last executing test programs: 6.928825182s ago: executing program 4 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000040)=0x80000001, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000480)=0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) 6.097289777s ago: executing program 0 (id=640): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x3, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fffffff}, {0x80, 0x9, 0xf8}, {0x2, 0x7, 0x0, 0x6}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, 0x0) syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000d3a000/0x4000)=nil, 0x4000, 0x66) madvise(&(0x7f0000800000/0x800000)=nil, 0x800002, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x219000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x22811, r3, 0xa3698000) r6 = accept$alg(r0, 0x0, 0x0) r7 = dup(r6) write$FUSE_INIT(r7, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0x60, 0x32, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x9fb4382bb07ab7b6}}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x840) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r8, 0x3b87, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) ioctl$IOMMU_IOAS_MAP(r8, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r9, 0x0, &(0x7f0000000100)="9d", 0x1, 0x100000000}) 5.986862599s ago: executing program 4 (id=642): r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_NESTED_STATE(r3, 0xc048aeca, &(0x7f0000003680)={{0x3, 0x0, 0x80, {0xeeeeffff, 0xdddd0000, 0x3}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa398b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c2c93b9f922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c8abac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e543178502e59b927c7015436237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x5c, 0x0, &(0x7f0000000200)=[@register_looper, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000140)={@fda={0x66646185, 0x0, 0x2, 0xa}, @fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f00000001c0)={0x0, 0x20, 0x38}}}, @dead_binder_done], 0x87, 0x0, &(0x7f0000000280)="da203db93ab4e2b345f19f6dbbd9f15724e804e7d3a4f0d40bf9303d53efd93bd75d6285edb1d3ad119c9f3e22067119a609bb3622b3249b128be698c8d723df082b7836ccda9dd637777a4dc71aed4539e91a1471898fc13e0db459869b9964c8ceed0e9785d27edfa934f7e6108c3d2db970389eaf888378308c6c381b5be3a4942f24d0750b"}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="83", 0x1}], 0x1}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40041) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket(0x2, 0x2, 0x6) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x3fc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5, @ANYRES32=r6, @ANYRES64=0xffffffffffffffff, @ANYRES32=0xffffffffffffffff, @ANYRES8=r5, @ANYBLOB="947f69d605e967e729af019206a494b667a4abe1bbf521a32977436c7bd5b1ec0b37ed542c9700f73ef744517dbf4942d27881a0115964a926c14961cbdec66a45f2fdd945cf342c4f1e601f568a9373a2561b4c6eee5f477c853124f2d96c103cadd0ad38f8313f0037d821141a3568da27b6cc0add8d7f0f39e1015268b7c238b5222ed293534a297bf171d47640b2dfc92fc82bb4ce2b7cfcc5307275bb90f869436276abf0508f053ea54407473600a1234bda8e02395ae50cd2b96174b9a864e7503ed0b70c3db708102e69df6a271bc802de0040ed03c5"], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYBLOB="000700000000000000080000000000007b8af8ff00000200bfa200000000000007776e76e1b3cdd241f179ed43125430b5f47de06fcb2a39fb193838f25ef3f522dfe6b6257de849fcbc3500957a", @ANYRES32=r8, @ANYRES8=r8, @ANYRES8=r7, @ANYRESHEX], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm(camellia-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f4060000", @ANYRES64=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r13, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[], 0x58}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 5.791315755s ago: executing program 0 (id=645): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) 5.447857063s ago: executing program 3 (id=651): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b0001000000000904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x84) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0xa8202, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_open_dev$loop(0x0, 0x3, 0x10b242) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0xfffffff2, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x0, 0x200, 0x0, 0x0, 0x250, 0x2e8, 0x2e8, 0x250, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xffff, 0xf5f}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @empty, [], [], 'ip6_vti0\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x54, 0x0, 'syz0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r7, 0x0, 0x84) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r8, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r9, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) close_range(r0, 0xffffffffffffffff, 0x0) 5.381539579s ago: executing program 2 (id=653): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) creat(&(0x7f0000000040)='./file1\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f00000001c0)={0x1d, r2, 0x2, {0x2, 0xff}, 0xff}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r3, r3, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0x8000000}, @my=0x1, 0x0, 0x0, 0x421}) 4.755651002s ago: executing program 4 (id=654): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x38) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.568430201s ago: executing program 4 (id=655): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x0, 0xb, 0x7fff0000}, {0x7f, 0xc4, 0x8b, 0xffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6}, 0x10) syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x4, 0xfffe}, 0x0, 0x0) 3.646737128s ago: executing program 4 (id=657): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0xbe0469a28682623b, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r7, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x2c}}, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x3, 0x0, &(0x7f0000000200)="63eced", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000100)=@arm64={0xe, 0x80, 0x3, '\x00', 0xffffffffffffff00}) ioctl$KVM_SET_IRQCHIP(r10, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x1, 0x59a35420, 0x20003, 0x10020f5b, 0x0, [{0x0, 0x9, 0x0, '\x00', 0x38}, {}, {}, {0x0, 0x35, 0xfd}, {0x1d, 0x3}, {0x0, 0x0, 0x6}, {}, {0x2, 0x6, 0xff}, {}, {0x73, 0x6, 0x2}, {0x0, 0x2, 0xfe}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x0, 0x2, '\x00', 0xfe}, {0x7, 0x0, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x20, 0x0, 0x40}, {0x6, 0x0, 0x0, '\x00', 0x20}, {0x4, 0x0, 0x4, '\x00', 0xfc}, {0x0, 0x5}, {0x0, 0x0, 0x10}]}}) r12 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) 3.577371836s ago: executing program 1 (id=658): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000080)={0x0, 0x1}) 3.48300553s ago: executing program 3 (id=659): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_io_uring_setup(0x7a9a, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f00000004c0)=""/102400, 0x19000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0xc0, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0xac, 0x1, [@m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x3, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xc0}}, 0x0) (fail_nth: 7) 3.451405446s ago: executing program 2 (id=660): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) write$qrtrtun(r0, &(0x7f0000000080)="b349202ab2fff7a27e598cf14dd3c4184d05d9362d49af6f2a02ee28a0e7436bf84f97e228736140bc7f6a0bd1c386bcfecc134ebf94006b37a3", 0x3a) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800020000000000000000002800000018110000", @ANYRES32, @ANYBLOB="00000000002f8d5e42725f1a510000f3a4030000000000008500000083000000bf090000043168e4c500000055090100"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="80fd"], 0xa) 3.329538345s ago: executing program 1 (id=661): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000003e000701fcfffff7fddbdff6037c0000040036800c00018006000600894f"], 0x24}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sync() 3.247180362s ago: executing program 2 (id=662): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x2, 0x1}}, 0x10, &(0x7f0000000300)=[{&(0x7f00000001c0)="6aa3ca5f9628a82a6db31801a64a14aeb534ff70e09371c66946a087b9f7586649d7d199b28d70e7903a8b26b55f03b400759b3a90a394a191867dfb5063ab57427fce7235f6b3b600d4d1998279fbbc4f1d343481da5c30cbba15d35a3872a3167bb302ec53f9d894d676c9c18e36ea1381961c5bc8", 0x76}, {&(0x7f0000000140)="17eea723a2954eaecea16768fd344a5ecfadd4e2b63017cfc73d4fe3e3", 0x1d}, {&(0x7f0000000280)="5b884288d08e6caca01a94686be434b15b94fdffc5a3271580468901edce6f94af1c6cf7db8610c1464e9bac3517cb0cf3fadc41cd81d0b67acd30ac03b80c6e26d6103f0dd5d1dbcdebc0e2fd45e2529bbd8d044af8", 0x56}], 0x3, &(0x7f0000000340)="5dfde049a90db45c5e6c010f22979a4ec5c855af0e2e1bafc16c9dff72dc751746078d515ca204857a0a9e74febd3271923f943b608c8fbf0934423447b628fa2979da0a3ab4876ff212e0f88df6080a8b0419df7d03c9612c38953dfcedee7c4764f41e528a55fe0e888a1e77b482912dbd08fdbbf85de13c28d26591933e04", 0x80, 0x1}, 0x20008084) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000400)={0x4000, 0x6}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x9, 0xe7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r4, 0x1, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000730130000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) listen(r2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000180)={0xfffc, [0x5, 0x19]}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) socket$netlink(0x10, 0x3, 0x4) write(r0, &(0x7f0000005c00), 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 2.529301647s ago: executing program 3 (id=663): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 2.449428237s ago: executing program 0 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 2.448790756s ago: executing program 3 (id=665): syz_80211_inject_frame(&(0x7f0000000000), &(0x7f00000034c0)=ANY=[@ANYBLOB="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"], 0x33ec) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) ioctl$VIDIOC_QBUF(r1, 0xff01, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0846, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x62, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$rxrpc(0x21, 0x2, 0x6e1e8f1f9cfa152d) r2 = syz_io_uring_setup(0x140893, &(0x7f0000000140)={0x0, 0xaee1, 0x20000, 0x0, 0x132}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f0000000080)=0x10003, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x29, 0x0, r2}) io_uring_enter(r2, 0x5361, 0xfffffffd, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r7, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00', {}, 0x40}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x60e82, 0x0) write$cgroup_int(r9, &(0x7f0000000040)=0x900, 0x12) 2.44854145s ago: executing program 1 (id=666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') 2.376563245s ago: executing program 0 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, 0x0, 0x8, 0x3) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file5\x00', 0xc000, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) write$sndseq(0xffffffffffffffff, 0x0, 0x0) 1.76075348s ago: executing program 4 (id=668): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x100, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x804}, 0x800) syz_usb_connect(0x5, 0x3d, &(0x7f0000002540)={{0x12, 0x1, 0x201, 0x92, 0x9d, 0xca, 0x8, 0x45e, 0x454, 0x82e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x7, 0x0, 0x20, 0x6, [{{0x9, 0x4, 0x1f, 0xe0, 0x2, 0xb9, 0x1c, 0xe6, 0x2, [], [{{0x9, 0x5, 0x80, 0x3, 0x10, 0x2, 0xa, 0x45}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x0, 0x5, 0xf4, [@generic={0x7, 0x5, "bfe22af7e8"}]}}]}}]}}]}}, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000004ff6943b8fe00000800000028f20000000086070000", 0x4000, r1) 1.405579299s ago: executing program 1 (id=669): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="f91bcd1a1fbbf5a4c92c5b8e73119476d1656d2a1aeb7bd0e6fb46642013ebe82c475639f470e0f4aa2c65a05f6ad7d3a6875d319308cfabb6556a6516946bcece475456ee3620fd9f36b2f8fb26e346e04ed62ece992a392dac8ec680b8b5a1cc586925ced18195", 0x68}, {&(0x7f00000000c0)="5c92221683342ba2b7aa8cb457ca50cbc5adb89d08e8d4f6a56c05791bb6c564b7be67d7611e70c3", 0x28}, {&(0x7f0000000100)="83a250d4ea44a5d61a55544e774ec5f042673516b7b0f6646e463a34814739e8522be8b3847314197cbc39599ebf5ce7e8ec15da3f231a25ab3658836d35c567669afce4d0a6b4305b3f4844284a735925c6507285bf", 0x56}, {&(0x7f0000000180)="e6a0ba5fa419a07904d320a458eadc65d11f2cbd3afc992122a88976fb8244e7ac412abab19c8269d7e7119276e5bd21e9ccd4cb294210d86c3e141e8becc5d7174cabc0a3bd639aa3a7fcb7c1eddaaa8256ee9e1237c3b7d78b", 0x5a}, {&(0x7f0000000200)="c6a9dbe296de9dc5d0fc857beb0cc6530b9011924f6c5951da844c358a15ab573805721bd541230d85b1a0e4855a526537d098fdcadb7c1b66f2b95c8381a4b8556014e3f01f3ea2155113f61eb9ffa625df765169c62b950e0e883501bdddc9be1df91675080a00d58c50039580e79bff4588e02fd249c34c9771da54809a3d052014466be9d8b91b554a9b55fd7df50d1ce1156ab8b6cd395f48225f06f9bef43ac01b5892247dbd9625ea43bfae8239577efea448d3c999e4d8bad665b3a7f643ee850b7b969cf4bd7874e4ace80ebbb65fc7bb1e12cb82f006d7be42d1085fc53e321c6624f4a10972b72748462af90fc3cf74d7f68c", 0xf8}, {&(0x7f0000000300)="dea5f9fff5ffdb05e6d5de639f4d273cbcb97ef7576d9c12d4fe63f8bd80c5a04ea8479b3a64a006e2f7bd97743d55543230d07acc6b24ee9f632b7a187d65a54b11eafbb2d00ea33e84270d1024369d6fb1eee6ba4cc02fe32b45762dd9364fb32cd0b1facc082656a03ff5f92f3947b6e18f845e8173bec56fde2dd8", 0x7d}, {&(0x7f0000000380)="bafebddd79bd16c8bd0cd189f45001ee3b2a204648f6a229fd1a628f45be95700160", 0x22}, {&(0x7f00000003c0)="5ce47e00852e914324bd0198f6494b9e940f90156ad0e0e96dfffd5b01fa70a5e6a89db93325900db2ec0fc06d5ad8c7c072ff27dfaa3bf283dcaa8d", 0x3c}], 0x8, 0x8, 0x101) write$cgroup_int(r0, &(0x7f0000000480)=0x2, 0x12) r1 = accept$alg(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000004c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e20, @remote}}}, 0x90) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/custom0\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f00000005c0)=[@enter_looper], 0x88, 0x0, &(0x7f0000000600)="603bbd81f8868ad3b6c3e6d98516c292464e5c6691423c3a4a23cf387b18094d48c8ace88c7a91fa2d233a44d3db0d29772ee7ad6428a3c5c1c80a462a5eb23abff223bd8bdd9b76c3f991cf7d7c6ed2cb8ce7bd64f48e940692ebb28a733ca714512314495614929889edf0e6095d72bdced89ca90a851a1c5905a597d18b8ebb6060da1bd236e7"}) write$snddsp(r0, &(0x7f0000000700)="1309bb8d26051d75d1b676be0293dbe99670ea6f89cc8b7ce9dda423c664410898dee8d4b86b11b7635747ce78008bcc19dc1e157b577100f68e367b0bea0ab54edec0f9d65e199bc26e2e73b11382d72e4170695299ac5d9d16f30505eab6b2f2482dc0e9b8a0a92f0d1db2e22e922e3f3530fc1b04721283978547c15bca31441c4736b8a739dbb887e3f7cde9db8d7956755512b01240b0a147f8f6af4747beabc4916067d890c3876c1098c6a86e86544977fda128ba868b0ccbac5a815b2c885d92c093335a6ece25d1ae9fa3455853e152", 0xd4) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r0, 0x4068aea3, &(0x7f0000000800)={0xcc, 0x0, 0x1}) r3 = getpid() setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0xd8, 0xd8, 0x198, 0xd8, 0x3a0, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f0000000880), {[{{@ip={@multicast1, @loopback, 0xffffff00, 0xffffffff, 'veth0_to_bond\x00', 'ip6gretap0\x00', {}, {}, 0x21, 0x3, 0x1}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x2, 0x4, 0xefbcc2d90bb4e29f, 0x4, 0x0, 0x5]}}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x1c}, 0xffffffff, 0xff, 'vlan1\x00', 'bond_slave_0\x00', {}, {0xff}, 0x2, 0x0, 0x3}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x2, 0x2}}, @inet=@rpfilter={{0x28}, {0x1c268959b6092f47}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x0, 0x3}}}, {{@ip={@remote, @remote, 0xff, 0xff, 'veth0_to_team\x00', 'bridge0\x00', {0x1fe}, {}, 0x2e, 0x6, 0xa}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x0, 0x5, 0x6, 0x1, 0x6], 0x6, 0x5}, {0x3, [0x4, 0x6, 0x0, 0x5, 0x1, 0x6], 0x5, 0x6}}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x580) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000fc0)=0xe8) sendmsg$nl_generic(r4, &(0x7f0000002540)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002500)={&(0x7f0000001000)={0x1500, 0x35, 0x8, 0x70bd2d, 0x25dfdbfe, {0x11}, [@generic="1163fff8ea1bb20979c373e2f9a3d3b9ec8ecd6cee745a47669b7ee71e9c513b820b07e1ffeb9f18fc28ac3fa058478d31aa881c80c986eed9d14fe0c6cd47b4d4304bdb0f26ef82c3a26571a747a7668b8d229f9d8a39c28b32badce8d6ee0938e93da9f537d42cc305f89454e758b5f1", @typed={0x1004, 0x4a, 0x0, 0x0, @binary="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"}, @generic="740de844828f4a1b53171e637cce", @generic="33ccf42d50cb9c8ecd96bc90f90bf11126fa6467ad54c5caefdb9cc9f3a595e893f9a4640d8724bfc5c9a100595e1c4f9ca680f53559973d602611e0a90451c52a7cab040f8760c03fef7380a8c1d1404d24047882b41a93479b1bd765cec948c7a72967fd8d9ec9d9fa175c22cba4f9fb72372af622a4e373d824d3fa94507cf17f575589e892889bcefaf1f4e43df2012560c9ffcd413dce326ecd0f9c6d34fcc072a87f232cc55fe76b7e330bb63313ec886a540ae06772b1c3cbb83e6944e0182d04d044d4059892b6e7ef05670691705550006476", @generic="7de6871e598918392ba6b330e7be129e0d697eec5693220ae47ea983da5e81033f2ece527457a9d235f719408b4ff25c66d63a38f25bf0c23db81d", @nested={0x216, 0x12e, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @pid=r5}, @typed={0x7c, 0x94, 0x0, 0x0, @binary="a3c5ef842af7f8c7878cc6e45bcf54150ec2da9714a5ff7ccac4b1555eee84fe2c76fbeadbe8c71efd783a1f9e60c445f367d26cd193aedbfcbaaaa5379f97ea9342e930a07d169221128ae52dd771ce8e528b28c201f8ea4f37cbea46765021ef5390d530aadf8d98e0bb44eb015490535752e34387ce63"}, @nested={0x4, 0x52}, @typed={0x8, 0x71, 0x0, 0x0, @uid=r6}, @typed={0xe, 0x36, 0x0, 0x0, @str=':![+]^.\xed-\x00'}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0x7}, @generic="dbb3d455fb0049d3930c848824057cf906f6845b25db3640099c29b598507d976881f77e2d2e218a5fc57a0714b560e8487ece454b0fe5ea0995eb7ba787e202f02a63b034cc128655ab604fffaaf891dea93ea1b2b7fa9a422ec53449583e98ccdff4f55273a59dba030453ee339114381e8a38bb76b933f234ea7f9c9c4a39579bb023c138d9c3b873ab17b69e45f3cc128a4b3e2729b3b82113b5491b377dbe4f71e251a85d4ae8ac89f709a2cbfc60fcb8fb5e809eeec0042ddea57ea19af28065c25e", @generic="8f500a48f5003d0b473efdb94836d4160ad8791e17c821c7eede8e3b5f2503fd79acf698b67ec98b451e6da032e29f42f79d76d78de1c1d3fdba2eeb97706085ce5c4ed2c47f4a8b16db174a7d2c3cc7ba1a2ade113d3ea89fba276c19", @generic="a988897f49ba5a62151204d2ddae3261b82d18ee5fbe8895df61be5a953d6c4cc143ceddd7974a20bb0d2c00135d8b6fbcba33d39e4ca235ba9cd786e7ed64eb6d1c6f83"]}, @generic="9bd75c837fd87bb4a3adcc91f98198621582ff420380174d043f95aa5e24d16b41af9f8bfc8b1816612f15e31541dda7fa526a3ca064d35682d7fb3d8309e98fe31fbe4d6207f01f4b21e19de5b42c017ace8d809229d3eedb9fac33d02dc3b5825dacad73ea48d5c65b6ae454cee178e9dd47e017905bf6d9cdae6a1f73aa31655c9e92b18cbccbbc9df27bb5d0219c997a66fbcfaadb85c603f9d07eb8502d90ce3cfb0ebbacd95f4dea6ffd89bb8de67fed246a05a46bfef73f66829d12ae54ed88ab33f22f8c0af45c4c9524c5d5dd74bf5cda17982676199705b7717ff6f397286424d9952b01bbb70d5d25d38f6227015d311f7c414257d81a45", @generic="f8fd611e2d6e8897d107d3726b14fa367cc9067d0dde9ef5bcb8622c7941ff67a86092e52d0d1503c9abc677ad4e4f341b757cb1125136786661da0e74f4eb"]}, 0x1500}, 0x1, 0x0, 0x0, 0x800}, 0x10) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000002580)="f66d28c973d8439686702c5ef3ec7cfab0d720e06bc327047094cfb16eac23e9e5e7dec31b13b605fcdc993846c3c53fbd7715cdd997f8fa05e98f") r7 = accept4$unix(r0, &(0x7f00000025c0), &(0x7f0000002640)=0x6e, 0x800) sendmmsg$unix(r7, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)="8915c0612d707ba0eab3128ba9ac9e2625c07326d7da4333760f575f9e", 0x1d}, {&(0x7f00000026c0)="fe03fa58d9b42cade18b0789eaf336", 0xf}], 0x2, &(0x7f0000002740)=[@rights={{0x34, 0x1, 0x1, [r1, r4, r2, r0, r1, r4, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r6}}}, @rights={{0x38, 0x1, 0x1, [r2, r0, r2, r1, r0, r0, r2, r1, r2, r0]}}], 0x90, 0x24048840}}], 0x1, 0x14) r8 = socket$inet6(0xa, 0xdc5ca1d535b0130e, 0x4) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002880), r4) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000002980)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002940)={&(0x7f00000028c0)={0x64, r9, 0x2, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x7, 0x6}, {0x3, 0x2}, {0xb, 0x1}, {0x9, 0x7}, {0x2, 0x7}, {0xa, 0x6}, {0x5, 0x3}, {0x5, 0x3}, {0x9, 0x5}, {0x80}, {0x5, 0x3}, {0x0, 0x1}], "f5b12848cc1da556"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x7f, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x3, 0x6}, {0x3, 0x3}, {0xa2, 0x2}, {0x1, 0x4}, {0xfd, 0x6}, {0x51}, {0x2, 0x6}, {0x8}, {0xe, 0x2}, {0x9, 0x1}, {0xff}, {0x4, 0x7}, {0xff, 0x1}], "ac1817da9b471537"}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x24040000) r10 = gettid() r11 = socket$nl_netfilter(0x10, 0x3, 0xc) r12 = openat$zero(0xffffffffffffff9c, &(0x7f00000029c0), 0x9e080, 0x0) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000002a00)="4bb0f1b24dadcf79540295a175402335e37e87691e329f4f944a095d65d596e1715658be646b890b0d5dc32d9588f53733fae5ee79ed267e224a0f9bc378ce3d3695ed64b762ae1e2fc68cb286ae3c3fd40dc43749be3d420c392d3f2e889d6a89f015d413e183284758550b7b334e3511b033432bca85e85b6c1203f4704805be822723637c2424060c3804a4d726efdbd59ddbd217cd3f96c02b127307b216d7cc8dc77ba0", 0xa6) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000002ac0)) getresuid(&(0x7f0000002c40), &(0x7f0000002c80)=0x0, &(0x7f0000002cc0)) lstat(&(0x7f0000002d00)='./file0\x00', &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002b00)="279c161ec19ba2b7b9794699e38f5e6ff1b7", 0x12}, {&(0x7f0000002b40)="4c595ead4102", 0x6}, {&(0x7f0000002b80)="54237263e419201bd91844b57a8161bdcb0b4b70efc9095d09aaa417aff8604aebf20c7d32038ae06b58cde8c0407472ccc39fc56f1f62798eeb11bb5957730e25aa3e4095d3ab21345cd34cb3e62568d7cf9a030fec7661a69a8d10ca81fc3e67f6678dbe", 0x65}], 0x3, &(0x7f0000003000)=[@rights={{0x20, 0x1, 0x1, [r8, r4, r8, r1]}}, @rights={{0x34, 0x1, 0x1, [r8, r0, r4, r4, r12, r11, r7, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r11]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r11, r1, r11]}}, @cred={{0x1c, 0x1, 0x2, {r3, r6}}}, @rights={{0x2c, 0x1, 0x1, [r7, r4, r2, 0xffffffffffffffff, r8, r0, r2]}}], 0x110, 0x8001}}], 0x1, 0x4008000) 1.357666278s ago: executing program 0 (id=670): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0xe, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in6=@loopback, @in6=@dev}, {@in6=@dev, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @extra_flags={0x8, 0x18, 0x3}]}, 0x140}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000002c0)={0x8047bff, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0x0, 0xa294}) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000000)=0xc) syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.265344167s ago: executing program 1 (id=671): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x48054) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x13, 0x5, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x11, 0x200000000000003, 0x300) recvmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000025c0), 0x0, 0x800) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) time(0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0xb8}}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}}, 0x84) pause() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r6, &(0x7f0000000000)=""/182, 0xb6) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 672.927293ms ago: executing program 2 (id=672): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, &(0x7f0000000ac0)=[{0xffffffff, 0x2, 0x6, 0xa}, {0x4, 0x3, 0x2, 0x1}, {0x1, 0x3, 0xf, 0x4}, {0x4, 0x4, 0xb, 0xc}, {0x2, 0x4, 0x3}], 0x10, 0xd, @void, @value}, 0x94) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000280)={'bond0\x00', @ifru_names='batadv0\x00'}) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x40, 0x20, 0x10}, 0x18) mkdirat(r2, &(0x7f00000001c0)='./file0\x00', 0x112) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x103}}], 0x18}, 0x0) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00), 0x1, 0x0, 0x3f}, 0x12160) 385.365619ms ago: executing program 0 (id=673): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x442000, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000100)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0xcb001000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x86, &(0x7f0000000340)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x78, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "c296da219a9a66f5ad2a425152d0818c4504e48c7168ff83a5de8d8da6a61d0b", "89bb43b98344217c32f713b31968249a", {"3479e79fd140bea117e37d0051306c30", "129670a7c142ec0400"}}}}}}}, 0x0) 249.372743ms ago: executing program 2 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000380)={[{@verity_require}, {@metacopy_off}, {@index_off}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="17000000fb"], 0x30000) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) prlimit64(r3, 0x6, &(0x7f0000000280)={0x7, 0x9}, &(0x7f00000002c0)) mkdir(&(0x7f0000000240)='./bus\x00', 0xca) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./bus/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, &(0x7f0000000300)={{0x1720, 0x3}, {0x6, 0x6}, 0x1000}) 248.316712ms ago: executing program 3 (id=675): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f00000c2000/0x1000)=nil, 0x1000}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x452046, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7) ioctl$TIOCSETD(r1, 0x5412, &(0x7f00000000c0)=0xe8) 201.327583ms ago: executing program 3 (id=676): socketpair$unix(0x1, 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) clock_settime(0x0, &(0x7f0000000180)={0x77359400}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000040)=""/56) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCSFLAGS(r5, 0x40047459, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 5.413127ms ago: executing program 1 (id=677): close(0x3) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x120, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0xffffffff, 0x13100, 0x1, 0x282}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x11, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0xffffffc4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r1, 0x0, 0x0, @val=@tracing={0x0, 0x2}}, 0x40) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x205c) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev={0xfe, 0x80, '\x00', 0x2f}, @private1={0xfc, 0x1, '\x00', 0xfe}}}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x8000) r8 = syz_open_dev$video(&(0x7f0000000180), 0x3, 0xc881) ioctl$VIDIOC_ENUMAUDIO(r8, 0xc0345641, &(0x7f00000001c0)={0x4, "0fb0244d109b9e160c7c2fbbdb334a8df70f122f597d504173361458c0388970", 0x3}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x6558, r7, 0x1, 0x7}, 0x14) 0s ago: executing program 2 (id=678): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x99a97d190712ad57, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x44005}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r6, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_GET_STATUS64(r7, 0x4c05, &(0x7f0000000680)) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2a) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x26) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): t/js0" dev="devtmpfs" ino=2820 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 134.949202][ T6810] FAULT_INJECTION: forcing a failure. [ 134.949202][ T6810] name failslab, interval 1, probability 0, space 0, times 0 [ 135.022992][ T6810] CPU: 0 UID: 0 PID: 6810 Comm: syz.3.234 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 135.023020][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 135.023029][ T6810] Call Trace: [ 135.023034][ T6810] [ 135.023041][ T6810] dump_stack_lvl+0x16c/0x1f0 [ 135.023063][ T6810] should_fail_ex+0x512/0x640 [ 135.023083][ T6810] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 135.023112][ T6810] should_failslab+0xc2/0x120 [ 135.023129][ T6810] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 135.023151][ T6810] ? __alloc_skb+0x2b2/0x380 [ 135.023188][ T6810] __alloc_skb+0x2b2/0x380 [ 135.023207][ T6810] ? __pfx___alloc_skb+0x10/0x10 [ 135.023225][ T6810] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 135.023245][ T6810] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 135.023268][ T6810] netlink_alloc_large_skb+0x69/0x130 [ 135.023286][ T6810] netlink_sendmsg+0x6a1/0xdd0 [ 135.023304][ T6810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.023328][ T6810] ____sys_sendmsg+0xa95/0xc70 [ 135.023346][ T6810] ? copy_msghdr_from_user+0x10a/0x160 [ 135.023369][ T6810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.023396][ T6810] ___sys_sendmsg+0x134/0x1d0 [ 135.023420][ T6810] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.023469][ T6810] __sys_sendmsg+0x16d/0x220 [ 135.023493][ T6810] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.023522][ T6810] ? rcu_is_watching+0x12/0xc0 [ 135.023547][ T6810] do_syscall_64+0xcd/0x260 [ 135.023567][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.023584][ T6810] RIP: 0033:0x7fb052f8e969 [ 135.023597][ T6810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.023611][ T6810] RSP: 002b:00007fb053d92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.023627][ T6810] RAX: ffffffffffffffda RBX: 00007fb0531b6080 RCX: 00007fb052f8e969 [ 135.023637][ T6810] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000004 [ 135.023655][ T6810] RBP: 00007fb053d92090 R08: 0000000000000000 R09: 0000000000000000 [ 135.023664][ T6810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.023672][ T6810] R13: 0000000000000000 R14: 00007fb0531b6080 R15: 00007ffe590232a8 [ 135.023694][ T6810] [ 135.289985][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 135.337182][ T30] audit: type=1400 audit(1745645686.474:457): avc: denied { setopt } for pid=6812 comm="syz.1.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 135.370350][ T6819] openvswitch: netlink: Key 25 has unexpected len 409 expected 16 [ 135.423464][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 135.624282][ T5861] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.798267][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.817897][ T5896] usb 4-1: USB disconnect, device number 8 [ 135.860444][ T5861] usb 3-1: config 0 descriptor?? [ 136.500088][ T5861] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 136.614349][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.245'. [ 137.145818][ T5861] usb 3-1: USB disconnect, device number 5 [ 140.139776][ T30] audit: type=1400 audit(1745645691.574:458): avc: denied { create } for pid=6849 comm="syz.3.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 140.178649][ T5861] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.283270][ T6857] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 140.539991][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 140.547331][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 140.561197][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 140.572392][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 140.586339][ T5861] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.623574][ T5861] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 140.638874][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.689816][ T6866] FAULT_INJECTION: forcing a failure. [ 140.689816][ T6866] name failslab, interval 1, probability 0, space 0, times 0 [ 140.702677][ T6866] CPU: 1 UID: 0 PID: 6866 Comm: syz.0.257 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 140.702700][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 140.702710][ T6866] Call Trace: [ 140.702715][ T6866] [ 140.702721][ T6866] dump_stack_lvl+0x16c/0x1f0 [ 140.702746][ T6866] should_fail_ex+0x512/0x640 [ 140.702765][ T6866] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 140.702791][ T6866] should_failslab+0xc2/0x120 [ 140.702808][ T6866] __kmalloc_cache_noprof+0x6a/0x3e0 [ 140.702831][ T6866] ? __io_uring_add_tctx_node+0x132/0x500 [ 140.702858][ T6866] __io_uring_add_tctx_node+0x132/0x500 [ 140.702881][ T6866] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 140.702907][ T6866] ? __fget_files+0x20e/0x3c0 [ 140.702934][ T6866] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 140.702959][ T6866] __do_sys_io_uring_enter+0x123a/0x1630 [ 140.702980][ T6866] ? __fget_files+0x20e/0x3c0 [ 140.703001][ T6866] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 140.703020][ T6866] ? fput+0x70/0xf0 [ 140.703037][ T6866] ? ksys_write+0x1b9/0x240 [ 140.703058][ T6866] ? __pfx_ksys_write+0x10/0x10 [ 140.703087][ T6866] do_syscall_64+0xcd/0x260 [ 140.703105][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.703116][ T6866] RIP: 0033:0x7f7f84f8e969 [ 140.703125][ T6866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.703135][ T6866] RSP: 002b:00007f7f85d2a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 140.703145][ T6866] RAX: ffffffffffffffda RBX: 00007f7f851b6080 RCX: 00007f7f84f8e969 [ 140.703151][ T6866] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000003 [ 140.703157][ T6866] RBP: 00007f7f85d2a090 R08: 0000000000000000 R09: 0000000000000000 [ 140.703163][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.703168][ T6866] R13: 0000000000000001 R14: 00007f7f851b6080 R15: 00007ffcd5430ed8 [ 140.703181][ T6866] [ 140.956935][ T5861] usb 3-1: config 0 descriptor?? [ 141.227379][ T6848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.522867][ T5861] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7 [ 142.110743][ T5896] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 142.123752][ T5822] usb 3-1: USB disconnect, device number 6 [ 142.160038][ T5861] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 142.279946][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 142.287065][ T5896] usb 4-1: config 6 has an invalid interface number: 225 but max is 1 [ 142.295319][ T5861] usb 2-1: device descriptor read/64, error -71 [ 142.302219][ T5896] usb 4-1: config 6 has an invalid interface number: 171 but max is 1 [ 142.310536][ T5896] usb 4-1: config 6 has no interface number 0 [ 142.316647][ T5896] usb 4-1: config 6 has no interface number 1 [ 142.323184][ T5896] usb 4-1: config 6 interface 225 has no altsetting 0 [ 142.330139][ T5896] usb 4-1: config 6 interface 171 has no altsetting 0 [ 142.340062][ T5896] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0060, bcdDevice=65.ac [ 142.349210][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.357293][ T5896] usb 4-1: Product: syz [ 142.361577][ T5896] usb 4-1: Manufacturer: syz [ 142.366243][ T5896] usb 4-1: SerialNumber: syz [ 142.532495][ T30] audit: type=1400 audit(1745645693.974:459): avc: denied { read write } for pid=6873 comm="syz.0.259" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 142.559990][ T5861] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 142.561328][ T30] audit: type=1400 audit(1745645693.994:460): avc: denied { open } for pid=6873 comm="syz.0.259" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 142.610324][ T30] audit: type=1400 audit(1745645694.044:461): avc: denied { ioctl } for pid=6873 comm="syz.0.259" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 142.664286][ T5896] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 142.689981][ T5861] usb 2-1: device descriptor read/64, error -71 [ 142.711141][ T30] audit: type=1400 audit(1745645694.144:462): avc: denied { connect } for pid=6873 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.776598][ T30] audit: type=1400 audit(1745645694.214:463): avc: denied { firmware_load } for pid=5896 comm="kworker/1:5" path="/lib/firmware/dvb-usb-dib0700-1.20.fw" dev="sda1" ino=376 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 142.777460][ T5896] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 142.815181][ T5896] dib0700: firmware download failed at 7 with -8 [ 142.841662][ T5896] dvb-usb: found a 'Terratec Cinergy HT Express' in cold state, will try to load a firmware [ 142.855463][ T5861] usb usb2-port1: attempt power cycle [ 142.881345][ T5896] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 142.890054][ T5896] dib0700: firmware download failed at 7 with -8 [ 142.913765][ T5896] usb 4-1: USB disconnect, device number 9 [ 143.020002][ T5865] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.059253][ T30] audit: type=1400 audit(1745645694.494:464): avc: denied { listen } for pid=6881 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.290085][ T5861] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 143.329410][ T6888] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 143.432295][ T5865] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 143.444018][ T30] audit: type=1400 audit(1745645694.794:465): avc: denied { getopt } for pid=6881 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.785915][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.076246][ T5861] usb 2-1: device descriptor read/8, error -71 [ 144.209304][ T5865] usb 3-1: Product: syz [ 144.213573][ T5865] usb 3-1: Manufacturer: syz [ 144.218181][ T5865] usb 3-1: SerialNumber: syz [ 144.225050][ T5865] usb 3-1: config 0 descriptor?? [ 144.342086][ T6897] ubi31: attaching mtd0 [ 144.420892][ T5865] usb 3-1: interface 1 not found [ 144.445037][ T5865] usb 3-1: USB disconnect, device number 7 [ 144.455498][ T6895] overlay: Unknown parameter 'smackfshat' [ 144.483638][ T30] audit: type=1400 audit(1745645695.924:466): avc: denied { bind } for pid=6901 comm="syz.1.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.627285][ T6916] capability: warning: `syz.0.272' uses 32-bit capabilities (legacy support in use) [ 146.170036][ T48] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.250248][ T5896] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 146.267887][ T6924] veth0_vlan: entered allmulticast mode [ 146.383450][ T48] usb 5-1: device descriptor read/64, error -71 [ 146.771317][ T6925] veth0_vlan: left promiscuous mode [ 146.777052][ T6925] veth0_vlan: entered promiscuous mode [ 146.870145][ T48] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.899923][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 146.907924][ T5896] usb 3-1: config 1 interface 0 has no altsetting 0 [ 146.953087][ T5896] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.40 [ 146.998183][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.007406][ T5896] usb 3-1: Product: syz [ 147.011712][ T5896] usb 3-1: Manufacturer: ֳ贺럍軡況琽✔㣨媴넦篊⇩ￒ腵璲풩ॉῊ債▼Ẁ燍ྱ垬㜃듧Ƒ쌱얝ྟ൜꒓ᙕ亴㞛ꍹ摕운띏鰇酘휫৴䟳﫚倛쪺Ǟ씖┐㛝艁䔀星꧚忱㬉䟂뷪ꆰ捗ꚙ疙ᳱ䶵뗼ꮜ副㔕皁౒ᗣ뺊㢴썄⡛㙆鹀䃬㘴㥺ᖲ긝㓗ࢰ庽丟六ꆵ㈖ȭ柦꾙ꕹ愣ۄ㑾Ⱪ駩熊윋쨵㶜镡튽諳찌 [ 147.048701][ T48] usb 5-1: device descriptor read/64, error -71 [ 147.085240][ T5896] usb 3-1: SerialNumber: syz [ 147.209100][ T30] audit: type=1400 audit(1745645698.644:467): avc: denied { mount } for pid=6933 comm="syz.1.277" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 147.235493][ T48] usb usb5-port1: attempt power cycle [ 147.353048][ T30] audit: type=1400 audit(1745645698.794:468): avc: denied { getopt } for pid=6911 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.441481][ T5896] usbhid 3-1:1.0: can't add hid device: -71 [ 147.447487][ T5896] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 147.469687][ T5896] usb 3-1: USB disconnect, device number 8 [ 147.898667][ T30] audit: type=1400 audit(1745645699.004:469): avc: denied { write } for pid=6935 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 148.015736][ T48] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 148.113627][ T48] usb 5-1: device descriptor read/8, error -71 [ 148.315654][ T6952] ubi31: attaching mtd0 [ 148.379978][ T48] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 148.412378][ T48] usb 5-1: device descriptor read/8, error -71 [ 148.550918][ T5896] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 148.559431][ T48] usb usb5-port1: unable to enumerate USB device [ 148.566406][ T5861] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 149.356218][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 149.372305][ T5861] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 149.389261][ T5861] usb 4-1: config 0 has no interface number 0 [ 149.395401][ T5861] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.432683][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.954303][ T5861] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 150.221852][ T6959] Set syz1 is full, maxelem 65536 reached [ 150.277792][ T5896] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.334795][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.360576][ T5896] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.386251][ T5861] usb 4-1: Product: syz [ 150.412088][ T5861] usb 4-1: Manufacturer: syz [ 150.438331][ T5861] usb 4-1: SerialNumber: syz [ 150.445761][ T5896] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 150.466561][ T5861] usb 4-1: config 0 descriptor?? [ 150.474683][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.484750][ T5896] usb 2-1: Product: syz [ 150.493246][ T5896] usb 2-1: Manufacturer: syz [ 150.501144][ T5861] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 150.512909][ T5896] usb 2-1: SerialNumber: syz [ 150.518817][ T5861] em28xx 4-1:0.132: Video interface 132 found: [ 150.650005][ T5862] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 150.738962][ T6951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.770951][ T6951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.632743][ T5861] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 151.645885][ T6949] input: syz0 as /devices/virtual/input/input8 [ 151.671356][ T5896] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 151.702772][ T5862] usb 5-1: config 0 has no interfaces? [ 151.711849][ T5862] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 151.720583][ T6951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.738515][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 151.746911][ T6951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.755041][ T5862] usb 5-1: Product: syz [ 151.780220][ T6976] netlink: 156 bytes leftover after parsing attributes in process `syz.0.290'. [ 151.927040][ T5862] usb 5-1: Manufacturer: syz [ 151.931764][ T5862] usb 5-1: SerialNumber: syz [ 151.952198][ T6982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.289'. [ 151.992992][ T5862] usb 5-1: config 0 descriptor?? [ 152.275078][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.287846][ T5861] em28xx 4-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 152.300258][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.308123][ T5861] em28xx 4-1:0.132: board has no eeprom [ 152.460524][ T30] audit: type=1400 audit(1745645703.894:470): avc: denied { getopt } for pid=6983 comm="syz.2.293" lport=40269 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 152.689334][ T5861] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 153.328230][ T5861] em28xx 4-1:0.132: analog set to bulk mode. [ 153.334521][ T5896] em28xx 4-1:0.132: Registering V4L2 extension [ 153.482552][ T5822] usb 2-1: USB disconnect, device number 13 [ 153.780306][ T911] usb 4-1: USB disconnect, device number 10 [ 153.786755][ T911] em28xx 4-1:0.132: Disconnecting em28xx [ 153.798198][ T5822] usblp0: removed [ 153.818427][ T30] audit: type=1400 audit(1745645705.174:471): avc: denied { write } for pid=6960 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.915847][ T7003] FAULT_INJECTION: forcing a failure. [ 153.915847][ T7003] name failslab, interval 1, probability 0, space 0, times 0 [ 153.943895][ T30] audit: type=1400 audit(1745645705.274:472): avc: denied { setopt } for pid=6960 comm="syz.4.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 153.978860][ T7003] CPU: 0 UID: 0 PID: 7003 Comm: syz.1.295 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 153.978884][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 153.978893][ T7003] Call Trace: [ 153.978898][ T7003] [ 153.978904][ T7003] dump_stack_lvl+0x16c/0x1f0 [ 153.978927][ T7003] should_fail_ex+0x512/0x640 [ 153.978944][ T7003] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 153.978970][ T7003] should_failslab+0xc2/0x120 [ 153.978986][ T7003] __kmalloc_cache_node_noprof+0x6d/0x420 [ 153.979010][ T7003] ? __lock_acquire+0x5ca/0x1ba0 [ 153.979032][ T7003] ? __get_vm_area_node+0x101/0x300 [ 153.979056][ T7003] __get_vm_area_node+0x101/0x300 [ 153.979080][ T7003] __vmalloc_node_range_noprof+0x277/0x1540 [ 153.979102][ T7003] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 153.979118][ T7003] ? find_held_lock+0x2b/0x80 [ 153.979142][ T7003] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 153.979160][ T7003] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 153.979189][ T7003] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 153.979205][ T7003] __vmalloc_noprof+0x6d/0x90 [ 153.979226][ T7003] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 153.979241][ T7003] bpf_prog_alloc_no_stats+0x54/0x630 [ 153.979253][ T7003] ? security_capable+0x7e/0x260 [ 153.979270][ T7003] bpf_prog_alloc+0x3b/0x230 [ 153.979282][ T7003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 153.979309][ T7003] bpf_prog_load+0x1a04/0x2490 [ 153.979333][ T7003] ? __pfx_bpf_prog_load+0x10/0x10 [ 153.979348][ T7003] ? avc_has_perm_noaudit+0x149/0x3b0 [ 153.979385][ T7003] ? selinux_bpf+0xde/0x130 [ 153.979405][ T7003] ? bpf_lsm_bpf+0x9/0x10 [ 153.979426][ T7003] __sys_bpf+0x433c/0x4d80 [ 153.979457][ T7003] ? __pfx___sys_bpf+0x10/0x10 [ 153.979475][ T7003] ? ksys_write+0x190/0x240 [ 153.979500][ T7003] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 153.979528][ T7003] ? fput+0x70/0xf0 [ 153.979541][ T7003] ? ksys_write+0x1b9/0x240 [ 153.979557][ T7003] ? __pfx_ksys_write+0x10/0x10 [ 153.979573][ T7003] ? rcu_is_watching+0x12/0xc0 [ 153.979594][ T7003] __x64_sys_bpf+0x78/0xc0 [ 153.979613][ T7003] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.979630][ T7003] do_syscall_64+0xcd/0x260 [ 153.979649][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.979665][ T7003] RIP: 0033:0x7fdf2678e969 [ 153.979677][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.979690][ T7003] RSP: 002b:00007fdf2763b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.979704][ T7003] RAX: ffffffffffffffda RBX: 00007fdf269b5fa0 RCX: 00007fdf2678e969 [ 153.979713][ T7003] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 153.979723][ T7003] RBP: 00007fdf2763b090 R08: 0000000000000000 R09: 0000000000000000 [ 153.979731][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.979739][ T7003] R13: 0000000000000000 R14: 00007fdf269b5fa0 R15: 00007ffe6988d948 [ 153.979758][ T7003] [ 154.269044][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.312011][ T7003] syz.1.295: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 154.475010][ T7003] CPU: 0 UID: 0 PID: 7003 Comm: syz.1.295 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 154.475036][ T7003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 154.475043][ T7003] Call Trace: [ 154.475047][ T7003] [ 154.475051][ T7003] dump_stack_lvl+0x16c/0x1f0 [ 154.475067][ T7003] warn_alloc+0x248/0x3a0 [ 154.475085][ T7003] ? __pfx_warn_alloc+0x10/0x10 [ 154.475102][ T7003] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 154.475119][ T7003] ? __kasan_kmalloc+0x8a/0xb0 [ 154.475135][ T7003] ? __get_vm_area_node+0x1e5/0x300 [ 154.475152][ T7003] __vmalloc_node_range_noprof+0xd31/0x1540 [ 154.475166][ T7003] ? find_held_lock+0x2b/0x80 [ 154.475182][ T7003] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 154.475196][ T7003] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 154.475215][ T7003] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 154.475225][ T7003] __vmalloc_noprof+0x6d/0x90 [ 154.475238][ T7003] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 154.475248][ T7003] bpf_prog_alloc_no_stats+0x54/0x630 [ 154.475257][ T7003] ? security_capable+0x7e/0x260 [ 154.475269][ T7003] bpf_prog_alloc+0x3b/0x230 [ 154.475277][ T7003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 154.475296][ T7003] bpf_prog_load+0x1a04/0x2490 [ 154.475311][ T7003] ? __pfx_bpf_prog_load+0x10/0x10 [ 154.475322][ T7003] ? avc_has_perm_noaudit+0x149/0x3b0 [ 154.475348][ T7003] ? selinux_bpf+0xde/0x130 [ 154.475368][ T7003] ? bpf_lsm_bpf+0x9/0x10 [ 154.475384][ T7003] __sys_bpf+0x433c/0x4d80 [ 154.475398][ T7003] ? __pfx___sys_bpf+0x10/0x10 [ 154.475410][ T7003] ? ksys_write+0x190/0x240 [ 154.475427][ T7003] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 154.475447][ T7003] ? fput+0x70/0xf0 [ 154.475457][ T7003] ? ksys_write+0x1b9/0x240 [ 154.475471][ T7003] ? __pfx_ksys_write+0x10/0x10 [ 154.475485][ T7003] ? rcu_is_watching+0x12/0xc0 [ 154.475499][ T7003] __x64_sys_bpf+0x78/0xc0 [ 154.475512][ T7003] ? lockdep_hardirqs_on+0x7c/0x110 [ 154.475522][ T7003] do_syscall_64+0xcd/0x260 [ 154.475535][ T7003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.475546][ T7003] RIP: 0033:0x7fdf2678e969 [ 154.475555][ T7003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.475565][ T7003] RSP: 002b:00007fdf2763b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.475577][ T7003] RAX: ffffffffffffffda RBX: 00007fdf269b5fa0 RCX: 00007fdf2678e969 [ 154.475583][ T7003] RDX: 0000000000000094 RSI: 0000200000002c40 RDI: 0000000000000005 [ 154.475589][ T7003] RBP: 00007fdf2763b090 R08: 0000000000000000 R09: 0000000000000000 [ 154.475595][ T7003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.475601][ T7003] R13: 0000000000000000 R14: 00007fdf269b5fa0 R15: 00007ffe6988d948 [ 154.475615][ T7003] [ 154.475619][ T7003] Mem-Info: [ 154.755054][ T7003] active_anon:10234 inactive_anon:0 isolated_anon:0 [ 154.755054][ T7003] active_file:11726 inactive_file:38600 isolated_file:0 [ 154.755054][ T7003] unevictable:768 dirty:500 writeback:0 [ 154.755054][ T7003] slab_reclaimable:6509 slab_unreclaimable:102677 [ 154.755054][ T7003] mapped:34303 shmem:5053 pagetables:1028 [ 154.755054][ T7003] sec_pagetables:0 bounce:0 [ 154.755054][ T7003] kernel_misc_reclaimable:0 [ 154.755054][ T7003] free:1322194 free_pcp:1100 free_cma:0 [ 154.800513][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.843003][ T7003] Node 0 active_anon:43536kB inactive_anon:0kB active_file:46904kB inactive_file:154328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:143712kB dirty:2000kB writeback:0kB shmem:21376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11896kB pagetables:4112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 154.876493][ C0] vkms_vblank_simulate: vblank timer overrun [ 154.898776][ T5896] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 154.972392][ T10] usb 5-1: USB disconnect, device number 8 [ 155.007609][ T5896] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 155.020236][ T5896] em28xx 4-1:0.132: No AC97 audio processor [ 155.151358][ T7003] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 155.229782][ T7003] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.256807][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.323153][ T7003] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 155.344584][ T7003] Node 0 DMA32 free:1345292kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:57612kB inactive_anon:0kB active_file:46904kB inactive_file:152504kB unevictable:1536kB writepending:700kB present:3129332kB managed:2543984kB mlocked:0kB bounce:0kB free_pcp:1956kB local_pcp:1340kB free_cma:0kB [ 155.346867][ T5896] usb 4-1: Decoder not found [ 155.374986][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.399691][ T5896] em28xx 4-1:0.132: failed to create media graph [ 155.418986][ T5896] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 155.441885][ T7003] lowmem_reserve[]: 0 0 1 1 1 [ 155.446614][ T7003] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:24kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:36kB local_pcp:28kB free_cma:0kB [ 155.469199][ T30] audit: type=1800 audit(1745645706.904:473): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.299" name="bus" dev="overlay" ino=355 res=0 errno=0 [ 155.497418][ T5896] em28xx 4-1:0.132: Remote control support is not available for this card. [ 155.536278][ T7003] lowmem_reserve[]: 0 0 0 0 0 [ 155.551166][ T7003] Node 1 Normal free:3913296kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.579809][ C0] vkms_vblank_simulate: vblank timer overrun [ 155.650055][ T911] em28xx 4-1:0.132: Closing input extension [ 155.684468][ T7003] lowmem_reserve[]: 0 0 0 0 0 [ 155.717208][ T911] em28xx 4-1:0.132: Freeing device [ 155.725916][ T7003] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 155.779065][ T7003] Node 0 DMA32: 16*4kB (UME) 2*8kB (U) 100*16kB (UME) 122*32kB (UE) 61*64kB (UE) 40*128kB (UE) 42*256kB (UME) 30*512kB (UME) 17*1024kB (ME) 11*2048kB (UME) 304*4096kB (UME) = 1325840kB [ 155.838586][ T7003] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 155.881943][ T7003] Node 1 Normal: 218*4kB (UME) 59*8kB (UME) 51*16kB (UME) 191*32kB (UME) 90*64kB (UME) 27*128kB (UME) 14*256kB (UME) 8*512kB (UME) 5*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3913296kB [ 155.928533][ T7003] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 155.950262][ T7003] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 155.981867][ T7003] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.020508][ T7003] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.061684][ T7003] 66011 total pagecache pages [ 156.077986][ T7003] 1 pages in swap cache [ 156.100103][ T7003] Free swap = 124992kB [ 156.120038][ T7003] Total swap = 124996kB [ 156.140805][ T7003] 2097051 pages RAM [ 156.144605][ T7003] 0 pages HighMem/MovableOnly [ 156.193363][ T7003] 428949 pages reserved [ 156.197516][ T7003] 0 pages cma reserved [ 156.309986][ T5827] Bluetooth: hci4: command 0x0405 tx timeout [ 156.515962][ T7029] overlayfs: conflicting lowerdir path [ 156.703170][ T5814] Bluetooth: hci4: Unknown advertising packet type: 0x74 [ 156.703501][ T5814] Bluetooth: hci4: Malformed LE Event: 0x0d [ 156.742884][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 156.753113][ T30] audit: type=1400 audit(1745645708.134:474): avc: denied { create } for pid=7015 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 157.643993][ T7049] libceph: resolve '0.' (ret=-3): failed [ 157.693347][ T5896] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 157.837800][ T30] audit: type=1400 audit(1745645709.264:475): avc: denied { read write } for pid=7047 comm="syz.3.311" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 157.893396][ T30] audit: type=1400 audit(1745645709.264:476): avc: denied { open } for pid=7047 comm="syz.3.311" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 157.957624][ T7049] lo speed is unknown, defaulting to 1000 [ 157.970043][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 157.979498][ T5896] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 157.995839][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.015372][ T5896] usb 2-1: config 0 descriptor?? [ 158.024171][ T5896] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 158.057121][ T7052] overlayfs: conflicting lowerdir path [ 158.225914][ T30] audit: type=1400 audit(1745645709.664:477): avc: denied { write } for pid=7043 comm="syz.1.308" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 158.299851][ T5896] gspca_vc032x: reg_r err -32 [ 158.304596][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.320275][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.325575][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.331058][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.336323][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.351247][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.358307][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.409653][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.429217][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.443229][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.480103][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 158.485869][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.514032][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.527931][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.544980][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.554743][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.565388][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.586824][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.602270][ T5896] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.620008][ T5896] gspca_vc032x: Unknown sensor... [ 158.635475][ T5896] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 158.643225][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 158.643248][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.643267][ T10] usb 5-1: Product: syz [ 158.724463][ T10] usb 5-1: Manufacturer: syz [ 158.734839][ T10] usb 5-1: SerialNumber: syz [ 158.755229][ T7071] random: crng reseeded on system resumption [ 158.806184][ T30] audit: type=1400 audit(1745645710.194:478): avc: denied { write } for pid=7068 comm="syz.2.315" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 158.860629][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 158.890779][ T911] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 158.907842][ T30] audit: type=1400 audit(1745645710.194:479): avc: denied { open } for pid=7068 comm="syz.2.315" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 159.083762][ T30] audit: type=1400 audit(1745645710.294:480): avc: denied { ioctl } for pid=7043 comm="syz.1.308" path="/dev/usbmon0" dev="devtmpfs" ino=716 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 159.510599][ T5865] usb 5-1: USB disconnect, device number 9 [ 159.659793][ T7074] overlayfs: conflicting lowerdir path [ 159.911540][ T911] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 159.921271][ T911] ath9k_htc: Failed to initialize the device [ 160.145249][ T5865] usb 5-1: ath9k_htc: USB layer deinitialized [ 160.194588][ T7065] syz.2.310 (7065) used greatest stack depth: 21208 bytes left [ 160.490024][ T5861] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 160.672293][ T5861] usb 4-1: config 0 interface 0 altsetting 225 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.786966][ T5861] usb 4-1: config 0 interface 0 has no altsetting 0 [ 160.851876][ T5861] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 160.908589][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.920536][ T5861] usb 4-1: config 0 descriptor?? [ 161.063551][ T5896] usb 2-1: USB disconnect, device number 14 [ 161.069579][ T30] audit: type=1400 audit(1745645712.504:481): avc: denied { ioctl } for pid=7091 comm="syz.0.322" path="socket:[13439]" dev="sockfs" ino=13439 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 161.550888][ T5861] nti 0003:0757:0A00.0004: invalid report_size -1903817399 [ 161.575969][ T5861] nti 0003:0757:0A00.0004: item 0 4 1 7 parsing failed [ 161.597045][ T5861] nti 0003:0757:0A00.0004: probe with driver nti failed with error -22 [ 161.989407][ T5896] usb 4-1: USB disconnect, device number 11 [ 162.084454][ T30] audit: type=1400 audit(1745645713.514:482): avc: denied { search } for pid=7106 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.234396][ T7116] overlayfs: conflicting lowerdir path [ 162.248459][ T30] audit: type=1400 audit(1745645713.544:483): avc: denied { read } for pid=7109 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.388092][ T30] audit: type=1400 audit(1745645713.544:484): avc: denied { open } for pid=7109 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1708 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 162.680033][ T5896] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 162.848441][ T7136] netlink: 48 bytes leftover after parsing attributes in process `syz.3.331'. [ 162.860065][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 162.870786][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.964916][ T5896] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.004849][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.047040][ T5896] usb 3-1: config 0 descriptor?? [ 163.265626][ T5896] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 163.328464][ T7165] FAULT_INJECTION: forcing a failure. [ 163.328464][ T7165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.342809][ T7165] CPU: 1 UID: 0 PID: 7165 Comm: syz.0.334 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 163.342833][ T7165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 163.342843][ T7165] Call Trace: [ 163.342849][ T7165] [ 163.342855][ T7165] dump_stack_lvl+0x16c/0x1f0 [ 163.342878][ T7165] should_fail_ex+0x512/0x640 [ 163.342898][ T7165] ? __pfx___might_resched+0x10/0x10 [ 163.342923][ T7165] _copy_from_user+0x2e/0xd0 [ 163.342947][ T7165] mfill_atomic_copy+0xff7/0x1c20 [ 163.342975][ T7165] ? find_held_lock+0x2b/0x80 [ 163.342994][ T7165] ? __might_fault+0xe3/0x190 [ 163.343009][ T7165] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 163.343038][ T7165] userfaultfd_ioctl+0x20bb/0x3890 [ 163.343064][ T7165] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 163.343083][ T7165] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 163.343108][ T7165] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 163.343143][ T7165] ? hook_file_ioctl_common+0x145/0x410 [ 163.343175][ T7165] ? selinux_file_ioctl+0x180/0x270 [ 163.343198][ T7165] ? selinux_file_ioctl+0xb4/0x270 [ 163.343220][ T7165] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 163.343244][ T7165] ? __x64_sys_ioctl+0x190/0x200 [ 163.343263][ T7165] __x64_sys_ioctl+0x190/0x200 [ 163.343286][ T7165] do_syscall_64+0xcd/0x260 [ 163.343307][ T7165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.343333][ T7165] RIP: 0033:0x7f7f84f8e969 [ 163.343346][ T7165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.343362][ T7165] RSP: 002b:00007f7f85db0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.343378][ T7165] RAX: ffffffffffffffda RBX: 00007f7f851b5fa0 RCX: 00007f7f84f8e969 [ 163.343388][ T7165] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 163.343398][ T7165] RBP: 00007f7f85db0090 R08: 0000000000000000 R09: 0000000000000000 [ 163.343408][ T7165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 163.343417][ T7165] R13: 0000000000000000 R14: 00007f7f851b5fa0 R15: 00007ffcd5430ed8 [ 163.343441][ T7165] [ 163.555112][ T24] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 163.572009][ T5896] usb 3-1: USB disconnect, device number 9 [ 163.724999][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.745551][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 163.763744][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.780023][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.793959][ T24] usb 4-1: config 0 descriptor?? [ 164.050157][ T911] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 165.380239][ T911] usb 1-1: Using ep0 maxpacket: 16 [ 165.388861][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.402164][ T911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.413483][ T911] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 165.537936][ T5896] usb 4-1: USB disconnect, device number 12 [ 165.562116][ T911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.580472][ T911] usb 1-1: config 0 descriptor?? [ 166.347681][ T911] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0005/input/input9 [ 166.622548][ T7224] FAULT_INJECTION: forcing a failure. [ 166.622548][ T7224] name failslab, interval 1, probability 0, space 0, times 0 [ 166.635201][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.2.342 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 166.635223][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 166.635234][ T7224] Call Trace: [ 166.635240][ T7224] [ 166.635246][ T7224] dump_stack_lvl+0x16c/0x1f0 [ 166.635271][ T7224] should_fail_ex+0x512/0x640 [ 166.635296][ T7224] should_failslab+0xc2/0x120 [ 166.635315][ T7224] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 166.635348][ T7224] ? skb_clone+0x190/0x3f0 [ 166.635377][ T7224] skb_clone+0x190/0x3f0 [ 166.635403][ T7224] netlink_deliver_tap+0xabd/0xd30 [ 166.635434][ T7224] netlink_unicast+0x5df/0x7f0 [ 166.635454][ T7224] ? __pfx_netlink_unicast+0x10/0x10 [ 166.635479][ T7224] netlink_sendmsg+0x8d1/0xdd0 [ 166.635499][ T7224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.635526][ T7224] ____sys_sendmsg+0xa95/0xc70 [ 166.635546][ T7224] ? copy_msghdr_from_user+0x10a/0x160 [ 166.635570][ T7224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.635600][ T7224] ___sys_sendmsg+0x134/0x1d0 [ 166.635626][ T7224] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.635682][ T7224] __sys_sendmsg+0x16d/0x220 [ 166.635707][ T7224] ? __pfx___sys_sendmsg+0x10/0x10 [ 166.635739][ T7224] ? rcu_is_watching+0x12/0xc0 [ 166.635767][ T7224] do_syscall_64+0xcd/0x260 [ 166.635788][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.635806][ T7224] RIP: 0033:0x7f7168f8e969 [ 166.635821][ T7224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.635838][ T7224] RSP: 002b:00007f7169d3a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.635855][ T7224] RAX: ffffffffffffffda RBX: 00007f71691b6160 RCX: 00007f7168f8e969 [ 166.635866][ T7224] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 166.635876][ T7224] RBP: 00007f7169d3a090 R08: 0000000000000000 R09: 0000000000000000 [ 166.635887][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.635897][ T7224] R13: 0000000000000000 R14: 00007f71691b6160 R15: 00007ffd4788c508 [ 166.635921][ T7224] [ 166.635954][ T7224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 167.149929][ T7224] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 167.314267][ T911] appleir 0003:05AC:8241.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 167.420935][ T911] usb 1-1: USB disconnect, device number 9 [ 167.724159][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 167.724237][ T30] audit: type=1400 audit(1745645719.164:497): avc: denied { mounton } for pid=7235 comm="syz.2.346" path="/proc/243/task" dev="proc" ino=13075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 168.068076][ T30] audit: type=1400 audit(1745645719.504:498): avc: denied { create } for pid=7240 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.255278][ T7235] delete_channel: no stack [ 168.255746][ T7235] delete_channel: no stack [ 168.288825][ T30] audit: type=1400 audit(1745645719.714:499): avc: denied { ioctl } for pid=7253 comm="syz.1.348" path="socket:[13697]" dev="sockfs" ino=13697 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 168.366246][ T7258] overlayfs: conflicting lowerdir path [ 168.372218][ T30] audit: type=1400 audit(1745645719.814:500): avc: denied { getopt } for pid=7253 comm="syz.1.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.503134][ T7252] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 168.960100][ T5865] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.190526][ T5865] usb 1-1: Using ep0 maxpacket: 8 [ 169.259552][ T5865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.413810][ T5865] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.518841][ T5865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.776264][ T5865] usb 1-1: config 0 descriptor?? [ 169.839089][ T7278] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 170.284961][ T5865] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 170.300986][ T5865] usb 1-1: USB disconnect, device number 10 [ 172.096614][ T7297] Set syz1 is full, maxelem 65536 reached [ 173.157654][ T7319] veth0_vlan: left promiscuous mode [ 173.164181][ T7319] veth0_vlan: entered promiscuous mode [ 173.185913][ T30] audit: type=1400 audit(1745645724.624:501): avc: denied { shutdown } for pid=7312 comm="syz.0.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 173.217804][ T5814] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 173.583374][ T7332] lo speed is unknown, defaulting to 1000 [ 173.589456][ T7332] lo speed is unknown, defaulting to 1000 [ 173.598892][ T7332] lo speed is unknown, defaulting to 1000 [ 173.660876][ T7332] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 174.382361][ T7332] lo speed is unknown, defaulting to 1000 [ 174.389134][ T7332] lo speed is unknown, defaulting to 1000 [ 174.395604][ T7332] lo speed is unknown, defaulting to 1000 [ 174.402130][ T7332] lo speed is unknown, defaulting to 1000 [ 174.410070][ T7332] lo speed is unknown, defaulting to 1000 [ 175.037690][ T7313] ubi31: attaching mtd0 [ 175.061462][ T30] audit: type=1400 audit(1745645726.504:502): avc: denied { map } for pid=7340 comm="syz.1.367" path="socket:[13825]" dev="sockfs" ino=13825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 175.233722][ T7343] warning: `syz.1.367' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 175.308473][ T7343] zonefs (nullb0) ERROR: Not a zoned block device [ 175.392383][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.366'. [ 175.664965][ T911] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 176.047248][ T7360] overlayfs: conflicting lowerdir path [ 176.063076][ T911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.145185][ T7366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.373'. [ 176.168057][ T7364] lo speed is unknown, defaulting to 1000 [ 176.168602][ T911] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 176.184481][ T7362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.370'. [ 176.284850][ T911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 176.288979][ T7364] lo speed is unknown, defaulting to 1000 [ 176.320217][ T5896] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 176.322013][ T911] usb 5-1: Product: syz [ 176.363427][ T911] usb 5-1: Manufacturer: syz [ 176.455249][ T911] usb 5-1: SerialNumber: syz [ 176.462284][ T911] usb 5-1: config 0 descriptor?? [ 176.569208][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 176.586231][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 176.615376][ T5896] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 176.665148][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.665902][ T30] audit: type=1400 audit(1745645728.104:503): avc: denied { read } for pid=7373 comm="syz.3.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 176.754900][ T5896] usb 3-1: config 0 descriptor?? [ 176.776737][ T30] audit: type=1400 audit(1745645728.194:504): avc: denied { watch watch_reads } for pid=7373 comm="syz.3.375" path="pipe:[14342]" dev="pipefs" ino=14342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 177.142606][ T5896] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 177.157117][ T30] audit: type=1400 audit(1745645728.584:505): avc: denied { bind } for pid=7345 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 177.191540][ T5896] usb 3-1: USB disconnect, device number 10 [ 177.842173][ T7392] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 178.491155][ T7403] netlink: 'syz.1.380': attribute type 38 has an invalid length. [ 179.018554][ T5896] usb 5-1: USB disconnect, device number 10 [ 180.403620][ T7423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7423 comm=syz.4.387 [ 180.725392][ T30] audit: type=1400 audit(1745645732.164:506): avc: denied { ioctl } for pid=7424 comm="syz.2.389" path="socket:[14073]" dev="sockfs" ino=14073 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 181.076044][ T30] audit: type=1400 audit(1745645732.514:507): avc: denied { create } for pid=7431 comm="syz.1.391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 181.235852][ T5865] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 181.473040][ T7451] netlink: 'syz.0.393': attribute type 38 has an invalid length. [ 181.910026][ T5861] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 181.919759][ T7453] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 181.953718][ T5865] usb 5-1: config index 0 descriptor too short (expected 60443, got 27) [ 181.964847][ T5865] usb 5-1: config 1 has an invalid interface number: 0 but max is -1 [ 181.982164][ T5865] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 0 [ 181.999401][ T5865] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.034150][ T5865] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 182.048114][ T7456] veth0_vlan: entered allmulticast mode [ 182.072689][ T5865] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.091347][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 182.092700][ T7456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 182.106352][ T7456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.395'. [ 182.107205][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 182.133028][ T5865] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 182.143593][ T5865] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.151959][ T5865] usb 5-1: Product: syz [ 182.156498][ T5865] usb 5-1: Manufacturer: syz [ 182.157542][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.161543][ T5865] usb 5-1: SerialNumber: syz [ 182.271921][ T5861] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 182.287437][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.312806][ T5861] usb 4-1: Product: syz [ 182.317068][ T5861] usb 4-1: Manufacturer: syz [ 182.325666][ T5861] usb 4-1: SerialNumber: syz [ 182.349345][ T5861] usb 4-1: config 0 descriptor?? [ 182.376669][ T5861] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 182.386816][ T5861] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 182.408385][ T5865] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 182.600074][ T5864] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 182.758631][ T30] audit: type=1400 audit(1745645734.194:508): avc: denied { read write } for pid=7429 comm="syz.4.390" name="lp0" dev="devtmpfs" ino=2898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 182.800434][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 182.812105][ T30] audit: type=1400 audit(1745645734.224:509): avc: denied { open } for pid=7429 comm="syz.4.390" path="/dev/usb/lp0" dev="devtmpfs" ino=2898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 182.838993][ T5864] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 182.848691][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.858981][ T5864] usb 1-1: config 0 descriptor?? [ 182.867242][ T5864] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 182.940106][ T5865] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 183.050010][ T5861] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 183.057067][ T5861] em28xx 4-1:0.0: Config register raw data: 0x41 [ 183.151324][ T5864] gspca_vc032x: reg_r err -32 [ 183.156546][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.162184][ T7462] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 183.174971][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.180557][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.186869][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.192560][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.197988][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.203603][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.209836][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.215278][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.220616][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.225904][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.231383][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.236845][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.242209][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.247503][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.252880][ T5865] usb 3-1: Using ep0 maxpacket: 16 [ 183.258092][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.263961][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.275423][ T5864] gspca_vc032x: I2c Bus Busy Wait 00 [ 183.280972][ T5865] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 183.290059][ T5864] gspca_vc032x: Unknown sensor... [ 183.295145][ T5864] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 183.302943][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.305486][ T5861] usb 4-1: USB disconnect, device number 13 [ 183.323749][ T5865] usb 3-1: config 0 descriptor?? [ 183.328735][ T5861] em28xx 4-1:0.0: Disconnecting em28xx [ 183.340711][ T5861] em28xx 4-1:0.0: Freeing device [ 183.341555][ T5865] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 183.638276][ T5864] usb 1-1: USB disconnect, device number 11 [ 183.741685][ T5865] gspca_sonixj: reg_r err -71 [ 183.746424][ T5865] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 183.761396][ T5865] usb 3-1: USB disconnect, device number 11 [ 183.890206][ T5904] usb 5-1: USB disconnect, device number 11 [ 183.938058][ T5904] usblp0: removed [ 184.910545][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'. [ 184.919632][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'. [ 184.985231][ T7477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.402'. [ 185.364172][ T7471] loop6: detected capacity change from 0 to 524287999 [ 185.815476][ T5820] Bluetooth: hci0: command 0x0406 tx timeout [ 185.815478][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 185.815516][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 185.821621][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 185.827575][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 185.884359][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 185.893977][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 185.903386][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 185.912996][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 185.921964][ T7486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.406'. [ 186.068494][ T30] audit: type=1400 audit(1745645737.504:510): avc: denied { create } for pid=7483 comm="syz.0.404" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 186.470339][ T7501] lo speed is unknown, defaulting to 1000 [ 186.476706][ T7501] lo speed is unknown, defaulting to 1000 [ 186.515739][ T7500] ubi31: attaching mtd0 [ 187.069113][ T24] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 187.166629][ T5904] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 187.198015][ T5827] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 187.230346][ T24] usb 4-1: device descriptor read/64, error -71 [ 187.288406][ T7524] __nla_validate_parse: 60 callbacks suppressed [ 187.288422][ T7524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.419'. [ 187.319925][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 187.328951][ T5904] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 187.346928][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.359750][ T5904] usb 1-1: config 0 descriptor?? [ 187.374015][ T5904] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 187.546865][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 187.582617][ T5904] gspca_vc032x: reg_r err -32 [ 187.599906][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.610171][ T7526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=259 sclass=netlink_route_socket pid=7526 comm=syz.1.420 [ 187.630491][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.639965][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.645255][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.673629][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.678935][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.720028][ T24] usb 4-1: device descriptor read/64, error -71 [ 187.758511][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.779907][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.785227][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.815390][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.830697][ T24] usb usb4-port1: attempt power cycle [ 187.842765][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.848066][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 187.848920][ T30] audit: type=1326 audit(1745645739.284:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7536 comm="syz.2.424" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7168f8e969 code=0x0 [ 187.920097][ T30] audit: type=1400 audit(1745645739.344:512): avc: denied { read } for pid=7536 comm="syz.2.424" dev="sockfs" ino=14294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 188.042031][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.047356][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.061088][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.066487][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.076606][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.082811][ T5904] gspca_vc032x: I2c Bus Busy Wait 00 [ 188.088101][ T5904] gspca_vc032x: Unknown sensor... [ 188.093258][ T5904] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 188.340023][ T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 188.422959][ T24] usb 4-1: device descriptor read/8, error -71 [ 189.111728][ T5827] Bluetooth: hci4: unexpected event for opcode 0x0809 [ 189.190399][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 189.221097][ T24] usb 4-1: device descriptor read/8, error -71 [ 189.375905][ T24] usb usb4-port1: unable to enumerate USB device [ 189.605189][ T30] audit: type=1400 audit(1745645741.014:513): avc: denied { open } for pid=7559 comm="syz.4.431" path="/dev/ptyqd" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 189.824142][ T7565] FAULT_INJECTION: forcing a failure. [ 189.824142][ T7565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.840019][ T7565] CPU: 1 UID: 0 PID: 7565 Comm: syz.3.432 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 189.840043][ T7565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 189.840053][ T7565] Call Trace: [ 189.840059][ T7565] [ 189.840065][ T7565] dump_stack_lvl+0x16c/0x1f0 [ 189.840088][ T7565] should_fail_ex+0x512/0x640 [ 189.840113][ T7565] _copy_from_user+0x2e/0xd0 [ 189.840135][ T7565] kstrtouint_from_user+0xd6/0x1d0 [ 189.840151][ T7565] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 189.840167][ T7565] ? __lock_acquire+0xaa4/0x1ba0 [ 189.840203][ T7565] proc_fail_nth_write+0x83/0x250 [ 189.840226][ T7565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.840256][ T7565] vfs_write+0x25c/0x1180 [ 189.840277][ T7565] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.840302][ T7565] ? __pfx___mutex_lock+0x10/0x10 [ 189.840320][ T7565] ? __pfx_vfs_write+0x10/0x10 [ 189.840350][ T7565] ? __fget_files+0x20e/0x3c0 [ 189.840382][ T7565] ksys_write+0x12a/0x240 [ 189.840405][ T7565] ? __pfx_ksys_write+0x10/0x10 [ 189.840436][ T7565] do_syscall_64+0xcd/0x260 [ 189.840457][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.840473][ T7565] RIP: 0033:0x7fb052f8d41f [ 189.840487][ T7565] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 189.840503][ T7565] RSP: 002b:00007fb053db3030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 189.840526][ T7565] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb052f8d41f [ 189.840537][ T7565] RDX: 0000000000000001 RSI: 00007fb053db30a0 RDI: 0000000000000003 [ 189.840547][ T7565] RBP: 00007fb053db3090 R08: 0000000000000000 R09: 0000000000000000 [ 189.840556][ T7565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 189.840566][ T7565] R13: 0000000000000001 R14: 00007fb0531b5fa0 R15: 00007ffe590232a8 [ 189.840589][ T7565] [ 190.179395][ T5864] usb 1-1: USB disconnect, device number 12 [ 190.456975][ T5865] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 190.484230][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 191.487141][ T5865] usb 3-1: config 7 has an invalid interface number: 252 but max is 0 [ 191.500097][ T5865] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 191.510281][ T5865] usb 3-1: config 7 has no interface number 0 [ 191.516904][ T5865] usb 3-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 191.530108][ T5865] usb 3-1: config 7 interface 252 has no altsetting 0 [ 191.539664][ T5865] usb 3-1: string descriptor 0 read error: -22 [ 191.569652][ T5865] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 192.542375][ T5865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.929941][ T48] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 193.232291][ T30] audit: type=1326 audit(1745645744.434:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7566 comm="syz.2.433" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7168f8e969 code=0x0 [ 193.340020][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 193.352620][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 193.408400][ T48] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 193.529400][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.900453][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.906811][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.098830][ T7594] loop6: detected capacity change from 0 to 524287999 [ 194.341258][ T48] usb 2-1: Product: syz [ 194.345454][ T48] usb 2-1: Manufacturer: syz [ 194.350112][ T48] usb 2-1: SerialNumber: syz [ 194.562488][ T7580] Set syz1 is full, maxelem 65536 reached [ 194.617269][ T7594] Dev loop6: unable to read RDB block 8 [ 194.623085][ T7594] loop6: unable to read partition table [ 194.637987][ T48] usb 2-1: config 0 descriptor?? [ 194.658481][ T48] hub 2-1:0.0: bad descriptor, ignoring hub [ 194.678267][ T48] hub 2-1:0.0: probe with driver hub failed with error -5 [ 194.766016][ T7594] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 194.775379][ T5904] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 194.956787][ T48] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10 [ 195.043432][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 195.075845][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.116728][ T48] usb 2-1: USB disconnect, device number 15 [ 195.122908][ T5896] usb 3-1: USB disconnect, device number 12 [ 195.148696][ T5904] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 195.180308][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 195.192937][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.274709][ T5904] usb 5-1: config 0 descriptor?? [ 195.284865][ T30] audit: type=1400 audit(1745645746.724:515): avc: denied { bind } for pid=7606 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 195.365472][ T7607] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 195.376723][ T7607] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 195.953050][ T48] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 196.166768][ T5904] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 196.320538][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 196.339465][ T48] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 196.362415][ T30] audit: type=1400 audit(1745645747.794:516): avc: denied { setopt } for pid=7624 comm="syz.0.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 196.371755][ T5822] usb 5-1: USB disconnect, device number 12 [ 196.382119][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.419467][ T7629] input: syz1 as /devices/virtual/input/input11 [ 196.427490][ T48] usb 2-1: config 0 descriptor?? [ 196.437886][ T48] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 196.526045][ T30] audit: type=1400 audit(1745645747.964:517): avc: denied { read } for pid=7630 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.637425][ T48] gspca_vc032x: reg_r err -32 [ 196.666340][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.672099][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.686303][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.699292][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.711503][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.719659][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.859667][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.865067][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.870470][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.875897][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.881248][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.886664][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.892024][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 196.897355][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.403910][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.505619][ T7640] loop6: detected capacity change from 0 to 524287999 [ 197.830845][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.836270][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.841713][ T48] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.847092][ T48] gspca_vc032x: Unknown sensor... [ 197.852601][ T48] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 198.190649][ T5865] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 198.524684][ T5865] usb 3-1: Using ep0 maxpacket: 32 [ 198.552624][ T5865] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 198.568659][ T5865] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 198.598033][ T5865] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 198.625232][ T5865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 198.630352][ T48] usb 2-1: USB disconnect, device number 16 [ 198.660287][ T5865] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 198.699972][ T5865] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 198.743426][ T5865] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 198.763374][ T5865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.805077][ T5865] usb 3-1: config 0 descriptor?? [ 199.090353][ T5822] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 199.740695][ T5865] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 199.790188][ T5865] usb 3-1: USB disconnect, device number 13 [ 199.843386][ T5865] usblp0: removed [ 199.921375][ T5822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.010180][ T5822] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.751061][ T5822] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 200.778087][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 200.819062][ T5822] usb 5-1: Product: syz [ 200.850097][ T5822] usb 5-1: Manufacturer: syz [ 200.854734][ T5822] usb 5-1: SerialNumber: syz [ 200.893575][ T5822] usb 5-1: config 0 descriptor?? [ 200.908835][ T5822] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 200.922250][ T5822] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 200.940210][ T5822] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 201.684386][ T30] audit: type=1400 audit(1745645753.124:518): avc: denied { load_policy } for pid=7675 comm="syz.0.464" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 201.706070][ T7679] SELinux: policydb version 51618937 does not match my version range 15-34 [ 201.722528][ T7679] SELinux: failed to load policy [ 202.063362][ T7694] veth0_vlan: entered allmulticast mode [ 202.111499][ T7694] veth0_vlan: left promiscuous mode [ 202.121028][ T7694] veth0_vlan: entered promiscuous mode [ 202.406814][ T7696] FAULT_INJECTION: forcing a failure. [ 202.406814][ T7696] name failslab, interval 1, probability 0, space 0, times 0 [ 202.508560][ T7696] CPU: 0 UID: 0 PID: 7696 Comm: syz.2.468 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 202.508588][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 202.508598][ T7696] Call Trace: [ 202.508603][ T7696] [ 202.508610][ T7696] dump_stack_lvl+0x16c/0x1f0 [ 202.508634][ T7696] should_fail_ex+0x512/0x640 [ 202.508655][ T7696] ? __kvmalloc_node_noprof+0x122/0x600 [ 202.508683][ T7696] should_failslab+0xc2/0x120 [ 202.508703][ T7696] __kvmalloc_node_noprof+0x135/0x600 [ 202.508727][ T7696] ? lockdep_init_map_type+0x5c/0x280 [ 202.508752][ T7696] ? alloc_netdev_mqs+0xb5b/0x1570 [ 202.508783][ T7696] ? alloc_netdev_mqs+0xb5b/0x1570 [ 202.508805][ T7696] alloc_netdev_mqs+0xb5b/0x1570 [ 202.508836][ T7696] ppp_ioctl+0x1761/0x2660 [ 202.508859][ T7696] ? __pfx_ppp_ioctl+0x10/0x10 [ 202.508884][ T7696] ? selinux_file_ioctl+0xb4/0x270 [ 202.508908][ T7696] ? __pfx_ppp_ioctl+0x10/0x10 [ 202.508924][ T7696] __x64_sys_ioctl+0x190/0x200 [ 202.508947][ T7696] do_syscall_64+0xcd/0x260 [ 202.508966][ T7696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.508981][ T7696] RIP: 0033:0x7f7168f8e969 [ 202.508994][ T7696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.509009][ T7696] RSP: 002b:00007f7169d7c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.509025][ T7696] RAX: ffffffffffffffda RBX: 00007f71691b5fa0 RCX: 00007f7168f8e969 [ 202.509036][ T7696] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000003 [ 202.509046][ T7696] RBP: 00007f7169d7c090 R08: 0000000000000000 R09: 0000000000000000 [ 202.509056][ T7696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.509065][ T7696] R13: 0000000000000000 R14: 00007f71691b5fa0 R15: 00007ffd4788c508 [ 202.509087][ T7696] [ 202.515739][ T7698] FAULT_INJECTION: forcing a failure. [ 202.515739][ T7698] name failslab, interval 1, probability 0, space 0, times 0 [ 202.730058][ T7698] CPU: 0 UID: 0 PID: 7698 Comm: syz.0.469 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 202.730086][ T7698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 202.730096][ T7698] Call Trace: [ 202.730102][ T7698] [ 202.730108][ T7698] dump_stack_lvl+0x16c/0x1f0 [ 202.730133][ T7698] should_fail_ex+0x512/0x640 [ 202.730158][ T7698] should_failslab+0xc2/0x120 [ 202.730177][ T7698] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 202.730205][ T7698] ? skb_clone+0x190/0x3f0 [ 202.730240][ T7698] skb_clone+0x190/0x3f0 [ 202.730265][ T7698] netlink_deliver_tap+0xabd/0xd30 [ 202.730296][ T7698] netlink_unicast+0x5df/0x7f0 [ 202.730315][ T7698] ? __pfx_netlink_unicast+0x10/0x10 [ 202.730338][ T7698] netlink_sendmsg+0x8d1/0xdd0 [ 202.730363][ T7698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.730389][ T7698] ____sys_sendmsg+0xa95/0xc70 [ 202.730409][ T7698] ? copy_msghdr_from_user+0x10a/0x160 [ 202.730433][ T7698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.730463][ T7698] ___sys_sendmsg+0x134/0x1d0 [ 202.730488][ T7698] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.730543][ T7698] __sys_sendmsg+0x16d/0x220 [ 202.730566][ T7698] ? __pfx___sys_sendmsg+0x10/0x10 [ 202.730597][ T7698] ? rcu_is_watching+0x12/0xc0 [ 202.730624][ T7698] do_syscall_64+0xcd/0x260 [ 202.730647][ T7698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.730663][ T7698] RIP: 0033:0x7f7f84f8e969 [ 202.730678][ T7698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.730694][ T7698] RSP: 002b:00007f7f85db0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.730712][ T7698] RAX: ffffffffffffffda RBX: 00007f7f851b5fa0 RCX: 00007f7f84f8e969 [ 202.730723][ T7698] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000004 [ 202.730733][ T7698] RBP: 00007f7f85db0090 R08: 0000000000000000 R09: 0000000000000000 [ 202.730742][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.730752][ T7698] R13: 0000000000000000 R14: 00007f7f851b5fa0 R15: 00007ffcd5430ed8 [ 202.730774][ T7698] [ 203.086686][ T7700] loop6: detected capacity change from 0 to 524287999 [ 203.170077][ T5822] usb 5-1: USB disconnect, device number 13 [ 205.617921][ T7714] Set syz1 is full, maxelem 65536 reached [ 206.104741][ T30] audit: type=1400 audit(1745645757.534:519): avc: denied { wake_alarm } for pid=7727 comm="syz.4.480" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.092389][ T911] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 207.123170][ T30] audit: type=1400 audit(1745645758.554:520): avc: granted { setsecparam } for pid=7720 comm="syz.0.478" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 207.225687][ T7723] bridge0: port 3(team0) entered blocking state [ 207.232249][ T7723] bridge0: port 3(team0) entered disabled state [ 207.243038][ T7723] team0: entered allmulticast mode [ 207.248631][ T7723] team_slave_0: entered allmulticast mode [ 207.255861][ T7723] team_slave_1: entered allmulticast mode [ 207.301534][ T911] usb 2-1: Using ep0 maxpacket: 32 [ 207.310706][ T911] usb 2-1: config 0 has an invalid descriptor of length 156, skipping remainder of the config [ 207.353903][ T7723] team0: entered promiscuous mode [ 207.359579][ T7723] team_slave_0: entered promiscuous mode [ 207.365350][ T911] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 207.375191][ T7723] team_slave_1: entered promiscuous mode [ 207.453519][ T911] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 207.463280][ T911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.474706][ T7723] bridge0: port 3(team0) entered blocking state [ 207.481338][ T7723] bridge0: port 3(team0) entered forwarding state [ 207.520608][ T911] usb 2-1: config 0 descriptor?? [ 207.576910][ T7747] veth0_vlan: entered allmulticast mode [ 207.632284][ T7748] veth0_vlan: left promiscuous mode [ 207.638754][ T7748] veth0_vlan: entered promiscuous mode [ 207.658742][ T7751] veth1_macvtap: left promiscuous mode [ 207.740908][ T911] usb 2-1: USB disconnect, device number 18 [ 208.815020][ T5823] Bluetooth: hci4: command 0x0405 tx timeout [ 209.064079][ T7770] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=7770 comm=syz.2.490 [ 209.171361][ T30] audit: type=1400 audit(1745645760.614:521): avc: denied { getopt } for pid=7767 comm="syz.1.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 209.488579][ T5827] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 209.530008][ T5896] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 210.010111][ T5896] usb 3-1: Invalid ep0 maxpacket: 32 [ 210.045279][ T7780] netlink: 'syz.0.491': attribute type 38 has an invalid length. [ 210.151122][ T5896] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 210.567855][ T30] audit: type=1400 audit(1745645762.004:522): avc: denied { ioctl } for pid=7782 comm="syz.1.493" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 210.592768][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.605932][ T30] audit: type=1400 audit(1745645762.004:523): avc: denied { append } for pid=7786 comm="syz.3.494" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 210.628785][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.732025][ T5896] usb 3-1: Invalid ep0 maxpacket: 32 [ 210.752407][ T5896] usb usb3-port1: attempt power cycle [ 210.867344][ T30] audit: type=1400 audit(1745645762.304:524): avc: denied { ioctl } for pid=7786 comm="syz.3.494" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 210.891716][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.106836][ T7796] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 211.215640][ T7798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7798 comm=syz.3.497 [ 211.455973][ T5904] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 211.463931][ T5896] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 211.572110][ T5896] usb 3-1: Invalid ep0 maxpacket: 32 [ 211.788908][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 211.795852][ T5904] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 211.855301][ T5896] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 211.863288][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.894214][ T5896] usb 3-1: Invalid ep0 maxpacket: 32 [ 211.922911][ T5904] usb 5-1: config 0 descriptor?? [ 211.962434][ T5896] usb usb3-port1: unable to enumerate USB device [ 212.129937][ T5865] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 212.353314][ T5904] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 212.401706][ T5865] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.411938][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.423644][ T5865] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 212.459389][ T5865] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 212.469417][ T5865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 212.477876][ T5865] usb 2-1: Product: syz [ 212.483342][ T5865] usb 2-1: Manufacturer: syz [ 212.519098][ T5865] usb 2-1: SerialNumber: syz [ 212.538449][ T30] audit: type=1400 audit(1745645763.974:525): avc: denied { read } for pid=7791 comm="syz.4.496" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 212.604443][ T5865] usb 2-1: config 0 descriptor?? [ 212.731880][ T5865] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 212.745393][ T30] audit: type=1400 audit(1745645763.974:526): avc: denied { open } for pid=7791 comm="syz.4.496" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 212.772007][ T30] audit: type=1400 audit(1745645764.004:527): avc: denied { ioctl } for pid=7791 comm="syz.4.496" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 212.775350][ T5865] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 212.806848][ T5904] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 212.812141][ T5865] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 212.847413][ T5904] asix 5-1:0.0: probe with driver asix failed with error -71 [ 213.019654][ T5904] usb 5-1: USB disconnect, device number 14 [ 213.856270][ T7819] vivid-001: disconnect [ 213.907130][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.504'. [ 214.187754][ T7825] netlink: 'syz.0.505': attribute type 38 has an invalid length. [ 214.682714][ T30] audit: type=1400 audit(1745645766.084:528): avc: denied { allowed } for pid=7799 comm="syz.1.498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 214.734195][ T7818] vivid-001: reconnect [ 215.907075][ T5822] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 216.684950][ T10] usb 2-1: USB disconnect, device number 19 [ 216.725099][ T7843] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 216.811359][ T5822] usb 5-1: device descriptor read/64, error -71 [ 216.840295][ T30] audit: type=1400 audit(1745645768.274:529): avc: denied { read } for pid=7842 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 217.080000][ T5822] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 217.091314][ T7855] xt_policy: neither incoming nor outgoing policy selected [ 217.280995][ T7857] FAULT_INJECTION: forcing a failure. [ 217.280995][ T7857] name failslab, interval 1, probability 0, space 0, times 0 [ 217.357331][ T7857] CPU: 0 UID: 0 PID: 7857 Comm: syz.0.514 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 217.357357][ T7857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 217.357366][ T7857] Call Trace: [ 217.357372][ T7857] [ 217.357378][ T7857] dump_stack_lvl+0x16c/0x1f0 [ 217.357403][ T7857] should_fail_ex+0x512/0x640 [ 217.357423][ T7857] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 217.357451][ T7857] should_failslab+0xc2/0x120 [ 217.357468][ T7857] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 217.357494][ T7857] ? __pmd_alloc+0xc3/0x870 [ 217.357517][ T7857] __pmd_alloc+0xc3/0x870 [ 217.357535][ T7857] ? find_held_lock+0x2b/0x80 [ 217.357557][ T7857] __handle_mm_fault+0x948/0x2a40 [ 217.357589][ T7857] ? __pfx___handle_mm_fault+0x10/0x10 [ 217.357628][ T7857] ? find_vma+0xbf/0x140 [ 217.357646][ T7857] ? __pfx_find_vma+0x10/0x10 [ 217.357668][ T7857] handle_mm_fault+0x3fe/0xad0 [ 217.357696][ T7857] do_user_addr_fault+0x7a6/0x1370 [ 217.357718][ T7857] ? rcu_is_watching+0x12/0xc0 [ 217.357739][ T7857] exc_page_fault+0x5c/0xc0 [ 217.357758][ T7857] asm_exc_page_fault+0x26/0x30 [ 217.357774][ T7857] RIP: 0010:__get_user_4+0x14/0x20 [ 217.357798][ T7857] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 217.357813][ T7857] RSP: 0018:ffffc9000c62fdb8 EFLAGS: 00050287 [ 217.357826][ T7857] RAX: 000000110e22fff6 RBX: ffff888062e58000 RCX: ffffc9000c62fd5c [ 217.357837][ T7857] RDX: 00007ffffffff000 RSI: ffffffff86b22430 RDI: ffffffff8bf47720 [ 217.357847][ T7857] RBP: 1ffff920018c5fbf R08: cd3e9657ea496c44 R09: 0000000000000001 [ 217.357857][ T7857] R10: 0000000000000001 R11: 0000000000000000 R12: 000000004004743d [ 217.357867][ T7857] R13: 000000004004743d R14: 000000110e22fff6 R15: ffff888031354380 [ 217.357886][ T7857] ? ppp_ioctl+0x1490/0x2660 [ 217.357907][ T7857] ppp_ioctl+0x1498/0x2660 [ 217.357929][ T7857] ? __pfx_ppp_ioctl+0x10/0x10 [ 217.357952][ T7857] ? selinux_file_ioctl+0x180/0x270 [ 217.357974][ T7857] ? selinux_file_ioctl+0xb4/0x270 [ 217.357998][ T7857] ? __pfx_ppp_ioctl+0x10/0x10 [ 217.358016][ T7857] __x64_sys_ioctl+0x190/0x200 [ 217.358040][ T7857] do_syscall_64+0xcd/0x260 [ 217.358060][ T7857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.358076][ T7857] RIP: 0033:0x7f7f84f8e969 [ 217.358089][ T7857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.358104][ T7857] RSP: 002b:00007f7f85db0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.358119][ T7857] RAX: ffffffffffffffda RBX: 00007f7f851b5fa0 RCX: 00007f7f84f8e969 [ 217.358129][ T7857] RDX: 000000110e22fff6 RSI: 000000004004743d RDI: 0000000000000003 [ 217.358138][ T7857] RBP: 00007f7f85db0090 R08: 0000000000000000 R09: 0000000000000000 [ 217.358148][ T7857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.358157][ T7857] R13: 0000000000000000 R14: 00007f7f851b5fa0 R15: 00007ffcd5430ed8 [ 217.358181][ T7857] [ 217.674494][ T5822] usb 5-1: device descriptor read/64, error -71 [ 217.870248][ T5822] usb usb5-port1: attempt power cycle [ 218.406647][ T30] audit: type=1400 audit(1745645769.844:530): avc: denied { create } for pid=7862 comm="syz.4.517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 218.673583][ T7878] netlink: 'syz.3.518': attribute type 38 has an invalid length. [ 218.960738][ T30] audit: type=1400 audit(1745645770.404:531): avc: denied { ioctl } for pid=7879 comm="syz.2.520" path="socket:[16017]" dev="sockfs" ino=16017 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 219.317272][ T30] audit: type=1400 audit(1745645770.754:532): avc: denied { listen } for pid=7879 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 219.800278][ T7881] SELinux: syz.0.519 (7881) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 220.157320][ T30] audit: type=1400 audit(1745645771.594:533): avc: denied { module_request } for pid=7888 comm="syz.4.522" kmod="net-pf-16-proto-16-family-/dev/audio" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 220.228253][ T7890] ubi31: attaching mtd0 [ 220.297929][ T7890] ubi31: scanning is finished [ 220.303054][ T7890] ubi31: empty MTD device detected [ 220.577702][ T7897] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 220.905187][ T7906] tipc: Enabling of bearer rejected, failed to enable media [ 221.023228][ T7904] SELinux: unknown common r [ 221.027954][ T7904] SELinux: failed to load policy [ 221.043723][ T7908] tmpfs: Unknown parameter 'ide32' [ 221.050808][ T7890] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 221.058439][ T7890] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 221.067413][ T7890] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 221.076320][ T7890] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 221.085743][ T7890] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 221.101883][ T7890] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 221.110731][ T7890] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3240377362 [ 221.122372][ T7890] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 221.134400][ T7910] ubi31: background thread "ubi_bgt31d" started, PID 7910 [ 221.144767][ T7896] ubi: mtd0 is already attached to ubi31 [ 221.373234][ T7924] overlayfs: cannot append lower layer [ 221.770213][ T5822] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 222.004851][ T7931] netlink: 'syz.1.534': attribute type 38 has an invalid length. [ 222.107999][ T5822] usb 4-1: device descriptor read/64, error -71 [ 222.400065][ T5822] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 222.427774][ T7942] loop6: detected capacity change from 0 to 524287999 [ 223.353110][ T5822] usb 4-1: device descriptor read/64, error -71 [ 223.466695][ T7947] netlink: 76 bytes leftover after parsing attributes in process `syz.2.538'. [ 223.478861][ T5822] usb usb4-port1: attempt power cycle [ 223.479298][ T7942] loop6: unable to read partition table [ 223.563396][ T7949] block nbd2: shutting down sockets [ 223.613437][ T7942] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 223.840064][ T5822] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 223.870538][ T5822] usb 4-1: device descriptor read/8, error -71 [ 224.156658][ T5822] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 224.192635][ T5822] usb 4-1: device descriptor read/8, error -71 [ 224.230060][ T30] audit: type=1400 audit(1745645775.494:534): avc: denied { listen } for pid=7955 comm="syz.2.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 224.365945][ T5822] usb usb4-port1: unable to enumerate USB device [ 224.578358][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.541'. [ 224.796425][ T30] audit: type=1400 audit(1745645776.234:535): avc: denied { mount } for pid=7963 comm="syz.2.543" name="/" dev="9p" ino=7919202256731811978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 224.881120][ T30] audit: type=1400 audit(1745645776.264:536): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 224.982608][ T7970] syz.3.542: attempt to access beyond end of device [ 224.982608][ T7970] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 225.090161][ T7970] SQUASHFS error: Failed to read block 0x0: -5 [ 225.120471][ T30] audit: type=1400 audit(1745645776.554:537): avc: denied { execute } for pid=7971 comm="syz.2.545" path="/dev/audio1" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 225.165068][ T7970] unable to read squashfs_super_block [ 225.584985][ T5827] Bluetooth: hci1: Unknown advertising packet type: 0x74 [ 225.585041][ T5827] Bluetooth: hci1: Malformed LE Event: 0x0d [ 225.680565][ T7981] netlink: 'syz.4.546': attribute type 38 has an invalid length. [ 226.939957][ T5822] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 227.002093][ T48] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 227.167509][ T5822] usb 4-1: Using ep0 maxpacket: 32 [ 227.184807][ T5822] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 227.185733][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 227.194120][ T5822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.214846][ T5822] usb 4-1: config 0 descriptor?? [ 227.236145][ T5822] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 227.386753][ T48] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 227.409205][ T5827] Bluetooth: hci1: unexpected event for opcode 0x0c7c [ 227.416486][ T48] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 227.429458][ T48] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 227.438850][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.450318][ T8006] ptrace attach of "./syz-executor exec"[5806] was attempted by "./syz-executor exec"[8006] [ 227.475999][ T48] usb 5-1: config 0 descriptor?? [ 227.539313][ T5822] gspca_vc032x: reg_r err -32 [ 227.542310][ T30] audit: type=1400 audit(1745645778.964:538): avc: denied { write } for pid=8001 comm="syz.0.555" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 227.592845][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.651719][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.678351][ T8006] tmpfs: Unknown parameter 'grpqungb9node_hard Gl' [ 227.741785][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.762465][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.886742][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.900338][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.911527][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.916829][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.943562][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.949781][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.955626][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 227.973269][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.011449][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.016765][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.022126][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.027430][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.043033][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.048348][ T5822] gspca_vc032x: I2c Bus Busy Wait 00 [ 228.070110][ T5822] gspca_vc032x: Unknown sensor... [ 228.079980][ T5822] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 228.181765][ T48] kovaplus 0003:1E7D:2D50.0007: item fetching failed at offset 2/3 [ 228.216265][ T48] kovaplus 0003:1E7D:2D50.0007: parse failed [ 228.230176][ T48] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -22 [ 228.455707][ T30] audit: type=1400 audit(1745645779.764:539): avc: denied { relabelfrom } for pid=8013 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 228.475572][ T30] audit: type=1400 audit(1745645779.764:540): avc: denied { relabelto } for pid=8013 comm="syz.0.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 228.495016][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.505141][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 228.517861][ T911] usb 4-1: USB disconnect, device number 22 [ 228.691427][ T8027] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 229.036074][ T5861] usb 5-1: USB disconnect, device number 18 [ 229.092913][ T8032] netlink: 'syz.3.563': attribute type 1 has an invalid length. [ 229.117108][ T8032] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.123928][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 229.132411][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 229.142121][ T10] usb 2-1: config 0 has no interface number 0 [ 229.148290][ T10] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.236369][ T10] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 229.239122][ T30] audit: type=1400 audit(1745645780.674:541): avc: denied { unmount } for pid=5811 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 229.246131][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.246153][ T10] usb 2-1: Product: syz [ 229.246168][ T10] usb 2-1: Manufacturer: syz [ 229.246183][ T10] usb 2-1: SerialNumber: syz [ 229.248639][ T10] usb 2-1: config 0 descriptor?? [ 229.294708][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 229.307342][ T10] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 229.317350][ T10] em28xx 2-1:0.132: Video interface 132 found: [ 229.460226][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 229.466875][ T9] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 229.488237][ T9] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 229.520364][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.624927][ T5827] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 229.624982][ T5827] Bluetooth: hci3: Malformed LE Event: 0x0d [ 229.729311][ T10] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 229.731491][ T8019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.745029][ T8019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.752560][ T9] usb 1-1: string descriptor 0 read error: -71 [ 229.971776][ T9] hub 1-1:32.0: USB hub found [ 229.998857][ T9] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 230.057676][ T9] usb 1-1: USB disconnect, device number 13 [ 230.248851][ T30] audit: type=1400 audit(1745645781.684:542): avc: denied { relabelfrom } for pid=8050 comm="syz.2.569" name="" dev="pipefs" ino=16378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 230.282050][ T6685] udevd[6685]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:32.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.340719][ T911] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 230.432564][ T10] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 230.472252][ T10] em28xx 2-1:0.132: board has no eeprom [ 230.499986][ T911] usb 4-1: Using ep0 maxpacket: 32 [ 230.508602][ T911] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 230.527713][ T911] usb 4-1: config 0 has no interface number 0 [ 230.536350][ T911] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 230.558158][ T911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.566704][ T10] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 230.575848][ T911] usb 4-1: Product: syz [ 230.595235][ T10] em28xx 2-1:0.132: analog set to bulk mode. [ 230.601401][ T911] usb 4-1: Manufacturer: syz [ 230.616528][ T9] em28xx 2-1:0.132: Registering V4L2 extension [ 230.624486][ T911] usb 4-1: SerialNumber: syz [ 230.659712][ T911] usb 4-1: config 0 descriptor?? [ 230.672720][ T911] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 230.940119][ T5861] usb 2-1: USB disconnect, device number 20 [ 230.940155][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 230.940293][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 230.940387][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 230.940472][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 230.941029][ T5861] em28xx 2-1:0.132: Disconnecting em28xx [ 231.046950][ T30] audit: type=1400 audit(1745645782.484:543): avc: denied { write } for pid=8048 comm="syz.3.568" lport=37235 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 231.082618][ T9] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 231.113150][ T911] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 231.123637][ T9] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 231.135702][ T9] em28xx 2-1:0.132: No AC97 audio processor [ 231.177441][ T911] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 231.207196][ T9] usb 2-1: Decoder not found [ 231.212030][ T9] em28xx 2-1:0.132: failed to create media graph [ 231.228120][ T9] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 231.271187][ T9] em28xx 2-1:0.132: Remote control support is not available for this card. [ 231.303338][ T5861] em28xx 2-1:0.132: Closing input extension [ 231.344888][ T5861] em28xx 2-1:0.132: Freeing device [ 231.455193][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 231.501764][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 231.502531][ T5904] usb 4-1: USB disconnect, device number 23 [ 231.843233][ T5904] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 231.894608][ T8078] 9pnet_fd: Insufficient options for proto=fd [ 231.938247][ T5904] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 231.939057][ T8083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8083 comm=syz.1.579 [ 231.984082][ T5904] quatech2 4-1:0.51: device disconnected [ 232.259763][ T8096] overlayfs: conflicting lowerdir path [ 232.398563][ T30] audit: type=1400 audit(1745645783.834:544): avc: denied { ioctl } for pid=8100 comm="syz.3.584" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 232.428257][ T5827] Bluetooth: hci3: Unknown advertising packet type: 0x74 [ 232.428288][ T5827] Bluetooth: hci3: Malformed LE Event: 0x0d [ 232.545784][ T30] audit: type=1400 audit(1745645783.984:545): avc: denied { create } for pid=8107 comm="syz.3.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 232.746966][ T30] audit: type=1400 audit(1745645784.184:546): avc: denied { view } for pid=8109 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 234.096012][ T8125] overlayfs: conflicting lowerdir path [ 234.109998][ T8130] macvtap1: entered allmulticast mode [ 234.116223][ T8130] veth0_macvtap: entered allmulticast mode [ 234.478412][ T30] audit: type=1400 audit(1745646298.919:547): avc: denied { append } for pid=8134 comm="syz.4.597" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 234.838781][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 234.849475][ T30] audit: type=1400 audit(1745646299.009:548): avc: denied { listen } for pid=8142 comm="syz.4.598" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.869801][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.282655][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 235.292275][ T24] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 235.333405][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.342213][ T5861] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 235.358922][ T24] usb 2-1: config 0 descriptor?? [ 235.372262][ T24] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 235.511054][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.527666][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 235.533106][ T30] audit: type=1400 audit(1745646299.939:549): avc: denied { append } for pid=8147 comm="syz.0.600" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 235.539222][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 235.562894][ C0] vkms_vblank_simulate: vblank timer overrun [ 235.597602][ T24] gspca_vc032x: reg_r err -32 [ 235.602778][ T30] audit: type=1400 audit(1745646299.978:550): avc: denied { map } for pid=8147 comm="syz.0.600" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 235.607642][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.632730][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 235.650577][ T30] audit: type=1400 audit(1745646299.978:551): avc: denied { execute } for pid=8147 comm="syz.0.600" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 235.668054][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.689723][ T5861] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 235.710882][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 235.721697][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.726465][ T8148] netlink: 32 bytes leftover after parsing attributes in process `syz.0.600'. [ 235.734535][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.743647][ T5861] usb 5-1: Product: syz [ 235.754326][ T5861] usb 5-1: Manufacturer: syz [ 235.759501][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.764825][ T5861] usb 5-1: SerialNumber: syz [ 235.771697][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.778668][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.784099][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.830784][ T5861] usb 5-1: config 0 descriptor?? [ 235.835914][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.844996][ T5861] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 235.852518][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.857804][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.873560][ T5861] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 235.883674][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.888978][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.897390][ T5861] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 235.904885][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.910163][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.929819][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.946988][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.952286][ T24] gspca_vc032x: I2c Bus Busy Wait 00 [ 235.986319][ T24] gspca_vc032x: Unknown sensor... [ 235.993519][ T24] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 236.580632][ T911] usb 2-1: USB disconnect, device number 21 [ 236.815962][ T8174] veth0_vlan: left promiscuous mode [ 236.862550][ T8174] veth0_vlan: entered promiscuous mode [ 237.079661][ T8181] loop7: detected capacity change from 0 to 2 [ 237.093111][ T8181] Dev loop7: unable to read RDB block 2 [ 237.099117][ T8181] loop7: unable to read partition table [ 237.104987][ T8181] loop7: partition table beyond EOD, truncated [ 237.111426][ T8181] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 237.111426][ T8181] ) failed (rc=-5) [ 238.099109][ T8193] tipc: Started in network mode [ 238.104080][ T8193] tipc: Node identity ac14140f, cluster identity 4711 [ 238.112807][ T8193] tipc: New replicast peer: 255.255.255.255 [ 238.119981][ T8193] tipc: Enabled bearer , priority 10 [ 239.006509][ T5861] usb 5-1: USB disconnect, device number 19 [ 239.726564][ T48] tipc: Node number set to 2886997007 [ 239.855282][ T8205] tipc: Enabling of bearer rejected, failed to enable media [ 240.182751][ T5861] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 240.579885][ T30] audit: type=1400 audit(1745646304.691:552): avc: denied { write } for pid=8210 comm="syz.0.617" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 240.697498][ T30] audit: type=1400 audit(1745646304.691:553): avc: denied { open } for pid=8210 comm="syz.0.617" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 240.747782][ T5861] usb 5-1: too many configurations: 151, using maximum allowed: 8 [ 240.776617][ T5861] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 240.800795][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 240.832434][ T5861] usb 5-1: Product: syz [ 240.846129][ T5861] usb 5-1: Manufacturer: syz [ 240.859299][ T5861] usb 5-1: SerialNumber: syz [ 240.885033][ T5861] usb 5-1: config 0 descriptor?? [ 241.025187][ T8224] overlayfs: conflicting lowerdir path [ 241.344452][ T8229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 241.814810][ T5861] usb 5-1: USB disconnect, device number 20 [ 241.956631][ T8237] loop6: detected capacity change from 0 to 524287999 [ 242.155603][ T30] audit: type=1400 audit(1745646306.394:555): avc: denied { sqpoll } for pid=8239 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 242.271531][ T30] audit: type=1400 audit(1745646306.394:554): avc: denied { sqpoll } for pid=8239 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 242.292406][ T30] audit: type=1400 audit(1745646306.541:556): avc: denied { setopt } for pid=8239 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 242.423359][ T8248] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 242.774493][ T30] audit: type=1400 audit(1745646306.541:557): avc: denied { read } for pid=8239 comm="syz.0.624" path="socket:[17188]" dev="sockfs" ino=17188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 243.262315][ T8261] netlink: 1140 bytes leftover after parsing attributes in process `syz.4.627'. [ 243.271538][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 243.942336][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 244.156974][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.169014][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 244.325370][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 244.849697][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 244.859529][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 244.874307][ T9] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 244.897974][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 244.926601][ T9] usb 3-1: Product: syz [ 244.930784][ T9] usb 3-1: Manufacturer: syz [ 244.950658][ T9] usb 3-1: SerialNumber: syz [ 244.981493][ T9] usb 3-1: config 0 descriptor?? [ 245.213502][ T9] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 245.251269][ T9] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 245.622137][ T8299] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 246.055236][ T48] usb 3-1: USB disconnect, device number 18 [ 246.140508][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.640'. [ 246.233080][ T30] audit: type=1400 audit(1745646310.402:558): avc: denied { map } for pid=8304 comm="syz.0.640" path="socket:[17878]" dev="sockfs" ino=17878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 246.275156][ T30] audit: type=1400 audit(1745646310.402:559): avc: denied { read write accept } for pid=8304 comm="syz.0.640" path="socket:[17878]" dev="sockfs" ino=17878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 246.431411][ T8316] tipc: Started in network mode [ 246.436297][ T8316] tipc: Node identity , cluster identity 4711 [ 246.458597][ T30] audit: type=1326 audit(1745646310.629:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8312 comm="syz.4.642" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98aa58e969 code=0x0 [ 246.590048][ T8327] syz.3.647: attempt to access beyond end of device [ 246.590048][ T8327] nbd3: rw=0, sector=6, nr_sectors = 2 limit=0 [ 246.633047][ T8327] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 246.744888][ T48] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 246.933799][ T48] usb 1-1: device descriptor read/64, error -71 [ 247.008921][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 247.191359][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 247.237883][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.348271][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 247.395569][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.412439][ T10] usb 4-1: config 0 descriptor?? [ 247.430321][ T30] audit: type=1326 audit(1745646311.574:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2678e969 code=0x7fc00000 [ 247.458307][ T30] audit: type=1326 audit(1745646311.574:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf2678e969 code=0x7fc00000 [ 247.464013][ T10] ldusb 4-1:0.0: Interrupt in endpoint not found [ 247.489748][ T30] audit: type=1326 audit(1745646311.574:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2678e969 code=0x7fc00000 [ 247.489796][ T30] audit: type=1326 audit(1745646311.574:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2678e969 code=0x7fc00000 [ 247.541700][ T48] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 247.609775][ T8347] netlink: 'syz.4.655': attribute type 4 has an invalid length. [ 247.624072][ T8347] netlink: 'syz.4.655': attribute type 4 has an invalid length. [ 247.782929][ T30] audit: type=1326 audit(1745646311.574:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2678e969 code=0x7fc00000 [ 247.806302][ T30] audit: type=1326 audit(1745646311.574:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2678e969 code=0x7fc00000 [ 247.837717][ T8336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.847279][ T8336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.913002][ T8348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.929045][ T8348] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.468460][ T10] usb 4-1: USB disconnect, device number 24 [ 248.547313][ T48] usb 1-1: device descriptor read/64, error -71 [ 248.555078][ T30] audit: type=1326 audit(1745646311.574:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.1.648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2678e969 code=0x7fc00000 [ 248.661881][ T48] usb usb1-port1: attempt power cycle [ 248.901579][ T8363] FAULT_INJECTION: forcing a failure. [ 248.901579][ T8363] name failslab, interval 1, probability 0, space 0, times 0 [ 248.915677][ T8363] CPU: 0 UID: 0 PID: 8363 Comm: syz.3.659 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 248.915700][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 248.915709][ T8363] Call Trace: [ 248.915714][ T8363] [ 248.915720][ T8363] dump_stack_lvl+0x16c/0x1f0 [ 248.915744][ T8363] should_fail_ex+0x512/0x640 [ 248.915762][ T8363] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 248.915788][ T8363] should_failslab+0xc2/0x120 [ 248.915803][ T8363] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 248.915825][ T8363] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 248.915850][ T8363] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 248.915877][ T8363] idr_get_free+0x528/0xa30 [ 248.915901][ T8363] idr_alloc_u32+0x190/0x2f0 [ 248.915918][ T8363] ? __pfx_idr_alloc_u32+0x10/0x10 [ 248.915942][ T8363] tcf_idr_check_alloc+0x136/0x770 [ 248.915960][ T8363] ? find_held_lock+0x2b/0x80 [ 248.915978][ T8363] ? __pfx_tcf_idr_check_alloc+0x10/0x10 [ 248.915998][ T8363] ? __nla_parse+0x40/0x60 [ 248.916024][ T8363] tcf_ct_init+0x26e/0x31f0 [ 248.916041][ T8363] ? kasan_save_stack+0x42/0x60 [ 248.916062][ T8363] ? kasan_save_stack+0x33/0x60 [ 248.916083][ T8363] ? kasan_save_track+0x14/0x30 [ 248.916104][ T8363] ? __kasan_kmalloc+0xaa/0xb0 [ 248.916133][ T8363] ? tcf_action_init_1+0x278/0x6c0 [ 248.916150][ T8363] ? tcf_action_init+0x42c/0x9c0 [ 248.916172][ T8363] ? __pfx_tcf_ct_init+0x10/0x10 [ 248.916187][ T8363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.916236][ T8363] ? tcf_action_init_1+0x45d/0x6c0 [ 248.916254][ T8363] tcf_action_init_1+0x45d/0x6c0 [ 248.916276][ T8363] ? __pfx_tcf_action_init_1+0x10/0x10 [ 248.916310][ T8363] ? __nla_parse+0x40/0x60 [ 248.916335][ T8363] tcf_action_init+0x42c/0x9c0 [ 248.916363][ T8363] ? __pfx_tcf_action_init+0x10/0x10 [ 248.916402][ T8363] ? kernel_text_address+0x8d/0x100 [ 248.916421][ T8363] ? __kernel_text_address+0xd/0x40 [ 248.916437][ T8363] ? unwind_get_return_address+0x59/0xa0 [ 248.916481][ T8363] ? __lock_acquire+0x5ca/0x1ba0 [ 248.916510][ T8363] tcf_action_add+0xee/0x5c0 [ 248.916534][ T8363] ? __pfx_tcf_action_add+0x10/0x10 [ 248.916590][ T8363] ? __nla_parse+0x40/0x60 [ 248.916617][ T8363] tc_ctl_action+0x35b/0x470 [ 248.916638][ T8363] ? __pfx_tc_ctl_action+0x10/0x10 [ 248.916666][ T8363] ? __pfx_tc_ctl_action+0x10/0x10 [ 248.916685][ T8363] rtnetlink_rcv_msg+0x3c6/0xe90 [ 248.916712][ T8363] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.916748][ T8363] netlink_rcv_skb+0x16a/0x440 [ 248.916763][ T8363] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.916789][ T8363] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 248.916818][ T8363] ? netlink_deliver_tap+0x1ae/0xd30 [ 248.916847][ T8363] netlink_unicast+0x53a/0x7f0 [ 248.916865][ T8363] ? __pfx_netlink_unicast+0x10/0x10 [ 248.916886][ T8363] netlink_sendmsg+0x8d1/0xdd0 [ 248.916906][ T8363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.916930][ T8363] ____sys_sendmsg+0xa95/0xc70 [ 248.916948][ T8363] ? copy_msghdr_from_user+0x10a/0x160 [ 248.916971][ T8363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.916990][ T8363] ? irqentry_exit+0x3b/0x90 [ 248.917007][ T8363] ? lockdep_hardirqs_on+0x7c/0x110 [ 248.917030][ T8363] ___sys_sendmsg+0x134/0x1d0 [ 248.917055][ T8363] ? __pfx____sys_sendmsg+0x10/0x10 [ 248.917110][ T8363] __sys_sendmsg+0x16d/0x220 [ 248.917140][ T8363] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.917171][ T8363] ? rcu_is_watching+0x12/0xc0 [ 248.917197][ T8363] do_syscall_64+0xcd/0x260 [ 248.917218][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.917234][ T8363] RIP: 0033:0x7fb052f8e969 [ 248.917248][ T8363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.917263][ T8363] RSP: 002b:00007fb053d92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.917279][ T8363] RAX: ffffffffffffffda RBX: 00007fb0531b6080 RCX: 00007fb052f8e969 [ 248.917289][ T8363] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000007 [ 248.917298][ T8363] RBP: 00007fb053d92090 R08: 0000000000000000 R09: 0000000000000000 [ 248.917307][ T8363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.917316][ T8363] R13: 0000000000000000 R14: 00007fb0531b6080 R15: 00007ffe590232a8 [ 248.917338][ T8363] [ 248.929871][ T8365] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 248.990510][ T8367] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8367 comm=syz.2.662 [ 249.107742][ T48] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 249.696975][ T48] usb 1-1: device descriptor read/8, error -71 [ 250.302903][ T8383] block device autoloading is deprecated and will be removed. [ 250.311729][ T8383] syz.3.665: attempt to access beyond end of device [ 250.311729][ T8383] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 250.747509][ T5822] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 250.911593][ T5822] usb 5-1: device descriptor read/64, error -71 [ 251.090285][ T8397] program syz.0.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.479965][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 251.691689][ T5822] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 251.965492][ T8404] overlayfs: conflicting options: metacopy=off,verity=require [ 251.973540][ T5822] usb 5-1: device descriptor read/64, error -71 [ 252.004329][ T8404] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 252.051597][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 252.051613][ T30] audit: type=1400 audit(1745646316.147:586): avc: denied { rename } for pid=8403 comm="syz.2.674" name="file0" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 252.096010][ T5822] usb usb5-port1: attempt power cycle [ 357.254472][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 357.261451][ C0] rcu: (detected by 0, t=10503 jiffies, g=20721, q=317 ncpus=2) [ 357.269166][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4294972852-4294962349), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 357.282516][ C0] rcu: rcu_preempt kthread starved for 10503 jiffies! g20721 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 357.293695][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 357.303650][ C0] rcu: RCU grace-period kthread stack dump: [ 357.309525][ C0] task:rcu_preempt state:R running task stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 357.323006][ C0] Call Trace: [ 357.326275][ C0] [ 357.329202][ C0] __schedule+0x116f/0x5de0 [ 357.333721][ C0] ? __pfx___schedule+0x10/0x10 [ 357.338570][ C0] ? find_held_lock+0x2b/0x80 [ 357.343244][ C0] ? schedule+0x2d7/0x3a0 [ 357.347568][ C0] schedule+0xe7/0x3a0 [ 357.351628][ C0] schedule_timeout+0x123/0x290 [ 357.356477][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 357.361847][ C0] ? __pfx_process_timeout+0x10/0x10 [ 357.367134][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 357.372930][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 357.378390][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 357.383154][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 357.388440][ C0] ? rcu_gp_init+0xc76/0x15a0 [ 357.393116][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 357.397968][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 357.403768][ C0] rcu_gp_kthread+0x270/0x380 [ 357.408442][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 357.413635][ C0] ? rcu_is_watching+0x12/0xc0 [ 357.418392][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.423585][ C0] ? __kthread_parkme+0x19e/0x250 [ 357.428606][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 357.433803][ C0] kthread+0x3c2/0x780 [ 357.437863][ C0] ? __pfx_kthread+0x10/0x10 [ 357.442445][ C0] ? __pfx_kthread+0x10/0x10 [ 357.447025][ C0] ? __pfx_kthread+0x10/0x10 [ 357.451603][ C0] ? __pfx_kthread+0x10/0x10 [ 357.456180][ C0] ? rcu_is_watching+0x12/0xc0 [ 357.460938][ C0] ? __pfx_kthread+0x10/0x10 [ 357.465518][ C0] ret_from_fork+0x45/0x80 [ 357.469926][ C0] ? __pfx_kthread+0x10/0x10 [ 357.474506][ C0] ret_from_fork_asm+0x1a/0x30 [ 357.479279][ C0] [ 357.482288][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 357.488605][ C0] Sending NMI from CPU 0 to CPUs 1: [ 357.493801][ C1] NMI backtrace for cpu 1 [ 357.493813][ C1] CPU: 1 UID: 0 PID: 8407 Comm: syz.3.676 Not tainted 6.15.0-rc3-syzkaller-00094-g02ddfb981de8 #0 PREEMPT(full) [ 357.493829][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 357.493836][ C1] RIP: 0010:kasan_check_range+0x4d/0x1a0 [ 357.493853][ C1] Code: ff ff ff ff ff 7f ff ff 48 39 f8 0f 83 b3 00 00 00 4c 8d 54 37 ff 48 89 fd 48 b8 00 00 00 00 00 fc ff df 4d 89 d1 48 c1 ed 03 <49> c1 e9 03 48 01 c5 49 01 c1 48 89 e8 49 8d 59 01 48 89 da 48 29 [ 357.493866][ C1] RSP: 0018:ffffc90000a08c78 EFLAGS: 00000802 [ 357.493876][ C1] RAX: dffffc0000000000 RBX: ffffffff9acc9c78 RCX: ffffffff819859ac [ 357.493885][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000a08cc0 [ 357.493893][ C1] RBP: 1ffff92000141198 R08: 0000000000000001 R09: ffffc90000a08cc3 [ 357.493901][ C1] R10: ffffc90000a08cc3 R11: 0000000000000000 R12: ffffffff9acc9c80 [ 357.493909][ C1] R13: ffffffff9acc9c88 R14: ffff88807e545340 R15: 1ffff920001411ac [ 357.493917][ C1] FS: 00007fb053db36c0(0000) GS:ffff888124ae5000(0000) knlGS:0000000000000000 [ 357.493931][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 357.493939][ C1] CR2: 00007fb053d91f98 CR3: 0000000062b24000 CR4: 00000000003526f0 [ 357.493947][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 357.493955][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 357.493962][ C1] Call Trace: [ 357.493966][ C1] [ 357.493972][ C1] do_raw_spin_lock+0x12c/0x2b0 [ 357.493985][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 357.493998][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 357.494011][ C1] _raw_spin_lock_irqsave+0x42/0x60 [ 357.494029][ C1] ? debug_object_deactivate+0x135/0x3a0 [ 357.494048][ C1] debug_object_deactivate+0x135/0x3a0 [ 357.494065][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 357.494083][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 357.494101][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 357.494116][ C1] __hrtimer_run_queues+0x46f/0xad0 [ 357.494132][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 357.494148][ C1] ? read_tsc+0x9/0x20 [ 357.494167][ C1] hrtimer_interrupt+0x397/0x8e0 [ 357.494185][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 357.494201][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 357.494214][ C1] [ 357.494218][ C1] [ 357.494222][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 357.494237][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 357.494253][ C1] Code: fb 09 00 00 44 8b 05 49 9b fb 0e 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 bf 78 39 00 fb 65 48 8b 1d 8e 34 1a 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 357.494265][ C1] RSP: 0018:ffffc900033674b8 EFLAGS: 00000202 [ 357.494274][ C1] RAX: 00000000000078ab RBX: ffff8880286dc880 RCX: ffffffff81c2f33f [ 357.494282][ C1] RDX: 0000000000000000 RSI: ffffffff8dbdebe6 RDI: ffffffff8bf47720 [ 357.494290][ C1] RBP: ffffc90003367500 R08: 0000000000000001 R09: 0000000000000001 [ 357.494297][ C1] R10: ffffffff9084e717 R11: 0000000000000000 R12: ffff8880b8539dc0 [ 357.494305][ C1] R13: ffff88801dafa440 R14: 0000000000000001 R15: ffff8880b853abf0 [ 357.494316][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 357.494330][ C1] ? finish_task_switch.isra.0+0x221/0xc10 [ 357.494344][ C1] ? __switch_to+0x749/0x1170 [ 357.494360][ C1] __schedule+0x1177/0x5de0 [ 357.494371][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 357.494393][ C1] ? __pfx___schedule+0x10/0x10 [ 357.494406][ C1] ? find_held_lock+0x2b/0x80 [ 357.494419][ C1] ? schedule+0x2d7/0x3a0 [ 357.494431][ C1] schedule+0xe7/0x3a0 [ 357.494441][ C1] schedule_timeout+0x257/0x290 [ 357.494458][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 357.494477][ C1] ? unix_wait_for_peer+0x23d/0x280 [ 357.494490][ C1] ? prepare_to_wait_exclusive+0xe4/0x2b0 [ 357.494508][ C1] unix_wait_for_peer+0x245/0x280 [ 357.494520][ C1] ? __pfx_unix_wait_for_peer+0x10/0x10 [ 357.494532][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 357.494548][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 357.494563][ C1] unix_dgram_sendmsg+0x1539/0x1910 [ 357.494581][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 357.494600][ C1] ____sys_sendmsg+0xa95/0xc70 [ 357.494614][ C1] ? copy_msghdr_from_user+0x10a/0x160 [ 357.494631][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.494645][ C1] ? kfree+0x252/0x4d0 [ 357.494660][ C1] ? schedule+0x2d7/0x3a0 [ 357.494673][ C1] ___sys_sendmsg+0x134/0x1d0 [ 357.494690][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.494715][ C1] ? __pfx___might_resched+0x10/0x10 [ 357.494734][ C1] __sys_sendmmsg+0x200/0x420 [ 357.494752][ C1] ? __pfx___sys_sendmmsg+0x10/0x10 [ 357.494771][ C1] ? __pfx_do_futex+0x10/0x10 [ 357.494786][ C1] ? fput+0x70/0xf0 [ 357.494803][ C1] ? __pfx___x64_sys_futex+0x10/0x10 [ 357.494819][ C1] ? rcu_is_watching+0x12/0xc0 [ 357.494833][ C1] __x64_sys_sendmmsg+0x9c/0x100 [ 357.494850][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.494862][ C1] do_syscall_64+0xcd/0x260 [ 357.494876][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.494889][ C1] RIP: 0033:0x7fb052f8e969 [ 357.494899][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.494910][ C1] RSP: 002b:00007fb053db3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 357.494921][ C1] RAX: ffffffffffffffda RBX: 00007fb0531b5fa0 RCX: 00007fb052f8e969 [ 357.494928][ C1] RDX: 0000000000000651 RSI: 0000200000000000 RDI: 0000000000000006 [ 357.494936][ C1] RBP: 00007fb053010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 357.494943][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.494950][ C1] R13: 0000000000000000 R14: 00007fb0531b5fa0 R15: 00007ffe590232a8 [ 357.494964][ C1]