last executing test programs: 3m28.836938755s ago: executing program 0 (id=588): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000100)={0x4, &(0x7f0000000580)=[{0x18, '\x00', @data=0x270, 0x86}, {0x15, '\x00', @st={0x4, [{0x0, @uvalue=0x9}, {0x2, @svalue=0x3}, {0x0, @svalue=0x1}, {0x1, @svalue=0x400}]}, 0x6}, {0x34, '\x00', @data=0x7, 0x6}, {0x1f, '\x00', @data=0xa, 0x2b1d}]}) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000480)=""/245, 0xf5}, {&(0x7f0000002b40)=""/4077, 0xfed}, {&(0x7f0000000940)=""/4139, 0x102b}, {&(0x7f0000000700)=""/215, 0xd7}, {&(0x7f0000000580)=""/90, 0x5a}], 0x5}, 0x20) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x440401, 0x41) execveat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)={[&(0x7f00000001c0)='/dev/dvb/adapter#/frontend#\x00', &(0x7f0000000200)='[#]!]/\x9d#\x00', &(0x7f0000000240)='/dev/dvb/adapter#/frontend#\x00', &(0x7f0000000280)='/dev/dvb/adapter#/frontend#\x00', &(0x7f00000002c0)='(&\x00']}, &(0x7f0000000880)={[&(0x7f0000000340)='\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='($\x00', &(0x7f0000000400)='!!:\xb5\x00', &(0x7f00000006c0)='/dev/dvb/adapter#/frontend#\x00', &(0x7f0000000800)='/dev/dvb/adapter#/frontend#\x00', &(0x7f0000000840)='/dev/dvb/adapter#/frontend#\x00']}, 0x100) 3m28.108672222s ago: executing program 0 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffffffffff5, 0x60000) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f00000000c0)={0x8000, "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"}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xfffffffffffffe58, 0x16, 0xa, 0xc05, 0xb00, 0x0, {0x1, 0x0, 0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}}, 0x3c}}, 0x44804) 3m25.690262047s ago: executing program 0 (id=593): semtimedop(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) semop(0x0, &(0x7f0000000140)=[{}], 0x1f4) 3m22.633625904s ago: executing program 0 (id=597): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x5, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x2, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x800c, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8004, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0xe, 0x2, 0x4, 0xe, 0x4, 0x2, 0x8, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x9, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x2fcd0, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x8981, 0x4, 0x0, 0x9, 0x0, 0xfffffffe, 0x0, 0x1000001, 0xe, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfbfffff9, 0x2, 0x0, 0x2, 0x401, 0xb, 0x1, 0x379, 0x6, 0x24, 0x5, 0x7, 0x2006, 0x2, 0x2, 0x1, 0x8, 0xb, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x4, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x9, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x20006, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0xffffffff, 0xd9, 0x0, 0x7d, 0x0, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x7f, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x3, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0xfdfffdd5, 0x3, 0x4, 0x200, 0x2853, 0x3b, 0x20000004, 0x5, 0x101, 0x2, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x87, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0x4, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/51, 0x33}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fchownat(0xffffffffffffff9c, 0x0, 0xee01, 0x0, 0x1000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) setxattr$system_posix_acl(&(0x7f00000002c0)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002280)={{}, {0x1, 0x7}, [{}], {0x4, 0x2}, [{}], {0x10, 0x6}, {0x20, 0x4}}, 0x34, 0x3) chdir(&(0x7f0000000240)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmctl$SHM_LOCK(0x0, 0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r3, 0x0, 0x0) socket(0xf, 0x4, 0x6) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 3m15.716235913s ago: executing program 0 (id=605): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x200448c0}, 0x47) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) 3m15.352711928s ago: executing program 0 (id=609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2) semop(0xffffffffffffffff, &(0x7f0000000500)=[{0x2, 0x3ff, 0x800}], 0x41) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1d00000010000000", @ANYBLOB, @ANYRES32, @ANYBLOB="af5e6dd9716bd37ae7860eb9e6ac92aeee025af69aa0f81d6f347b006007364bd9efb0bc54f39dcfcea6fcbda0aba9464129ebfa9eda7e1df2f9a19afc0a8bc0010082c0918149d2d0d3232ae9bf0951c7264722cef2732e6b2f3adc15e38bf92dd9c9f6b1fab32c19b526b80bae88a6c9db842dfaa37eccb3e06e4f6517fb19ad5cb7f8dd3fffa20764e19dff10bee75c06ca4b50c1637b076dff1e554e9c075c2769a68a9f05fd51f4fd9661329a1b8432cb3ba0038096b166acccd253a8883d2ad064a5ed5408bf9e6475f1a63189d76a21fdf15ecdcdc14da58a38b376693ec23d4679c5363fa6dbba93adba23cd8a506e50be15b78f7cae9bab95f2965026f0c46f5e1d3124918813a111166ea4e9878e0f895629f7102b72353b7da60ad4c032a5d55017e37e90e000000013eedd9788d74e57dcbd1e949562370b313f8646638ac5f93e0c83fdab126da96ccb46a4bf71f2e6c8946ed043ea60a86c907423bb6bca0b7adb4108dee0e6670bd86e2b199767a5d25db646", @ANYRES64=0x0], 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x10800}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) 2m59.697840198s ago: executing program 32 (id=609): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r3, &(0x7f0000000500)=[{&(0x7f0000000100)='<', 0x1}], 0x1f, 0xffffff01, 0x2) semop(0xffffffffffffffff, &(0x7f0000000500)=[{0x2, 0x3ff, 0x800}], 0x41) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1d00000010000000", @ANYBLOB, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89, 0x10800}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "a70002", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x2}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9900}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x14}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x80000003, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) 32.221852394s ago: executing program 5 (id=713): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[@ANYBLOB="12015001000000106b1d010140000102030109029a00030100e0000904000000010100000a24010000000201020c240200000000000e0000000524050000082404030f8bf8ae0c240701050000c80975f9070d24070101000005cf1f0000050924030000000001000904010000010200000904010101010200000905010900000100000725010001000009040200", @ANYRES16], 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) sendto(r1, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000004140)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x102, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r3, &(0x7f00000002c0)="3e244fb4435b6b38ace35b13632b5f36343c3568d4c58d663daff5f68b5f49c982f8dfcbc8ac89aff7f7fb5448eed8f44abd948e3a0ff9bdac7f9d2f49bc8309af35fb7937c8b411c9a12a2e7f2a64969a641c566ea468406f693dfa820135e96a61cb3f8263ea616499956fec977d2c6f7ab22bc2e73f168861a87f9b48668a3b60712f75ea9ff2a0314f272280c48faa45920fdb26f3164d1b55d77c87524a5ac7a4ed2ac7ac329a50d436261dea522924654323d511ae593eed7ad2f2be2f8307c28f7b152f53cba33db776a8aeb7bd9b5bd66ec1f66ef531991e4dda712dc79c6c94cf38ffe6bb6b50", 0xeb) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c047c070080000900", 0x33a) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x8, 0x8, 0xfff}) write$UHID_INPUT(r0, 0x0, 0x0) 27.83999499s ago: executing program 4 (id=719): socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f0000000440), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4a8a81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x10481, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0xff, @empty, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @gue={{0x2, 0x0, 0x0, 0x9}, "91000000ffffa2273b433b61c07d3996cb8393a05d07849665ce5207889f154607a7f80fa4a439ea8c017bc27143453092a1e1c980240d89a7eaca8d9b"}}}}}}}, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x2, 0x400002d8}, 0x0, &(0x7f0000000200), 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff95acb1ddf7000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000ffdbdf2501000000050007000200000006000800a0aa0000060008000000000006000a"], 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x4000) 27.739353927s ago: executing program 1 (id=720): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r4, &(0x7f00000061c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40010000) recvmsg(r4, 0x0, 0x40012060) r5 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f00000000c0)=0x3, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) 23.583155422s ago: executing program 5 (id=722): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000300)={0x1, 0x7, 0x3}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14000000}, 0x40040) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) 22.129885857s ago: executing program 1 (id=723): socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000300)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x1) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe84, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 21.190125717s ago: executing program 3 (id=724): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000005c0)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 19.713125148s ago: executing program 4 (id=725): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) recvmsg(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000004940)={0x0, 0x0, &(0x7f0000004900)=[{0x0}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x2}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x8000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 19.474003637s ago: executing program 3 (id=726): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x18, 0x6, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket(0x40000000015, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket(0x11, 0x3, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000000c0)={0x3, 0x0, [{0x0, 0x1, 0x0, 0x0, @adapter={0x0, 0xd6a, 0x0, 0xd, 0x7}}, {0x9, 0x5, 0x1, 0x0, @irqchip={0x6, 0x3}}, {0x4, 0x5, 0x0, 0x0, @adapter={0x2, 0x8, 0x7, 0x2, 0x8}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="6f73782effff6cab3330b8cf5f8e059df6beda827b5eb4162a77d943f2e85a727f9ac42b09f217b12cba02815f3b25fe1c953c70329d00e876700eb2789027307b9648b18989ef8d70e2360f2bfa9569ed38b3348ced2c17e16d03c61b2ac60725f0f1e40ac61bc6934d8478b0a447f1478e18a79e42dff2e91901b07a4ea10a3ae14cc78eff151d7ec5a756a33ba9a0d5a637ff2687718df1b1ad3be0ef6a00"/174]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4008011}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r2, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f000001a500)}}, 0x10) 17.834970985s ago: executing program 5 (id=728): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r0, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) openat$cuse(0xffffffffffffff9c, 0x0, 0x2842, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x9, 0x80000001, 0x5dca18c1, 0x10725, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x50, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7ff, {0x5, 0x10000003, 0x71, 0x9, 0x7, 0x6, {0x4, 0x638, 0xfffffffffffffbf8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x101, 0x6000, 0x4, 0x0, 0x0, 0x7, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 17.614747098s ago: executing program 1 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) listen(r3, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x4000891) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, &(0x7f0000000080)={0x0, {{0xa, 0x4e20, 0xfffffffe, @mcast1, 0xa}}, {{0xa, 0x4e23, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x108) r5 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getattr(r5, 0x0, 0x0, 0x0) syz_usb_connect$uac1(0x4, 0x79, &(0x7f0000000740)=ANY=[@ANYBLOB="12011001000000208c0d78004000010203010902670003010800000904000000010100000a2401de0d1100020102072407020200a20904010000010200000904010101010200000905010920000407030725010c0602000904020000010200000904020101010200000905820908006524ba313d531c0cdc66fc16c107250100030000"], &(0x7f0000000400)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x250, 0x5, 0x9, 0x2, 0xff, 0x4}, 0x1b, &(0x7f0000000200)={0x5, 0xf, 0x1b, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7, 0xf1, 0x9c}, @ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0x0, 0x7700, 0x1}]}, 0x5, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x8ac}}, {0xa3, &(0x7f0000000280)=@string={0xa3, 0x3, "abbb8ea92c2c79f3ddee87da894f072a5caf09ef0263a8f2314f1fb298c3395194bdbc00333640ed87b8ce5fb93bbb92272a774246acef35ca9c69f8c7fba34cee7cc272fff788e99a2a7526f76ad6786e1c532f44e8ef3ef1994b4de44b07abf82d768907b7cf59e192149d92cd2a5497b88285164e272bc6df244ae3f59b2e73f9eec6d91bb6ed5d2c3444e6879b1fb1b18d82455f4a0884877af32d9e9d9a59"}}, {0x23, &(0x7f0000000640)=ANY=[@ANYRES8]}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41c}}]}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x6, &(0x7f00000004c0), 0x4) lsetxattr$security_ima(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000080)=@sha1={0x1, "adf3387657bd6e9287f85c8b1d8256afb9eb6347"}, 0x15, 0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$int_out(r8, 0x0, &(0x7f0000000700)) fcntl$lock(r7, 0x7, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe}) preadv(r7, &(0x7f0000000980)=[{&(0x7f0000001100)=""/4104, 0x1008}, {&(0x7f0000000500)=""/251, 0xfb}, {&(0x7f0000000480)}, {&(0x7f0000000180)=""/12, 0xc}, {&(0x7f0000000800)=""/214, 0xd6}], 0x5, 0x33, 0x0) 16.915502597s ago: executing program 3 (id=730): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x1ddd, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x4010) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000040)=0x8) r5 = syz_open_procfs(r0, &(0x7f0000000140)='fdinfo/3\x00') sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="8eccf4f4fc787adf24d2e71b73d6325da8277488279c868400eb920be79512b81cbc118103c9b40e68ad5c93ddfc9d84cd7c461b03f94db92805000000000000008b5a6242f6e7890d5183dee23bb2970a737d61a970562668757cc2334e15e94a79d92d9d68e9dd02f7afa42541b592acff39b2febbf8fcc8fbd23d65dacf0dfdc8c4a8ee13738aff29cb68d6d7372bd3b87a262ecc296cd7bb5e3707d1a1025d5a1cf019bc530008e9dc154301c7ec5fe6bad630468eb031606a57a291e9451560269b2d06a308c4db43b9a77e7b9ae6b7addebfee", @ANYRES32, @ANYRES16=r5, @ANYRES64, @ANYBLOB="47b0ca44481cf69108a96d859e23e87e44a0f0885fa3246251faecd5130d959968452df500894fa1c0fc5c315ba7909f7515399d1c657720cba1e42817e761bc31b59b9b8a83dda065b7f21b7d5f83c770656025f1ce226b8736e240e9987ea3ae27c6b36ac3b4b7cf2b35f449f1cec1c35feb2423f7b0b605d5be59a610ec02a3b1c8a4df3116324da7ae4f4b04f22d3dd5772cd1f96a833533cc56876fb2a95aef1ccf4a6a03f5f69653e8767dcd36851f701f6186f7d65534d3f59b5f90dc22e9f6f78bdfdba191604d9db0601af70fc1c0070000067cece2a608f4e64d077eba7269f62067ca92f82b67a7", @ANYRESDEC, @ANYBLOB="376c0b2a71521b8c8f07539e735ec1d116bd1185cb2b35faaf546c", @ANYRES64], 0x34}}, 0x8000) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_ACCEPT_LIST={{0x40}, 0x1}}}, 0x7) 16.900491964s ago: executing program 4 (id=731): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x50, 0x8001, 0x20, 0x0}], 0x1}) 15.710286327s ago: executing program 2 (id=732): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r0, 0x4b000) 15.450559624s ago: executing program 2 (id=733): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r4, &(0x7f00000061c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40010000) recvmsg(r4, 0x0, 0x40012060) r5 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f00000000c0)=0x3, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) 14.420541535s ago: executing program 3 (id=734): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r0, 0xffffffffffffffff, 0x200000c99fff) 13.208720168s ago: executing program 1 (id=735): socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f0000000440), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4a8a81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x10481, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0xff, @empty, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @gue={{0x2, 0x0, 0x0, 0x9}, "91000000ffffa2273b433b61c07d3996cb8393a05d07849665ce5207889f154607a7f80fa4a439ea8c017bc27143453092a1e1c980240d89a7eaca8d9b"}}}}}}}, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x2, 0x400002d8}, 0x0, &(0x7f0000000200), 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff95acb1ddf7000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000ffdbdf2501000000050007000200000006000800a0aa0000060008000000000006000a"], 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x4000) 12.992815573s ago: executing program 2 (id=736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000005c0)=0x2, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 11.474441869s ago: executing program 3 (id=737): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r1 = getpgrp(r0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], 0x20) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000013141100000000000000006868000800620000000000"], 0x18}, 0x2}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r7, 0x3) landlock_restrict_self(r7, 0x2) landlock_restrict_self(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) 11.472338032s ago: executing program 4 (id=738): r0 = syz_open_dev$video(&(0x7f0000000300), 0x7, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000340)={0xf00001, 0x6, "6b1e3309f3396edb46b8af1d6ec6393698d6bf00327604db81c50b878ebbcd11", 0xd, 0x7ff, 0x5, 0xac, 0x8, 0x4, 0x7, 0x1, [0x10000, 0x3, 0xc, 0x9]}) 11.42830421s ago: executing program 5 (id=739): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x23b) r2 = syz_open_dev$media(&(0x7f0000000080), 0x907c, 0x54000) ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x8, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000600)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 11.401023541s ago: executing program 2 (id=740): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x18, 0x6, &(0x7f00000001c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket(0x40000000015, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket(0x11, 0x3, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000000c0)={0x3, 0x0, [{0x0, 0x1, 0x0, 0x0, @adapter={0x0, 0xd6a, 0x0, 0xd, 0x7}}, {0x9, 0x5, 0x1, 0x0, @irqchip={0x6, 0x3}}, {0x4, 0x5, 0x0, 0x0, @adapter={0x2, 0x8, 0x7, 0x2, 0x8}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) setxattr$incfs_metadata(&(0x7f0000000f80)='./file0\x00', &(0x7f0000000fc0), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="6f73782effff6cab3330b8cf5f8e059df6beda827b5eb4162a77d943f2e85a727f9ac42b09f217b12cba02815f3b25fe1c953c70329d00e876700eb2789027307b9648b18989ef8d70e2360f2bfa9569ed38b3348ced2c17e16d03c61b2ac60725f0f1e40ac61bc6934d8478b0a447f1478e18a79e42dff2e91901b07a4ea10a3ae14cc78eff151d7ec5a756a33ba9a0d5a637ff2687718df1b1ad3be0ef6a00"/174]) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x4008011}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x6, @empty, 0x2}, {0xa, 0x4e20, 0x101, @remote, 0x7}, r2, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {&(0x7f000001a500)}}, 0x10) 8.479470005s ago: executing program 1 (id=741): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4040010) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0xa7, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1969, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x95, 0x3, 0x1, 0x1, 0x60, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x31, 0x8}, [@input_terminal={0x14, 0x24, 0x2, 0x2, 0x400, 0x3, 0xf8, 0x3, 0x3, 0x8, 0x0, 0x4}, @output_terminal={0x13, 0x24, 0x3, 0x1, 0x405, 0x4, 0x2, 0x8f, 0x3, 0xffff, 0xd, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x40, 0xf, 0x87, {0xa, 0x25, 0x25, 0x6, 0xff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xfa, 0x4, 0x2, {0xa, 0x25, 0x25, 0x401, 0x8, 0x1000}}}}}}}}]}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_usb_connect$uac3(0x2, 0xf6, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x4244, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe4, 0x3, 0x1, 0x6, 0x70, 0x6, {0x8, 0xb, 0x2, 0x1, 0x1, 0x22, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xf, 0x6}, [@mixer_unit={0x5, 0x24, 0x5, 0x6, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xd0}, @as_header={0x17, 0x24, 0x1, 0x9, 0x9, 0x4a, 0x1002, 0x1, 0x3, 0x6, 0xb}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x4, 0x2, 0x0, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x5, 0x81, 0x8, 0x0, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfb, 0x5, 0xb, {0xa, 0x25, 0x25, 0x401, 0x2, 0xfffe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x0, 0xb5}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x1, 0x3, 0x48, "768ae072"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x2, 0x4, 0x4, "e88545eb7701bd"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x40, 0x8, 0x3, 0x40}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xf, 0x3, 0x8, 0x18, 0xa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x1, 0xfa, 0xc0}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xb, 0xb8, 0x2, {0xa, 0x25, 0x25, 0x7ff, 0x4, 0x7c}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0xa, 0x6, 0x0, 0x10, 0x8}, 0x4c, &(0x7f0000000240)={0x5, 0xf, 0x4c, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x1, 0x8, 0x1}, @wireless={0xb, 0x10, 0x1, 0x4, 0x1b, 0x5a, 0x8, 0x7fff, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x7, 0xfb, 0x5, 0x99}, @ssp_cap={0x1c, 0x10, 0xa, 0xfd, 0x4, 0x9, 0x0, 0x8927, [0xf, 0x0, 0xf, 0xf0]}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x7, 0x8, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x9, 0x5, 0x7}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x827}}, {0x9a, &(0x7f0000000300)=@string={0x9a, 0x3, "1e8c2b46f90cfcae91d8c5ed80248d42c4337f317a7458349d30894691a90029d501dca13f3cc1531c2112fee63c5e8bbb68f6cadf1f1ff655217fec17b6b06dfa09388f086da64e2664cf2cf838cf2172e10dd68a4435c78e0b0bcc3668d8630964bbf6bb5c153bdda77a114aa10a9e82f3cd1c0548eb39ea502bb2bc7fc96a9b516e67a215e46e92d6d0606ce92b4aae6e098b39cd9266"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x43e}}, {0xc9, &(0x7f0000000400)=@string={0xc9, 0x3, "3d128fbe4e250233317eee51e345eaa7af1924d5fe4459256301a8f9718893f6ef7869b245742345b1ebda001e3128a7913106e0e6cb9991a72a7b75e3e2b34323e8b05c2089eaad58b5e12498a5081e1039bee1e85db7b989ad72b8fc85d83ddb4b11d8f7cd3424dc178715c318917b91390bd56a4816d098388d8743e10c41a5ea8219b92178fcd69797ed6e9c485d43031a3aa04f2893f62dd99eaf31c27e5a5a1b4236f1b39c5ca4b0922878808e016fe19dd7071f912f216de4004b841ec1f4bd7cf1fd62"}}, {0x27, &(0x7f0000000500)=@string={0x27, 0x3, "99cb275be06e40bd6973d3836c05c51a2050da2bfc578c692e1376b57e917351ba9172e246"}}, {0xa4, &(0x7f0000000540)=@string={0xa4, 0x3, "065be8517493349c17f7714c58d5fdf4fbc7b1c69d5dab3afffedeefa992d43e341b18dbfeecefc5847e5a7e215ab8fe1a9a524fc4e16b3c73617897196fefdea2dcb5c98b61fd461072766284c2b5574a2ec299be2b71c6ad23aa37ca1423d81a9d82011e242b15ac6b272a7deeac72e7dea65429684084c11202062e3a7b6255ed7db3bea007669f94eec5de889a908383ef8408836ae329c7f4555dbad9c6271a"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x40d}}]}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendto$packet(r3, &(0x7f0000000b40), 0x0, 0x80, &(0x7f0000000b80)={0x11, 0x16, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_control_io$uac3(r2, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x40, 0xe, 0x3e, {0x3e, 0x30, "d19636d2ada95adb15c2ec095cd8b41f18970cb94869ed998598f8561ca192724210b89df36f32d4269a92bf53ee3f9af4fd5cbc0f7ffa2bc7f0a47e"}}, &(0x7f0000000740)={0x0, 0x3, 0x62, @string={0x62, 0x3, "9693f3216b894e09ccd7fe7e8a076aff6dec7ef43e70fe55814c20a08b6d6c386a525a2e5f422ac355bcd269941413630843aa9f4d30546ff8c0560f3691cf23014e4b3d6000e95385a37a779dea05defdca05801105c3106e8c9aeccde6725b"}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000800)={0x0, 0x14, 0xeb, "21109032e84a5ad272fd1dd0b37f0d760e5b9713d744a1c3abb640040a55d261b10c5409f27f97ecc0d778322f9e99a02598c73b80f7e569805b1d1497ae84f84dc6dc0b173e0e17fa4f12c7f401ca2d1df08938177f34e67bf309bcb1a0aff24743a90e7182e486a1280f399f0490719bcdb0942846c51dd436b0563030e4a4e5737e84b5a3200d28534d22702956415ddbe2524060d64a1f49535be7d158a25b88415bf1ee0e64a27a01a6287cae11b37feb8d6e5c609116771de6b06e8e858cb9f1562b4617ab513f8df8621a68035f3b6e4376836709c104d7dcfe857130876cfb2058dab46c73779f"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000980)={0x20, 0x81, 0x1, "ab"}, &(0x7f00000009c0)={0x20, 0x82, 0x3, "88e5dd"}, &(0x7f0000000a00)={0x20, 0x83, 0x3, "6905f8"}, &(0x7f0000000a40)={0x20, 0x84, 0x2, "0f02"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "7fdb7b"}}) read$FUSE(0xffffffffffffffff, &(0x7f0000003840)={0x2020}, 0x2020) 8.395326024s ago: executing program 4 (id=742): socket$packet(0x11, 0x3, 0x300) r0 = openat$full(0xffffff9c, &(0x7f0000000440), 0x8002, 0x0) membarrier(0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) io_uring_setup(0x30ab, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x1, 0x14c, 0x0, r0}) openat$dsp1(0xffffffffffffff9c, 0x0, 0x4a8a81, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x10481, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x2}}, 0x2e) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x83, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4d, 0x11, 0xff, @empty, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @gue={{0x2, 0x0, 0x0, 0x9}, "91000000ffffa2273b433b61c07d3996cb8393a05d07849665ce5207889f154607a7f80fa4a439ea8c017bc27143453092a1e1c980240d89a7eaca8d9b"}}}}}}}, 0x0) syz_io_uring_setup(0x3075, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x2, 0x400002d8}, 0x0, &(0x7f0000000200), &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff95acb1ddf7000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_int(r6, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) sendmsg$IEEE802154_ASSOCIATE_REQ(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010027bd7000ffdbdf2501000000050007000200000006000800a0aa0000060008000000000006000a"], 0x34}, 0x1, 0x0, 0x0, 0x811}, 0x4000) 6.722854286s ago: executing program 3 (id=743): r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000001, 0x2052, r0, 0x4b000) 6.526720799s ago: executing program 5 (id=744): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x1ddd, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x4010) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f0000000040)=0x8) r5 = syz_open_procfs(r0, &(0x7f0000000140)='fdinfo/3\x00') sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="8eccf4f4fc787adf24d2e71b73d6325da8277488279c868400eb920be79512b81cbc118103c9b40e68ad5c93ddfc9d84cd7c461b03f94db92805000000000000008b5a6242f6e7890d5183dee23bb2970a737d61a970562668757cc2334e15e94a79d92d9d68e9dd02f7afa42541b592acff39b2febbf8fcc8fbd23d65dacf0dfdc8c4a8ee13738aff29cb68d6d7372bd3b87a262ecc296cd7bb5e3707d1a1025d5a1cf019bc530008e9dc154301c7ec5fe6bad630468eb031606a57a291e9451560269b2d06a308c4db43b9a77e7b9ae6b7addebfee", @ANYRES32, @ANYRES16=r5, @ANYRES64, @ANYBLOB="47b0ca44481cf69108a96d859e23e87e44a0f0885fa3246251faecd5130d959968452df500894fa1c0fc5c315ba7909f7515399d1c657720cba1e42817e761bc31b59b9b8a83dda065b7f21b7d5f83c770656025f1ce226b8736e240e9987ea3ae27c6b36ac3b4b7cf2b35f449f1cec1c35feb2423f7b0b605d5be59a610ec02a3b1c8a4df3116324da7ae4f4b04f22d3dd5772cd1f96a833533cc56876fb2a95aef1ccf4a6a03f5f69653e8767dcd36851f701f6186f7d65534d3f59b5f90dc22e9f6f78bdfdba191604d9db0601af70fc1c0070000067cece2a608f4e64d077eba7269f62067ca92f82b67a7", @ANYRESDEC, @ANYBLOB="376c0b2a71521b8c8f07539e735ec1d116bd1185cb2b35faaf546c", @ANYRES64], 0x34}}, 0x8000) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_DEL_FROM_ACCEPT_LIST={{0x40}, 0x1}}}, 0x7) 3.384100349s ago: executing program 2 (id=745): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) r1 = getpgrp(r0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1800000013141100000000000000006868000800620000000000"], 0x18}, 0x2}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_restrict_self(r5, 0x3) landlock_restrict_self(r5, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) 3.091055817s ago: executing program 4 (id=746): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)="b19ccccf84f531d9ec4cda81a3ef2ca8", 0x10) sendmmsg$alg(r4, &(0x7f00000061c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40010000) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40012060) r5 = socket$netlink(0x10, 0x3, 0x5) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f00000000c0)=0x3, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) 3.04229249s ago: executing program 1 (id=747): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x402, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000380)={'dt2811\x00', [0x1, 0x9, 0x0, 0x26a1, 0x5, 0x8, 0x6, 0x8, 0x80000000, 0x80000000, 0x8, 0x1, 0x5, 0xffffffff, 0x40, 0x0, 0x0, 0x5, 0x2, 0xf, 0x7, 0xff, 0x5, 0x8, 0x3, 0x2, 0x8000, 0xa729, 0x0, 0x7, 0xfffffffe, 0xfffffffd]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x5, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) dup(r6) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e24, 0x1, @loopback, 0x18000000}, 0x1c) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000340)={0x2f, 0x4, 0x0, {0x0, 0x9, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r7 = epoll_create(0xd751) epoll_pwait(r7, 0x0, 0x0, 0xef19, 0x0, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r1) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x34, r8, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x14) io_setup(0x8, &(0x7f0000000680)=0x0) io_pgetevents(r9, 0x2, 0x2, &(0x7f00000000c0)=[{}, {}], &(0x7f0000000000)={0x0, 0x3938700}, 0x0) 1.842491589s ago: executing program 5 (id=748): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x50, 0x8001, 0x20, 0x0}], 0x1}) 0s ago: executing program 2 (id=749): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) (async) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x0, 0xb913}, 0x0) timerfd_create(0x0, 0x80000) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x1000, @empty, 0x5}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x679f, 0x4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, 0x0, 0x2, 0x6}}, 0x20) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x40002000, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000002600)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000053c0)) (async) socket(0x2, 0x80805, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x50007a2) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000090900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a30000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000208000140000000140800024000000001080002400000000008000640000000020900010073797a30"], 0x110}}, 0x0) (async) open(&(0x7f0000001040)='./bus\x00', 0x42080, 0x1f1) (async) link(&(0x7f0000000480)='./bus\x00', &(0x7f00000004c0)='./file0\x00') (async, rerun: 32) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (rerun: 32) kernel console output (not intermixed with test programs): , idProduct=0101, bcdDevice= 0.40 [ 296.525721][ T5790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.525741][ T5790] usb 1-1: Product: syz [ 296.525755][ T5790] usb 1-1: Manufacturer: syz [ 296.525778][ T5790] usb 1-1: SerialNumber: syz [ 296.608748][ T5790] usb 1-1: 0:2 : does not exist [ 296.754306][ T6724] FAULT_INJECTION: forcing a failure. [ 296.754306][ T6724] name failslab, interval 1, probability 0, space 0, times 0 [ 296.754403][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.4.254 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 296.754428][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.754452][ T6724] Call Trace: [ 296.754461][ T6724] [ 296.754471][ T6724] dump_stack_lvl+0xe8/0x150 [ 296.754507][ T6724] should_fail_ex+0x46b/0x600 [ 296.754538][ T6724] should_failslab+0xa8/0x100 [ 296.754568][ T6724] __kmalloc_noprof+0xdf/0x7b0 [ 296.754593][ T6724] ? tomoyo_encode+0x28b/0x550 [ 296.754622][ T6724] tomoyo_encode+0x28b/0x550 [ 296.754650][ T6724] tomoyo_realpath_from_path+0x58d/0x5d0 [ 296.754685][ T6724] ? tomoyo_path_number_perm+0x219/0x630 [ 296.754715][ T6724] tomoyo_path_number_perm+0x246/0x630 [ 296.754749][ T6724] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.754780][ T6724] ? __lock_acquire+0x6b5/0x2cf0 [ 296.754813][ T6724] ? do_raw_spin_lock+0x12b/0x2f0 [ 296.754874][ T6724] ? __fget_files+0x2a/0x420 [ 296.754899][ T6724] ? __fget_files+0x2a/0x420 [ 296.754919][ T6724] ? __fget_files+0x3a6/0x420 [ 296.754940][ T6724] ? __fget_files+0x2a/0x420 [ 296.754965][ T6724] security_file_ioctl+0xc3/0x2a0 [ 296.755001][ T6724] __se_sys_ioctl+0x47/0x170 [ 296.755029][ T6724] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.755061][ T6724] do_syscall_64+0x15f/0xf80 [ 296.755096][ T6724] ? clear_bhb_loop+0x40/0x90 [ 296.755132][ T6724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.755155][ T6724] RIP: 0033:0x7f8d2db6ce59 [ 296.755176][ T6724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.755194][ T6724] RSP: 002b:00007f8d2bdc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.755218][ T6724] RAX: ffffffffffffffda RBX: 00007f8d2dde5fa0 RCX: 00007f8d2db6ce59 [ 296.755234][ T6724] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000004 [ 296.755248][ T6724] RBP: 00007f8d2bdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 296.755262][ T6724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.755274][ T6724] R13: 00007f8d2dde6038 R14: 00007f8d2dde5fa0 R15: 00007ffd4d22f9a8 [ 296.755310][ T6724] [ 296.755393][ T6724] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.250389][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.253392][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.240366][ T5790] usb 1-1: USB disconnect, device number 8 [ 304.507226][ T6768] netlink: 68 bytes leftover after parsing attributes in process `syz.3.263'. [ 304.912575][ T6083] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 305.222129][ T6083] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 305.222161][ T6083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.222182][ T6083] usb 1-1: Product: syz [ 305.222197][ T6083] usb 1-1: Manufacturer: syz [ 305.222211][ T6083] usb 1-1: SerialNumber: syz [ 305.274182][ T6083] usb 1-1: config 0 descriptor?? [ 305.532393][ T5608] Bluetooth: hci0: command 0x0c1a tx timeout [ 305.537930][ T5616] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 308.222308][ T6083] usb 1-1: USB disconnect, device number 9 [ 309.165515][ T5616] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 309.464948][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.272'. [ 309.997768][ T6783] syz.1.267 (6783) used greatest stack depth: 19064 bytes left [ 312.663101][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 312.663120][ T37] audit: type=1326 audit(1779644460.016:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6815 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b346ce59 code=0x7ffc0000 [ 312.663455][ T37] audit: type=1326 audit(1779644460.076:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6815 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b346ce59 code=0x7ffc0000 [ 312.734393][ T37] audit: type=1326 audit(1779644460.146:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6815 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b346ce59 code=0x7ffc0000 [ 312.734450][ T37] audit: type=1326 audit(1779644460.146:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6815 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f94b346ce59 code=0x7ffc0000 [ 312.734498][ T37] audit: type=1326 audit(1779644460.146:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6815 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b346ce59 code=0x7ffc0000 [ 312.734547][ T37] audit: type=1326 audit(1779644460.146:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6815 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b346ce59 code=0x7ffc0000 [ 312.810595][ T37] audit: type=1326 audit(1779644460.176:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6815 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b346ce59 code=0x7ffc0000 [ 312.810792][ T37] audit: type=1326 audit(1779644460.216:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6815 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b346ce59 code=0x7ffc0000 [ 312.810911][ T37] audit: type=1326 audit(1779644460.216:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6815 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b346ce59 code=0x7ffc0000 [ 312.820389][ T37] audit: type=1326 audit(1779644460.226:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6815 comm="syz.2.276" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f94b346ce59 code=0x7ffc0000 [ 313.012510][ T6083] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 313.162222][ T6083] usb 4-1: Using ep0 maxpacket: 16 [ 313.167316][ T6083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.167352][ T6083] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.167394][ T6083] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 313.167418][ T6083] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.248783][ T6083] usb 4-1: config 0 descriptor?? [ 313.652792][ T6817] sg_write: data in/out 667648/136 bytes for SCSI command 0x0-- guessing data in; [ 313.652792][ T6817] program syz.2.276 not setting count and/or reply_len properly [ 315.603946][ T6083] usbhid 4-1:0.0: can't add hid device: -71 [ 315.604083][ T6083] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 315.854206][ T6083] usb 4-1: USB disconnect, device number 7 [ 319.174724][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.174803][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.641398][ T6855] CUSE: unknown device info "" [ 320.641445][ T6855] CUSE: unknown device info "Ö" [ 320.641481][ T6855] CUSE: unknown device info "ÚË" [ 320.641516][ T6855] CUSE: unknown device info "" [ 320.641551][ T6855] CUSE: unknown device info "ðÿÿÿ" [ 320.641587][ T6855] CUSE: unknown device info "" [ 320.641621][ T6855] CUSE: unknown device info "" [ 320.641656][ T6855] CUSE: unknown device info "" [ 320.641690][ T6855] CUSE: unknown device info "@" [ 320.641725][ T6855] CUSE: unknown device info "" [ 320.641778][ T6855] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 320.641825][ T6855] CUSE: unknown device info "ÿÿÿÿ" [ 320.641860][ T6855] CUSE: unknown device info "" [ 320.641894][ T6855] CUSE: unknown device info "€" [ 320.641987][ T6855] CUSE: DEVNAME unspecified [ 322.956108][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.286'. [ 323.525880][ T6868] FAULT_INJECTION: forcing a failure. [ 323.525880][ T6868] name failslab, interval 1, probability 0, space 0, times 0 [ 323.525946][ T6868] CPU: 1 UID: 0 PID: 6868 Comm: syz.0.291 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 323.525973][ T6868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 323.525988][ T6868] Call Trace: [ 323.525997][ T6868] [ 323.526007][ T6868] dump_stack_lvl+0xe8/0x150 [ 323.526040][ T6868] should_fail_ex+0x46b/0x600 [ 323.526068][ T6868] ? create_io_worker+0x27/0x5c0 [ 323.526100][ T6868] should_failslab+0xa8/0x100 [ 323.526130][ T6868] __kmalloc_cache_noprof+0x84/0x690 [ 323.526158][ T6868] ? create_io_worker+0xab/0x5c0 [ 323.526190][ T6868] ? create_io_worker+0x27/0x5c0 [ 323.526218][ T6868] create_io_worker+0xab/0x5c0 [ 323.526244][ T6868] io_wq_enqueue+0x675/0x8a0 [ 323.526266][ T6868] ? io_wq_enqueue+0x332/0x8a0 [ 323.526286][ T6868] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 323.526314][ T6868] io_submit_sqes+0x144d/0x22e0 [ 323.526362][ T6868] __se_sys_io_uring_enter+0x34a/0x1c40 [ 323.526396][ T6868] ? irqentry_exit+0x218/0x760 [ 323.526421][ T6868] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 323.526445][ T6868] ? irqentry_exit+0x218/0x760 [ 323.526467][ T6868] ? rcu_is_watching+0x15/0xb0 [ 323.526502][ T6868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.526525][ T6868] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 323.526549][ T6868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.526568][ T6868] do_syscall_64+0x15f/0xf80 [ 323.526600][ T6868] ? clear_bhb_loop+0x40/0x90 [ 323.526622][ T6868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.526640][ T6868] RIP: 0033:0x7f0ad9bcce59 [ 323.526656][ T6868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.526672][ T6868] RSP: 002b:00007f0ad7ddc028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 323.526690][ T6868] RAX: ffffffffffffffda RBX: 00007f0ad9e46180 RCX: 00007f0ad9bcce59 [ 323.526704][ T6868] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 323.526715][ T6868] RBP: 00007f0ad7ddc090 R08: 0000000000000000 R09: 0000000000000f00 [ 323.526726][ T6868] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 323.526736][ T6868] R13: 00007f0ad9e46218 R14: 00007f0ad9e46180 R15: 00007fff586d6ad8 [ 323.526764][ T6868] [ 326.507176][ T37] kauditd_printk_skb: 155 callbacks suppressed [ 326.507199][ T37] audit: type=1326 audit(1779644487.914:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.1.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 326.507253][ T37] audit: type=1326 audit(1779644487.914:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.1.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 326.507302][ T37] audit: type=1326 audit(1779644487.924:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.1.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 326.507362][ T37] audit: type=1326 audit(1779644487.924:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.1.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 326.526116][ T37] audit: type=1326 audit(1779644487.944:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.1.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 326.526317][ T37] audit: type=1326 audit(1779644487.944:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.1.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 326.526448][ T37] audit: type=1326 audit(1779644487.944:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.1.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 326.526573][ T37] audit: type=1326 audit(1779644487.944:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.1.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 326.574711][ T37] audit: type=1326 audit(1779644487.984:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.1.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 326.628186][ T37] audit: type=1326 audit(1779644487.994:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6872 comm="syz.1.282" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 327.782063][ T5721] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 327.939179][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 327.958207][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 327.958243][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 327.958264][ T5721] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 328.006781][ T5721] usb 5-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice= 0.40 [ 328.006815][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.006841][ T5721] usb 5-1: Product: Ã븓趖眅ⶾ稿ë¸æ•¢ê”˜ã¨›ã¢žè¿—◀ꖥﭻ뮞罗幮욘㰡蔖澅魴襙淣뵽퉼ಛè…谯䶔㶨լ韨쳤䥛é±êƒ¢éš­ë™§í‰œç¦ä‘’á†§ì—·î½“é¦†æŸ”êš [ 328.006865][ T5721] usb 5-1: Manufacturer: à Œ [ 328.006881][ T5721] usb 5-1: SerialNumber: 劵㻙슩뉅캚î…풺Ẍ⡞먨æ™ì¼»ã¢æ巈ძⰣá…殸ᖉ柊㲠ë›Ñ±é™¥î„“龺煤ꥒé½ê²¢ï©˜ï±¸é½¹â©¬å•¹ï¹œâ¹ã†¿íœšî«£â¸¦à«¡Å³áŠšì‘¢ë’¬ãš·ç£­ïº§ã¬‚Ô꛴㖻벰횘 [ 328.781618][ T6896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.298'. [ 330.556209][ T5721] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 331.599946][ T6911] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR [ 331.704731][ T6915] openvswitch: netlink: Actions may not be safe on all matching packets [ 331.880637][ T5721] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 331.960319][ T5721] usb 5-1: USB disconnect, device number 6 [ 332.063365][ T6083] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 332.389159][ T6083] usb 2-1: Using ep0 maxpacket: 16 [ 332.458321][ T6083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.458359][ T6083] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.458385][ T6083] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 332.458430][ T6083] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 332.458456][ T6083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.591732][ T6083] usb 2-1: config 0 descriptor?? [ 333.599747][ T6922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.305'. [ 333.744618][ T6097] udevd[6097]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.314041][ T6083] microsoft 0003:045E:07DA.0002: item 0 4 0 9 parsing failed [ 334.316227][ T6083] microsoft 0003:045E:07DA.0002: parse failed [ 334.316344][ T6083] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 334.447885][ T6915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.449359][ T6915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.672456][ T5618] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 334.809650][ T6083] usb 2-1: USB disconnect, device number 10 [ 334.843161][ T5618] usb 4-1: Using ep0 maxpacket: 8 [ 334.892959][ T5618] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 334.892999][ T5618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 334.893014][ T5618] usb 4-1: Product: syz [ 334.893024][ T5618] usb 4-1: Manufacturer: syz [ 334.893035][ T5618] usb 4-1: SerialNumber: syz [ 335.041815][ T5618] usb 4-1: config 0 descriptor?? [ 335.435946][ T5618] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 335.468743][ T5618] gspca_sn9c2028: read1 error -32 [ 335.975588][ T5618] gspca_sn9c2028: read1 error -110 [ 335.975661][ T5618] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -110 [ 337.734136][ T10] usb 4-1: USB disconnect, device number 8 [ 338.327836][ T6942] program syz.2.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.430896][ T6942] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 339.101728][ T6955] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 339.402137][ T6955] cramfs: wrong magic [ 342.421746][ T31] kernel read not supported for file /newroot/64/file0 (pid: 31 comm: kworker/1:0) [ 344.220006][ T6972] netlink: 'syz.1.321': attribute type 5 has an invalid length. [ 344.247477][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'. [ 344.735054][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 346.054063][ T6991] FAULT_INJECTION: forcing a failure. [ 346.054063][ T6991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 346.054101][ T6991] CPU: 1 UID: 0 PID: 6991 Comm: syz.3.328 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 346.054126][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.054141][ T6991] Call Trace: [ 346.054149][ T6991] [ 346.054158][ T6991] dump_stack_lvl+0xe8/0x150 [ 346.054190][ T6991] should_fail_ex+0x46b/0x600 [ 346.054220][ T6991] prepare_alloc_pages+0x22a/0x6b0 [ 346.054257][ T6991] __alloc_frozen_pages_noprof+0x12f/0x380 [ 346.054292][ T6991] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 346.054325][ T6991] ? __pfx_policy_nodemask+0x10/0x10 [ 346.054356][ T6991] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 346.054391][ T6991] ? lockdep_hardirqs_on+0x7a/0x110 [ 346.054425][ T6991] alloc_pages_mpol+0xd1/0x380 [ 346.054458][ T6991] alloc_pages_noprof+0xd2/0x2f0 [ 346.054495][ T6991] get_free_pages_noprof+0xf/0x80 [ 346.054524][ T6991] __kasan_populate_vmalloc+0x38/0x1d0 [ 346.054560][ T6991] ? rt_spin_unlock+0x160/0x200 [ 346.054587][ T6991] alloc_vmap_area+0xd47/0x1480 [ 346.054626][ T6991] ? __pfx_alloc_vmap_area+0x10/0x10 [ 346.054651][ T6991] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 346.054679][ T6991] ? __get_vm_area_node+0x171/0x350 [ 346.054701][ T6991] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 346.054739][ T6991] __get_vm_area_node+0x226/0x350 [ 346.054769][ T6991] __vmalloc_node_range_noprof+0x36a/0x1750 [ 346.054795][ T6991] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 346.054828][ T6991] ? __lock_acquire+0x6b5/0x2cf0 [ 346.054877][ T6991] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 346.054908][ T6991] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.054934][ T6991] ? __lock_acquire+0x6b5/0x2cf0 [ 346.054967][ T6991] ? _parse_integer_limit+0x1ae/0x1f0 [ 346.055007][ T6991] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 346.055033][ T6991] __vmalloc_noprof+0xd2/0x120 [ 346.055057][ T6991] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 346.055088][ T6991] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 346.055122][ T6991] bpf_prog_alloc+0x3c/0x1a0 [ 346.055155][ T6991] bpf_prog_load+0x779/0x1a10 [ 346.055196][ T6991] ? __pfx_bpf_prog_load+0x10/0x10 [ 346.055225][ T6991] ? __might_fault+0xaf/0x130 [ 346.055269][ T6991] ? bpf_lsm_bpf+0x9/0x20 [ 346.055304][ T6991] ? security_bpf+0x7e/0x2d0 [ 346.055343][ T6991] __sys_bpf+0x618/0x950 [ 346.055372][ T6991] ? __pfx___sys_bpf+0x10/0x10 [ 346.055395][ T6991] ? rt_mutex_slowunlock+0x1cb/0x300 [ 346.055438][ T6991] ? ksys_write+0x248/0x270 [ 346.055466][ T6991] ? __pfx_ksys_write+0x10/0x10 [ 346.055503][ T6991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.055527][ T6991] __x64_sys_bpf+0x7c/0x90 [ 346.055553][ T6991] do_syscall_64+0x15f/0xf80 [ 346.055579][ T6991] ? trace_irq_disable+0x3b/0x140 [ 346.055600][ T6991] ? clear_bhb_loop+0x40/0x90 [ 346.055621][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.055638][ T6991] RIP: 0033:0x7f9d0c45ce59 [ 346.055656][ T6991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.055671][ T6991] RSP: 002b:00007f9d0a6ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.055691][ T6991] RAX: ffffffffffffffda RBX: 00007f9d0c6d5fa0 RCX: 00007f9d0c45ce59 [ 346.055704][ T6991] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 346.055716][ T6991] RBP: 00007f9d0a6ae090 R08: 0000000000000000 R09: 0000000000000000 [ 346.055727][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.055737][ T6991] R13: 00007f9d0c6d6038 R14: 00007f9d0c6d5fa0 R15: 00007ffd3e1338f8 [ 346.055763][ T6991] [ 346.093681][ T6991] syz.3.328: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 346.094027][ T6991] CPU: 1 UID: 0 PID: 6991 Comm: syz.3.328 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 346.094110][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.094148][ T6991] Call Trace: [ 346.094187][ T6991] [ 346.094212][ T6991] dump_stack_lvl+0xe8/0x150 [ 346.094309][ T6991] warn_alloc+0x263/0x3e0 [ 346.094406][ T6991] ? kasan_quarantine_put+0xbb/0x1f0 [ 346.094515][ T6991] ? __pfx_warn_alloc+0x10/0x10 [ 346.094614][ T6991] ? __get_vm_area_node+0x23f/0x350 [ 346.094674][ T6991] ? __get_vm_area_node+0x171/0x350 [ 346.094748][ T6991] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 346.094846][ T6991] ? __get_vm_area_node+0x23f/0x350 [ 346.094943][ T6991] __vmalloc_node_range_noprof+0x38f/0x1750 [ 346.095037][ T6991] ? __lock_acquire+0x6b5/0x2cf0 [ 346.095208][ T6991] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 346.095321][ T6991] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.095407][ T6991] ? __lock_acquire+0x6b5/0x2cf0 [ 346.095502][ T6991] ? _parse_integer_limit+0x1ae/0x1f0 [ 346.095626][ T6991] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 346.095708][ T6991] __vmalloc_noprof+0xd2/0x120 [ 346.095790][ T6991] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 346.095887][ T6991] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 346.096003][ T6991] bpf_prog_alloc+0x3c/0x1a0 [ 346.096091][ T6991] bpf_prog_load+0x779/0x1a10 [ 346.096232][ T6991] ? __pfx_bpf_prog_load+0x10/0x10 [ 346.096324][ T6991] ? __might_fault+0xaf/0x130 [ 346.096439][ T6991] ? bpf_lsm_bpf+0x9/0x20 [ 346.096523][ T6991] ? security_bpf+0x7e/0x2d0 [ 346.096639][ T6991] __sys_bpf+0x618/0x950 [ 346.096731][ T6991] ? __pfx___sys_bpf+0x10/0x10 [ 346.096808][ T6991] ? rt_mutex_slowunlock+0x1cb/0x300 [ 346.096853][ T6991] ? ksys_write+0x248/0x270 [ 346.096904][ T6991] ? __pfx_ksys_write+0x10/0x10 [ 346.097029][ T6991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.097117][ T6991] __x64_sys_bpf+0x7c/0x90 [ 346.097202][ T6991] do_syscall_64+0x15f/0xf80 [ 346.097298][ T6991] ? trace_irq_disable+0x3b/0x140 [ 346.097380][ T6991] ? clear_bhb_loop+0x40/0x90 [ 346.097454][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.097525][ T6991] RIP: 0033:0x7f9d0c45ce59 [ 346.097588][ T6991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.097648][ T6991] RSP: 002b:00007f9d0a6ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.097711][ T6991] RAX: ffffffffffffffda RBX: 00007f9d0c6d5fa0 RCX: 00007f9d0c45ce59 [ 346.097767][ T6991] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 346.097805][ T6991] RBP: 00007f9d0a6ae090 R08: 0000000000000000 R09: 0000000000000000 [ 346.097851][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.097888][ T6991] R13: 00007f9d0c6d6038 R14: 00007f9d0c6d5fa0 R15: 00007ffd3e1338f8 [ 346.097988][ T6991] [ 346.159805][ T6991] Mem-Info: [ 346.159853][ T6991] active_anon:206 inactive_anon:24242 isolated_anon:0 [ 346.159853][ T6991] active_file:24653 inactive_file:36551 isolated_file:0 [ 346.159853][ T6991] unevictable:768 dirty:74 writeback:0 [ 346.159853][ T6991] slab_reclaimable:11686 slab_unreclaimable:103068 [ 346.159853][ T6991] mapped:32560 shmem:19313 pagetables:1199 [ 346.159853][ T6991] sec_pagetables:0 bounce:0 [ 346.159853][ T6991] kernel_misc_reclaimable:0 [ 346.159853][ T6991] free:1283781 free_pcp:12396 free_cma:0 [ 346.160049][ T6991] Node 0 active_anon:824kB inactive_anon:96968kB active_file:98420kB inactive_file:146204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130240kB dirty:292kB writeback:0kB shmem:75716kB kernel_stack:13068kB pagetables:4652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 346.160191][ T6991] Node 1 active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:96kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 346.160336][ T6991] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.160527][ T6991] lowmem_reserve[]: 0 2506 2506 2506 2506 [ 346.160630][ T6991] Node 0 DMA32 free:1200544kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:824kB inactive_anon:96968kB active_file:98420kB inactive_file:146204kB unevictable:1536kB writepending:224kB zspages:0kB present:3129332kB managed:2566476kB mlocked:0kB bounce:0kB free_pcp:44600kB local_pcp:32916kB free_cma:0kB [ 346.160801][ T6991] lowmem_reserve[]: 0 0 0 0 0 [ 346.160835][ T6991] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.161059][ T6991] lowmem_reserve[]: 0 0 0 0 0 [ 346.161154][ T6991] Node 1 Normal free:3919220kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:192kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4984kB local_pcp:4984kB free_cma:0kB [ 346.161362][ T6991] lowmem_reserve[]: 0 0 0 0 0 [ 346.197155][ T6991] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 346.197499][ T6991] Node 0 DMA32: 430*4kB (UME) 1411*8kB (UM) 640*16kB (UM) 130*32kB (UM) 350*64kB (UME) 120*128kB (UME) 19*256kB (UM) 26*512kB (UME) 19*1024kB (UME) 4*2048kB (M) 266*4096kB (UME) = 1200528kB [ 346.197953][ T6991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 346.198293][ T6991] Node 1 Normal: 3*4kB (UM) 9*8kB (UM) 8*16kB (UM) 11*32kB (UM) 11*64kB (UM) 9*128kB (UM) 2*256kB (UM) 3*512kB (U) 1*1024kB (M) 1*2048kB (U) 955*4096kB (M) = 3919220kB [ 346.209919][ T6991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.209974][ T6991] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 346.210020][ T6991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 346.210064][ T6991] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 346.210117][ T6991] 80563 total pagecache pages [ 346.210140][ T6991] 0 pages in swap cache [ 346.210161][ T6991] Free swap = 124996kB [ 346.210180][ T6991] Total swap = 124996kB [ 346.210210][ T6991] 2097051 pages RAM [ 346.210231][ T6991] 0 pages HighMem/MovableOnly [ 346.210245][ T6991] 423764 pages reserved [ 346.210266][ T6991] 0 pages cma reserved [ 347.544957][ T6994] af_packet: tpacket_rcv: packet too big, clamped from 17 to 4294967286. macoff=82 [ 348.300580][ T7002] FAULT_INJECTION: forcing a failure. [ 348.300580][ T7002] name failslab, interval 1, probability 0, space 0, times 0 [ 348.300621][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: syz.0.330 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.300647][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.300662][ T7002] Call Trace: [ 348.300671][ T7002] [ 348.300681][ T7002] dump_stack_lvl+0xe8/0x150 [ 348.300714][ T7002] should_fail_ex+0x46b/0x600 [ 348.300746][ T7002] should_failslab+0xa8/0x100 [ 348.300776][ T7002] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 348.300803][ T7002] ? __alloc_skb+0x1d0/0x7d0 [ 348.300831][ T7002] ? lockdep_hardirqs_on+0x7a/0x110 [ 348.300871][ T7002] __alloc_skb+0x1d0/0x7d0 [ 348.300904][ T7002] hci_mgmt_cmd+0x1c5/0xfa0 [ 348.300937][ T7002] ? lockdep_hardirqs_on+0x7a/0x110 [ 348.300972][ T7002] ? mutex_lock_nested+0x152/0x1d0 [ 348.301003][ T7002] hci_sock_sendmsg+0x6dd/0xf40 [ 348.301038][ T7002] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 348.301071][ T7002] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.301098][ T7002] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 348.301122][ T7002] sock_write_iter+0x4a1/0x4f0 [ 348.301149][ T7002] ? __pfx_sock_write_iter+0x10/0x10 [ 348.301199][ T7002] vfs_write+0x629/0xba0 [ 348.301236][ T7002] ? __pfx_vfs_write+0x10/0x10 [ 348.301275][ T7002] ? __fget_files+0x2a/0x420 [ 348.301314][ T7002] ksys_write+0x156/0x270 [ 348.301342][ T7002] ? __pfx_ksys_write+0x10/0x10 [ 348.301378][ T7002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.301404][ T7002] do_syscall_64+0x15f/0xf80 [ 348.301439][ T7002] ? trace_irq_disable+0x3b/0x140 [ 348.301459][ T7002] ? clear_bhb_loop+0x40/0x90 [ 348.301478][ T7002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.301494][ T7002] RIP: 0033:0x7f0ad9bcce59 [ 348.301510][ T7002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.301523][ T7002] RSP: 002b:00007f0ad7e1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.301569][ T7002] RAX: ffffffffffffffda RBX: 00007f0ad9e45fa0 RCX: 00007f0ad9bcce59 [ 348.301586][ T7002] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000006 [ 348.301605][ T7002] RBP: 00007f0ad7e1e090 R08: 0000000000000000 R09: 0000000000000000 [ 348.301619][ T7002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.301633][ T7002] R13: 00007f0ad9e46038 R14: 00007f0ad9e45fa0 R15: 00007fff586d6ad8 [ 348.301668][ T7002] [ 348.512356][ T7002] Bluetooth: MGMT ver 1.23 [ 351.848873][ T7031] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 351.925107][ T7031] cramfs: wrong magic [ 352.631292][ T5616] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 352.631476][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 353.632213][ T5714] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 353.795550][ T5714] usb 1-1: unable to get BOS descriptor or descriptor too short [ 353.796172][ T5714] usb 1-1: not running at top speed; connect to a high speed hub [ 353.797608][ T5714] usb 1-1: config 3 has an invalid interface number: 132 but max is 0 [ 353.797635][ T5714] usb 1-1: config 3 has no interface number 0 [ 353.797668][ T5714] usb 1-1: config 3 interface 132 has no altsetting 0 [ 353.800864][ T5714] usb 1-1: New USB device found, idVendor=2013, idProduct=8461, bcdDevice= 8.63 [ 353.800895][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.800916][ T5714] usb 1-1: Product: syz [ 353.800930][ T5714] usb 1-1: Manufacturer: syz [ 353.800964][ T5714] usb 1-1: SerialNumber: syz [ 354.036869][ T7058] netlink: 'syz.4.347': attribute type 4 has an invalid length. [ 354.036891][ T7058] netlink: 224 bytes leftover after parsing attributes in process `syz.4.347'. [ 354.240667][ T5714] em28xx 1-1:3.132: audio device (2013:8461): interface 132, class 1 [ 354.269834][ T5714] usb 1-1: USB disconnect, device number 10 [ 354.715384][ T7065] FAULT_INJECTION: forcing a failure. [ 354.715384][ T7065] name failslab, interval 1, probability 0, space 0, times 0 [ 354.715455][ T7065] CPU: 1 UID: 0 PID: 7065 Comm: syz.1.348 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 354.715482][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 354.715497][ T7065] Call Trace: [ 354.715506][ T7065] [ 354.715516][ T7065] dump_stack_lvl+0xe8/0x150 [ 354.715550][ T7065] should_fail_ex+0x46b/0x600 [ 354.715581][ T7065] should_failslab+0xa8/0x100 [ 354.715611][ T7065] __kmalloc_noprof+0xdf/0x7b0 [ 354.715638][ T7065] ? skcipher_next_slow+0xee/0x230 [ 354.715669][ T7065] ? skcipher_walk_next+0x7b3/0xbe0 [ 354.715701][ T7065] skcipher_next_slow+0xee/0x230 [ 354.715736][ T7065] crypto_aegis128_decrypt_generic+0x80f/0xad0 [ 354.715775][ T7065] ? __pfx_crypto_aegis128_decrypt_generic+0x10/0x10 [ 354.715804][ T7065] ? irqentry_exit+0x218/0x760 [ 354.715834][ T7065] ? rcu_is_watching+0x15/0xb0 [ 354.715889][ T7065] ? memcpy_sglist+0x2a/0x730 [ 354.715913][ T7065] ? memcpy_sglist+0x680/0x730 [ 354.715944][ T7065] ? crypto_aead_decrypt+0xda/0x190 [ 354.715971][ T7065] aead_recvmsg+0xc7d/0x1160 [ 354.716032][ T7065] ? __pfx_aead_recvmsg+0x10/0x10 [ 354.716075][ T7065] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 354.716107][ T7065] ? security_socket_recvmsg+0x7e/0x2c0 [ 354.716136][ T7065] ? __pfx_aead_recvmsg+0x10/0x10 [ 354.716169][ T7065] sock_recvmsg+0x172/0x1b0 [ 354.716200][ T7065] ____sys_recvmsg+0x1f2/0x4b0 [ 354.716231][ T7065] ? find_lock_lowest_rq+0xbf/0x6e0 [ 354.716267][ T7065] ? __pfx_____sys_recvmsg+0x10/0x10 [ 354.716318][ T7065] ? import_iovec+0x73/0xa0 [ 354.716350][ T7065] ___sys_recvmsg+0x215/0x590 [ 354.716391][ T7065] ? __pfx____sys_recvmsg+0x10/0x10 [ 354.716431][ T7065] ? __fget_files+0x2a/0x420 [ 354.716473][ T7065] ? __fget_files+0x3a6/0x420 [ 354.716507][ T7065] __x64_sys_recvmsg+0x1c0/0x2a0 [ 354.716539][ T7065] ? irqentry_exit+0x218/0x760 [ 354.716575][ T7065] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 354.716607][ T7065] ? rcu_is_watching+0x15/0xb0 [ 354.716650][ T7065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.716699][ T7065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.716724][ T7065] do_syscall_64+0x15f/0xf80 [ 354.716756][ T7065] ? clear_bhb_loop+0x40/0x90 [ 354.716785][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.716809][ T7065] RIP: 0033:0x7fed352fce59 [ 354.716831][ T7065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.716858][ T7065] RSP: 002b:00007fed33514028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 354.716892][ T7065] RAX: ffffffffffffffda RBX: 00007fed35576180 RCX: 00007fed352fce59 [ 354.716914][ T7065] RDX: 0000000000000002 RSI: 00002000000027c0 RDI: 0000000000000009 [ 354.716929][ T7065] RBP: 00007fed33514090 R08: 0000000000000000 R09: 0000000000000000 [ 354.716943][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.716956][ T7065] R13: 00007fed35576218 R14: 00007fed35576180 R15: 00007fff33249058 [ 354.717007][ T7065] [ 357.694516][ T7094] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 358.576317][ T7094] cramfs: wrong magic [ 359.728874][ T7101] netlink: 'syz.1.360': attribute type 4 has an invalid length. [ 359.728900][ T7101] netlink: 224 bytes leftover after parsing attributes in process `syz.1.360'. [ 361.548068][ T5608] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 362.192212][ T7103] comedi comedi3: 8255: I/O base address not correctly aligned [ 366.128941][ T7145] netlink: 'syz.4.373': attribute type 4 has an invalid length. [ 366.128967][ T7145] netlink: 224 bytes leftover after parsing attributes in process `syz.4.373'. [ 366.380823][ T7147] gfs2: not a GFS2 filesystem [ 366.578140][ T7150] FAULT_INJECTION: forcing a failure. [ 366.578140][ T7150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.578188][ T7150] CPU: 0 UID: 0 PID: 7150 Comm: syz.4.375 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 366.578214][ T7150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 366.578231][ T7150] Call Trace: [ 366.578240][ T7150] [ 366.578250][ T7150] dump_stack_lvl+0xe8/0x150 [ 366.578281][ T7150] should_fail_ex+0x46b/0x600 [ 366.578311][ T7150] _copy_from_user+0x2d/0xb0 [ 366.578339][ T7150] ___sys_sendmsg+0x1c6/0x360 [ 366.578371][ T7150] ? __lock_acquire+0x6b5/0x2cf0 [ 366.578407][ T7150] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.578477][ T7150] ? __fget_files+0x2a/0x420 [ 366.578498][ T7150] ? __fget_files+0x3a6/0x420 [ 366.578530][ T7150] __x64_sys_sendmsg+0x1c3/0x2a0 [ 366.578566][ T7150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.578609][ T7150] ? __pfx_ksys_write+0x10/0x10 [ 366.578644][ T7150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.578669][ T7150] do_syscall_64+0x15f/0xf80 [ 366.578702][ T7150] ? trace_irq_disable+0x3b/0x140 [ 366.578728][ T7150] ? clear_bhb_loop+0x40/0x90 [ 366.578755][ T7150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.578783][ T7150] RIP: 0033:0x7f8d2db6ce59 [ 366.578805][ T7150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.578824][ T7150] RSP: 002b:00007f8d2bdc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.578848][ T7150] RAX: ffffffffffffffda RBX: 00007f8d2dde5fa0 RCX: 00007f8d2db6ce59 [ 366.578865][ T7150] RDX: 0000000004004410 RSI: 0000200000001cc0 RDI: 0000000000000006 [ 366.578880][ T7150] RBP: 00007f8d2bdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 366.578894][ T7150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.578907][ T7150] R13: 00007f8d2dde6038 R14: 00007f8d2dde5fa0 R15: 00007ffd4d22f9a8 [ 366.578943][ T7150] [ 367.207958][ T5608] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 368.090222][ T5608] Bluetooth: hci0: unexpected event for opcode 0x007f [ 368.317866][ T7159] FAULT_INJECTION: forcing a failure. [ 368.317866][ T7159] name failslab, interval 1, probability 0, space 0, times 0 [ 368.317912][ T7159] CPU: 0 UID: 0 PID: 7159 Comm: syz.1.377 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 368.317938][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.317952][ T7159] Call Trace: [ 368.317961][ T7159] [ 368.317970][ T7159] dump_stack_lvl+0xe8/0x150 [ 368.318004][ T7159] should_fail_ex+0x46b/0x600 [ 368.318036][ T7159] should_failslab+0xa8/0x100 [ 368.318066][ T7159] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 368.318091][ T7159] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 368.318117][ T7159] ? dup_task_struct+0x52/0x840 [ 368.318151][ T7159] dup_task_struct+0x52/0x840 [ 368.318174][ T7159] ? rt_spin_unlock+0x160/0x200 [ 368.318203][ T7159] copy_process+0x89b/0x4450 [ 368.318265][ T7159] ? __pfx_copy_process+0x10/0x10 [ 368.318306][ T7159] vhost_task_create+0x1f9/0x380 [ 368.318340][ T7159] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 368.318371][ T7159] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 368.318405][ T7159] ? __pfx_vhost_task_create+0x10/0x10 [ 368.318446][ T7159] ? __pfx_vhost_task_fn+0x10/0x10 [ 368.318482][ T7159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.318514][ T7159] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.318544][ T7159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.318576][ T7159] ? mutex_lock_nested+0x152/0x1d0 [ 368.318600][ T7159] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 368.318639][ T7159] kvm_mmu_post_init_vm+0x147/0x2d0 [ 368.318680][ T7159] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 368.318728][ T7159] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 368.318757][ T7159] ? do_raw_spin_lock+0x12b/0x2f0 [ 368.318799][ T7159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.318832][ T7159] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.318864][ T7159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.318905][ T7159] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 368.318939][ T7159] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 368.318967][ T7159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.318999][ T7159] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.319029][ T7159] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.319061][ T7159] ? rt_write_unlock+0x190/0x230 [ 368.319091][ T7159] kvm_vcpu_ioctl+0xa65/0xfe0 [ 368.319130][ T7159] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 368.319166][ T7159] ? __asan_memset+0x22/0x50 [ 368.319200][ T7159] ? smack_file_ioctl+0x331/0x360 [ 368.319232][ T7159] ? __pfx_smack_file_ioctl+0x10/0x10 [ 368.319272][ T7159] ? __fget_files+0x2a/0x420 [ 368.319292][ T7159] ? __fget_files+0x3a6/0x420 [ 368.319312][ T7159] ? __fget_files+0x2a/0x420 [ 368.319337][ T7159] ? bpf_lsm_file_ioctl+0x9/0x20 [ 368.319364][ T7159] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 368.319395][ T7159] __se_sys_ioctl+0xff/0x170 [ 368.319424][ T7159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.319448][ T7159] do_syscall_64+0x15f/0xf80 [ 368.319477][ T7159] ? trace_irq_disable+0x3b/0x140 [ 368.319502][ T7159] ? clear_bhb_loop+0x40/0x90 [ 368.319530][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.319551][ T7159] RIP: 0033:0x7fed352fce59 [ 368.319573][ T7159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.319591][ T7159] RSP: 002b:00007fed33535028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.319615][ T7159] RAX: ffffffffffffffda RBX: 00007fed35576090 RCX: 00007fed352fce59 [ 368.319631][ T7159] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 368.319645][ T7159] RBP: 00007fed33535090 R08: 0000000000000000 R09: 0000000000000000 [ 368.319660][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.319674][ T7159] R13: 00007fed35576128 R14: 00007fed35576090 R15: 00007fff33249058 [ 368.319711][ T7159] [ 368.321262][ T7161] netlink: 36 bytes leftover after parsing attributes in process `syz.0.378'. [ 368.328338][ T7160] [U]  [ 371.383228][ T5616] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 371.383286][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.917598][ T7188] netlink: 'syz.2.387': attribute type 5 has an invalid length. [ 372.884478][ T5608] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 374.451037][ T7207] netlink: 'syz.4.385': attribute type 4 has an invalid length. [ 374.451063][ T7207] netlink: 224 bytes leftover after parsing attributes in process `syz.4.385'. [ 379.971340][ T7243] netlink: 'syz.0.403': attribute type 4 has an invalid length. [ 379.971359][ T7243] netlink: 224 bytes leftover after parsing attributes in process `syz.0.403'. [ 380.489606][ T7255] fuse: Bad value for 'fd' [ 381.734607][ T7264] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 384.508894][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.508972][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.012572][ T7304] netlink: 'syz.3.416': attribute type 4 has an invalid length. [ 387.012599][ T7304] netlink: 224 bytes leftover after parsing attributes in process `syz.3.416'. [ 387.225491][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.2.415'. [ 387.295806][ T5608] Bluetooth: hci1: unexpected event for opcode 0x007f [ 387.768806][ T7319] fuse: Invalid rootmode [ 388.443172][ T7318] netlink: 'syz.1.419': attribute type 12 has an invalid length. [ 391.192094][ T7332] netlink: 2 bytes leftover after parsing attributes in process `syz.4.420'. [ 392.805403][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 392.853455][ T7337] nbd3: detected capacity change from 0 to 63 [ 393.056839][ T7340] block nbd3: NBD_DISCONNECT [ 393.842868][ T7340] block nbd3: Disconnected due to user request. [ 393.842905][ T7340] block nbd3: shutting down sockets [ 393.893755][ T6097] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.893905][ T6097] Buffer I/O error on dev nbd3, logical block 1, async page read [ 393.945113][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 393.945153][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 393.950130][ T11] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 393.950167][ T11] Buffer I/O error on dev nbd3, logical block 2, async page read [ 393.950419][ T11] Buffer I/O error on dev nbd3, logical block 3, async page read [ 394.024990][ T6097] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.025017][ T6097] Buffer I/O error on dev nbd3, logical block 0, async page read [ 394.025133][ T6097] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.025152][ T6097] Buffer I/O error on dev nbd3, logical block 1, async page read [ 394.025250][ T6097] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.025268][ T6097] Buffer I/O error on dev nbd3, logical block 2, async page read [ 394.025366][ T6097] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.025383][ T6097] Buffer I/O error on dev nbd3, logical block 3, async page read [ 394.025494][ T6097] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.025511][ T6097] Buffer I/O error on dev nbd3, logical block 0, async page read [ 394.025610][ T6097] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.025628][ T6097] Buffer I/O error on dev nbd3, logical block 1, async page read [ 394.127199][ T6097] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 394.236449][ T6097] ldm_validate_partition_table(): Disk read failed. [ 394.239583][ T6097] Dev nbd3: unable to read RDB block 0 [ 394.269868][ T6097] nbd3: unable to read partition table [ 394.333472][ T7355] netlink: 'syz.2.428': attribute type 4 has an invalid length. [ 394.333491][ T7355] netlink: 224 bytes leftover after parsing attributes in process `syz.2.428'. [ 394.407837][ T6097] ldm_validate_partition_table(): Disk read failed. [ 394.425580][ T6097] Dev nbd3: unable to read RDB block 0 [ 394.428822][ T6097] nbd3: unable to read partition table [ 394.572140][ T5721] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 394.736603][ T5721] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 394.736638][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.736653][ T5721] usb 1-1: Product: syz [ 394.736664][ T5721] usb 1-1: Manufacturer: syz [ 394.736674][ T5721] usb 1-1: SerialNumber: syz [ 394.797580][ T5721] usb 1-1: config 0 descriptor?? [ 395.006729][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.036441][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.491596][ T7368] fuse: Invalid rootmode [ 396.419647][ T5721] usb 1-1: Firmware version (0.0) predates our first public release. [ 396.419676][ T5721] usb 1-1: Please update to version 0.2 or newer [ 396.833159][ T5721] usb 1-1: USB disconnect, device number 11 [ 396.868355][ T7379] FAULT_INJECTION: forcing a failure. [ 396.868355][ T7379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.868392][ T7379] CPU: 0 UID: 0 PID: 7379 Comm: syz.2.434 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 396.868419][ T7379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 396.868433][ T7379] Call Trace: [ 396.868441][ T7379] [ 396.868451][ T7379] dump_stack_lvl+0xe8/0x150 [ 396.868482][ T7379] should_fail_ex+0x46b/0x600 [ 396.868511][ T7379] _copy_to_user+0x31/0xb0 [ 396.868541][ T7379] simple_read_from_buffer+0xe1/0x170 [ 396.868581][ T7379] proc_fail_nth_read+0x1be/0x230 [ 396.868607][ T7379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.868633][ T7379] ? rw_verify_area+0x2ac/0x4e0 [ 396.868658][ T7379] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.868681][ T7379] vfs_read+0x212/0xa80 [ 396.868715][ T7379] ? __pfx_vfs_read+0x10/0x10 [ 396.868743][ T7379] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 396.868777][ T7379] ? lockdep_hardirqs_on+0x7a/0x110 [ 396.868809][ T7379] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 396.868841][ T7379] ? mutex_lock_nested+0x152/0x1d0 [ 396.868865][ T7379] ? fdget_pos+0x252/0x320 [ 396.868895][ T7379] ksys_read+0x156/0x270 [ 396.868932][ T7379] ? __pfx_ksys_read+0x10/0x10 [ 396.868964][ T7379] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.868988][ T7379] do_syscall_64+0x15f/0xf80 [ 396.869016][ T7379] ? trace_irq_disable+0x3b/0x140 [ 396.869042][ T7379] ? clear_bhb_loop+0x40/0x90 [ 396.869067][ T7379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.869084][ T7379] RIP: 0033:0x7f94b342d68e [ 396.869100][ T7379] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 396.869115][ T7379] RSP: 002b:00007f94b16bdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.869133][ T7379] RAX: ffffffffffffffda RBX: 00007f94b16be6c0 RCX: 00007f94b342d68e [ 396.869145][ T7379] RDX: 000000000000000f RSI: 00007f94b16be0a0 RDI: 0000000000000004 [ 396.869156][ T7379] RBP: 00007f94b16be090 R08: 0000000000000000 R09: 0000000000000000 [ 396.869166][ T7379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.869176][ T7379] R13: 00007f94b36e6038 R14: 00007f94b36e5fa0 R15: 00007ffe00bfd0f8 [ 396.869211][ T7379] [ 399.264121][ T7397] netlink: 'syz.3.439': attribute type 4 has an invalid length. [ 399.264150][ T7397] netlink: 224 bytes leftover after parsing attributes in process `syz.3.439'. [ 401.162078][ T5845] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 401.324752][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 401.324791][ T5845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.324830][ T5845] usb 3-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 401.324856][ T5845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.379273][ T5845] usb 3-1: config 0 descriptor?? [ 401.813374][ T7417] fuse: Invalid rootmode [ 402.820390][ T5845] hid_parser_main: 4 callbacks suppressed [ 402.820417][ T5845] hid-generic 0003:0925:8066.0003: unknown main item tag 0x0 [ 403.253342][ T5845] hid-generic 0003:0925:8066.0003: hidraw0: USB HID v0.00 Device [HID 0925:8066] on usb-dummy_hcd.2-1/input0 [ 403.378886][ T7430] FAULT_INJECTION: forcing a failure. [ 403.378886][ T7430] name failslab, interval 1, probability 0, space 0, times 0 [ 403.378923][ T7430] CPU: 1 UID: 0 PID: 7430 Comm: syz.1.447 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 403.378948][ T7430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 403.378962][ T7430] Call Trace: [ 403.378970][ T7430] [ 403.378980][ T7430] dump_stack_lvl+0xe8/0x150 [ 403.379012][ T7430] should_fail_ex+0x46b/0x600 [ 403.379042][ T7430] should_failslab+0xa8/0x100 [ 403.379072][ T7430] kmem_cache_alloc_noprof+0x87/0x680 [ 403.379096][ T7430] ? rcu_is_watching+0x15/0xb0 [ 403.379137][ T7430] ? security_file_alloc+0x34/0x310 [ 403.379174][ T7430] security_file_alloc+0x34/0x310 [ 403.379205][ T7430] init_file+0x96/0x2d0 [ 403.379241][ T7430] alloc_empty_file+0x74/0x1d0 [ 403.379275][ T7430] path_openat+0x11b/0x38a0 [ 403.379311][ T7430] ? try_to_take_rt_mutex+0x840/0xb00 [ 403.379342][ T7430] ? arch_stack_walk+0xfb/0x150 [ 403.379383][ T7430] ? __lock_acquire+0x6b5/0x2cf0 [ 403.379417][ T7430] ? __pfx_path_openat+0x10/0x10 [ 403.379446][ T7430] ? kasan_save_track+0x4f/0x80 [ 403.379466][ T7430] ? kasan_save_track+0x3e/0x80 [ 403.379486][ T7430] ? __kasan_slab_alloc+0x6c/0x80 [ 403.379508][ T7430] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 403.379539][ T7430] ? do_raw_spin_lock+0x12b/0x2f0 [ 403.379575][ T7430] do_file_open+0x23e/0x4a0 [ 403.379600][ T7430] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.379637][ T7430] ? __pfx_do_file_open+0x10/0x10 [ 403.379659][ T7430] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 403.379710][ T7430] ? alloc_fd+0x64e/0x6c0 [ 403.379754][ T7430] do_sys_openat2+0x113/0x200 [ 403.379791][ T7430] ? __pfx_do_sys_openat2+0x10/0x10 [ 403.379826][ T7430] ? ksys_write+0x248/0x270 [ 403.379853][ T7430] ? __pfx_ksys_write+0x10/0x10 [ 403.379883][ T7430] __x64_sys_openat+0x138/0x170 [ 403.379919][ T7430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.379942][ T7430] do_syscall_64+0x15f/0xf80 [ 403.379971][ T7430] ? trace_irq_disable+0x3b/0x140 [ 403.379997][ T7430] ? clear_bhb_loop+0x40/0x90 [ 403.380023][ T7430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.380046][ T7430] RIP: 0033:0x7fed352fce59 [ 403.380066][ T7430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.380084][ T7430] RSP: 002b:00007fed33514028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 403.380114][ T7430] RAX: ffffffffffffffda RBX: 00007fed35576180 RCX: 00007fed352fce59 [ 403.380132][ T7430] RDX: 0000000000004180 RSI: 0000200000000240 RDI: ffffffffffffff9c [ 403.380148][ T7430] RBP: 00007fed33514090 R08: 0000000000000000 R09: 0000000000000000 [ 403.380162][ T7430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.380176][ T7430] R13: 00007fed35576218 R14: 00007fed35576180 R15: 00007fff33249058 [ 403.380212][ T7430] [ 404.003992][ T5615] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 404.079180][ T31] usb 3-1: USB disconnect, device number 7 [ 404.308807][ T5615] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 404.308841][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.308862][ T5615] usb 5-1: Product: syz [ 404.308878][ T5615] usb 5-1: Manufacturer: syz [ 404.308892][ T5615] usb 5-1: SerialNumber: syz [ 404.475075][ T5615] usb 5-1: config 0 descriptor?? [ 404.717533][ T7440] netlink: 'syz.0.452': attribute type 4 has an invalid length. [ 404.717557][ T7440] netlink: 224 bytes leftover after parsing attributes in process `syz.0.452'. [ 404.744439][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.745491][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.210221][ T5615] usb 5-1: Firmware version (0.0) predates our first public release. [ 405.210250][ T5615] usb 5-1: Please update to version 0.2 or newer [ 406.290083][ T5615] usb 5-1: USB disconnect, device number 7 [ 407.721558][ T7463] fuse: Bad value for 'rootmode' [ 411.308027][ T7484] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 411.308052][ T7484] netlink: 224 bytes leftover after parsing attributes in process `syz.2.464'. [ 411.502229][ T7485] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 411.537519][ T7485] cramfs: wrong magic [ 414.193365][ T37] kauditd_printk_skb: 156 callbacks suppressed [ 414.193385][ T37] audit: type=1326 audit(1779644631.608:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.3.465" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c45ce59 code=0x7ffc0000 [ 414.193435][ T37] audit: type=1326 audit(1779644631.608:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.3.465" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c45ce59 code=0x7ffc0000 [ 414.196446][ T37] audit: type=1326 audit(1779644631.608:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.3.465" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f9d0c45ce59 code=0x7ffc0000 [ 414.196596][ T37] audit: type=1326 audit(1779644631.608:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.3.465" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c45ce59 code=0x7ffc0000 [ 414.196783][ T37] audit: type=1326 audit(1779644631.608:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7494 comm="syz.3.465" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d0c45ce59 code=0x7ffc0000 [ 414.436864][ T7497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.565226][ T7504] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 414.655837][ T5721] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 414.816445][ T5721] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 414.816468][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.816483][ T5721] usb 1-1: Product: syz [ 414.816494][ T5721] usb 1-1: Manufacturer: syz [ 414.816504][ T5721] usb 1-1: SerialNumber: syz [ 414.918630][ T5721] usb 1-1: config 0 descriptor?? [ 414.924316][ T5845] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 415.166124][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.166783][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.249061][ T5845] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 415.249094][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.249109][ T5845] usb 4-1: Product: syz [ 415.249120][ T5845] usb 4-1: Manufacturer: syz [ 415.249178][ T5845] usb 4-1: SerialNumber: syz [ 415.411548][ T5845] usb 4-1: config 0 descriptor?? [ 415.476671][ T5845] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 415.603792][ T5721] usb 1-1: Firmware version (0.0) predates our first public release. [ 415.603862][ T5721] usb 1-1: Please update to version 0.2 or newer [ 415.882143][ T5790] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 416.040566][ T5790] usb 2-1: Using ep0 maxpacket: 32 [ 416.049521][ T5790] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 416.049547][ T5790] usb 2-1: config 0 interface 0 has no altsetting 0 [ 416.049573][ T5790] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 416.049635][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.223129][ T5790] usb 2-1: config 0 descriptor?? [ 416.456743][ T5721] usb 1-1: USB disconnect, device number 12 [ 416.732912][ T5845] gspca_stk1135: reg_w 0x5 err -110 [ 416.741707][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 416.741722][ T5845] gspca_stk1135: Sensor write failed [ 416.741752][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 416.741760][ T5845] gspca_stk1135: Sensor write failed [ 416.741837][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 416.741845][ T5845] gspca_stk1135: Sensor read failed [ 416.749819][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 416.749833][ T5845] gspca_stk1135: Sensor read failed [ 416.749839][ T5845] gspca_stk1135: Detected sensor type unknown (0x0) [ 416.749869][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 416.749876][ T5845] gspca_stk1135: Sensor read failed [ 416.749901][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 416.749908][ T5845] gspca_stk1135: Sensor read failed [ 416.751399][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 416.751409][ T5845] gspca_stk1135: Sensor write failed [ 416.751435][ T5845] gspca_stk1135: serial bus timeout: status=0x00 [ 416.751452][ T5845] gspca_stk1135: Sensor write failed [ 416.752241][ T5845] stk1135 4-1:0.0: probe with driver stk1135 failed with error -110 [ 417.721105][ T7507] 9p: Bad value for 'wfdno' [ 417.747168][ T5790] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 417.747208][ T5790] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 417.747237][ T5790] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 417.747288][ T5790] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 417.747317][ T5790] corsair-psu 0003:1B1C:1C09.0004: unknown main item tag 0x0 [ 417.822467][ T5790] corsair-psu 0003:1B1C:1C09.0004: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 418.087830][ T7529] netlink: 'syz.2.476': attribute type 4 has an invalid length. [ 418.087855][ T7529] netlink: 224 bytes leftover after parsing attributes in process `syz.2.476'. [ 418.429573][ T5790] corsair-psu 0003:1B1C:1C09.0004: unable to initialize device (-110) [ 418.443216][ T7532] siw: device registration error -23 [ 419.754554][ T5790] corsair-psu 0003:1B1C:1C09.0004: probe with driver corsair-psu failed with error -110 [ 419.841728][ T5790] usb 2-1: USB disconnect, device number 11 [ 419.959892][ T31] usb 4-1: USB disconnect, device number 9 [ 422.605231][ T5790] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 423.159516][ T5790] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 423.159549][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.159571][ T5790] usb 2-1: Product: syz [ 423.159586][ T5790] usb 2-1: Manufacturer: syz [ 423.159601][ T5790] usb 2-1: SerialNumber: syz [ 423.198747][ T5790] usb 2-1: config 0 descriptor?? [ 423.438841][ T7557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.443901][ T7566] netlink: 'syz.3.487': attribute type 4 has an invalid length. [ 423.443925][ T7566] netlink: 224 bytes leftover after parsing attributes in process `syz.3.487'. [ 423.503740][ T7557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.744822][ T7564] CUSE: unknown device info "" [ 423.744839][ T7564] CUSE: unknown device info "Ö" [ 423.744849][ T7564] CUSE: unknown device info "ÚË" [ 423.744858][ T7564] CUSE: unknown device info "" [ 423.744866][ T7564] CUSE: unknown device info "ðÿÿÿ" [ 423.744875][ T7564] CUSE: unknown device info "" [ 423.744883][ T7564] CUSE: unknown device info "" [ 423.744892][ T7564] CUSE: unknown device info "" [ 423.744900][ T7564] CUSE: unknown device info "@" [ 423.744908][ T7564] CUSE: unknown device info "" [ 423.744916][ T7564] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 423.744925][ T7564] CUSE: unknown device info "ÿÿÿÿ" [ 423.744935][ T7564] CUSE: unknown device info "" [ 423.744943][ T7564] CUSE: unknown device info "€" [ 423.744954][ T7564] CUSE: DEVNAME unspecified [ 424.111772][ T5790] usb 2-1: Firmware version (0.0) predates our first public release. [ 424.111801][ T5790] usb 2-1: Please update to version 0.2 or newer [ 424.202892][ T7576] capability: warning: `syz.3.490' uses 32-bit capabilities (legacy support in use) [ 424.284236][ T5790] usb 2-1: USB disconnect, device number 12 [ 429.867957][ T7611] netlink: 'syz.3.500': attribute type 4 has an invalid length. [ 429.867983][ T7611] netlink: 224 bytes leftover after parsing attributes in process `syz.3.500'. [ 430.196814][ T7613] CUSE: unknown device info "" [ 430.196833][ T7613] CUSE: unknown device info "Ö" [ 430.196842][ T7613] CUSE: unknown device info "ÚË" [ 430.196850][ T7613] CUSE: unknown device info "" [ 430.196860][ T7613] CUSE: unknown device info "ðÿÿÿ" [ 430.196869][ T7613] CUSE: unknown device info "" [ 430.196877][ T7613] CUSE: unknown device info "" [ 430.196886][ T7613] CUSE: unknown device info "" [ 430.196895][ T7613] CUSE: unknown device info "@" [ 430.196903][ T7613] CUSE: unknown device info "" [ 430.196912][ T7613] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 430.196922][ T7613] CUSE: unknown device info "ÿÿÿÿ" [ 430.196931][ T7613] CUSE: unknown device info "" [ 430.196939][ T7613] CUSE: unknown device info "€" [ 430.196949][ T7613] CUSE: DEVNAME unspecified [ 430.762120][ T5837] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 430.848441][ T7630] FAULT_INJECTION: forcing a failure. [ 430.848441][ T7630] name failslab, interval 1, probability 0, space 0, times 0 [ 430.848477][ T7630] CPU: 1 UID: 0 PID: 7630 Comm: syz.1.506 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 430.848504][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.848518][ T7630] Call Trace: [ 430.848527][ T7630] [ 430.848536][ T7630] dump_stack_lvl+0xe8/0x150 [ 430.848568][ T7630] should_fail_ex+0x46b/0x600 [ 430.848598][ T7630] should_failslab+0xa8/0x100 [ 430.848626][ T7630] kmem_cache_alloc_noprof+0x87/0x680 [ 430.848651][ T7630] ? security_inode_alloc+0x39/0x310 [ 430.848682][ T7630] security_inode_alloc+0x39/0x310 [ 430.848708][ T7630] inode_init_always_gfp+0x99a/0xd50 [ 430.848748][ T7630] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 430.848780][ T7630] alloc_inode+0x82/0x1b0 [ 430.848814][ T7630] new_inode+0x22/0x170 [ 430.848833][ T7630] ? resv_map_alloc+0x200/0x2e0 [ 430.848858][ T7630] hugetlbfs_get_inode+0x78/0x650 [ 430.848894][ T7630] hugetlb_file_setup+0x21d/0x630 [ 430.848926][ T7630] ksys_mmap_pgoff+0x22e/0x720 [ 430.848952][ T7630] ? __x64_sys_mmap+0x7f/0x140 [ 430.848978][ T7630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.849003][ T7630] do_syscall_64+0x15f/0xf80 [ 430.849033][ T7630] ? trace_irq_disable+0x3b/0x140 [ 430.849059][ T7630] ? clear_bhb_loop+0x40/0x90 [ 430.849086][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.849109][ T7630] RIP: 0033:0x7fed352fce59 [ 430.849128][ T7630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.849148][ T7630] RSP: 002b:00007fed33556028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 430.849172][ T7630] RAX: ffffffffffffffda RBX: 00007fed35575fa0 RCX: 00007fed352fce59 [ 430.849188][ T7630] RDX: 0000000002000007 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 430.849204][ T7630] RBP: 00007fed33556090 R08: 0000000000000003 R09: 000000009dc0d000 [ 430.849219][ T7630] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000001 [ 430.849241][ T7630] R13: 00007fed35576038 R14: 00007fed35575fa0 R15: 00007fff33249058 [ 430.849277][ T7630] [ 430.998171][ T7631] siw: device registration error -23 [ 432.011426][ T5837] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 432.011460][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.011482][ T5837] usb 4-1: Product: syz [ 432.011498][ T5837] usb 4-1: Manufacturer: syz [ 432.011514][ T5837] usb 4-1: SerialNumber: syz [ 432.083406][ T5837] usb 4-1: config 0 descriptor?? [ 432.306427][ T7624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.307075][ T7624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.753026][ T5837] usb 4-1: Firmware version (0.0) predates our first public release. [ 432.753057][ T5837] usb 4-1: Please update to version 0.2 or newer [ 432.921246][ T5837] usb 4-1: USB disconnect, device number 10 [ 433.248618][ T7642] blktrace: Concurrent blktraces are not allowed on sg0 [ 436.230180][ T7651] netlink: 'syz.3.514': attribute type 4 has an invalid length. [ 436.230205][ T7651] netlink: 224 bytes leftover after parsing attributes in process `syz.3.514'. [ 436.315801][ T7661] FAULT_INJECTION: forcing a failure. [ 436.315801][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 436.315840][ T7661] CPU: 1 UID: 0 PID: 7661 Comm: syz.4.516 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 436.315870][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.315883][ T7661] Call Trace: [ 436.315892][ T7661] [ 436.315901][ T7661] dump_stack_lvl+0xe8/0x150 [ 436.315932][ T7661] should_fail_ex+0x46b/0x600 [ 436.315962][ T7661] should_failslab+0xa8/0x100 [ 436.315992][ T7661] __kmalloc_noprof+0xdf/0x7b0 [ 436.316016][ T7661] ? rcu_is_watching+0x15/0xb0 [ 436.316047][ T7661] ? snd_interval_refine+0x602/0xa50 [ 436.316068][ T7661] ? snd_pcm_hw_refine+0x9b1/0x1710 [ 436.316097][ T7661] snd_pcm_hw_refine+0x9b1/0x1710 [ 436.316150][ T7661] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 436.316209][ T7661] ? __asan_memset+0x22/0x50 [ 436.316243][ T7661] ? snd_pcm_oss_change_params_locked+0x6e5/0x3e00 [ 436.316274][ T7661] ? snd_pcm_oss_change_params_locked+0x744/0x3e00 [ 436.316307][ T7661] snd_pcm_oss_change_params_locked+0x851/0x3e00 [ 436.316347][ T7661] ? __lock_acquire+0x6b5/0x2cf0 [ 436.316383][ T7661] ? _parse_integer_limit+0x1ae/0x1f0 [ 436.316428][ T7661] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 436.316474][ T7661] ? lockdep_hardirqs_on+0x7a/0x110 [ 436.316506][ T7661] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 436.316542][ T7661] ? snd_pcm_oss_write+0x20d/0xbe0 [ 436.316573][ T7661] snd_pcm_oss_write+0x282/0xbe0 [ 436.316611][ T7661] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 436.316640][ T7661] vfs_write+0x2a3/0xba0 [ 436.316677][ T7661] ? __pfx_vfs_write+0x10/0x10 [ 436.316705][ T7661] ? __fget_files+0x2a/0x420 [ 436.316737][ T7661] ? __fget_files+0x2a/0x420 [ 436.316760][ T7661] ? __fget_files+0x3a6/0x420 [ 436.316779][ T7661] ? __fget_files+0x2a/0x420 [ 436.316809][ T7661] ksys_write+0x156/0x270 [ 436.316838][ T7661] ? __pfx_ksys_write+0x10/0x10 [ 436.316873][ T7661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.316898][ T7661] do_syscall_64+0x15f/0xf80 [ 436.316928][ T7661] ? trace_irq_disable+0x3b/0x140 [ 436.316955][ T7661] ? clear_bhb_loop+0x40/0x90 [ 436.316982][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.317005][ T7661] RIP: 0033:0x7f8d2db6ce59 [ 436.317028][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.317048][ T7661] RSP: 002b:00007f8d2bdc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 436.317072][ T7661] RAX: ffffffffffffffda RBX: 00007f8d2dde5fa0 RCX: 00007f8d2db6ce59 [ 436.317087][ T7661] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 436.317101][ T7661] RBP: 00007f8d2bdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 436.317123][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.317137][ T7661] R13: 00007f8d2dde6038 R14: 00007f8d2dde5fa0 R15: 00007ffd4d22f9a8 [ 436.317174][ T7661] [ 436.939778][ T7665] CUSE: unknown device info "" [ 436.939794][ T7665] CUSE: unknown device info "Ö" [ 436.939804][ T7665] CUSE: unknown device info "ÚË" [ 436.939812][ T7665] CUSE: unknown device info "" [ 436.939828][ T7665] CUSE: unknown device info "ðÿÿÿ" [ 436.939837][ T7665] CUSE: unknown device info "" [ 436.939845][ T7665] CUSE: unknown device info "" [ 436.939854][ T7665] CUSE: unknown device info "" [ 436.939863][ T7665] CUSE: unknown device info "@" [ 436.939871][ T7665] CUSE: unknown device info "" [ 436.939881][ T7665] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 436.939891][ T7665] CUSE: unknown device info "ÿÿÿÿ" [ 436.939900][ T7665] CUSE: unknown device info "" [ 436.939909][ T7665] CUSE: unknown device info "€" [ 436.939920][ T7665] CUSE: DEVNAME unspecified [ 437.209651][ T7672] FAULT_INJECTION: forcing a failure. [ 437.209651][ T7672] name failslab, interval 1, probability 0, space 0, times 0 [ 437.209771][ T7672] CPU: 0 UID: 0 PID: 7672 Comm: syz.3.519 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 437.209798][ T7672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.209820][ T7672] Call Trace: [ 437.209829][ T7672] [ 437.209838][ T7672] dump_stack_lvl+0xe8/0x150 [ 437.209872][ T7672] should_fail_ex+0x46b/0x600 [ 437.209903][ T7672] should_failslab+0xa8/0x100 [ 437.209934][ T7672] kmem_cache_alloc_noprof+0x87/0x680 [ 437.209959][ T7672] ? alloc_empty_file+0x5b/0x1d0 [ 437.209999][ T7672] alloc_empty_file+0x5b/0x1d0 [ 437.210034][ T7672] path_openat+0x11b/0x38a0 [ 437.210071][ T7672] ? try_to_take_rt_mutex+0x840/0xb00 [ 437.210099][ T7672] ? arch_stack_walk+0xfb/0x150 [ 437.210142][ T7672] ? __lock_acquire+0x6b5/0x2cf0 [ 437.210179][ T7672] ? __pfx_path_openat+0x10/0x10 [ 437.210209][ T7672] ? kasan_save_track+0x4f/0x80 [ 437.210230][ T7672] ? kasan_save_track+0x3e/0x80 [ 437.210250][ T7672] ? __kasan_slab_alloc+0x6c/0x80 [ 437.210273][ T7672] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 437.210306][ T7672] ? do_raw_spin_lock+0x12b/0x2f0 [ 437.210343][ T7672] do_file_open+0x23e/0x4a0 [ 437.210369][ T7672] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 437.210406][ T7672] ? __pfx_do_file_open+0x10/0x10 [ 437.210429][ T7672] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 437.210481][ T7672] ? alloc_fd+0x64e/0x6c0 [ 437.210526][ T7672] do_sys_openat2+0x113/0x200 [ 437.210563][ T7672] ? __pfx_do_sys_openat2+0x10/0x10 [ 437.210599][ T7672] ? exc_page_fault+0x6a/0xc0 [ 437.210635][ T7672] ? do_user_addr_fault+0xc6f/0x1340 [ 437.210664][ T7672] __x64_sys_openat+0x138/0x170 [ 437.210702][ T7672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.210726][ T7672] do_syscall_64+0x15f/0xf80 [ 437.210758][ T7672] ? trace_irq_disable+0x3b/0x140 [ 437.210785][ T7672] ? clear_bhb_loop+0x40/0x90 [ 437.210825][ T7672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.210847][ T7672] RIP: 0033:0x7f9d0c41d68e [ 437.210869][ T7672] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 437.210888][ T7672] RSP: 002b:00007f9d0a6abea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 437.210910][ T7672] RAX: ffffffffffffffda RBX: 00007f9d0a6ae6c0 RCX: 00007f9d0c41d68e [ 437.210927][ T7672] RDX: 0000000000000002 RSI: 00007f9d0c4f210a RDI: ffffffffffffff9c [ 437.210942][ T7672] RBP: 00007f9d0a6ae090 R08: 0000000000000000 R09: 0000000000000000 [ 437.210957][ T7672] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000002d [ 437.210971][ T7672] R13: 00002000000000c0 R14: 0000000000000002 R15: 00007ffd3e1338f8 [ 437.211005][ T7672] [ 437.255842][ T5790] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 437.416354][ T5790] usb 3-1: Using ep0 maxpacket: 16 [ 437.460351][ T5790] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 437.460436][ T5790] usb 3-1: config 0 has no interface number 0 [ 438.120930][ T5790] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 438.120954][ T5790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.120969][ T5790] usb 3-1: Product: syz [ 438.120980][ T5790] usb 3-1: Manufacturer: syz [ 438.120991][ T5790] usb 3-1: SerialNumber: syz [ 438.288247][ T7676] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 438.312680][ T7676] cramfs: wrong magic [ 439.226209][ T5790] usb 3-1: config 0 descriptor?? [ 439.257966][ T5790] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 439.792434][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 439.793317][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 439.802227][ T822] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 439.962436][ T822] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 439.962470][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.962492][ T822] usb 1-1: Product: syz [ 439.962509][ T822] usb 1-1: Manufacturer: syz [ 439.962524][ T822] usb 1-1: SerialNumber: syz [ 439.983926][ T5837] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 440.185422][ T5837] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 440.185454][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.185474][ T5837] usb 2-1: Product: syz [ 440.185490][ T5837] usb 2-1: Manufacturer: syz [ 440.185559][ T5837] usb 2-1: SerialNumber: syz [ 440.281410][ T5837] usb 2-1: config 0 descriptor?? [ 440.604424][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.605433][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.353552][ T5790] gspca_spca1528: reg_w err -110 [ 441.353672][ T5790] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 441.567749][ T7701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.568304][ T7701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.569178][ T5837] usb 2-1: Firmware version (0.0) predates our first public release. [ 441.569202][ T5837] usb 2-1: Please update to version 0.2 or newer [ 441.726429][ T5618] usb 3-1: USB disconnect, device number 8 [ 441.742186][ T822] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 441.785804][ T822] usb 1-1: USB disconnect, device number 13 [ 441.908878][ T7707] netlink: 'syz.0.529': attribute type 4 has an invalid length. [ 441.908903][ T7707] netlink: 224 bytes leftover after parsing attributes in process `syz.0.529'. [ 442.014415][ T5837] usb 2-1: USB disconnect, device number 13 [ 442.108100][ T822] usblp0: removed [ 442.420534][ T7717] syz_tun: entered allmulticast mode [ 442.436694][ T7718] CUSE: unknown device info "" [ 442.436710][ T7718] CUSE: unknown device info "Ö" [ 442.436719][ T7718] CUSE: unknown device info "ÚË" [ 442.436729][ T7718] CUSE: unknown device info "" [ 442.436738][ T7718] CUSE: unknown device info "ðÿÿÿ" [ 442.436747][ T7718] CUSE: unknown device info "" [ 442.436756][ T7718] CUSE: unknown device info "" [ 442.436765][ T7718] CUSE: unknown device info "" [ 442.436774][ T7718] CUSE: unknown device info "@" [ 442.436783][ T7718] CUSE: unknown device info "" [ 442.436802][ T7718] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 442.436811][ T7718] CUSE: unknown device info "ÿÿÿÿ" [ 442.436820][ T7718] CUSE: unknown device info "" [ 442.436829][ T7718] CUSE: unknown device info "€" [ 442.436841][ T7718] CUSE: DEVNAME unspecified [ 442.663122][ T822] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 443.182562][ T7721] netlink: 'syz.3.533': attribute type 12 has an invalid length. [ 443.462047][ T5721] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 443.613256][ T5721] usb 4-1: device descriptor read/64, error -71 [ 443.870558][ T5721] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 443.896972][ T822] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 443.897002][ T822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.897022][ T822] usb 1-1: config 0 has no interface number 0 [ 444.281509][ T822] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 444.281544][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.281566][ T822] usb 1-1: Product: syz [ 444.281582][ T822] usb 1-1: Manufacturer: syz [ 444.281598][ T822] usb 1-1: SerialNumber: syz [ 444.315462][ T5721] usb 4-1: device descriptor read/64, error -71 [ 444.473871][ T5721] usb usb4-port1: attempt power cycle [ 445.392765][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.392888][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.501715][ T822] usb 1-1: config 0 descriptor?? [ 445.525008][ T822] usb 1-1: can't set config #0, error -71 [ 445.583024][ T822] usb 1-1: USB disconnect, device number 14 [ 450.881085][ T7754] netlink: 'syz.4.541': attribute type 4 has an invalid length. [ 450.881110][ T7754] netlink: 224 bytes leftover after parsing attributes in process `syz.4.541'. [ 451.018230][ T7756] input: syz1 as /devices/virtual/input/input12 [ 451.133084][ T5837] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 452.575678][ T7763] CUSE: unknown device info "" [ 452.575695][ T7763] CUSE: unknown device info "Ö" [ 452.575705][ T7763] CUSE: unknown device info "ÚË" [ 452.575715][ T7763] CUSE: unknown device info "" [ 452.575724][ T7763] CUSE: unknown device info "ðÿÿÿ" [ 452.575734][ T7763] CUSE: unknown device info "" [ 452.575743][ T7763] CUSE: unknown device info "" [ 452.575752][ T7763] CUSE: unknown device info "" [ 452.575761][ T7763] CUSE: unknown device info "@" [ 452.575770][ T7763] CUSE: unknown device info "" [ 452.575779][ T7763] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 452.575788][ T7763] CUSE: unknown device info "ÿÿÿÿ" [ 452.575798][ T7763] CUSE: unknown device info "" [ 452.575807][ T7763] CUSE: unknown device info "€" [ 452.575818][ T7763] CUSE: DEVNAME unspecified [ 454.030286][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.051312][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.051721][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.052162][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.052521][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.052926][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.053442][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.053844][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.054322][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.054701][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.055119][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.055521][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.055679][ T5837] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 454.055707][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.055729][ T5837] usb 2-1: Product: syz [ 454.078945][ T5837] usb 2-1: config 0 descriptor?? [ 454.079502][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 454.079726][ T5837] usb 2-1: can't set config #0, error -32 [ 454.169553][ T5837] usb 2-1: USB disconnect, device number 14 [ 456.520185][ T7776] FAULT_INJECTION: forcing a failure. [ 456.520185][ T7776] name failslab, interval 1, probability 0, space 0, times 0 [ 456.520240][ T7776] CPU: 1 UID: 0 PID: 7776 Comm: syz.0.548 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 456.520267][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.520286][ T7776] Call Trace: [ 456.520295][ T7776] [ 456.520305][ T7776] dump_stack_lvl+0xe8/0x150 [ 456.520338][ T7776] should_fail_ex+0x46b/0x600 [ 456.520369][ T7776] should_failslab+0xa8/0x100 [ 456.520400][ T7776] __kmalloc_cache_noprof+0x84/0x690 [ 456.520429][ T7776] ? mutex_lock_nested+0x152/0x1d0 [ 456.520453][ T7776] ? cec_queue_event_fh+0x1d2/0x790 [ 456.520476][ T7776] ? cec_queue_event_fh+0x97/0x790 [ 456.520504][ T7776] cec_queue_event_fh+0x1d2/0x790 [ 456.520535][ T7776] cec_ioctl+0x291b/0x30c0 [ 456.520570][ T7776] ? __pfx_cec_ioctl+0x10/0x10 [ 456.520617][ T7776] ? kasan_quarantine_put+0xbb/0x1f0 [ 456.520644][ T7776] ? __pfx___schedule+0x10/0x10 [ 456.520685][ T7776] ? tomoyo_path_number_perm+0x219/0x630 [ 456.520726][ T7776] ? do_vfs_ioctl+0x117b/0x1540 [ 456.520752][ T7776] ? irqentry_exit+0x218/0x760 [ 456.520786][ T7776] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 456.520811][ T7776] ? rcu_is_watching+0x15/0xb0 [ 456.520868][ T7776] ? smack_file_ioctl+0x22f/0x360 [ 456.520897][ T7776] ? smack_file_ioctl+0x263/0x360 [ 456.520927][ T7776] ? __pfx_smack_file_ioctl+0x10/0x10 [ 456.520969][ T7776] ? __fget_files+0x2a/0x420 [ 456.520990][ T7776] ? __fget_files+0x3a6/0x420 [ 456.521010][ T7776] ? __fget_files+0x2a/0x420 [ 456.521035][ T7776] ? bpf_lsm_file_ioctl+0x9/0x20 [ 456.521063][ T7776] ? __pfx_cec_ioctl+0x10/0x10 [ 456.521091][ T7776] __se_sys_ioctl+0xff/0x170 [ 456.521118][ T7776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.521143][ T7776] do_syscall_64+0x15f/0xf80 [ 456.521176][ T7776] ? clear_bhb_loop+0x40/0x90 [ 456.521205][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.521228][ T7776] RIP: 0033:0x7f0ad9bcce59 [ 456.521250][ T7776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.521270][ T7776] RSP: 002b:00007f0ad7dfd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.521295][ T7776] RAX: ffffffffffffffda RBX: 00007f0ad9e46090 RCX: 00007f0ad9bcce59 [ 456.521312][ T7776] RDX: 0000200000000080 RSI: 0000000040046109 RDI: 000000000000000b [ 456.521327][ T7776] RBP: 00007f0ad7dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 456.521341][ T7776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.521355][ T7776] R13: 00007f0ad9e46128 R14: 00007f0ad9e46090 R15: 00007fff586d6ad8 [ 456.521393][ T7776] [ 460.264737][ T7788] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 460.350689][ T7788] cramfs: wrong magic [ 463.291161][ T7799] netlink: 'syz.3.557': attribute type 4 has an invalid length. [ 463.291190][ T7799] netlink: 224 bytes leftover after parsing attributes in process `syz.3.557'. [ 463.339325][ T7801] block nbd2: NBD_DISCONNECT [ 463.671029][ T7801] XFS (nbd2): SB validate failed with error -5. [ 463.828199][ T7804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 463.879148][ T7811] netlink: 'syz.1.558': attribute type 27 has an invalid length. [ 465.480447][ T7825] input: syz1 as /devices/virtual/input/input13 [ 468.561181][ T7836] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 468.780611][ T7836] cramfs: wrong magic [ 470.308871][ T7851] netlink: 'syz.1.569': attribute type 4 has an invalid length. [ 470.308896][ T7851] netlink: 224 bytes leftover after parsing attributes in process `syz.1.569'. [ 475.226234][ T7881] input: syz1 as /devices/virtual/input/input14 [ 475.544441][ T5721] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 477.032115][ T5721] usb 5-1: Using ep0 maxpacket: 8 [ 477.907986][ T5721] usb 5-1: unable to get BOS descriptor or descriptor too short [ 478.081088][ T5721] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.081118][ T5721] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.373755][ T5721] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 478.373790][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.425318][ T5721] usb 5-1: can't set config #1, error -71 [ 478.452485][ T5721] usb 5-1: USB disconnect, device number 8 [ 478.517742][ T7889] netlink: 72 bytes leftover after parsing attributes in process `syz.3.582'. [ 478.784256][ T5608] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 478.977327][ T7893] netlink: 'syz.0.584': attribute type 4 has an invalid length. [ 478.977352][ T7893] netlink: 224 bytes leftover after parsing attributes in process `syz.0.584'. [ 479.019703][ T7889] loop2: detected capacity change from 0 to 7 [ 479.177203][ T7889] Dev loop2: unable to read RDB block 7 [ 479.177240][ T7889] loop2: AHDI p1 p2 p3 [ 479.177274][ T7889] loop2: partition table partially beyond EOD, truncated [ 479.244741][ T7889] loop2: p1 start 1601398130 is beyond EOD, truncated [ 479.244773][ T7889] loop2: p2 start 1702059890 is beyond EOD, truncated [ 479.357531][ T7901] trusted_key: encrypted_key: insufficient parameters specified [ 479.442914][ T7907] netlink: 60 bytes leftover after parsing attributes in process `syz.0.588'. [ 479.443407][ T7906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.588'. [ 479.449287][ T5714] hid-generic 0006:0009:0001.0005: unknown main item tag 0x0 [ 479.449325][ T5714] hid-generic 0006:0009:0001.0005: unknown main item tag 0x0 [ 479.449353][ T5714] hid-generic 0006:0009:0001.0005: unknown main item tag 0x0 [ 479.449392][ T5714] hid-generic 0006:0009:0001.0005: unknown main item tag 0x0 [ 479.449419][ T5714] hid-generic 0006:0009:0001.0005: unknown main item tag 0x0 [ 479.449446][ T5714] hid-generic 0006:0009:0001.0005: unknown main item tag 0x0 [ 479.449473][ T5714] hid-generic 0006:0009:0001.0005: unknown main item tag 0x0 [ 479.449500][ T5714] hid-generic 0006:0009:0001.0005: unknown main item tag 0x0 [ 479.449527][ T5714] hid-generic 0006:0009:0001.0005: unknown main item tag 0x0 [ 479.449554][ T5714] hid-generic 0006:0009:0001.0005: unknown main item tag 0x0 [ 479.466735][ T5721] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 479.585020][ T5714] hid-generic 0006:0009:0001.0005: hidraw0: VIRTUAL HID v0.04 Device [syz0] on syz0 [ 479.777498][ T5721] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.59 [ 479.777540][ T5721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.777563][ T5721] usb 5-1: Product: syz [ 479.777579][ T5721] usb 5-1: Manufacturer: syz [ 479.777595][ T5721] usb 5-1: SerialNumber: syz [ 479.895951][ T7912] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[5613] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7912] [ 480.564428][ T5721] usb 5-1: config 0 descriptor?? [ 480.763172][ T7911] fido_id[7911]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 481.766051][ T5608] Bluetooth: hci5: urb ffff888024df5800 submission failed (2) [ 482.068615][ T5721] usb 5-1: USB disconnect, device number 9 [ 487.804875][ T5608] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 488.276271][ T7950] input: syz1 as /devices/virtual/input/input15 [ 492.286602][ T7964] netlink: 'syz.4.603': attribute type 7 has an invalid length. [ 492.344948][ T7967] overlayfs: conflicting options: nfs_export=on,index=off [ 497.499118][ T7986] lo: entered allmulticast mode [ 497.773772][ T7986] tunl0: entered allmulticast mode [ 497.842773][ T7986] gre0: entered allmulticast mode [ 497.904892][ T5608] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 498.539995][ T7986] gretap0: entered allmulticast mode [ 498.678704][ T7986] erspan0: entered allmulticast mode [ 498.729840][ T7986] ip_vti0: entered allmulticast mode [ 498.744980][ T7986] ip6_vti0: entered allmulticast mode [ 498.749512][ T7986] sit0: entered allmulticast mode [ 498.768399][ T7986] ip6tnl0: entered allmulticast mode [ 498.790402][ T7986] ip6gre0: entered allmulticast mode [ 498.848914][ T7986] syz_tun: entered allmulticast mode [ 502.937332][ T7986] ip6gretap0: entered allmulticast mode [ 502.981145][ T7986] bridge0: entered allmulticast mode [ 502.987042][ T7986] vcan0: entered allmulticast mode [ 503.187957][ T7986] bond0: entered allmulticast mode [ 503.187983][ T7986] bond_slave_0: entered allmulticast mode [ 503.188010][ T7986] bond_slave_1: entered allmulticast mode [ 503.297779][ T7986] team0: entered allmulticast mode [ 503.297799][ T7986] team_slave_0: entered allmulticast mode [ 503.297816][ T7986] team_slave_1: entered allmulticast mode [ 503.341044][ T7986] dummy0: entered allmulticast mode [ 503.813625][ T7986] nlmon0: entered allmulticast mode [ 504.036059][ T7986] batadv0: entered allmulticast mode [ 504.041561][ T7986] vxcan0: entered allmulticast mode [ 504.043858][ T7986] vxcan1: entered allmulticast mode [ 504.805778][ T8019] input: syz1 as /devices/virtual/input/input16 [ 504.822472][ T7986] wg0: entered allmulticast mode [ 504.882376][ T7986] wg1: entered allmulticast mode [ 504.943985][ T7986] wg2: entered allmulticast mode [ 504.947422][ T7986] veth0_to_bridge: entered allmulticast mode [ 504.955206][ T7986] veth1_to_bridge: entered allmulticast mode [ 504.970124][ T7986] veth0_to_bond: entered allmulticast mode [ 504.976694][ T7986] veth1_to_bond: entered allmulticast mode [ 504.982678][ T7986] veth0_to_team: entered allmulticast mode [ 504.989784][ T7986] veth1_to_team: entered allmulticast mode [ 505.000906][ T7986] veth0_to_batadv: entered allmulticast mode [ 505.004930][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.005025][ T7986] batadv_slave_0: entered allmulticast mode [ 505.009024][ T7986] veth1_to_batadv: entered allmulticast mode [ 505.012776][ T7986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.012861][ T7986] batadv_slave_1: entered allmulticast mode [ 505.020006][ T7986] xfrm0: entered allmulticast mode [ 505.023999][ T7986] veth0_to_hsr: entered allmulticast mode [ 505.029025][ T7986] hsr_slave_0: entered allmulticast mode [ 505.034922][ T7986] veth1_to_hsr: entered allmulticast mode [ 505.038680][ T7986] hsr_slave_1: entered allmulticast mode [ 505.043945][ T7986] hsr0: entered allmulticast mode [ 505.051401][ T7986] veth1_virt_wifi: entered allmulticast mode [ 505.054951][ T7986] veth0_virt_wifi: entered allmulticast mode [ 505.058676][ T7986] virt_wifi0: entered allmulticast mode [ 505.059156][ T7986] veth1_vlan: entered allmulticast mode [ 505.063052][ T7986] veth0_vlan: entered allmulticast mode [ 505.080986][ T7986] vlan0: entered allmulticast mode [ 505.081207][ T7986] vlan1: entered allmulticast mode [ 506.305675][ T7986] macvlan0: entered allmulticast mode [ 506.876139][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.876385][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.003096][ T7986] macvlan1: entered allmulticast mode [ 508.006267][ T7986] ipvlan0: entered allmulticast mode [ 508.006426][ T7986] ipvlan1: entered allmulticast mode [ 508.006775][ T7986] veth1_macvtap: entered allmulticast mode [ 508.009303][ T7986] veth0_macvtap: entered allmulticast mode [ 508.120018][ T7986] macvtap0: entered allmulticast mode [ 508.125056][ T7986] macsec0: entered allmulticast mode [ 508.173457][ T7986] geneve0: entered allmulticast mode [ 508.216819][ T7986] geneve1: entered allmulticast mode [ 508.267923][ T7986] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 508.322505][ T7986] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 508.362152][ T7986] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 508.403655][ T7986] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 508.530412][ T7986] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 508.668541][ T7986] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 508.681384][ T43] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.687104][ T43] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.687162][ T43] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.687203][ T43] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.978177][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 509.006932][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 509.027719][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 509.052911][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 509.072518][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 511.212030][ T5608] Bluetooth: hci5: command tx timeout [ 513.028724][ T8055] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 513.056896][ T8055] cramfs: wrong magic [ 513.292004][ T5608] Bluetooth: hci5: command tx timeout [ 513.927430][ T8031] lo speed is unknown, defaulting to 1000 [ 514.105356][ T5615] hid_parser_main: 6 callbacks suppressed [ 514.105377][ T5615] hid-generic 0006:0009:0001.0006: unknown main item tag 0x0 [ 514.105398][ T5615] hid-generic 0006:0009:0001.0006: unknown main item tag 0x0 [ 514.105417][ T5615] hid-generic 0006:0009:0001.0006: unknown main item tag 0x0 [ 514.105436][ T5615] hid-generic 0006:0009:0001.0006: unknown main item tag 0x0 [ 514.105454][ T5615] hid-generic 0006:0009:0001.0006: unknown main item tag 0x0 [ 514.105473][ T5615] hid-generic 0006:0009:0001.0006: unknown main item tag 0x0 [ 514.105492][ T5615] hid-generic 0006:0009:0001.0006: unknown main item tag 0x0 [ 514.105510][ T5615] hid-generic 0006:0009:0001.0006: unknown main item tag 0x0 [ 514.105530][ T5615] hid-generic 0006:0009:0001.0006: unknown main item tag 0x0 [ 514.105549][ T5615] hid-generic 0006:0009:0001.0006: unknown main item tag 0x0 [ 514.617499][ T5615] hid-generic 0006:0009:0001.0006: hidraw0: VIRTUAL HID v0.04 Device [syz0] on syz0 [ 514.697274][ T5608] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 515.372020][ T5608] Bluetooth: hci5: command tx timeout [ 515.436686][ T8064] fido_id[8064]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 517.482448][ T5608] Bluetooth: hci5: command tx timeout [ 518.866080][ T8080] input: syz1 as /devices/virtual/input/input17 [ 527.491963][ T5721] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 529.032053][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 530.939562][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.939758][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.940072][ T8031] bridge_slave_0: entered allmulticast mode [ 530.946272][ T8031] bridge_slave_0: entered promiscuous mode [ 531.019407][ T5721] usb 2-1: unable to get BOS descriptor or descriptor too short [ 531.020482][ T5721] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 531.020522][ T5721] usb 2-1: can't read configurations, error -71 [ 531.023155][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.023289][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.023545][ T8031] bridge_slave_1: entered allmulticast mode [ 531.052189][ T8031] bridge_slave_1: entered promiscuous mode [ 531.436678][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.440291][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.514888][ T8031] team0: Port device team_slave_0 added [ 531.518917][ T8031] team0: Port device team_slave_1 added [ 531.608205][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.608225][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.608253][ T8031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.610815][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.610832][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.610863][ T8031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.220954][ T5608] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 533.011311][ T8031] hsr_slave_0: entered promiscuous mode [ 533.016220][ T8031] hsr_slave_1: entered promiscuous mode [ 533.032163][ T8031] debugfs: 'hsr0' already exists in 'hsr' [ 533.032195][ T8031] Cannot create hsr debugfs directory [ 533.299351][ T8127] comedi comedi0: 8255: I/O base address not correctly aligned [ 535.142094][ T8031] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 535.554158][ T8031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 535.984494][ T8031] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 536.319325][ T8132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.346125][ T8031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 536.349709][ T8031] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 536.384720][ T8031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 536.455584][ T8141] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.465261][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.517935][ T8031] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 536.582245][ T8031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.180848][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.309809][ T8031] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.339437][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.365911][ T8161] input: syz1 as /devices/virtual/input/input18 [ 539.368386][ T8163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.644'. [ 539.370491][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.490772][ T3343] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.497674][ T3343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.393607][ T8178] fuse: Unknown parameter 'fd0x0000000000000005' [ 546.172435][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 547.706276][ T8189] syz_tun: entered allmulticast mode [ 548.301366][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.661664][ T8031] veth0_vlan: entered promiscuous mode [ 549.690260][ T8031] veth1_vlan: entered promiscuous mode [ 549.931024][ T8031] veth0_macvtap: entered promiscuous mode [ 549.949162][ T8213] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.980347][ T8031] veth1_macvtap: entered promiscuous mode [ 550.007906][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.032599][ T5845] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 550.034832][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.066567][ T3341] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.067495][ T3341] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.067546][ T3341] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.067585][ T3341] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.182015][ T5845] usb 3-1: device descriptor read/64, error -71 [ 550.451959][ T5845] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 550.522040][ T9] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 550.582112][ T5845] usb 3-1: device descriptor read/64, error -71 [ 550.858040][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.858072][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 550.858195][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 550.858223][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.924640][ T5845] usb usb3-port1: attempt power cycle [ 551.066183][ T9] usb 2-1: config 0 descriptor?? [ 551.123772][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 551.123834][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 551.239762][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 551.241020][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 551.241082][ T9] usb 2-1: media controller created [ 551.281404][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 552.002174][ T5845] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 552.024782][ T5845] usb 3-1: device descriptor read/8, error -71 [ 552.118701][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 552.118846][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 552.146299][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 552.171463][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 552.171488][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 552.201104][ T9] usb 2-1: USB disconnect, device number 17 [ 552.282478][ T5845] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 552.313233][ T5845] usb 3-1: device descriptor read/8, error -71 [ 552.376722][ T8225] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'. [ 552.427559][ T5845] usb usb3-port1: unable to enumerate USB device [ 552.793213][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.793235][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.768866][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 553.922876][ T8235] input: syz1 as /devices/virtual/input/input20 [ 557.518576][ T8244] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 558.438554][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.438576][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.755332][ T8255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.108062][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.619'. [ 561.862106][ T822] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 562.106912][ T822] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 562.106965][ T822] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.106988][ T822] usb 6-1: Product: syz [ 562.107003][ T822] usb 6-1: Manufacturer: syz [ 562.107018][ T822] usb 6-1: SerialNumber: syz [ 562.158795][ T822] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 562.692848][ T5714] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 562.730973][ T8283] ALSA: mixer_oss: invalid OSS volume '' [ 563.523342][ T5615] usb 6-1: USB disconnect, device number 2 [ 563.573341][ T5714] usb 2-1: device descriptor read/64, error -71 [ 563.704631][ T9] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 563.706575][ T5615] usb 6-1: ath9k_htc: USB layer deinitialized [ 564.322202][ T8285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.672'. [ 565.641967][ T5714] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 565.728174][ T8289] input: syz1 as /devices/virtual/input/input21 [ 568.428155][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.428301][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.932387][ T5721] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 569.866700][ T5721] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 569.866772][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.866841][ T5721] usb 4-1: Product: syz [ 569.866858][ T5721] usb 4-1: Manufacturer: syz [ 569.866874][ T5721] usb 4-1: SerialNumber: syz [ 570.209800][ T5721] usb 4-1: config 0 descriptor?? [ 570.878720][ T5721] usb 4-1: can't set config #0, error -71 [ 571.864751][ T5721] usb 4-1: USB disconnect, device number 14 [ 573.553458][ T8315] FAULT_INJECTION: forcing a failure. [ 573.553458][ T8315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.553503][ T8315] CPU: 1 UID: 0 PID: 8315 Comm: syz.1.681 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 573.553536][ T8315] Tainted: [L]=SOFTLOCKUP [ 573.553544][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 573.553559][ T8315] Call Trace: [ 573.553568][ T8315] [ 573.553577][ T8315] dump_stack_lvl+0xe8/0x150 [ 573.553610][ T8315] should_fail_ex+0x46b/0x600 [ 573.553641][ T8315] _copy_from_user+0x2d/0xb0 [ 573.553669][ T8315] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 573.553694][ T8315] ? __lock_acquire+0x6b5/0x2cf0 [ 573.553734][ T8315] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 573.553802][ T8315] ? __task_pid_nr_ns+0x28/0x470 [ 573.553843][ T8315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.553869][ T8315] do_syscall_64+0x15f/0xf80 [ 573.553901][ T8315] ? trace_irq_disable+0x3b/0x140 [ 573.553928][ T8315] ? clear_bhb_loop+0x40/0x90 [ 573.553956][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.553980][ T8315] RIP: 0033:0x7fed3529e1d9 [ 573.554002][ T8315] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 573.554021][ T8315] RSP: 002b:00007fed33513a40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 573.554052][ T8315] RAX: ffffffffffffffda RBX: 00007fed335146c0 RCX: 00007fed3529e1d9 [ 573.554069][ T8315] RDX: 00007fed33513a40 RSI: 00007fed33513b70 RDI: 0000000000000021 [ 573.554085][ T8315] RBP: 00007fed33514090 R08: 0000000000000000 R09: 0000000000000000 [ 573.554100][ T8315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 573.554113][ T8315] R13: 00007fed35576218 R14: 00007fed35576180 R15: 00007fff33249058 [ 573.554149][ T8315] [ 573.880935][ T8308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.579573][ T8320] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 574.736589][ T8319] bridge_slave_0: left allmulticast mode [ 574.736626][ T8319] bridge_slave_0: left promiscuous mode [ 574.764680][ T8319] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.792808][ T8321] overlayfs: failed to resolve './file0': -2 [ 574.991278][ T8319] bridge_slave_1: left allmulticast mode [ 574.991315][ T8319] bridge_slave_1: left promiscuous mode [ 574.991558][ T8319] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.094310][ T8328] FAULT_INJECTION: forcing a failure. [ 575.094310][ T8328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.094350][ T8328] CPU: 0 UID: 0 PID: 8328 Comm: syz.2.685 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 575.094392][ T8328] Tainted: [L]=SOFTLOCKUP [ 575.094401][ T8328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.094416][ T8328] Call Trace: [ 575.094425][ T8328] [ 575.094434][ T8328] dump_stack_lvl+0xe8/0x150 [ 575.094465][ T8328] should_fail_ex+0x46b/0x600 [ 575.094495][ T8328] _copy_from_user+0x2d/0xb0 [ 575.094523][ T8328] ____sys_sendmsg+0x2e2/0x9c0 [ 575.094562][ T8328] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.094603][ T8328] ? import_iovec+0x73/0xa0 [ 575.094633][ T8328] ___sys_sendmsg+0x2a5/0x360 [ 575.094677][ T8328] ? __lock_acquire+0x6b5/0x2cf0 [ 575.094713][ T8328] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.094744][ T8328] ? __lock_acquire+0x6b5/0x2cf0 [ 575.094780][ T8328] ? kstrtouint+0x6e/0xe0 [ 575.094857][ T8328] __sys_sendmmsg+0x282/0x4e0 [ 575.094899][ T8328] ? __pfx___sys_sendmmsg+0x10/0x10 [ 575.094942][ T8328] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 575.094984][ T8328] ? ksys_write+0x248/0x270 [ 575.095012][ T8328] ? __pfx_ksys_write+0x10/0x10 [ 575.095045][ T8328] __x64_sys_sendmmsg+0xa0/0xc0 [ 575.095078][ T8328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.095103][ T8328] do_syscall_64+0x15f/0xf80 [ 575.095136][ T8328] ? clear_bhb_loop+0x40/0x90 [ 575.095163][ T8328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.095185][ T8328] RIP: 0033:0x7f94b346ce59 [ 575.095206][ T8328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.095227][ T8328] RSP: 002b:00007f94b16be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 575.095250][ T8328] RAX: ffffffffffffffda RBX: 00007f94b36e5fa0 RCX: 00007f94b346ce59 [ 575.095267][ T8328] RDX: 0000000000000002 RSI: 0000200000000c80 RDI: 0000000000000003 [ 575.095282][ T8328] RBP: 00007f94b16be090 R08: 0000000000000000 R09: 0000000000000000 [ 575.095297][ T8328] R10: 0000000004008845 R11: 0000000000000246 R12: 0000000000000001 [ 575.095312][ T8328] R13: 00007f94b36e6038 R14: 00007f94b36e5fa0 R15: 00007ffe00bfd0f8 [ 575.095348][ T8328] [ 575.544224][ T8319] bond0: (slave bond_slave_0): Releasing backup interface [ 575.667244][ T8319] bond0: (slave bond_slave_1): Releasing backup interface [ 576.118863][ T8319] team0: Port device team_slave_0 removed [ 576.317078][ T8319] team0: Port device team_slave_1 removed [ 577.344049][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.344082][ T8319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.363371][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 577.641571][ T8347] FAULT_INJECTION: forcing a failure. [ 577.641571][ T8347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.641613][ T8347] CPU: 0 UID: 0 PID: 8347 Comm: syz.1.689 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 577.641644][ T8347] Tainted: [L]=SOFTLOCKUP [ 577.641652][ T8347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 577.641666][ T8347] Call Trace: [ 577.641675][ T8347] [ 577.641683][ T8347] dump_stack_lvl+0xe8/0x150 [ 577.641722][ T8347] should_fail_ex+0x46b/0x600 [ 577.641751][ T8347] _copy_from_iter+0x1d3/0x1670 [ 577.641785][ T8347] ? trace_kmem_cache_alloc+0x29/0xe0 [ 577.641807][ T8347] ? __alloc_skb+0x27d/0x7d0 [ 577.641833][ T8347] ? __pfx__copy_from_iter+0x10/0x10 [ 577.641855][ T8347] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 577.641879][ T8347] ? __alloc_skb+0x27d/0x7d0 [ 577.641914][ T8347] ? netlink_sendmsg+0x650/0xb40 [ 577.641943][ T8347] ? skb_put+0x11b/0x210 [ 577.641976][ T8347] netlink_sendmsg+0x6c0/0xb40 [ 577.642016][ T8347] ? __pfx_netlink_sendmsg+0x10/0x10 [ 577.642049][ T8347] ? unwind_get_return_address+0x4d/0x90 [ 577.642083][ T8347] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 577.642111][ T8347] ____sys_sendmsg+0x94c/0x9c0 [ 577.642148][ T8347] ? __pfx_____sys_sendmsg+0x10/0x10 [ 577.642239][ T8347] ? import_iovec+0x73/0xa0 [ 577.642352][ T8347] ___sys_sendmsg+0x2a5/0x360 [ 577.642446][ T8347] ? __lock_acquire+0x6b5/0x2cf0 [ 577.642549][ T8347] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.642724][ T8347] ? __fget_files+0x2a/0x420 [ 577.642784][ T8347] ? __fget_files+0x3a6/0x420 [ 577.642862][ T8347] __x64_sys_sendmsg+0x1c3/0x2a0 [ 577.642955][ T8347] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 577.643065][ T8347] ? __pfx_ksys_write+0x10/0x10 [ 577.643156][ T8347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.643222][ T8347] do_syscall_64+0x15f/0xf80 [ 577.643300][ T8347] ? trace_irq_disable+0x3b/0x140 [ 577.643367][ T8347] ? clear_bhb_loop+0x40/0x90 [ 577.643442][ T8347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.643498][ T8347] RIP: 0033:0x7fed352fce59 [ 577.643562][ T8347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.643608][ T8347] RSP: 002b:00007fed33535028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.643686][ T8347] RAX: ffffffffffffffda RBX: 00007fed35576090 RCX: 00007fed352fce59 [ 577.643745][ T8347] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000004 [ 577.643776][ T8347] RBP: 00007fed33535090 R08: 0000000000000000 R09: 0000000000000000 [ 577.643790][ T8347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.643803][ T8347] R13: 00007fed35576128 R14: 00007fed35576090 R15: 00007fff33249058 [ 577.643886][ T8347] [ 578.267428][ T5608] Bluetooth: hci4: unexpected event for opcode 0x2012 [ 578.282803][ T8319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.282835][ T8319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.384540][ T8319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 578.384700][ T8320] tipc: Started in network mode [ 578.384729][ T8320] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 578.386079][ T8320] tipc: Enabled bearer , priority 0 [ 578.676731][ T3343] tipc: Resetting bearer [ 579.949349][ T10] tipc: Node number set to 11578026 [ 579.964425][ T8354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 580.999885][ T37] audit: type=1326 audit(1779644798.408:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8353 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 580.999947][ T37] audit: type=1326 audit(1779644798.408:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8353 comm="syz.1.691" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed352fce59 code=0x7ffc0000 [ 581.150706][ T8366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.953784][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.698'. [ 583.027802][ T8381] overlay: Unknown parameter '/' [ 592.842790][ T5608] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 593.744045][ T37] audit: type=1326 audit(1779644811.158:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8413 comm="syz.5.705" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f83b4bece59 code=0x0 [ 594.932536][ T8424] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 594.933414][ T8424] cramfs: wrong magic [ 595.240355][ T8427] FAULT_INJECTION: forcing a failure. [ 595.240355][ T8427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 595.240386][ T8427] CPU: 0 UID: 0 PID: 8427 Comm: syz.2.707 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 595.240408][ T8427] Tainted: [L]=SOFTLOCKUP [ 595.240413][ T8427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 595.240423][ T8427] Call Trace: [ 595.240429][ T8427] [ 595.240436][ T8427] dump_stack_lvl+0xe8/0x150 [ 595.240460][ T8427] should_fail_ex+0x46b/0x600 [ 595.240484][ T8427] _copy_from_iter+0x1d3/0x1670 [ 595.240507][ T8427] ? trace_kmem_cache_alloc+0x29/0xe0 [ 595.240524][ T8427] ? __alloc_skb+0x27d/0x7d0 [ 595.240544][ T8427] ? __pfx__copy_from_iter+0x10/0x10 [ 595.240559][ T8427] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 595.240577][ T8427] ? __alloc_skb+0x27d/0x7d0 [ 595.240601][ T8427] ? netlink_sendmsg+0x650/0xb40 [ 595.240622][ T8427] ? skb_put+0x11b/0x210 [ 595.240645][ T8427] netlink_sendmsg+0x6c0/0xb40 [ 595.240674][ T8427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.240702][ T8427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.240729][ T8427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.240750][ T8427] sock_write_iter+0x4a1/0x4f0 [ 595.240768][ T8427] ? __pfx_sock_write_iter+0x10/0x10 [ 595.240800][ T8427] do_iter_readv_writev+0x62b/0x8d0 [ 595.240822][ T8427] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 595.240841][ T8427] ? __lock_acquire+0x6b5/0x2cf0 [ 595.240869][ T8427] ? rw_verify_area+0x25b/0x4e0 [ 595.240889][ T8427] vfs_writev+0x345/0x9a0 [ 595.240918][ T8427] ? __pfx_vfs_writev+0x10/0x10 [ 595.240952][ T8427] ? __fget_files+0x2a/0x420 [ 595.240969][ T8427] ? __fget_files+0x3a6/0x420 [ 595.240983][ T8427] ? __fget_files+0x2a/0x420 [ 595.241003][ T8427] do_writev+0x15a/0x2e0 [ 595.241027][ T8427] ? __pfx_do_writev+0x10/0x10 [ 595.241056][ T8427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.241073][ T8427] do_syscall_64+0x15f/0xf80 [ 595.241096][ T8427] ? trace_irq_disable+0x3b/0x140 [ 595.241114][ T8427] ? clear_bhb_loop+0x40/0x90 [ 595.241134][ T8427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.241150][ T8427] RIP: 0033:0x7f94b346ce59 [ 595.241165][ T8427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.241179][ T8427] RSP: 002b:00007f94b167c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 595.241196][ T8427] RAX: ffffffffffffffda RBX: 00007f94b36e6180 RCX: 00007f94b346ce59 [ 595.241208][ T8427] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 595.241218][ T8427] RBP: 00007f94b167c090 R08: 0000000000000000 R09: 0000000000000000 [ 595.241228][ T8427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.241237][ T8427] R13: 00007f94b36e6218 R14: 00007f94b36e6180 R15: 00007ffe00bfd0f8 [ 595.241261][ T8427] [ 629.699175][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.699250][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.772085][ T5608] Bluetooth: hci5: command 0x0406 tx timeout [ 657.848792][ T8439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.543613][ T5721] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 658.691971][ T5721] usb 6-1: Using ep0 maxpacket: 16 [ 658.700541][ T5721] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 658.700570][ T5721] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.700650][ T5721] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 658.700676][ T5721] usb 6-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 658.700716][ T5721] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 658.792310][ T5721] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 658.792345][ T5721] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.792369][ T5721] usb 6-1: Product: syz [ 658.792385][ T5721] usb 6-1: Manufacturer: syz [ 658.792402][ T5721] usb 6-1: SerialNumber: syz [ 660.043077][ T5714] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 660.051329][ T5616] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 660.435668][ T5714] usb 4-1: device descriptor read/64, error -71 [ 660.627777][ T8454] netlink: 798 bytes leftover after parsing attributes in process `syz.5.713'. [ 661.143661][ T5714] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 662.372339][ T5714] usb 4-1: device descriptor read/64, error -71 [ 662.484236][ T5714] usb usb4-port1: attempt power cycle [ 663.936878][ T5721] usb 6-1: USB disconnect, device number 3 [ 665.945085][ T8487] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 666.566441][ T8487] cramfs: wrong magic [ 668.128522][ T8462] udevd[8462]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.972462][ T8499] netlink: 'syz.1.723': attribute type 32 has an invalid length. [ 669.972486][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 669.972521][ T8499] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 670.460913][ T8507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.841504][ T5616] Bluetooth: hci3: unexpected event for opcode 0x2012 [ 673.591993][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 673.866226][ T10] usb 5-1: device descriptor read/64, error -71 [ 674.772009][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 674.954268][ T10] usb 5-1: device descriptor read/64, error -71 [ 675.228460][ T10] usb usb5-port1: attempt power cycle [ 676.352022][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 676.384773][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 676.384927][ T10] usb 5-1: device descriptor read/8, error -32 [ 676.643209][ T8557] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 676.667577][ T8557] cramfs: wrong magic [ 680.122196][ T8563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.737'. [ 681.406999][ T8568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.579838][ T8574] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 681.594686][ T8574] cramfs: wrong magic [ 681.742040][ T5721] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 681.902427][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 681.961597][ T5721] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 681.961691][ T5721] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 682.247020][ T5721] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 682.247070][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.247143][ T5721] usb 2-1: Product: syz [ 682.247160][ T5721] usb 2-1: Manufacturer: syz [ 682.247211][ T5721] usb 2-1: SerialNumber: syz [ 684.838751][ T5721] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 684.908726][ T5721] usb 2-1: unit 143 not found! [ 684.973782][ T5721] usb 2-1: selecting invalid altsetting 1 [ 684.973818][ T5721] snd-usb-caiaq 2-1:1.2: can't set alt interface. [ 684.973839][ T5721] usb 2-1: unable to init card! (ret=-5) [ 684.974895][ T5721] snd-usb-caiaq 2-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 685.024835][ T5721] usb 2-1: USB disconnect, device number 21 [ 686.099122][ T5616] Bluetooth: hci5: unexpected event for opcode 0x2012 [ 688.149734][ T8462] udevd[8462]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 688.344080][ T8591] comedi comedi0: comedi_config --init_data is deprecated [ 690.486738][ T31] ------------[ cut here ]------------ [ 690.486752][ T31] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 690.486776][ T31] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:0/31 [ 690.486836][ T31] Modules linked in: [ 690.486860][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 690.486889][ T31] Tainted: [L]=SOFTLOCKUP [ 690.486898][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 690.486912][ T31] Workqueue: events drm_fb_helper_damage_work [ 690.486943][ T31] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 690.486970][ T31] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ca 4a d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 690.486990][ T31] RSP: 0018:ffffc90000a5f8c0 EFLAGS: 00010246 [ 690.487017][ T31] RAX: 1ffff11004b95800 RBX: ffffffff8f941d20 RCX: 0000000000000000 [ 690.487034][ T31] RDX: ffffffff8bc05880 RSI: ffffffff8bc21fa0 RDI: ffffffff8f941d20 [ 690.487050][ T31] RBP: ffffc90000a5f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 690.487065][ T31] R10: dffffc0000000000 R11: fffffbfff1f1223f R12: ffffffff8bc21fa0 [ 690.487082][ T31] R13: ffff888025cac000 R14: 0000000000000000 R15: ffffffff8bc05880 [ 690.487097][ T31] FS: 0000000000000000(0000) GS:ffff888126270000(0000) knlGS:0000000000000000 [ 690.487116][ T31] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.487131][ T31] CR2: 0000001b3350eff8 CR3: 00000000545ca000 CR4: 00000000003526f0 [ 690.487151][ T31] Call Trace: [ 690.487160][ T31] [ 690.487174][ T31] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 690.487208][ T31] ? rt_spin_unlock+0x14f/0x200 [ 690.487235][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 690.487267][ T31] ? rt_spin_unlock+0x160/0x200 [ 690.487296][ T31] ? drm_vblank_get+0x147/0x260 [ 690.487325][ T31] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 690.487364][ T31] drm_fb_helper_damage_work+0x131/0x6f0 [ 690.487396][ T31] ? process_scheduled_works+0xa70/0x1860 [ 690.487427][ T31] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 690.487462][ T31] ? process_scheduled_works+0xa70/0x1860 [ 690.487485][ T31] ? process_scheduled_works+0xa70/0x1860 [ 690.487511][ T31] process_scheduled_works+0xb5d/0x1860 [ 690.487573][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.487606][ T31] ? assign_work+0x3d5/0x5e0 [ 690.487636][ T31] worker_thread+0xa53/0xfc0 [ 690.487694][ T31] kthread+0x388/0x470 [ 690.487726][ T31] ? __pfx_worker_thread+0x10/0x10 [ 690.487749][ T31] ? __pfx_kthread+0x10/0x10 [ 690.487782][ T31] ret_from_fork+0x514/0xb70 [ 690.487821][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 690.487848][ T31] ? __switch_to+0xc79/0x1410 [ 690.487887][ T31] ? __pfx_kthread+0x10/0x10 [ 690.487920][ T31] ret_from_fork_asm+0x1a/0x30 [ 690.487968][ T31] [ 690.487980][ T31] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 690.487999][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 690.488029][ T31] Tainted: [L]=SOFTLOCKUP [ 690.488037][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 690.488052][ T31] Workqueue: events drm_fb_helper_damage_work [ 690.488079][ T31] Call Trace: [ 690.488087][ T31] [ 690.488096][ T31] vpanic+0x56c/0xa60 [ 690.488125][ T31] ? __pfx__printk+0x10/0x10 [ 690.488172][ T31] ? __pfx_vpanic+0x10/0x10 [ 690.488197][ T31] ? is_bpf_text_address+0x292/0x2b0 [ 690.488228][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 690.488266][ T31] panic+0xc5/0xd0 [ 690.488292][ T31] ? __pfx_panic+0x10/0x10 [ 690.488327][ T31] ? ret_from_fork_asm+0x1a/0x30 [ 690.488364][ T31] __warn+0x315/0x4c0 [ 690.488390][ T31] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 690.488421][ T31] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 690.488451][ T31] __report_bug+0x29a/0x540 [ 690.488491][ T31] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 690.488519][ T31] ? __pfx___report_bug+0x10/0x10 [ 690.488573][ T31] report_bug_entry+0x19a/0x290 [ 690.488606][ T31] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 690.488631][ T31] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 690.488665][ T31] handle_bug+0xce/0x200 [ 690.488689][ T31] exc_invalid_op+0x1a/0x50 [ 690.488711][ T31] asm_exc_invalid_op+0x1a/0x20 [ 690.488733][ T31] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 690.488761][ T31] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ca 4a d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 690.488779][ T31] RSP: 0018:ffffc90000a5f8c0 EFLAGS: 00010246 [ 690.488799][ T31] RAX: 1ffff11004b95800 RBX: ffffffff8f941d20 RCX: 0000000000000000 [ 690.488834][ T31] RDX: ffffffff8bc05880 RSI: ffffffff8bc21fa0 RDI: ffffffff8f941d20 [ 690.488851][ T31] RBP: ffffc90000a5f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 690.488866][ T31] R10: dffffc0000000000 R11: fffffbfff1f1223f R12: ffffffff8bc21fa0 [ 690.488883][ T31] R13: ffff888025cac000 R14: 0000000000000000 R15: ffffffff8bc05880 [ 690.488923][ T31] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 690.488950][ T31] ? rt_spin_unlock+0x14f/0x200 [ 690.488975][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 690.489005][ T31] ? rt_spin_unlock+0x160/0x200 [ 690.489034][ T31] ? drm_vblank_get+0x147/0x260 [ 690.489064][ T31] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 690.489180][ T31] drm_fb_helper_damage_work+0x131/0x6f0 [ 690.489213][ T31] ? process_scheduled_works+0xa70/0x1860 [ 690.489245][ T31] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 690.489279][ T31] ? process_scheduled_works+0xa70/0x1860 [ 690.489302][ T31] ? process_scheduled_works+0xa70/0x1860 [ 690.489330][ T31] process_scheduled_works+0xb5d/0x1860 [ 690.489388][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 690.489421][ T31] ? assign_work+0x3d5/0x5e0 [ 690.489450][ T31] worker_thread+0xa53/0xfc0 [ 690.489505][ T31] kthread+0x388/0x470 [ 690.489536][ T31] ? __pfx_worker_thread+0x10/0x10 [ 690.489559][ T31] ? __pfx_kthread+0x10/0x10 [ 690.489589][ T31] ret_from_fork+0x514/0xb70 [ 690.489616][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 690.489642][ T31] ? __switch_to+0xc79/0x1410 [ 690.489681][ T31] ? __pfx_kthread+0x10/0x10 [ 690.489713][ T31] ret_from_fork_asm+0x1a/0x30 [ 690.489760][ T31] [ 690.490404][ T31] Kernel Offset: disabled