 0x4) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/fscreate\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010101}, 0x10) 13.447050988s ago: executing program 1 (id=485): semget$private(0x0, 0x2, 0x180) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_xfrm(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@mcast1, @in=@multicast2, 0x3c, 0x3, 0x0, 0x3507, 0xa, 0x8}]}]}, 0xa0}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @broadcast, @void, {@generic={0x4305}}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x2c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x80, 0x8004, 0x7, 0xfffffffc, 0x3, 0x6, 0x8000, r4}, &(0x7f0000000200)=0x20) preadv(r2, &(0x7f0000002940)=[{&(0x7f0000002680)=""/236, 0xec}], 0x1, 0x2, 0x40) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) 13.4464761s ago: executing program 5 (id=486): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x3200006, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x6b, 0xffffffffffffffff, {0x101}}, '\x00'}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) writev(r2, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}, 0x1, 0x1f00000000000000}, 0x20000840) 9.998867036s ago: executing program 1 (id=487): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) (async) syz_usb_connect$midi(0x2, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x60, 0x763, 0x1002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x1, 0x1, 0x4, 0x40, 0x45, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x30, 0x8, [@ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0xf0}, @midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x3d, 0x2, [{0x2, 0x2}, {0x9, 0x2}], 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x8, 0x1}], [{{0x9, 0x5, 0xa, 0x10, 0x8, 0x40, 0x2, 0x2, {0xd, 0x25, 0x1, 0x9, "8cb5e7942df56d6e37"}}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x7, 0x9, 0x1, {0xc, 0x25, 0x1, 0x8, "f1148e7a6199e894"}}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x0, 0x3, 0x1, {0x4}}}]}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0xf6, 0x7, 0x20, 0xe9}, 0x11, &(0x7f00000000c0)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x1, 0xff0f, 0x1}]}, 0x9, [{0x42, &(0x7f0000000100)=@string={0x42, 0x3, "b57f810a2155a9e12c643ed556d79b16e04ccbcf620ed7de17b1208c47d6ac17c94d6f8864bd5e0e0b9cbb0885302e290a417d5b59d87b9be9ea4fcf6d96e196"}}, {0x86, &(0x7f00000001c0)=@string={0x86, 0x3, "4e40f1367e4e906733e0c11b82a4a67052aa1e27a95720ec96999de8743e0ac42c9c7e114dd1c1bfb15365b10e1bd5f5391bed7eca70b6f31a08b66df25eedef21a07fe111fa72424012cda29a149dce0fbbf9231157385b1c425c801f02765c46213722c5fa8ee2ea84bee9ad89b91136c2443d29f9bee64752cb9334f859bc53a6de08"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x439}}, {0x70, &(0x7f00000002c0)=@string={0x70, 0x3, "f0907293dcbbf1e761c3dd45cc58120dc9cccd1677260a0dbb5b2bb50f215d172201c828b36b89afd8f8d1a1cd671469761eae4abd7c937a464b160fa73a0a5d47bb562999bf62cd7689106df7659ab27613596b29de9093431d1dbbd7eb04d03e777d67f1269f9c91a649aef193"}}, {0x50, &(0x7f0000000340)=@string={0x50, 0x3, "297f770210e0864559137f7e76752a5f159e50992d5c027f8f6145182d015e183262675b9a20827c6ca38d03c69dde391e143bacb1f71d889a7aeb1d6ac93e1daa7ea66fb71803d8351fe8da8a2e"}}, {0x100, &(0x7f00000003c0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xfcff}}, {0xb8, &(0x7f0000000540)=@string={0xb8, 0x3, "47754742e5f461f39d4657de18cc8c431798aa1e6a6d88ec68913ee13bb7b47a0ace83837a89563c883a50314be2a16b31ff5c270e6841fb1015520e68aa6c610c217e235d29436927b98b288066588ffb5eaa1c42f0b515ed54565ca0f103218b66a2dd25bb3b5b3033ada9cfb47106ede5635d4b63136298b43b4d6649b18dfbcb1d9f64765bc4054f7b688f0e07bca744ccf18f422e9e05019b46c29561ec3fc613905e304c710254fcce97110e4778479d42da39"}}]}) setuid(0xee01) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 9.712419958s ago: executing program 0 (id=488): mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000c, 0x30, 0xffffffffffffffff, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) writev(r2, &(0x7f0000000280), 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) socket(0x2, 0x80805, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x602, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0x40) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0xc4) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2, {0x8001, 0xc19c}}, './file0\x00'}) 9.667734926s ago: executing program 5 (id=489): socket$inet6(0xa, 0x80001, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xde}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x39) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0xa}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xa6}]}}]}, 0x38}}, 0x24040084) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "4d0916cb7a186d2a2e55ba48ad3f796547502777ff87f76b395c692150689bb4a628a9f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x39}, 0x48, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) socket$can_j1939(0x1d, 0x2, 0x7) sendto$inet6(r5, 0x0, 0x0, 0x24000045, &(0x7f0000000000)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f00000000c0)='htcp', 0x4) shutdown(r5, 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x6000, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10001, &(0x7f0000002540)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x6000}}) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000680)=@filename='./file0\x00', 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0xb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 0s ago: executing program 2 (id=490): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) kernel console output (not intermixed with test programs): 8521][ T5704] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.348876][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.368779][ T30] audit: type=1400 audit(2000000005.130:416): avc: denied { unmount } for pid=5620 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.400799][ T5704] usb 4-1: Product: syz [ 93.427631][ T5704] usb 4-1: Manufacturer: syz [ 93.465161][ T5704] cdc_wdm 4-1:1.0: skipping garbage [ 93.509619][ T5704] cdc_wdm 4-1:1.0: skipping garbage [ 93.518155][ T6219] 9p: Bad value for 'rfdno' [ 93.565096][ T5704] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 93.595553][ T5704] cdc_wdm 4-1:1.0: Unknown control protocol [ 93.668829][ T30] audit: type=1400 audit(2000000005.430:417): avc: denied { setopt } for pid=6207 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.689037][ T5704] usb 4-1: USB disconnect, device number 3 [ 93.783314][ T30] audit: type=1400 audit(2000000005.520:418): avc: denied { write } for pid=6207 comm="syz.3.115" path="socket:[9997]" dev="sockfs" ino=9997 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.873584][ T30] audit: type=1400 audit(2000000005.640:419): avc: denied { bind } for pid=6224 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.064437][ T30] audit: type=1400 audit(2000000005.660:420): avc: denied { connect } for pid=6224 comm="syz.2.122" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.066405][ T6228] netlink: 164 bytes leftover after parsing attributes in process `syz.2.122'. [ 94.086478][ T30] audit: type=1400 audit(2000000005.800:421): avc: denied { write } for pid=6224 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.171142][ T30] audit: type=1400 audit(2000000005.800:422): avc: denied { nlmsg_write } for pid=6224 comm="syz.2.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.258289][ T30] audit: type=1326 audit(2000000005.920:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.3.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13279cdd9 code=0x7ffc0000 [ 94.354531][ T30] audit: type=1326 audit(2000000005.920:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6229 comm="syz.3.124" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13279cdd9 code=0x7ffc0000 [ 94.508620][ T6234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.124'. [ 94.828510][ T6237] 9p: Bad value for 'rfdno' [ 95.455409][ T6261] netlink: 20 bytes leftover after parsing attributes in process `syz.3.131'. [ 96.173887][ T6245] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 96.229719][ T6245] ALSA: mixer_oss: invalid index 1374389 [ 96.243242][ T6274] 9p: Bad value for 'rfdno' [ 96.921909][ T803] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 97.117836][ T803] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.158294][ T803] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 97.176683][ T803] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 97.290419][ T803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.317727][ T803] usb 1-1: config 0 descriptor?? [ 97.332784][ T803] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 97.340515][ T803] dvb-usb: bulk message failed: -22 (3/0) [ 97.365906][ T803] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 97.381312][ T803] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 97.420240][ T803] usb 1-1: media controller created [ 97.450730][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.468431][ T803] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.510226][ T6312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 97.629352][ T6312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'. [ 97.639607][ T6312] netlink: 'syz.2.138': attribute type 13 has an invalid length. [ 97.658947][ T6312] netlink: 'syz.2.138': attribute type 12 has an invalid length. [ 97.885462][ T6318] dvb-usb: bulk message failed: -22 (2/0) [ 98.131574][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 98.212067][ T803] dvb-usb: bulk message failed: -22 (6/0) [ 98.241758][ T24] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 98.293210][ T803] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 98.343894][ T24] usb 2-1: config 0 has no interface number 0 [ 98.369558][ T803] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 98.370097][ T6328] netlink: 36 bytes leftover after parsing attributes in process `syz.3.140'. [ 98.383312][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 98.431816][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.447784][ T803] dvb-usb: schedule remote query interval to 150 msecs. [ 98.456856][ T803] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 98.469970][ T24] usb 2-1: Product: syz [ 98.484745][ T24] usb 2-1: Manufacturer: syz [ 98.495124][ T24] usb 2-1: SerialNumber: syz [ 98.512842][ T24] usb 2-1: config 0 descriptor?? [ 98.527300][ T24] hub 2-1:0.132: bad descriptor, ignoring hub [ 98.535753][ T24] hub 2-1:0.132: probe with driver hub failed with error -5 [ 98.592193][ T24] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input6 [ 98.612462][ T803] dvb-usb: bulk message failed: -22 (1/0) [ 98.656189][ T803] dvb-usb: error while querying for an remote control event. [ 98.713015][ T6334] syzkaller0: entered promiscuous mode [ 98.719258][ T6334] syzkaller0: entered allmulticast mode [ 98.757743][ T30] kauditd_printk_skb: 113 callbacks suppressed [ 98.757757][ T30] audit: type=1400 audit(2000000010.520:538): avc: denied { read } for pid=6303 comm="syz.1.139" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 98.812412][ T30] audit: type=1400 audit(2000000010.550:539): avc: denied { open } for pid=6303 comm="syz.1.139" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 98.839425][ T803] dvb-usb: bulk message failed: -22 (1/0) [ 98.846446][ T803] dvb-usb: error while querying for an remote control event. [ 98.864503][ T30] audit: type=1400 audit(2000000010.580:540): avc: denied { write } for pid=6333 comm="syz.3.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 98.904359][ T30] audit: type=1326 audit(2000000010.670:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6303 comm="syz.1.139" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7194b9cdd9 code=0x0 [ 98.955367][ T6305] netlink: 44 bytes leftover after parsing attributes in process `syz.1.139'. [ 99.011110][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 99.022344][ T24] dvb-usb: error while querying for an remote control event. [ 99.055175][ T30] audit: type=1400 audit(2000000010.820:542): avc: denied { mount } for pid=6303 comm="syz.1.139" name="/" dev="hugetlbfs" ino=10127 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 99.097850][ T30] audit: type=1400 audit(2000000010.850:543): avc: denied { create } for pid=6303 comm="syz.1.139" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 99.128711][ T30] audit: type=1400 audit(2000000010.850:544): avc: denied { getopt } for pid=6303 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 99.191517][ T803] dvb-usb: bulk message failed: -22 (1/0) [ 99.197579][ T803] dvb-usb: error while querying for an remote control event. [ 99.370945][ T803] dvb-usb: bulk message failed: -22 (1/0) [ 99.378286][ T803] dvb-usb: error while querying for an remote control event. [ 99.410198][ T6338] binder: 6337:6338 ioctl c0306201 200000000080 returned -14 [ 99.429399][ T30] audit: type=1400 audit(2000000011.190:545): avc: denied { write } for pid=6337 comm="syz.3.143" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 99.459023][ T6338] binder: 6337:6338 ioctl c0306201 2000000003c0 returned -14 [ 99.483121][ T30] audit: type=1400 audit(2000000011.250:546): avc: denied { call } for pid=6337 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.531849][ T30] audit: type=1400 audit(2000000011.250:547): avc: denied { transfer } for pid=6337 comm="syz.3.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 99.551983][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 99.560866][ T24] dvb-usb: error while querying for an remote control event. [ 99.691844][ T10] usb 1-1: USB disconnect, device number 3 [ 99.779742][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 99.794954][ T6345] netlink: 10 bytes leftover after parsing attributes in process `syz.0.146'. [ 99.861085][ T5725] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.144020][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 100.156201][ T5725] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 100.164479][ T5725] usb 4-1: can't read configurations, error -71 [ 100.290875][ T24] usb 2-1: USB disconnect, device number 4 [ 100.965400][ T6358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.994314][ T6363] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 101.005838][ T6358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.511446][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 101.607536][ T6376] netlink: 36 bytes leftover after parsing attributes in process `syz.0.157'. [ 101.684806][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 101.693584][ T6378] evm: overlay not supported [ 101.700344][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.721225][ T24] usb 5-1: config 0 has no interface number 0 [ 101.760420][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 101.828007][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.897773][ T24] usb 5-1: Product: syz [ 101.928084][ T24] usb 5-1: Manufacturer: syz [ 101.954019][ T24] usb 5-1: SerialNumber: syz [ 102.121951][ T24] usb 5-1: config 0 descriptor?? [ 102.144472][ T24] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 102.161031][ T24] usb 5-1: selecting invalid altsetting 1 [ 102.171141][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 102.206176][ T24] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.227960][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 102.246942][ T24] usb 5-1: media controller created [ 102.275437][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.342155][ T6387] overlay: Unknown parameter 'hash' [ 102.403039][ T24] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 102.429536][ T24] zl10353_read_register: readreg error (reg=127, ret==-32) [ 102.504450][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'. [ 102.593551][ T826] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.643793][ T5738] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 102.851032][ T826] usb 4-1: Using ep0 maxpacket: 16 [ 102.873539][ T826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.874010][ T5738] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.904011][ T5738] usb 1-1: config 0 has no interface number 0 [ 102.907947][ T826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.911046][ T5738] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 102.933883][ T826] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.935934][ T5738] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 102.949345][ T826] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.977336][ T5738] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 102.988749][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.013501][ T5738] usb 1-1: config 0 descriptor?? [ 103.018022][ T826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.028901][ T6387] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 103.055209][ T5738] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 103.066672][ T826] usb 4-1: config 0 descriptor?? [ 103.113241][ T5609] Bluetooth: hci0: command 0x0406 tx timeout [ 103.507375][ T826] usbhid 4-1:0.0: can't add hid device: -71 [ 103.520567][ T826] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 103.535279][ T6371] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 103.556366][ T826] usb 4-1: USB disconnect, device number 6 [ 103.560792][ T24] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 103.760917][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 103.760955][ T30] audit: type=1400 audit(2000000015.410:563): avc: denied { write } for pid=6386 comm="syz.0.163" name="iowarrior0" dev="devtmpfs" ino=2846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 104.582400][ T24] usb 5-1: USB disconnect, device number 5 [ 105.361795][ T6417] comedi comedi4: bad chanlist[0]=0x00000800 chan=2048 range length=2 [ 105.375774][ T6418] 9p: Bad value for 'rfdno' [ 105.519948][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 105.542907][ T803] usb 1-1: USB disconnect, device number 4 [ 105.569248][ T30] audit: type=1400 audit(2000000017.330:564): avc: denied { create } for pid=6419 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 105.753644][ T30] audit: type=1400 audit(2000000017.520:565): avc: denied { read } for pid=6426 comm="syz.4.173" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 105.855200][ T30] audit: type=1400 audit(2000000017.520:566): avc: denied { open } for pid=6426 comm="syz.4.173" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.013199][ T6433] netlink: 256 bytes leftover after parsing attributes in process `syz.0.174'. [ 106.289746][ T30] audit: type=1400 audit(2000000017.540:567): avc: denied { ioctl } for pid=6426 comm="syz.4.173" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 106.364997][ T30] audit: type=1400 audit(2000000017.680:568): avc: denied { write } for pid=6426 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 106.471635][ T30] audit: type=1400 audit(2000000018.230:569): avc: denied { setopt } for pid=6440 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.507877][ T30] audit: type=1400 audit(2000000018.240:570): avc: denied { write } for pid=6440 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.527179][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 106.690737][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 106.723841][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.980197][ T30] audit: type=1400 audit(2000000018.550:571): avc: denied { read } for pid=6442 comm="syz.4.180" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.016682][ T10] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54 [ 107.032011][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.114842][ T30] audit: type=1400 audit(2000000018.570:572): avc: denied { open } for pid=6442 comm="syz.4.180" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 107.133604][ T6448] netlink: 9 bytes leftover after parsing attributes in process `syz.0.181'. [ 107.139064][ T10] usb 4-1: Product: syz [ 107.168532][ T10] usb 4-1: Manufacturer: syz [ 107.175846][ T6448] netlink: 9 bytes leftover after parsing attributes in process `syz.0.181'. [ 107.180620][ T10] usb 4-1: SerialNumber: syz [ 107.205519][ T10] usb 4-1: config 0 descriptor?? [ 107.218175][ T10] cdc_phonet 4-1:0.0: probe with driver cdc_phonet failed with error -22 [ 107.682370][ T6461] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 107.784511][ T5738] IPVS: starting estimator thread 0... [ 107.900801][ T6463] IPVS: using max 41 ests per chain, 98400 per kthread [ 107.985978][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 108.144039][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 108.222991][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.273757][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 108.353836][ T6468] netlink: 256 bytes leftover after parsing attributes in process `syz.1.187'. [ 108.367705][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 108.614378][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 108.633545][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 108.657930][ T5725] usb 4-1: USB disconnect, device number 7 [ 108.692978][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 108.716365][ T10] usb 3-1: Product: syz [ 108.733455][ T10] usb 3-1: Manufacturer: syz [ 108.770293][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 108.793161][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 108.822356][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 108.845695][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 108.887397][ T1346] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.015487][ T6452] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 109.041233][ T6481] netlink: 'syz.2.183': attribute type 21 has an invalid length. [ 109.082131][ T1346] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.097764][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 109.097781][ T30] audit: type=1400 audit(2000000020.860:575): avc: denied { read write } for pid=6449 comm="syz.2.183" name="cdc-wdm0" dev="devtmpfs" ino=2854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 109.134175][ T30] audit: type=1400 audit(2000000020.860:576): avc: denied { open } for pid=6449 comm="syz.2.183" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 109.183425][ T6452] overlayfs: failed to resolve '/': -2 [ 109.189835][ T30] audit: type=1400 audit(2000000020.930:577): avc: denied { mount } for pid=6449 comm="syz.2.183" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 109.212398][ T6481] netlink: 132 bytes leftover after parsing attributes in process `syz.2.183'. [ 109.212558][ T30] audit: type=1400 audit(2000000020.940:578): avc: denied { mounton } for pid=6449 comm="syz.2.183" path="/42/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 109.249621][ T30] audit: type=1400 audit(2000000021.010:579): avc: denied { connect } for pid=6449 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 109.300538][ T6452] 9p: Bad value for 'rfdno' [ 109.333622][ T1346] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.366445][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.393722][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.408120][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.428368][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.437829][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.505900][ T1346] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.549162][ T24] usb 3-1: USB disconnect, device number 3 [ 109.801860][ T30] audit: type=1400 audit(2000000021.550:580): avc: denied { search } for pid=5272 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.873438][ T30] audit: type=1400 audit(2000000021.570:581): avc: denied { search } for pid=5272 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.939560][ T30] audit: type=1400 audit(2000000021.570:582): avc: denied { search } for pid=5272 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.008155][ T30] audit: type=1400 audit(2000000021.570:583): avc: denied { read } for pid=5272 comm="dhcpcd" name="n30" dev="tmpfs" ino=2692 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.044062][ T1346] bridge_slave_1: left allmulticast mode [ 110.045846][ T30] audit: type=1400 audit(2000000021.570:584): avc: denied { open } for pid=5272 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2692 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 110.085736][ T1346] bridge_slave_1: left promiscuous mode [ 110.101733][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.904890][ T1346] bridge_slave_0: left allmulticast mode [ 110.959955][ T1346] bridge_slave_0: left promiscuous mode [ 111.035064][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.125646][ T6522] 9p: Bad value for 'rfdno' [ 111.522936][ T5609] Bluetooth: hci3: command tx timeout [ 111.786964][ T1346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.813117][ T1346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.836826][ T1346] bond0 (unregistering): Released all slaves [ 111.858479][ T1346] bond1 (unregistering): Released all slaves [ 111.920529][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 112.255425][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 112.297513][ T1346] hsr_slave_0: left promiscuous mode [ 112.304849][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 112.331246][ T803] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 112.339846][ T1346] hsr_slave_1: left promiscuous mode [ 112.351243][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.382984][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.397059][ T1346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.406026][ T1346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.438743][ T1346] veth1_macvtap: left promiscuous mode [ 112.479300][ T1346] veth0_macvtap: left promiscuous mode [ 112.500741][ T803] usb 5-1: device descriptor read/64, error -71 [ 112.522837][ T1346] veth1_vlan: left promiscuous mode [ 112.539180][ T1346] veth0_vlan: left promiscuous mode [ 112.644496][ T6559] netlink: 20 bytes leftover after parsing attributes in process `syz.0.208'. [ 112.850855][ T803] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 113.011998][ T803] usb 5-1: device descriptor read/64, error -71 [ 113.132585][ T803] usb usb5-port1: attempt power cycle [ 113.329852][ T1346] team0 (unregistering): Port device team_slave_1 removed [ 113.344827][ T1346] team0 (unregistering): Port device team_slave_0 removed [ 113.445372][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 113.533854][ T803] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 113.583448][ T803] usb 5-1: device descriptor read/8, error -71 [ 113.591449][ T5609] Bluetooth: hci3: command tx timeout [ 113.752258][ T5738] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 113.840772][ T803] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.870179][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 113.891569][ T803] usb 5-1: device descriptor read/8, error -71 [ 113.915789][ T5738] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.966508][ T5738] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 113.968982][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.006483][ T5738] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 114.015888][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.024839][ T6488] bridge_slave_0: entered allmulticast mode [ 114.034604][ T6488] bridge_slave_0: entered promiscuous mode [ 114.042425][ T803] usb usb5-port1: unable to enumerate USB device [ 114.049035][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.056377][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.068041][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.091052][ T6488] bridge_slave_1: entered allmulticast mode [ 114.105325][ T6488] bridge_slave_1: entered promiscuous mode [ 114.124684][ T5738] usb 3-1: config 0 descriptor?? [ 114.156132][ T1346] IPVS: stop unused estimator thread 0... [ 114.166644][ T5738] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 114.193057][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.230346][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.270530][ T5738] dvb-usb: bulk message failed: -22 (3/0) [ 114.317326][ T5738] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 114.339954][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 114.339968][ T30] audit: type=1400 audit(2000000026.100:616): avc: denied { setopt } for pid=6599 comm="syz.0.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.374676][ T5738] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 114.382179][ T5738] usb 3-1: media controller created [ 114.388045][ T5738] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.431615][ T30] audit: type=1400 audit(2000000026.190:617): avc: denied { write } for pid=6580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.457615][ T5738] dvb-usb: bulk message failed: -22 (6/0) [ 114.465406][ T5738] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 114.483126][ T5738] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 114.504284][ T5738] dvb-usb: schedule remote query interval to 150 msecs. [ 114.516187][ T5738] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 114.534439][ T6488] team0: Port device team_slave_0 added [ 114.572138][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 114.626129][ T6488] team0: Port device team_slave_1 added [ 114.647625][ T30] audit: type=1400 audit(2000000026.400:618): avc: denied { write } for pid=6607 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.683877][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 114.695468][ T5738] dvb-usb: error while querying for an remote control event. [ 114.791097][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.823260][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.880367][ T10] usb 3-1: USB disconnect, device number 4 [ 114.892090][ T5738] dvb-usb: bulk message failed: -22 (1/0) [ 114.906586][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.919944][ T5738] dvb-usb: error while querying for an remote control event. [ 114.938153][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.957343][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 115.018205][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 115.030774][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.077900][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 115.174297][ T6610] binder: 6609:6610 ioctl c0306201 200000000080 returned -14 [ 115.189455][ T6610] binder: 6609:6610 ioctl c0306201 2000000003c0 returned -14 [ 115.253164][ T30] audit: type=1326 audit(2000000027.020:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 115.285636][ T30] audit: type=1326 audit(2000000027.050:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 115.318071][ T30] audit: type=1326 audit(2000000027.050:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 115.497467][ T6612] netlink: 20 bytes leftover after parsing attributes in process `syz.4.215'. [ 115.589043][ T30] audit: type=1326 audit(2000000027.050:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 115.681233][ T5609] Bluetooth: hci3: command tx timeout [ 115.714186][ T30] audit: type=1326 audit(2000000027.050:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 115.715925][ T6488] hsr_slave_0: entered promiscuous mode [ 115.740703][ T30] audit: type=1326 audit(2000000027.050:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 115.858189][ T30] audit: type=1326 audit(2000000027.050:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6611 comm="syz.4.215" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 115.973874][ T6488] hsr_slave_1: entered promiscuous mode [ 115.987220][ T6488] debugfs: 'hsr0' already exists in 'hsr' [ 116.002396][ T6488] Cannot create hsr debugfs directory [ 116.097563][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 116.463734][ T24] libceph: connect (1)[c::]:6789 error -101 [ 116.485345][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 116.689694][ T6620] ceph: No mds server is up or the cluster is laggy [ 116.808927][ T24] libceph: connect (1)[c::]:6789 error -101 [ 116.824883][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 117.155264][ T6636] netlink: 'syz.1.218': attribute type 11 has an invalid length. [ 117.751082][ T4929] Bluetooth: hci3: command tx timeout [ 118.011012][ T826] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.060100][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 118.250311][ T6671] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 118.547898][ T6488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 118.576160][ T6488] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.594827][ T6488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 118.603433][ T826] usb 2-1: Using ep0 maxpacket: 8 [ 118.621615][ T6673] No such timeout policy "syz0" [ 118.627310][ T826] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.646242][ T826] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.675702][ T6488] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.688670][ T826] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.708484][ T6488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 118.724831][ T826] usb 2-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 118.752148][ T6488] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.759276][ T826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.845905][ T6488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 118.860247][ T826] usb 2-1: config 0 descriptor?? [ 118.887570][ T826] usbhid 2-1:0.0: fixing wrong optional hid class descriptors count [ 118.926106][ T6488] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 119.485216][ T826] usbhid 2-1:0.0: can't add hid device: -71 [ 119.529876][ T826] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 119.570565][ T826] usb 2-1: USB disconnect, device number 5 [ 119.655593][ T6488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.712786][ T6488] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.742370][ T665] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.749448][ T665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.785716][ T665] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.792874][ T665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.943675][ T6693] No such timeout policy "syz0" [ 120.279502][ T6705] netlink: 34 bytes leftover after parsing attributes in process `syz.1.232'. [ 120.517613][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 120.517629][ T30] audit: type=1400 audit(2000000032.280:657): avc: denied { map } for pid=6709 comm="syz.2.235" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 120.551895][ T30] audit: type=1400 audit(2000000032.310:658): avc: denied { execute } for pid=6709 comm="syz.2.235" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 120.969493][ T6719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.236'. [ 121.081896][ T6488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.450777][ T826] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 121.739815][ T30] audit: type=1400 audit(2000000033.500:659): avc: denied { write } for pid=6737 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 121.776855][ T6739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=44304 sclass=netlink_route_socket pid=6739 comm=syz.2.242 [ 121.792463][ T826] usb 1-1: Using ep0 maxpacket: 8 [ 121.798049][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.242'. [ 121.806825][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 121.835313][ T826] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.860830][ T826] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.877054][ T826] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 121.915326][ T826] usb 1-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 121.947528][ T826] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.990833][ T826] usb 1-1: config 0 descriptor?? [ 122.013071][ T6751] 9p: Bad value for 'rfdno' [ 122.032780][ T6488] veth0_vlan: entered promiscuous mode [ 122.042744][ T826] usbhid 1-1:0.0: fixing wrong optional hid class descriptors count [ 122.070099][ T6488] veth1_vlan: entered promiscuous mode [ 122.277846][ T6733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.294374][ T6488] veth0_macvtap: entered promiscuous mode [ 122.331698][ T5711] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.363260][ T6733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.461125][ T6488] veth1_macvtap: entered promiscuous mode [ 122.470904][ T826] usbhid 1-1:0.0: can't add hid device: -71 [ 122.482911][ T826] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 122.497652][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.511202][ T826] usb 1-1: USB disconnect, device number 5 [ 122.525749][ T6488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.548092][ T665] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.557999][ T5711] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 122.573543][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.583157][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.584989][ T665] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.602850][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.610461][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.620237][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.632582][ T665] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.645569][ T665] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.653878][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.675555][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.701860][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.733559][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.751730][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.768149][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.788452][ T1346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.830512][ T1346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.838100][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.864331][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.874815][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.897220][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.899431][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.905243][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.922276][ T30] audit: type=1400 audit(2000000034.690:660): avc: denied { mounton } for pid=6488 comm="syz-executor" path="/root/syzkaller.EImT9N/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 122.959640][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.968219][ T30] audit: type=1400 audit(2000000034.690:661): avc: denied { mounton } for pid=6488 comm="syz-executor" path="/root/syzkaller.EImT9N/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 122.995285][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.049483][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.074893][ T30] audit: type=1400 audit(2000000034.690:662): avc: denied { mounton } for pid=6488 comm="syz-executor" path="/root/syzkaller.EImT9N/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 123.087607][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.165419][ T6771] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.181291][ T30] audit: type=1400 audit(2000000034.800:663): avc: denied { mounton } for pid=6488 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 123.190708][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.244725][ T6776] Cannot find add_set index 0 as target [ 123.249033][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.263509][ T6778] netlink: 1040 bytes leftover after parsing attributes in process `syz.0.254'. [ 123.274226][ T5711] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.284639][ T5711] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.312815][ T5711] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.339096][ T5711] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.354627][ T5711] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.377572][ T5711] usb 2-1: Product: syz [ 123.384727][ T5711] usb 2-1: Manufacturer: syz [ 123.403704][ T5711] usb 2-1: SerialNumber: syz [ 123.699678][ T5711] usb 2-1: config 0 descriptor?? [ 123.731067][ T5711] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 123.856445][ T30] audit: type=1326 audit(2000000035.620:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.5.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb079cdd9 code=0x7ffc0000 [ 123.976259][ T30] audit: type=1326 audit(2000000035.660:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6794 comm="syz.5.260" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febb079cdd9 code=0x7ffc0000 [ 124.090505][ T6802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.260'. [ 124.325902][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.365674][ T30] audit: type=1400 audit(2000000035.700:666): avc: denied { create } for pid=6799 comm="syz.2.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.426327][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.157194][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.5.263'. [ 125.170054][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.263'. [ 126.081989][ T24] usb 2-1: USB disconnect, device number 6 [ 126.128994][ T24] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 126.731889][ T6823] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 127.020747][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 127.170768][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 127.183475][ T9] usb 5-1: too many configurations: 214, using maximum allowed: 8 [ 127.193110][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.193157][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.210869][ T6835] binder: 6831:6835 ioctl c0306201 200000000640 returned -22 [ 127.239422][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 127.254864][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 127.275504][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.297917][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 127.321655][ T9] usb 5-1: config 1 has no interface number 0 [ 127.343789][ T9] usb 5-1: config index 1 descriptor too short (expected 35577, got 27) [ 127.363677][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 127.385397][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.414346][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 127.437782][ T9] usb 5-1: config 1 has no interface number 0 [ 127.457681][ T9] usb 5-1: config index 2 descriptor too short (expected 35577, got 27) [ 127.474575][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 127.499363][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.532994][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 127.554793][ T9] usb 5-1: config 1 has no interface number 0 [ 127.581626][ T9] usb 5-1: config index 3 descriptor too short (expected 35577, got 27) [ 127.598327][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 127.622911][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.645100][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 127.645116][ T30] audit: type=1326 audit(2000000295.405:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 127.650700][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 127.658337][ T30] audit: type=1326 audit(2000000295.405:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 127.714768][ T9] usb 5-1: config 1 has no interface number 0 [ 127.722132][ T9] usb 5-1: config index 4 descriptor too short (expected 35577, got 27) [ 127.733530][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 127.796803][ T30] audit: type=1326 audit(2000000295.415:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 127.803968][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.852561][ T6843] netlink: 20 bytes leftover after parsing attributes in process `syz.0.272'. [ 127.899596][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 127.906200][ T30] audit: type=1326 audit(2000000295.415:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 128.209898][ T30] audit: type=1326 audit(2000000295.415:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 128.351521][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.2.273'. [ 128.379698][ T30] audit: type=1326 audit(2000000295.485:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 128.523967][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 128.561905][ T9] usb 5-1: config 1 has no interface number 0 [ 128.908814][ T9] usb 5-1: config index 5 descriptor too short (expected 35577, got 27) [ 128.927221][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 128.955906][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.024373][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 129.039194][ T30] audit: type=1326 audit(2000000295.485:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 129.074900][ T30] audit: type=1326 audit(2000000295.485:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 129.116386][ T9] usb 5-1: config 1 has no interface number 0 [ 129.144716][ T30] audit: type=1326 audit(2000000295.485:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 129.174321][ T30] audit: type=1326 audit(2000000295.485:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6840 comm="syz.0.272" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 129.184392][ T9] usb 5-1: config index 6 descriptor too short (expected 35577, got 27) [ 129.246086][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 129.283700][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.294635][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 129.305890][ T9] usb 5-1: config 1 has no interface number 0 [ 129.376840][ T9] usb 5-1: config index 7 descriptor too short (expected 35577, got 27) [ 129.385402][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 129.395140][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.411827][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 129.420966][ T9] usb 5-1: config 1 has no interface number 0 [ 129.438268][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=970b, bcdDevice=4b.3f [ 129.450816][ T5704] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 129.518972][ T6868] wg1 speed is unknown, defaulting to 1000 [ 129.519943][ T9] usb 5-1: New USB device strings: Mfr=8, Product=85, SerialNumber=20 [ 129.526850][ T6868] wg1 speed is unknown, defaulting to 1000 [ 129.588936][ T6868] wg1 speed is unknown, defaulting to 1000 [ 129.600470][ T9] usb 5-1: Product: syz [ 129.606877][ T9] usb 5-1: Manufacturer: syz [ 129.611630][ T9] usb 5-1: SerialNumber: syz [ 129.615390][ T6868] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 129.632314][ T5704] usb 6-1: Using ep0 maxpacket: 16 [ 129.640610][ T5704] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 129.649969][ T5704] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 129.670510][ T5704] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 129.690184][ T5704] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 129.708162][ T6868] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 129.730990][ T5704] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 129.744175][ T5704] usb 6-1: config 0 has no interface number 0 [ 129.750425][ T6868] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 129.762220][ T6872] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 129.762440][ T5704] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 129.789388][ T6868] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 129.807164][ T5738] usb 5-1: USB disconnect, device number 10 [ 129.830794][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.852207][ T5704] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 129.868120][ T6868] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 129.890637][ T5704] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.937056][ T5704] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 129.984363][ T5704] usb 6-1: config 0 interface 125 has no altsetting 0 [ 129.995127][ T6868] wg1 speed is unknown, defaulting to 1000 [ 130.001254][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 130.015651][ T5704] usb 6-1: config 0 interface 125 has no altsetting 2 [ 130.025330][ T6876] syzkaller0: entered promiscuous mode [ 130.032060][ T6876] syzkaller0: entered allmulticast mode [ 130.036757][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 130.045338][ T5704] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 130.055042][ T5704] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.063125][ T6868] wg1 speed is unknown, defaulting to 1000 [ 130.083656][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.096239][ T5704] usb 6-1: Product: syz [ 130.108293][ T5704] usb 6-1: Manufacturer: syz [ 130.112030][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.113454][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.139470][ T5704] usb 6-1: SerialNumber: syz [ 130.152948][ T5704] usb 6-1: config 0 descriptor?? [ 130.158761][ T24] usb 2-1: Product: Ђ [ 130.167219][ T24] usb 2-1: Manufacturer: ꠦ望ſt깱ë¦é‡“î¯žà®‰ï®²áŽæŒŒì¡æ‡°î©²ï¤Šî¼®ã¡Šç¬€ä®¯á·€Å‡è±‹æ†šâ¤¢êˆ¾é¢¤æ†£ê¦€ê¬•â§ê©ƒë£±ì‹å»¦à£»Ëœê“¬ã‘”휆ẉ瞔ಚ뢆뺡뺤溙⥬ꨈ낣㥒뽬퓑蟢寽ﳘ嫨ã’꨿㗇ŀ飊꥕ã“ಟ嶸ì‰é¡™êƒ [ 130.190386][ T5704] usb 6-1: selecting invalid altsetting 2 [ 130.199274][ T24] usb 2-1: SerialNumber: ÐŒ [ 130.298263][ T6872] SET target dimension over the limit! [ 130.305765][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 130.322751][ T6868] wg1 speed is unknown, defaulting to 1000 [ 130.326650][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 130.337306][ T6868] wg1 speed is unknown, defaulting to 1000 [ 130.353834][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 130.357400][ T6868] wg1 speed is unknown, defaulting to 1000 [ 130.386799][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.425182][ T9] usb 1-1: Product: syz [ 130.440477][ T9] usb 1-1: Manufacturer: syz [ 130.497604][ C1] usb 6-1: async_complete: urb error -71 [ 130.503393][ C1] usb 6-1: async_complete: urb error -71 [ 130.509074][ C1] usb 6-1: async_complete: urb error -71 [ 130.514747][ C1] usb 6-1: async_complete: urb error -71 [ 130.523890][ T5704] get_1284_register: usb error -71 [ 130.552415][ T5704] usb 6-1: USB disconnect, device number 2 [ 130.571915][ T9] usb 1-1: SerialNumber: syz [ 130.589624][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 130.662483][ T24] usb 2-1: USB disconnect, device number 7 [ 130.700328][ T6894] netlink: 'syz.5.283': attribute type 1 has an invalid length. [ 130.821137][ T5711] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 130.861310][ T6872] SET target dimension over the limit! [ 130.909154][ T6898] wg1 speed is unknown, defaulting to 1000 [ 130.982338][ T5711] usb 5-1: Using ep0 maxpacket: 16 [ 131.002129][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.020717][ T5711] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.043259][ T5711] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.080169][ T5711] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.089585][ T9] usb 1-1: USB disconnect, device number 6 [ 131.128672][ T5711] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.356014][ T5600] udevd[5600]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.144707][ T5711] usb 5-1: config 0 descriptor?? [ 132.643233][ T6917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.286'. [ 132.826378][ T5711] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 133.309614][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 133.404169][ T5711] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 133.500863][ T5711] microsoft 0003:045E:07DA.0001: implement() called with n (56) > 32! (kworker/0:4) [ 133.626774][ T30] kauditd_printk_skb: 104 callbacks suppressed [ 133.626791][ T30] audit: type=1326 audit(2000000301.385:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.1.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7194b9cdd9 code=0x7ffc0000 [ 133.635868][ T5711] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 133.696017][ T5711] microsoft 0003:045E:07DA.0001: no inputs found [ 133.716436][ T30] audit: type=1326 audit(2000000301.385:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.1.286" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7194b9cdd9 code=0x7ffc0000 [ 133.740607][ T5711] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 133.785197][ T30] audit: type=1400 audit(2000000301.455:834): avc: denied { write } for pid=6899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 133.887710][ T5711] usb 5-1: USB disconnect, device number 11 [ 134.154015][ T30] audit: type=1400 audit(2000000301.795:835): avc: denied { write } for pid=6932 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.210730][ T5704] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 134.727832][ T6942] No such timeout policy "syz0" [ 134.772582][ T5704] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 134.803140][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.844484][ T5704] usb 1-1: config 0 descriptor?? [ 135.057368][ T6956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.296'. [ 135.074957][ T6931] nbd: must specify a device to reconfigure [ 135.099315][ T4929] Bluetooth: hci2: unexpected event for opcode 0x042c [ 135.220364][ T30] audit: type=1400 audit(2000000302.975:836): avc: denied { write } for pid=6946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.278874][ T30] audit: type=1400 audit(2000000302.975:837): avc: denied { ioctl } for pid=6929 comm="syz.0.290" path="socket:[14470]" dev="sockfs" ino=14470 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.439282][ T30] audit: type=1400 audit(2000000303.065:838): avc: denied { write } for pid=6968 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 135.490750][ T6008] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 135.532359][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 135.663563][ T6008] usb 2-1: unable to get BOS descriptor or descriptor too short [ 135.673795][ T6008] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 135.687867][ T6008] usb 2-1: config 114 has no interface number 0 [ 135.696687][ T30] audit: type=1326 audit(2000000303.455:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.2.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c72d9cdd9 code=0x7ffc0000 [ 135.729001][ T6008] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 135.749534][ T6008] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 135.786587][ T6008] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 135.801362][ T30] audit: type=1326 audit(2000000303.455:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.2.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c72d9cdd9 code=0x7ffc0000 [ 135.814108][ T9] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 135.838623][ T9] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 135.859691][ T9] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 135.873123][ T9] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 135.882729][ T6008] usb 2-1: config 114 interface 240 has no altsetting 0 [ 135.883541][ T9] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 135.916249][ T5704] hackrf 1-1:0.0: usb_control_msg() failed -110 request 0e [ 135.916433][ T30] audit: type=1326 audit(2000000303.555:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.2.301" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f5c72d9cdd9 code=0x7ffc0000 [ 135.956785][ T9] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 135.968220][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.978987][ T9] usb 5-1: Product: syz [ 135.986245][ T9] usb 5-1: Manufacturer: syz [ 135.993312][ T9] usb 5-1: SerialNumber: syz [ 136.108046][ T6994] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 136.356730][ T6997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.301'. [ 136.362678][ T5704] hackrf 1-1:0.0: Could not detect board [ 136.368807][ T10] IPVS: starting estimator thread 0... [ 136.377039][ T6008] usb 2-1: string descriptor 0 read error: -22 [ 136.420043][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.301'. [ 136.453046][ T6008] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 136.459334][ T9] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 136.500749][ T6995] IPVS: using max 41 ests per chain, 98400 per kthread [ 136.517547][ T5704] hackrf 1-1:0.0: probe with driver hackrf failed with error -110 [ 136.560727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 136.604880][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.823460][ T6956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.831635][ T9] imon 5-1:155.0: unable to initialize intf0, err -90 [ 136.842278][ T9] imon:imon_probe: failed to initialize context! [ 136.855432][ T6973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.860856][ T6956] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.866043][ T6973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.877471][ T9] imon 5-1:155.0: unable to register, err -19 [ 136.898796][ T7001] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 136.905342][ T7001] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 136.928238][ T6008] ir_usb 2-1:114.240: IR Dongle converter detected [ 136.936678][ T10] usb 1-1: USB disconnect, device number 7 [ 136.963388][ T9] usb 5-1: USB disconnect, device number 12 [ 137.025332][ T7001] vhci_hcd vhci_hcd.0: Device attached [ 137.033943][ T7005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 137.138518][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.171158][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.220304][ T6008] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 137.229678][ T7014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 137.272718][ T7002] vhci_hcd: connection closed [ 137.272987][ T13] vhci_hcd vhci_hcd.5: stop threads [ 137.290775][ T5711] usb 44-1: SetAddress Request (2) to port 0 [ 137.296849][ T5711] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 137.330759][ T13] vhci_hcd vhci_hcd.5: release socket [ 137.337129][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 137.631552][ T5711] usb 44-1: enqueue for inactive port 0 [ 137.674097][ T7021] 9p: Bad value for 'rfdno' [ 137.681989][ T6008] usb 2-1: USB disconnect, device number 8 [ 137.706093][ T6008] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 137.728056][ T6008] ir_usb 2-1:114.240: device disconnected [ 138.173496][ T7027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 138.196145][ T5711] usb usb44-port1: attempt power cycle [ 138.328292][ T7030] netlink: 28 bytes leftover after parsing attributes in process `syz.5.310'. [ 138.527225][ T6008] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.701947][ T6008] usb 3-1: Using ep0 maxpacket: 32 [ 138.716139][ T6008] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 138.735761][ T6008] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.767189][ T6008] usb 3-1: config 1 interface 0 has no altsetting 0 [ 138.836050][ T5711] usb usb44-port1: unable to enumerate USB device [ 138.836076][ T6008] usb 3-1: New USB device found, idVendor=0dfc, idProduct=0101, bcdDevice= 0.40 [ 138.878453][ T6008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.265678][ T7040] netlink: 256 bytes leftover after parsing attributes in process `syz.1.313'. [ 139.271609][ T6008] usb 3-1: Product: У [ 139.420710][ T6008] usb 3-1: Manufacturer: íŠï¨¼æŸ·ìµ‚蔯킻皴竹隠ᤉ㗄è…飖갪í‹ê­•è…Ÿâ“¶åƒç‡¡ãµ¯ê¾¢åŠ¾è—“æ—²åº£ïŠ·ï¡Šè¶î”¸ã€´ê‘¦ãŠ¬è™¯â¶¹ã¾¾ç•‘à¡§í¾ã¨™ìš ç¢•ë°é£•䒴澊췙ᄸζ㻓ä’ëŽã‘ºè‡Šå¯—ᠵ솫ç¾èž¦æ”Ꭰ[ 139.482687][ T6008] usb 3-1: SerialNumber: ဇ [ 139.514507][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 139.514523][ T30] audit: type=1326 audit(2000000307.275:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 139.561325][ T30] audit: type=1326 audit(2000000307.315:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 139.602765][ T30] audit: type=1326 audit(2000000307.325:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 139.634635][ T30] audit: type=1326 audit(2000000307.325:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 139.768662][ T30] audit: type=1326 audit(2000000307.325:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 139.796559][ T7027] IPVS: length: 120 != 8 [ 139.805811][ T30] audit: type=1326 audit(2000000307.365:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 140.217917][ T30] audit: type=1326 audit(2000000307.365:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 140.256308][ T30] audit: type=1326 audit(2000000307.365:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 140.317730][ T30] audit: type=1326 audit(2000000307.365:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 140.404178][ T7047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.315'. [ 140.447147][ T6008] usbhid 3-1:1.0: can't add hid device: -71 [ 140.545468][ T30] audit: type=1326 audit(2000000307.365:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7042 comm="syz.4.315" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 140.549740][ T6008] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 140.889942][ T6008] usb 3-1: USB disconnect, device number 6 [ 140.988427][ T7059] 9p: Bad value for 'rfdno' [ 141.010558][ T7055] syzkaller0: entered promiscuous mode [ 141.026290][ T7055] syzkaller0: entered allmulticast mode [ 141.084489][ T7063] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 141.298826][ T7070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.322'. [ 141.638035][ T7074] erspan0: entered promiscuous mode [ 141.665095][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.325'. [ 141.773226][ T7078] netlink: 'syz.0.326': attribute type 7 has an invalid length. [ 141.781032][ T7078] netlink: 'syz.0.326': attribute type 8 has an invalid length. [ 141.918187][ T7083] netlink: 'syz.2.328': attribute type 1 has an invalid length. [ 141.975280][ T7083] bond1: entered promiscuous mode [ 141.991517][ T7083] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.039228][ T7087] bond1: (slave bridge1): making interface the new active one [ 142.052814][ T7087] bridge1: entered promiscuous mode [ 142.061701][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 142.062499][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 142.078972][ T7087] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 142.105609][ T7083] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 142.118871][ T7083] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 142.220859][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 142.227341][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.241766][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.264329][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.291445][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 142.344903][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 142.413362][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.458689][ T10] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.486879][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.495455][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.772249][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.921220][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.176741][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.188745][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.926044][ T10] usb 6-1: config 0 descriptor?? [ 144.074817][ T24] usb 2-1: USB disconnect, device number 9 [ 144.106303][ T7102] netlink: 48 bytes leftover after parsing attributes in process `syz.0.334'. [ 144.147296][ T7107] FAULT_INJECTION: forcing a failure. [ 144.147296][ T7107] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 144.196352][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.4.336 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.196373][ T7107] Tainted: [L]=SOFTLOCKUP [ 144.196377][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.196384][ T7107] Call Trace: [ 144.196387][ T7107] [ 144.196391][ T7107] dump_stack_lvl+0x100/0x190 [ 144.196410][ T7107] should_fail_ex.cold+0x5/0xa [ 144.196433][ T7107] _copy_to_user+0x32/0xd0 [ 144.196459][ T7107] simple_read_from_buffer+0xcb/0x170 [ 144.196481][ T7107] proc_fail_nth_read+0x1af/0x230 [ 144.196499][ T7107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.196512][ T7107] ? rw_verify_area+0xce/0x6d0 [ 144.196521][ T7107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.196532][ T7107] vfs_read+0x1e4/0xb30 [ 144.196546][ T7107] ? __pfx_vfs_read+0x10/0x10 [ 144.196557][ T7107] ? __fget_files+0x215/0x3d0 [ 144.196582][ T7107] ? __fget_files+0x21f/0x3d0 [ 144.196608][ T7107] ksys_read+0x12a/0x250 [ 144.196625][ T7107] ? __pfx_ksys_read+0x10/0x10 [ 144.196642][ T7107] ? rcu_is_watching+0x12/0xc0 [ 144.196661][ T7107] do_syscall_64+0x10b/0xf80 [ 144.196674][ T7107] ? clear_bhb_loop+0x40/0x90 [ 144.196687][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.196697][ T7107] RIP: 0033:0x7f42aef5d60e [ 144.196708][ T7107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.196731][ T7107] RSP: 002b:00007f42afe02fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.196747][ T7107] RAX: ffffffffffffffda RBX: 00007f42afe036c0 RCX: 00007f42aef5d60e [ 144.196757][ T7107] RDX: 000000000000000f RSI: 00007f42afe030a0 RDI: 0000000000000004 [ 144.196766][ T7107] RBP: 00007f42afe03090 R08: 0000000000000000 R09: 0000000000000000 [ 144.196775][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.196784][ T7107] R13: 00007f42af216038 R14: 00007f42af215fa0 R15: 00007ffec067dfa8 [ 144.196800][ T7107] [ 144.360669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 144.412792][ T10] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 144.442902][ T10] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 144.491084][ T6008] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 144.499638][ T10] microsoft 0003:045E:07DA.0002: implement() called with n (56) > 32! (kworker/0:1) [ 144.521661][ T7113] netlink: 72 bytes leftover after parsing attributes in process `syz.4.337'. [ 144.594161][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 144.594176][ T30] audit: type=1326 audit(2000000312.355:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 144.662947][ T6008] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 144.665260][ T10] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 144.673104][ T6008] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 144.694268][ T30] audit: type=1326 audit(2000000312.355:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 144.729577][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.339'. [ 144.740326][ T6008] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.828601][ T30] audit: type=1326 audit(2000000312.355:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 144.872333][ T6008] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 144.879452][ T10] microsoft 0003:045E:07DA.0002: no inputs found [ 144.922004][ T6008] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 144.987206][ T30] audit: type=1326 audit(2000000312.355:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 144.994575][ T10] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 145.064950][ T6008] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 145.102097][ T6008] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 145.160348][ T10] usb 6-1: USB disconnect, device number 3 [ 145.167644][ T6008] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.191683][ T30] audit: type=1326 audit(2000000312.355:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 145.228857][ T6008] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.266417][ T6008] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 145.288719][ T30] audit: type=1326 audit(2000000312.355:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 145.320159][ T6008] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 145.343546][ T6008] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 145.376285][ T6008] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.398188][ T30] audit: type=1326 audit(2000000312.355:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 145.427141][ T6008] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.439218][ T6008] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 145.453511][ T6008] usb 1-1: string descriptor 0 read error: -22 [ 145.467185][ T6008] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 145.477956][ T6008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.489490][ T30] audit: type=1326 audit(2000000312.355:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 145.522644][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 145.522853][ T6008] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 145.539565][ T30] audit: type=1326 audit(2000000312.355:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 145.637495][ T30] audit: type=1326 audit(2000000312.355:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.4.339" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42aef9cdd9 code=0x7ffc0000 [ 145.664368][ T9] usb 2-1: device descriptor read/64, error -71 [ 145.798103][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.4.346'. [ 145.910815][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 146.037004][ T7102] netlink: 'syz.0.334': attribute type 12 has an invalid length. [ 146.120500][ T7151] netlink: 'syz.5.348': attribute type 10 has an invalid length. [ 146.148624][ T7151] veth0_vlan: left promiscuous mode [ 146.161918][ T7151] veth0_vlan: entered promiscuous mode [ 146.168837][ T9] usb 2-1: device descriptor read/64, error -71 [ 146.172036][ T7151] team0: Device veth0_vlan failed to register rx_handler [ 146.285677][ T9] usb usb2-port1: attempt power cycle [ 146.439376][ T7161] kernel profiling enabled (shift: 27) [ 146.450381][ T7161] syzkaller0: entered promiscuous mode [ 146.458202][ T7161] syzkaller0: entered allmulticast mode [ 146.640808][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 146.662311][ T9] usb 2-1: device descriptor read/8, error -71 [ 146.913072][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 146.931881][ T7163] xt_TPROXY: Can be used only with -p tcp or -p udp [ 146.938829][ T6008] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 146.949968][ T9] usb 2-1: device descriptor read/8, error -71 [ 147.083037][ T9] usb usb2-port1: unable to enumerate USB device [ 147.113444][ T6008] usb 6-1: Using ep0 maxpacket: 16 [ 147.119827][ T6008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.132988][ T6008] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.142938][ T6008] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 147.155847][ T6008] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 147.164946][ T6008] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.176277][ T6008] usb 6-1: config 0 descriptor?? [ 147.262755][ T24] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 147.424746][ T24] usb 3-1: config 15 has an invalid interface number: 212 but max is 0 [ 147.433040][ T24] usb 3-1: config 15 has no interface number 0 [ 147.441172][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 147.450495][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.458787][ T24] usb 3-1: Product: syz [ 147.462960][ T24] usb 3-1: Manufacturer: syz [ 147.467615][ T24] usb 3-1: SerialNumber: syz [ 147.623083][ T6008] usbhid 6-1:0.0: can't add hid device: -71 [ 147.629173][ T6008] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 147.639296][ T6008] usb 6-1: USB disconnect, device number 4 [ 147.658193][ T5704] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 147.695821][ T24] ftdi_sio 3-1:15.212: FTDI USB Serial Device converter detected [ 147.704322][ T24] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 147.713487][ T24] usb 3-1: USB disconnect, device number 7 [ 147.720606][ T24] ftdi_sio 3-1:15.212: device disconnected [ 147.820027][ T5704] usb 5-1: unable to get BOS descriptor or descriptor too short [ 147.828108][ T5704] usb 5-1: not running at top speed; connect to a high speed hub [ 147.836658][ T5704] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.846789][ T5704] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.857460][ T5704] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.866518][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.874607][ T5704] usb 5-1: Product: syz [ 147.878758][ T5704] usb 5-1: Manufacturer: syz [ 147.883440][ T5704] usb 5-1: SerialNumber: syz [ 148.108431][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.119183][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.128456][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.139823][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.167925][ T5704] usb 5-1: 0:2 : does not exist [ 148.187242][ T5704] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 148.215579][ T5704] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 148.230509][ T5704] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 148.252120][ T7181] erspan0: entered promiscuous mode [ 148.259325][ T5704] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/1/1 [ 148.277503][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.360'. [ 148.296069][ T5704] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 148.324007][ T5704] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 148.373686][ T5704] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 148.399541][ T5704] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 148.421967][ T5704] usb 5-1: USB disconnect, device number 13 [ 148.453548][ T7188] netlink: 44 bytes leftover after parsing attributes in process `syz.1.363'. [ 148.572469][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 148.812160][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 148.862055][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.879977][ T9] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.895774][ T9] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.912089][ T9] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 148.926448][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 148.934009][ T9] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 148.943650][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.953119][ T9] usb 6-1: config 0 descriptor?? [ 149.154093][ T5704] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 149.186175][ T6008] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.263675][ T5711] usb 1-1: USB disconnect, device number 8 [ 149.326580][ T5704] usb 5-1: Using ep0 maxpacket: 8 [ 149.339946][ T5704] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 149.350918][ T6008] usb 3-1: Using ep0 maxpacket: 8 [ 149.356376][ T5704] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.368536][ T5704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.378308][ T5704] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.390247][ T6008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.397642][ T9] hid-thrustmaster 0003:044F:B65D.0003: item fetching failed at offset 3/5 [ 149.400538][ T5704] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.400579][ T5704] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.400600][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.402909][ T6008] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.419409][ T9] hid-thrustmaster 0003:044F:B65D.0003: parse failed with error -22 [ 149.437014][ T6008] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.465736][ T9] hid-thrustmaster 0003:044F:B65D.0003: probe with driver hid-thrustmaster failed with error -22 [ 149.488232][ T7198] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.497023][ T7198] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.521636][ T6008] usb 3-1: New USB device found, idVendor=057e, idProduct=201e, bcdDevice= 0.00 [ 149.534377][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.552730][ T6008] usb 3-1: config 0 descriptor?? [ 149.566017][ T6008] usbhid 3-1:0.0: fixing wrong optional hid class descriptors count [ 149.633654][ T24] usb 6-1: USB disconnect, device number 5 [ 149.732500][ T7198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.745847][ T7198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.018923][ T5704] usb 5-1: USB disconnect, device number 14 [ 150.032526][ T6008] usbhid 3-1:0.0: can't add hid device: -71 [ 150.096897][ T47] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.108348][ T6008] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 150.138298][ T47] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.156191][ T6008] usb 3-1: USB disconnect, device number 8 [ 150.162394][ T47] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.176629][ T47] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.227156][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.373'. [ 150.249099][ T7212] netlink: 40 bytes leftover after parsing attributes in process `syz.1.372'. [ 150.677242][ T7221] netlink: 48 bytes leftover after parsing attributes in process `syz.0.376'. [ 150.938856][ T6008] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 151.042293][ T5711] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 151.142016][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 151.195415][ T6008] usb 6-1: device descriptor read/64, error -71 [ 151.390781][ T5711] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 151.407145][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 151.438507][ T5711] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.454371][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 151.468840][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.482660][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 151.496144][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.508314][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 151.520098][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 151.526959][ T6008] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 151.533147][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 151.551281][ T5711] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 151.562981][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 151.573991][ T5711] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.585875][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.593924][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 151.606482][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 151.619986][ T5711] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 151.627947][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 151.642638][ T9] usb 3-1: config 0 descriptor?? [ 151.650118][ T5711] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.668551][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 151.679892][ T5711] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 151.695316][ T5711] usb 1-1: string descriptor 0 read error: -22 [ 151.710293][ T5711] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 151.720029][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.739186][ T5711] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 151.751312][ T6008] usb 6-1: device descriptor read/64, error -71 [ 151.837066][ T5704] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 151.869451][ T6008] usb usb6-port1: attempt power cycle [ 151.901521][ T24] IPVS: starting estimator thread 0... [ 151.921879][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 151.921907][ T30] audit: type=1326 audit(2000000319.271:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.4.382" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42aef9cdd9 code=0x0 [ 152.024919][ T5704] usb 2-1: config 8 has an invalid interface number: 137 but max is 0 [ 152.035029][ T5704] usb 2-1: config 8 has no interface number 0 [ 152.061054][ T7240] IPVS: using max 44 ests per chain, 105600 per kthread [ 152.084688][ T5704] usb 2-1: string descriptor 0 read error: -22 [ 152.105860][ T5704] usb 2-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 152.118806][ T7242] netlink: 'syz.0.376': attribute type 12 has an invalid length. [ 152.127069][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.141569][ T5704] ttusb_dec_send_command: command bulk message failed: error -22 [ 152.158887][ T5704] ttusb-dec 2-1:8.137: probe with driver ttusb-dec failed with error -22 [ 152.236342][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0004/input/input9 [ 152.285148][ T6008] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 152.307156][ T6008] usb 6-1: device descriptor read/8, error -71 [ 152.315022][ T30] audit: type=1400 audit(2000000319.729:1049): avc: denied { read } for pid=4962 comm="acpid" name="mouse1" dev="devtmpfs" ino=2944 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.344585][ T30] audit: type=1400 audit(2000000319.729:1050): avc: denied { open } for pid=4962 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2944 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.377586][ T30] audit: type=1400 audit(2000000319.729:1051): avc: denied { ioctl } for pid=4962 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=2944 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.415327][ T9] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 152.680595][ T6008] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 152.691968][ T30] audit: type=1400 audit(2000000320.085:1052): avc: denied { getopt } for pid=7233 comm="syz.1.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 152.712976][ T6008] usb 6-1: device descriptor read/8, error -71 [ 152.787628][ T7225] netlink: 132 bytes leftover after parsing attributes in process `syz.2.378'. [ 152.800347][ T9] usb 3-1: USB disconnect, device number 9 [ 152.830451][ T6008] usb usb6-port1: unable to enumerate USB device [ 153.277970][ T30] audit: type=1326 audit(2000000320.319:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7247 comm="syz.4.383" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f42aef9cdd9 code=0x0 [ 153.369342][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.389691][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.538796][ T24] usb 2-1: USB disconnect, device number 14 [ 153.734209][ T6008] usb 1-1: USB disconnect, device number 9 [ 154.253283][ T6008] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 154.636165][ T6008] usb 1-1: Using ep0 maxpacket: 16 [ 154.667288][ T6008] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 154.705013][ T6008] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 154.729433][ T6008] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 154.996312][ T6008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.022949][ T6008] usb 1-1: Product: syz [ 155.036846][ T6008] usb 1-1: Manufacturer: syz [ 155.052630][ T6008] usb 1-1: SerialNumber: syz [ 155.089912][ T6008] usb 1-1: config 0 descriptor?? [ 155.115022][ T6008] hub 1-1:0.0: bad descriptor, ignoring hub [ 155.131816][ T6008] hub 1-1:0.0: probe with driver hub failed with error -5 [ 155.160942][ T6008] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 155.286092][ T30] audit: type=1400 audit(2000000322.509:1054): avc: denied { ioctl } for pid=7292 comm="syz.2.396" path="socket:[14246]" dev="sockfs" ino=14246 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.328593][ T7267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.367141][ T7267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.388311][ T7294] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 155.426116][ T7294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.557957][ T30] audit: type=1400 audit(2000000322.771:1055): avc: denied { block_suspend } for pid=7292 comm="syz.2.396" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 155.581063][ T6008] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 155.833239][ T6008] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 156.017131][ T6008] usb 1-1: device firmware changed [ 156.046371][ T6008] usb 1-1: USB disconnect, device number 10 [ 156.204361][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.328197][ T30] audit: type=1326 audit(2000000323.491:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.5.403" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7febb079cdd9 code=0x0 [ 156.933567][ T6008] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 156.962427][ T7324] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 156.988499][ T7324] bond1: entered promiscuous mode [ 157.002987][ T7324] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.090468][ T7324] bond1: (slave bridge1): making interface the new active one [ 157.104830][ T6008] usb 1-1: Using ep0 maxpacket: 16 [ 157.110715][ T6008] usb 1-1: too many configurations: 60, using maximum allowed: 8 [ 157.120688][ T6008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.132233][ T7324] bridge1: entered promiscuous mode [ 157.134206][ T6008] usb 1-1: config 0 has no interfaces? [ 157.144093][ T6008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.162145][ T6008] usb 1-1: config 0 has no interfaces? [ 157.174914][ T6008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.189571][ T6008] usb 1-1: config 0 has no interfaces? [ 157.196522][ T6008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.208203][ T6008] usb 1-1: config 0 has no interfaces? [ 157.215308][ T6008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.225794][ T6008] usb 1-1: config 0 has no interfaces? [ 157.232278][ T6008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.243521][ T7324] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 157.278991][ T6008] usb 1-1: config 0 has no interfaces? [ 157.358415][ T6008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.392862][ T6008] usb 1-1: config 0 has no interfaces? [ 157.404060][ T6008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.420869][ T6008] usb 1-1: config 0 has no interfaces? [ 157.436476][ T6008] usb 1-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9 [ 157.446132][ T6008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204 [ 157.454520][ T6008] usb 1-1: Product: syz [ 157.461687][ T6008] usb 1-1: Manufacturer: syz [ 157.466325][ T6008] usb 1-1: SerialNumber: syz [ 157.586404][ T6008] usb 1-1: config 0 descriptor?? [ 157.609917][ T7328] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.701938][ T7328] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 158.053945][ T7303] snd_aloop snd_aloop.0: control 0:0:0:syz0:7 is already present [ 158.080321][ T4929] Bluetooth: hci1: unexpected event for opcode 0x87cd [ 158.099641][ T30] audit: type=1400 audit(2000000325.147:1057): avc: denied { setopt } for pid=7302 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.127399][ T5704] usb 1-1: USB disconnect, device number 11 [ 158.491705][ T7339] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.500518][ T7339] overlayfs: missing 'lowerdir' [ 158.983703][ T7349] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'. [ 159.007052][ T30] audit: type=1400 audit(2000000325.971:1058): avc: denied { nlmsg_read } for pid=7346 comm="syz.0.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 159.691278][ T30] audit: type=1326 audit(2000000326.635:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 159.719087][ T30] audit: type=1326 audit(2000000326.635:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 160.385874][ T30] audit: type=1326 audit(2000000326.635:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 160.522096][ T30] audit: type=1326 audit(2000000326.635:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 160.831391][ T30] audit: type=1326 audit(2000000326.635:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 161.406878][ T30] audit: type=1326 audit(2000000326.635:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 161.530256][ T7386] netlink: 256 bytes leftover after parsing attributes in process `syz.5.423'. [ 161.710403][ T24] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 162.332689][ T30] audit: type=1326 audit(2000000326.635:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 162.437030][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 162.448531][ T7390] netlink: 36 bytes leftover after parsing attributes in process `syz.2.425'. [ 162.476358][ T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 162.487378][ T24] usb 5-1: config 0 has no interface number 0 [ 162.496123][ T30] audit: type=1326 audit(2000000326.635:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7358 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 162.524388][ T24] usb 5-1: config 0 interface 184 has no altsetting 0 [ 162.831109][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 162.843195][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.914877][ T24] usb 5-1: Product: syz [ 162.925716][ T7394] kvm: pic: non byte write [ 162.935068][ T24] usb 5-1: Manufacturer: syz [ 162.960632][ T24] usb 5-1: SerialNumber: syz [ 162.980042][ T24] usb 5-1: config 0 descriptor?? [ 163.630170][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 163.660799][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 163.671379][ T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 163.723735][ T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 163.993696][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.429'. [ 164.402877][ T7415] netlink: 'syz.1.430': attribute type 11 has an invalid length. [ 165.034003][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 165.034034][ T30] audit: type=1326 audit(2000000331.623:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.1.431" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7194b9cdd9 code=0x0 [ 165.574307][ T7425] binder: 7424:7425 ioctl c0306201 200000000080 returned -14 [ 165.631759][ T7428] binder: 7424:7428 ioctl c0306201 2000000003c0 returned -14 [ 165.835522][ T30] audit: type=1400 audit(2000000332.391:1109): avc: denied { ioctl } for pid=7433 comm="syz.0.437" path="socket:[16697]" dev="sockfs" ino=16697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.915016][ T30] audit: type=1400 audit(2000000332.391:1110): avc: denied { bind } for pid=7433 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 165.996315][ T30] audit: type=1400 audit(2000000332.540:1111): avc: denied { setopt } for pid=7433 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.037858][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.437'. [ 166.046537][ T30] audit: type=1400 audit(2000000332.568:1112): avc: denied { write } for pid=7433 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 166.251799][ T5711] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 166.433489][ T5711] usb 6-1: device descriptor read/64, error -71 [ 166.711502][ T5711] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 166.805411][ T29] usb 5-1: USB disconnect, device number 15 [ 166.858249][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.439'. [ 166.882408][ T5711] usb 6-1: device descriptor read/64, error -71 [ 166.900886][ T4929] Bluetooth: hci1: unexpected event for opcode 0x042c [ 167.001392][ T30] audit: type=1400 audit(2000000333.476:1113): avc: denied { append } for pid=7460 comm="syz.4.441" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.032104][ T5711] usb usb6-port1: attempt power cycle [ 167.172454][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 167.491620][ T5711] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 167.525522][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 167.541286][ T5711] usb 6-1: device descriptor read/8, error -71 [ 167.543721][ T24] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 167.558130][ T24] usb 1-1: config 114 has no interface number 0 [ 167.578527][ T24] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 167.688472][ T24] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 167.703026][ T24] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 167.715877][ T24] usb 1-1: config 114 interface 240 has no altsetting 0 [ 167.731053][ T24] usb 1-1: string descriptor 0 read error: -22 [ 167.738348][ T24] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 167.747413][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.029154][ T5711] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 168.817855][ T5711] usb 6-1: device descriptor read/8, error -71 [ 168.862002][ T7454] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.869551][ T7454] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 168.878613][ T24] ir_usb 1-1:114.240: IR Dongle converter detected [ 168.944841][ T5711] usb usb6-port1: unable to enumerate USB device [ 169.208909][ T7454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.227318][ T7454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.752037][ T24] usb 1-1: IR Dongle converter now attached to ttyUSB0 [ 169.892161][ T7489] binder: 7488:7489 ioctl c0306201 200000000080 returned -14 [ 169.917063][ T7489] binder: 7488:7489 ioctl c0306201 2000000003c0 returned -14 [ 169.926476][ T7489] binder: 7488:7489 ioctl c0306201 200000000000 returned -14 [ 170.047982][ T24] usb 1-1: USB disconnect, device number 12 [ 170.085205][ T7493] netlink: 256 bytes leftover after parsing attributes in process `syz.5.450'. [ 170.158494][ T24] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 170.175258][ T24] ir_usb 1-1:114.240: device disconnected [ 170.381580][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 170.438033][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.457'. [ 170.502370][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.455'. [ 170.536912][ T6008] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 170.553171][ T7507] ip6gretap0: entered promiscuous mode [ 170.561089][ T7507] macvtap1: entered promiscuous mode [ 170.567840][ T7507] macvtap1: entered allmulticast mode [ 170.573499][ T7507] ip6gretap0: entered allmulticast mode [ 170.699195][ T6008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.726221][ T6008] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 170.760541][ T6008] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 170.783533][ T7515] wg1 speed is unknown, defaulting to 1000 [ 170.787476][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.909165][ T6008] usb 3-1: config 0 descriptor?? [ 170.931593][ T6008] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 171.402826][ T6008] dvb-usb: bulk message failed: -22 (3/0) [ 171.432935][ T6008] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 171.460391][ T6008] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 171.477349][ T7528] dvb-usb: bulk message failed: -22 (2/0) [ 171.477845][ T6008] usb 3-1: media controller created [ 171.529973][ T6008] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.587531][ T6008] dvb-usb: bulk message failed: -22 (6/0) [ 171.596658][ T6008] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 171.615177][ T6008] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 171.635192][ T6008] dvb-usb: schedule remote query interval to 150 msecs. [ 171.643654][ T6008] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 171.651763][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 171.675753][ T6008] usb 3-1: USB disconnect, device number 10 [ 171.830122][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 171.902590][ T6008] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 171.924099][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.946901][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 172.417977][ T24] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.427129][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.444489][ T24] usb 6-1: config 0 descriptor?? [ 172.756318][ T7545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 172.858235][ T6008] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 173.439677][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.470127][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.509145][ T6008] usb 3-1: config 151 has an invalid interface number: 212 but max is 0 [ 173.526774][ T6008] usb 3-1: config 151 has no interface number 0 [ 173.548574][ T6008] usb 3-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 173.564307][ T6008] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.587302][ T6008] usb 3-1: Product: syz [ 173.599201][ T6008] usb 3-1: Manufacturer: syz [ 173.613317][ T7556] process 'syz.0.468' launched './file0' with NULL argv: empty string added [ 173.622886][ T6008] usb 3-1: SerialNumber: syz [ 173.659552][ T30] audit: type=1400 audit(2000000339.699:1114): avc: denied { execute_no_trans } for pid=7552 comm="syz.0.468" path="/77/file0" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 173.871721][ T6008] ftdi_sio 3-1:151.212: FTDI USB Serial Device converter detected [ 173.901717][ T6008] ftdi_sio ttyUSB0: unknown device type: 0xd723 [ 173.933190][ T6008] usb 3-1: USB disconnect, device number 11 [ 173.954770][ T6008] ftdi_sio 3-1:151.212: device disconnected [ 174.456751][ T30] audit: type=1400 audit(2000000340.448:1115): avc: denied { write } for pid=7563 comm="syz.1.471" path="socket:[16956]" dev="sockfs" ino=16956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 174.646133][ T24] usb 6-1: USB disconnect, device number 14 [ 175.130996][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.370317][ T10] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 175.422905][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.526208][ T7573] netlink: 'syz.2.474': attribute type 10 has an invalid length. [ 175.616481][ T7573] team0: Device veth0_vlan is up. Set it down before adding it as a team port [ 176.619081][ T10] usb 2-1: config 0 descriptor?? [ 176.831712][ T30] audit: type=1400 audit(2000000342.666:1116): avc: denied { unmount } for pid=6488 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 176.925446][ T10] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0e [ 176.957167][ T10] hackrf 2-1:0.0: Could not detect board [ 177.035206][ T10] hackrf 2-1:0.0: probe with driver hackrf failed with error -71 [ 177.091240][ T10] usb 2-1: USB disconnect, device number 15 [ 178.575581][ T7587] 9p: Bad value for 'rfdno' [ 178.577727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 178.871288][ T7599] capability: warning: `syz.4.481' uses deprecated v2 capabilities in a way that may be insecure [ 178.934800][ T30] audit: type=1400 audit(2000000344.575:1117): avc: denied { mount } for pid=7590 comm="syz.4.481" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 179.088805][ T30] audit: type=1400 audit(2000000344.593:1118): avc: denied { search } for pid=7590 comm="syz.4.481" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.154055][ T30] audit: type=1400 audit(2000000344.593:1119): avc: denied { setattr } for pid=7590 comm="syz.4.481" name="/" dev="configfs" ino=1070 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 179.439549][ T30] audit: type=1326 audit(2000000345.099:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.0.483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 180.310585][ T30] audit: type=1326 audit(2000000345.099:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.0.483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 180.416788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 180.442359][ T30] audit: type=1326 audit(2000000345.108:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.0.483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 180.443885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #24a!!! [ 182.035484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c8!!! [ 183.648736][ T30] audit: type=1326 audit(2000000345.108:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.0.483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 183.700313][ T30] audit: type=1326 audit(2000000345.108:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.0.483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 183.726945][ T30] audit: type=1326 audit(2000000345.108:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.0.483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 183.765352][ T30] audit: type=1326 audit(2000000345.108:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.0.483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 183.901565][ T30] audit: type=1326 audit(2000000345.108:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7598 comm="syz.0.483" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1b0f9cdd9 code=0x7ffc0000 [ 184.088081][ T7617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.187580][ T7617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.198733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!! [ 184.528984][ T6008] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 184.538399][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 184.538414][ T30] audit: type=1400 audit(2000000349.796:1173): avc: denied { append } for pid=7618 comm="syz.0.488" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 185.393941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 185.416559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 185.650776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #ca!!! [ 186.620117][ T30] audit: type=1400 audit(2000000349.890:1174): avc: denied { name_bind } for pid=7620 comm="syz.5.489" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 189.008803][ T7625] ./file0: Can't open blockdev [ 189.290308][ T30] audit: type=1400 audit(2000000349.946:1175): avc: denied { create } for pid=7620 comm="syz.5.489" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 192.511115][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.522974][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.342655][ T30] audit: type=1400 audit(2000000349.965:1176): avc: denied { mounton } for pid=7620 comm="syz.5.489" path="/51/file0" dev="tmpfs" ino=295 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 201.227195][ C0] sched: DL replenish lagged too much [ 209.386672][ T30] audit: type=1400 audit(2000000350.498:1177): avc: denied { mounton } for pid=7620 comm="syz.5.489" path="/51/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 262.544231][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.465372][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 335.472330][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7628/1:b..l P5602/1:b..l P5725/1:b..l [ 335.482851][ C1] rcu: (detected by 1, t=10502 jiffies, g=25033, q=967 ncpus=2) [ 335.490557][ C1] task:kworker/0:5 state:R running task stack:22360 pid:5725 tgid:5725 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 335.504793][ C1] Workqueue: events_power_efficient gc_worker [ 335.510881][ C1] Call Trace: [ 335.514153][ C1] [ 335.517077][ C1] __schedule+0x10e9/0x6820 [ 335.521581][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 335.527401][ C1] ? __pfx___schedule+0x10/0x10 [ 335.532248][ C1] ? mark_held_locks+0x40/0x70 [ 335.537014][ C1] preempt_schedule_irq+0x50/0x90 [ 335.542036][ C1] irqentry_exit+0x1fe/0x790 [ 335.546622][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 335.552593][ C1] RIP: 0010:write_comp_data+0x40/0x90 [ 335.557957][ C1] Code: 02 12 a9 00 01 ff 00 74 1b f6 c4 01 74 07 a9 00 00 ff 00 74 05 c3 cc cc cc cc 8b 87 cc 16 00 00 85 c0 74 f1 8b 87 a8 16 00 00 <83> f8 03 75 e6 48 8b 87 b0 16 00 00 8b bf ac 16 00 00 48 8b 30 48 [ 335.577558][ C1] RSP: 0018:ffffc900047bfb38 EFLAGS: 00000246 [ 335.583620][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff89af0954 [ 335.591582][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802aa90000 [ 335.599543][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 335.607502][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 335.615462][ C1] R13: 0000000000040000 R14: 00000000000158c0 R15: 00000000000017d8 [ 335.623431][ C1] ? gc_worker+0x2d4/0x1630 [ 335.627939][ C1] ? gc_worker+0xd56/0x1630 [ 335.632436][ C1] gc_worker+0x2d4/0x1630 [ 335.636772][ C1] ? __pfx_gc_worker+0x10/0x10 [ 335.641536][ C1] ? rcu_is_watching+0x12/0xc0 [ 335.646304][ C1] process_one_work+0xa0e/0x1980 [ 335.651246][ C1] ? __pfx_process_one_work+0x10/0x10 [ 335.656621][ C1] ? __pfx_gc_worker+0x10/0x10 [ 335.661384][ C1] worker_thread+0x5ef/0xe50 [ 335.665979][ C1] ? kthread+0x13a/0x450 [ 335.670211][ C1] ? __pfx_worker_thread+0x10/0x10 [ 335.675320][ C1] kthread+0x370/0x450 [ 335.679381][ C1] ? __pfx_kthread+0x10/0x10 [ 335.683969][ C1] ret_from_fork+0x72b/0xd50 [ 335.688556][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 335.693662][ C1] ? __switch_to+0x800/0x1100 [ 335.698339][ C1] ? __pfx_kthread+0x10/0x10 [ 335.702928][ C1] ret_from_fork_asm+0x1a/0x30 [ 335.707702][ C1] [ 335.710713][ C1] task:syz-executor state:R running task stack:25112 pid:5602 tgid:5602 ppid:5594 task_flags:0x40050c flags:0x00080002 [ 335.724194][ C1] Call Trace: [ 335.727463][ C1] [ 335.730386][ C1] __schedule+0x10e9/0x6820 [ 335.734900][ C1] ? __pfx___schedule+0x10/0x10 [ 335.739750][ C1] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 335.745811][ C1] preempt_schedule_notrace+0x5f/0xd0 [ 335.751180][ C1] preempt_schedule_notrace_thunk+0x16/0x30 [ 335.757070][ C1] rcu_is_watching+0x8e/0xc0 [ 335.761658][ C1] lock_acquire+0x2f9/0x370 [ 335.766154][ C1] ? unwind_next_frame+0x3be/0x2090 [ 335.771348][ C1] ? unwind_next_frame+0x3be/0x2090 [ 335.776545][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.782691][ C1] unwind_next_frame+0xd1/0x2090 [ 335.787626][ C1] ? unwind_next_frame+0xbd/0x2090 [ 335.792734][ C1] ? kmem_cache_free+0x41e/0x6c0 [ 335.797670][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 335.803816][ C1] arch_stack_walk+0x94/0xf0 [ 335.808414][ C1] ? kmem_cache_free+0x41e/0x6c0 [ 335.813352][ C1] ? tear_down_vmas+0x2a5/0x600 [ 335.818193][ C1] stack_trace_save+0x8e/0xc0 [ 335.822864][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 335.828227][ C1] ? __lock_acquire+0x4a5/0x2630 [ 335.833170][ C1] ? kasan_save_stack+0x30/0x50 [ 335.838035][ C1] ? kasan_record_aux_stack+0xa7/0xc0 [ 335.843407][ C1] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 335.849480][ C1] kasan_save_stack+0x30/0x50 [ 335.854161][ C1] ? kasan_save_stack+0x30/0x50 [ 335.859015][ C1] ? kasan_save_track+0x14/0x30 [ 335.863855][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 335.868616][ C1] ? kmem_cache_free+0x41e/0x6c0 [ 335.873594][ C1] kasan_save_track+0x14/0x30 [ 335.878266][ C1] __kasan_kmalloc+0xaa/0xb0 [ 335.882865][ C1] kmem_cache_free+0x41e/0x6c0 [ 335.887634][ C1] tear_down_vmas+0x2a5/0x600 [ 335.892311][ C1] exit_mmap+0x469/0xa10 [ 335.896552][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 335.901315][ C1] ? rcu_is_watching+0x12/0xc0 [ 335.906084][ C1] ? uprobe_clear_state+0x5f/0x260 [ 335.911196][ C1] ? uprobe_clear_state+0x5f/0x260 [ 335.916311][ C1] ? __lock_acquire+0x4a5/0x2630 [ 335.921255][ C1] ? arch_uprobe_clear_state+0x107/0x150 [ 335.926890][ C1] __mmput+0x12a/0x410 [ 335.930961][ C1] mmput+0x67/0x80 [ 335.934678][ C1] do_exit+0x833/0x2a60 [ 335.938828][ C1] ? do_raw_read_unlock+0x3f/0x70 [ 335.943855][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 335.949222][ C1] ? __pfx_do_exit+0x10/0x10 [ 335.953802][ C1] ? do_raw_spin_lock+0x128/0x260 [ 335.958823][ C1] ? find_held_lock+0x2b/0x80 [ 335.963488][ C1] ? get_signal+0x7e0/0x21e0 [ 335.968081][ C1] do_group_exit+0xd5/0x2a0 [ 335.972581][ C1] get_signal+0x1ec7/0x21e0 [ 335.977084][ C1] ? __pfx_kernel_wait4+0x10/0x10 [ 335.982111][ C1] ? __pfx_get_signal+0x10/0x10 [ 335.986966][ C1] arch_do_signal_or_restart+0x91/0x7a0 [ 335.992511][ C1] ? rcu_is_watching+0x12/0xc0 [ 335.997274][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 336.003440][ C1] ? rcu_is_watching+0x12/0xc0 [ 336.008205][ C1] exit_to_user_mode_loop+0x86/0x4a0 [ 336.013485][ C1] ? do_syscall_64+0x52d/0xf80 [ 336.018241][ C1] do_syscall_64+0x706/0xf80 [ 336.022822][ C1] ? clear_bhb_loop+0x40/0x90 [ 336.027496][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.033378][ C1] RIP: 0033:0x7fe1b0f57f57 [ 336.037783][ C1] RSP: 002b:00007fff40b1a9e0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 336.046189][ C1] RAX: fffffffffffffe00 RBX: 00005555803fd500 RCX: 00007fe1b0f57f57 [ 336.054152][ C1] RDX: 0000000040000000 RSI: 00007fff40b1aa3c RDI: ffffffffffffffff [ 336.062114][ C1] RBP: 00007fff40b1aa3c R08: 0000000000000000 R09: 0000000000000000 [ 336.070074][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 336.078031][ C1] R13: 0000000000000003 R14: 00007fff40b1ac98 R15: 0000000000000000 [ 336.086008][ C1] [ 336.089023][ C1] task:kworker/u8:1 state:R running task stack:29240 pid:7628 tgid:7628 ppid:13 task_flags:0x8040 flags:0x00080000 [ 336.102353][ C1] Call Trace: [ 336.105639][ C1] [ 336.108566][ C1] __schedule+0x10e9/0x6820 [ 336.113069][ C1] ? find_held_lock+0x2b/0x80 [ 336.117755][ C1] ? __pfx___schedule+0x10/0x10 [ 336.122606][ C1] ? mark_held_locks+0x40/0x70 [ 336.127366][ C1] preempt_schedule_irq+0x50/0x90 [ 336.132383][ C1] irqentry_exit+0x1fe/0x790 [ 336.136970][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 336.142946][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 336.148141][ C1] Code: 05 fb 2d 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 06 29 f3 0e 0f 82 a4 02 00 00 8b 35 8e 5c f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 2d 26 12 0f 85 ed 02 00 00 48 83 c4 [ 336.167748][ C1] RSP: 0018:ffffc9000303f918 EFLAGS: 00000206 [ 336.173821][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000001 [ 336.181785][ C1] RDX: 0000000000000000 RSI: ffffffff8defa991 RDI: ffffffff8c1c3600 [ 336.189749][ C1] RBP: ffffffff8e7e54e0 R08: 000000002f091286 R09: 0000000000000007 [ 336.197720][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 336.205682][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.213665][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 336.218873][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 336.225023][ C1] unwind_next_frame+0xd1/0x2090 [ 336.229966][ C1] ? unwind_next_frame+0xbd/0x2090 [ 336.235076][ C1] ? stack_trace_save+0x8e/0xc0 [ 336.239923][ C1] ? __unwind_start+0x3d1/0x7f0 [ 336.244773][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 336.250922][ C1] arch_stack_walk+0x94/0xf0 [ 336.255522][ C1] ? stack_trace_save+0x8e/0xc0 [ 336.260368][ C1] stack_trace_save+0x8e/0xc0 [ 336.265037][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 336.270406][ C1] ? __lock_acquire+0x4a5/0x2630 [ 336.275337][ C1] ? __lock_acquire+0x4a5/0x2630 [ 336.280271][ C1] save_stack+0x162/0x1e0 [ 336.284593][ C1] ? __pfx_save_stack+0x10/0x10 [ 336.289445][ C1] ? page_ext_put+0x3e/0xd0 [ 336.293947][ C1] __reset_page_owner+0x84/0x190 [ 336.298878][ C1] __free_frozen_pages+0x747/0x1040 [ 336.304071][ C1] ? __free_slab+0xd0/0x220 [ 336.308574][ C1] qlist_free_all+0x47/0xf0 [ 336.313076][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 336.318535][ C1] __kasan_slab_alloc+0x69/0x90 [ 336.323378][ C1] __kmalloc_cache_noprof+0x243/0x6f0 [ 336.328743][ C1] ? alloc_bprm+0x86/0x710 [ 336.333150][ C1] ? __pfx_async_synchronize_cookie_domain+0x10/0x10 [ 336.339821][ C1] alloc_bprm+0x86/0x710 [ 336.344058][ C1] kernel_execve+0x8f/0x3a0 [ 336.348556][ C1] call_usermodehelper_exec_async+0x239/0x4b0 [ 336.354618][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 336.359808][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 336.366390][ C1] ret_from_fork+0x72b/0xd50 [ 336.370977][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 336.376082][ C1] ? __switch_to+0x800/0x1100 [ 336.380760][ C1] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 336.387352][ C1] ret_from_fork_asm+0x1a/0x30 [ 336.392129][ C1] [ 336.395137][ C1] rcu: rcu_preempt kthread starved for 9947 jiffies! g25033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 336.406232][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 336.416186][ C1] rcu: RCU grace-period kthread stack dump: [ 336.422056][ C1] task:rcu_preempt state:R running task stack:28672 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 336.435535][ C1] Call Trace: [ 336.438804][ C1] [ 336.441727][ C1] __schedule+0x10e9/0x6820 [ 336.446240][ C1] ? __pfx___schedule+0x10/0x10 [ 336.451082][ C1] ? find_held_lock+0x2b/0x80 [ 336.455754][ C1] ? schedule+0x2bf/0x390 [ 336.460077][ C1] schedule+0xdd/0x390 [ 336.464136][ C1] schedule_timeout+0x127/0x280 [ 336.468987][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 336.474356][ C1] ? __pfx_process_timeout+0x10/0x10 [ 336.479634][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 336.485431][ C1] ? prepare_to_swait_event+0xdf/0x4a0 [ 336.490887][ C1] rcu_gp_fqs_loop+0x1a9/0x900 [ 336.495647][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 336.500925][ C1] ? prepare_to_swait_event+0xae/0x4a0 [ 336.506377][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 336.511309][ C1] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 336.516504][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 336.522306][ C1] rcu_gp_kthread+0x179/0x230 [ 336.526975][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 336.532163][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 336.537969][ C1] ? __kthread_parkme+0x18c/0x230 [ 336.543002][ C1] ? kthread+0x13a/0x450 [ 336.547242][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 336.552437][ C1] kthread+0x370/0x450 [ 336.556506][ C1] ? __pfx_kthread+0x10/0x10 [ 336.561094][ C1] ret_from_fork+0x72b/0xd50 [ 336.565684][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 336.570795][ C1] ? __switch_to+0x800/0x1100 [ 336.575471][ C1] ? __pfx_kthread+0x10/0x10 [ 336.580056][ C1] ret_from_fork_asm+0x1a/0x30 [ 336.584832][ C1] [ 336.587841][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 336.594153][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 336.604642][ C1] Tainted: [L]=SOFTLOCKUP [ 336.608954][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.618998][ C1] RIP: 0010:lock_acquire+0x5e/0x370 [ 336.624193][ C1] Code: 05 fb 2d 26 12 83 f8 07 0f 87 d9 02 00 00 48 0f a3 05 06 29 f3 0e 0f 82 a4 02 00 00 8b 35 8e 5c f3 0e 85 f6 0f 85 bf 00 00 00 <48> 8b 44 24 30 65 48 2b 05 9d 2d 26 12 0f 85 ed 02 00 00 48 83 c4 [ 336.643791][ C1] RSP: 0018:ffffc90000a082e8 EFLAGS: 00000206 [ 336.649853][ C1] RAX: 0000000000000046 RBX: 0000000000000000 RCX: 0000000000000003 [ 336.657811][ C1] RDX: 0000000000000000 RSI: ffffffff8defa991 RDI: ffffffff8c1c3600 [ 336.665774][ C1] RBP: ffffffff8e7e54e0 R08: 000000005970cd9e R09: 0000000000000007 [ 336.673736][ C1] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000002 [ 336.681702][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 336.689665][ C1] FS: 0000000000000000(0000) GS:ffff888124476000(0000) knlGS:0000000000000000 [ 336.698584][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 336.705156][ C1] CR2: 00007fd569df8cb4 CR3: 000000004d37b000 CR4: 00000000003526f0 [ 336.713117][ C1] Call Trace: [ 336.716385][ C1] [ 336.719228][ C1] ip6_route_output_flags+0x4b/0x650 [ 336.724508][ C1] ? ip6_route_output_flags+0x3a/0x650 [ 336.729961][ C1] __nf_ip6_route+0x4c/0xe0 [ 336.734462][ C1] synproxy_send_tcp_ipv6+0x367/0x700 [ 336.739827][ C1] ? __pfx_cookie_hash.isra.0+0x10/0x10 [ 336.745370][ C1] ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10 [ 336.751266][ C1] ? __cookie_v6_init_sequence+0x2d7/0x3c0 [ 336.757073][ C1] synproxy_send_client_synack_ipv6+0x601/0x7a0 [ 336.763312][ C1] ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10 [ 336.770069][ C1] ? net_generic+0xea/0x2a0 [ 336.774576][ C1] nft_synproxy_do_eval+0x938/0xd50 [ 336.779773][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 336.785485][ C1] ? unwind_next_frame+0x3be/0x2090 [ 336.790679][ C1] ? unwind_next_frame+0x3be/0x2090 [ 336.795882][ C1] ? unwind_next_frame+0x3c8/0x2090 [ 336.801073][ C1] ? common_startup_64+0x13e/0x148 [ 336.806181][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 336.811635][ C1] nft_do_chain+0x2e5/0x1950 [ 336.816220][ C1] ? ip6t_do_table+0xbed/0x1c90 [ 336.821060][ C1] ? __local_bh_enable_ip+0x9e/0x120 [ 336.826346][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 336.831388][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 336.836591][ C1] nft_do_chain_inet+0xf3/0x400 [ 336.841435][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 336.846889][ C1] ? nf_nat_ipv6_local_in+0x4b5/0x6c0 [ 336.852255][ C1] ? lock_acquire+0x1b1/0x370 [ 336.856930][ C1] nf_hook_slow+0xbf/0x220 [ 336.861344][ C1] nf_hook.constprop.0+0x2a6/0x750 [ 336.866449][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 336.871817][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 336.877452][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 336.882829][ C1] ip6_input+0xe0/0x2f0 [ 336.886977][ C1] ? __pfx_ip6_input+0x10/0x10 [ 336.891735][ C1] ipv6_rcv+0x263/0x3d0 [ 336.895891][ C1] ? __pfx_ipv6_rcv+0x10/0x10 [ 336.900560][ C1] __netif_receive_skb_one_core+0x12d/0x1e0 [ 336.906455][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 336.912867][ C1] ? lock_acquire+0x1b1/0x370 [ 336.917545][ C1] ? process_backlog+0x32a/0x1580 [ 336.922577][ C1] ? process_backlog+0x32a/0x1580 [ 336.927610][ C1] __netif_receive_skb+0x1f/0x120 [ 336.932632][ C1] process_backlog+0x37a/0x1580 [ 336.937490][ C1] __napi_poll.constprop.0+0xaf/0x450 [ 336.942861][ C1] net_rx_action+0xa40/0xf20 [ 336.947461][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 336.952580][ C1] ? rcu_is_watching+0x12/0xc0 [ 336.957349][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 336.962542][ C1] ? tmigr_handle_remote+0x132/0x380 [ 336.967827][ C1] ? run_timer_base+0x121/0x190 [ 336.972673][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 336.977862][ C1] ? rcu_is_watching+0x12/0xc0 [ 336.982629][ C1] handle_softirqs+0x1ea/0xa00 [ 336.987398][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 336.992681][ C1] ? _raw_spin_unlock+0x28/0x50 [ 336.997525][ C1] ? __hrtimer_rearm_deferred+0x9b/0x740 [ 337.003149][ C1] __irq_exit_rcu+0x162/0x210 [ 337.007825][ C1] irq_exit_rcu+0x9/0x30 [ 337.012063][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 337.017688][ C1] [ 337.020609][ C1] [ 337.023531][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 337.029508][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 337.035144][ C1] Code: 46 93 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 80 21 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 337.054741][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 337.060800][ C1] RAX: 0000000002936b87 RBX: ffff88801e2ba500 RCX: ffffffff8b8a1045 [ 337.068761][ C1] RDX: 0000000000000000 RSI: ffffffff8df1fea8 RDI: ffffffff8c1c3600 [ 337.076720][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a67b5 [ 337.084681][ C1] R10: ffff8880b8533dab R11: 0000000000000000 R12: 0000000000000001 [ 337.092642][ C1] R13: ffffed1003c574a0 R14: 0000000000000001 R15: ffffffff90d79b50 [ 337.100615][ C1] ? ct_kernel_exit+0x125/0x180 [ 337.105471][ C1] default_idle+0x9/0x10 [ 337.109715][ C1] default_idle_call+0x6c/0xb0 [ 337.114478][ C1] do_idle+0x464/0x590 [ 337.118553][ C1] ? __pfx_do_idle+0x10/0x10 [ 337.123133][ C1] ? finish_task_switch.isra.0+0x152/0x1010 [ 337.129028][ C1] cpu_startup_entry+0x4f/0x60 [ 337.133799][ C1] start_secondary+0x21d/0x2d0 [ 337.138567][ C1] ? __pfx_start_secondary+0x10/0x10 [ 337.143856][ C1] common_startup_64+0x13e/0x148 [ 337.148805][ C1] [ 339.755317][ T4929] Bluetooth: hci3: command 0x0406 tx timeout [ 339.881037][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 341.259896][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.271869][ T1308] ieee802154 phy1 wpan1: encryption failed: -22