last executing test programs: 16.095784198s ago: executing program 4 (id=737): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x7, 0x401}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x6, r1, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x7000000}) 15.920734943s ago: executing program 4 (id=739): mkdir(&(0x7f00000000c0)='./file0\x00', 0x2f) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x80047456, 0x0) socket$inet(0x2, 0x3, 0x13) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000740)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb392ee6262d168b33aca6c4419e26a06d31"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') mkdir(&(0x7f0000000000)='./file0\x00', 0x82) 11.289740866s ago: executing program 4 (id=750): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00756f64aee9668017f9d2cf75c6ed4211b0a3ed0acef6e0a6b592212f9219003b7d1b451df1eceac2005603e00a48ff03107f3c55000000000000000000000000000000000000000015125f5b4727a243cdc4cacd593c1dcf69559ec5dfeef205f2a0818a1badfa5a4cd237a37fcb247e0a0b9be2174b2e81ead3bd96830783c95d36dcc5c5ca4e529bb61ebb436f35404c4904f57701dbd8da351b5f6494987652ace2fd515f", @ANYRES32, @ANYBLOB="050000006a6f7c9a00"/20, @ANYRES32, @ANYRESDEC=0x0, @ANYRESHEX], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5078, &(0x7f0000000300)={0x0, 0xe58, 0x1, 0xfffffffc, 0x278}, &(0x7f0000000280), &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='io_uring_cqe_overflow\x00', r1, 0x0, 0x9}, 0x18) io_uring_enter(r2, 0x36e2, 0xf7ffbffe, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) pipe2(&(0x7f0000000400), 0x80800) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000080)={0x1, [0x40, 0x4, 0x9, 0x2, 0x4, 0x7, 0x0, 0x28b, 0x3, 0x2, 0x2, 0x2, 0x7fff, 0x0, 0x8, 0x1, 0x74, 0x3, 0x5, 0x699, 0xa50, 0xfff, 0x0, 0x6, 0x9, 0x5, 0x7665, 0x3, 0x4, 0x10, 0x8001, 0x0, 0x3e, 0x1, 0xe40b, 0x8, 0x400, 0x3, 0x9, 0xff81, 0x2477, 0x1, 0x9, 0x3, 0xfff7, 0xf7a, 0x8a1, 0x2], 0xd}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000380), &(0x7f00000003c0)) 10.208214934s ago: executing program 2 (id=751): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2022, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0xffffffffffff6260, {{0x101, 0x5, 0x1, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(r2, 0x1, &(0x7f0000000140)={0x9993, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'ipvlan1\x00', 0x100}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x76, 0x0, 0x0) read$msr(r4, &(0x7f000001dc00)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1e4) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FITRIM(r3, 0xc0185879, &(0x7f0000000300)={0x2, 0xf, 0x8}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000080)={[0x2, 0x1, 0x8, 0x4, 0x1000, 0x5, 0x3, 0x8, 0x1, 0x4, 0x10001, 0x9, 0x0, 0x5, 0x5], 0xeeee0000, 0x121000}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r7, 0xc0105702, &(0x7f00000000c0)) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000000)=0x0) sched_setaffinity(r9, 0x8, &(0x7f0000000040)=0x5) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000080)={0xfffffc01, 0x1, 0x1}) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010023010000340200000600000008000e005200000008000d002000000008000300de000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000004) 10.15183583s ago: executing program 1 (id=753): r0 = syz_clone(0x20080800, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000003e000701feffffff00000008017c0000040042800c00018006000600800a0000100002800c001980080001"], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000004c00)=""/102385, 0x18ff1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r5 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4000000, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x1b) ioctl$TCSETSF2(r4, 0x402c542d, &(0x7f0000000140)={0xffff0000, 0x6, 0x9, 0x4, 0x7, "0000fd000000000009e49200", 0x802046, 0x200068e}) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) listen(r3, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6) r7 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r7, 0x541b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r10, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 9.425290155s ago: executing program 0 (id=756): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000dc0), 0x0, 0x44890) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[], 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES8=r6, @ANYBLOB="0000000000000000140012800b0001006261746164760000040002", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x1, @empty}}, 0xff, 0x7}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000840)={r7, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8001) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x3, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x5, 0x2}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) memfd_create(&(0x7f0000000040)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xd3\a\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13\x03\x04\xdb\x00\x00\x00\x00\x00', 0x4) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) 9.401683034s ago: executing program 2 (id=757): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) uname(&(0x7f0000000080)=""/209) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x1, 0x3, 0x8}}, 0x120) r8 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000200), 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x3, 0xc9, 0x31}}}, 0x7) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.200923631s ago: executing program 2 (id=758): mkdir(&(0x7f00000000c0)='./file0\x00', 0x2f) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x80047456, 0x0) socket$inet(0x2, 0x3, 0x13) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000740)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb392ee6262d168b33aca6c4419e26a06d31"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') socket$inet_tcp(0x2, 0x1, 0x0) 8.028171535s ago: executing program 1 (id=759): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0xed0, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r3, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r4 = io_uring_setup(0x868, &(0x7f00000001c0)={0x0, 0xffc, 0x2, 0x0, 0x1a4, 0x0, r3}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) (async) r5 = socket(0x10, 0x803, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket(0x1, 0x5, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001400b59500000000000000000a400000", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff"], 0x34}}, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000500)="549788570d65d288a5996f10fdbb0eabe4f492f80351d663aa2a2ea61318e6f478e0b6734caa554046f58cee7993d1c4ea99d7d17e1b15273f65cbdb53e87782fb6f62d84115239de66b3593168e86e0a5b79febfe4c78ccea77bc1ce475b3ddf3fe79f409438e1a694959e5647c6df0ecea9ac026d24020750dc70451b720abd16be8bf995ad6eab1906c7b99e0256e624b64549094404cdf60533467526843fed2341488602fb586696d7576678e5d6ebe5c442da751a2b09ec397ca4bc70446297c9e4f5f91440553ec53fd1b57f6241580feb6f210625534", 0xda}, {&(0x7f0000000600)="304473805cce34630cf2109e5d556ca44ccb0e9b98a4d0a88cb0d681e30a0a0e4da2b0d432d5cb13dcda795140fa251e97c5edeb7c194aa27cf521150f22d4298059ae85485adf8e29fe66c99e51d1b8d8f1ce101e0450e4003f4dacde25e28bfc85d00c22bd167f402c7e324f4563bee79a2f8f277649cdf20a64ef4e8ac730e6e26263e8314ba1780fa6249f0f714eacc56c", 0x93}, {&(0x7f00000006c0)="0b32c48b5daf6c875f99f892951b715e3712a5f43f559bea19547a584a105c13b18c426fef87a2b6c3905fb4200eab1e4a0b25e405f8a0b1fef5a9dbc24af2743d5296d73a4f368cb64fb5568fe41b8752a7d01ff0a949dfcfca9e0032e0356ee3f6", 0x62}], 0x3) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001400b59500000000000000000a0000fd", @ANYRES32=r7, @ANYBLOB="0000000008000800700300"/28], 0x34}}, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r10, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) (async) setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, 0x0, 0x0) (async) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_SHOW_PORTS(r8, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x1c, r11, 0x100, 0x70bd28, 0x25dfdbfd, {}, [""]}, 0x1c}}, 0x81) (async) setsockopt$inet6_tcp_int(r9, 0x6, 0xc, &(0x7f0000000280)=0xf, 0x4) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'geneve1\x00', &(0x7f0000000280)=@ethtool_gfeatures={0x3a, 0x8, [{}, {}, {}, {}, {}, {}, {}, {}]}}) (async) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000040)=0x40) (async) r12 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f00000000c0)={'veth0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) socket$netlink(0x10, 0x3, 0x0) 7.728628557s ago: executing program 1 (id=761): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f00000002c0)='./bus\x00', r3, &(0x7f0000000780)='./file1\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x9, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0xa1, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x5, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0xc8}, {0x14, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x8a, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x7, 0x4, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xc}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x3}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x12}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) listen(r5, 0x80) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}, {&(0x7f00000004c0)="a27996190162232c7e264aac5d3b1c9c1951d3ba4f3cde38ae6acbdf1a6e975b476b6add3d11f1", 0x27}, {&(0x7f00000005c0)="3e3101ba7a9b3c627e7959218e57311b4cf90c93d1bc6426325a6d3672cd65f62eaf86caba6a26c381f95abd0b3c2ca90ab93c4e7313dc5a16f4f8dbfe5ca4d31701960f87df2d7d13519d2d21964d3dd3ecb8673aeb5081905046e9c8b33c11c70e6097a7587384b18d6e60a9656c85ea1add43a91f84b455bb01ca1a81dbebf348c0c2aff7915356f9991aa2def0a71b06131f7e699e6e8918", 0x9a}, {&(0x7f0000001640)="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", 0xff8}, {&(0x7f0000000500)="191d8ca1dbc1b0f61dce17d879b7b570e64ddaf21d1ed5646e784d21a95ce4ddf86e4895627279239ec6cf4915981fd9c69d295659a65f29e6d0e1757efd37d50b9795e93f30cdeef11f5dd9f6efab415fe9", 0x52}, {&(0x7f0000000680)="3040905fb8440fd2ee0b0ec8cfccd0bdc7448df49e37c5fdd258b00d07f3f271d2bda70c9d49cac29e60f547e2277c506c71", 0x32}], 0x6) r7 = syz_open_dev$I2C(&(0x7f0000000180), 0x19a, 0x200) ioctl$I2C_SLAVE(r7, 0x703, 0x4) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) 7.033700645s ago: executing program 3 (id=762): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x34000}}], 0x30}], 0x1, 0x0) 6.116226513s ago: executing program 3 (id=763): socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x200001, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xfffffe62}], 0x1}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f00000001c0)=0x401, 0x4) sendmsg$inet6(r4, &(0x7f0000000380)={&(0x7f0000000200)={0xa, 0x4e22, 0x4000a, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c, 0x0}, 0x404c804) io_setup(0xfb, &(0x7f0000000000)=0x0) io_submit(r5, 0x1, &(0x7f00000007c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x101, r4, 0x0}]) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[], 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa200000000005dd6da1dae3b4960005a8045f80007020000f8ffffffb703000000000000b7040000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7fff}, 0x18) r9 = dup(r7) write$P9_RLERRORu(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0, 0xffffffffffffffff, 0x0, 0x2, 0xffffffffffffff36}}, 0x20) write$binfmt_elf64(r9, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r9]) io_uring_enter(r1, 0x847ba, 0x79c, 0xe, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) 5.745779342s ago: executing program 4 (id=764): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fcntl$dupfd(r0, 0x406, r0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000200)=[{&(0x7f00000000c0)="ee", 0xfe23}], 0x1}}], 0x400000000000181, 0x9200000000000080) recvmmsg(r5, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close_range(r6, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) unshare(0x64000600) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x41, 0x11, 0x0, 0x0, 0x7995}, 0x8, 0x8000000, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 5.288628215s ago: executing program 0 (id=765): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000a90b950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101200, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xa, 0x5, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000640)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) 4.637171166s ago: executing program 2 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040040) 4.591905032s ago: executing program 1 (id=767): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x5807, &(0x7f0000000500)={0x0, 0x8866, 0x8, 0x2, 0x243}, &(0x7f0000000100), &(0x7f0000000180)) io_uring_register$IORING_UNREGISTER_RING_FDS(r0, 0x15, &(0x7f00000046c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0x6) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB=' ', @ANYRES16=r5, @ANYBLOB="030427bd7000fcdbdf258800000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x4008000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8, 0x3, r7}, @void}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x2000c030) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map=r8, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)=""/85, 0x55) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000"], 0x28}}, 0x0) 4.484414612s ago: executing program 4 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff85000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) uname(&(0x7f0000000080)=""/209) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2, 0x0, 0x3, 0x1, 0x3, 0x8}}, 0x120) r8 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x2def, 0x4000, 0x0, 0x0, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000200), 0x4) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x3, 0xc9, 0x31}}}, 0x7) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.454646035s ago: executing program 2 (id=769): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 3.43743584s ago: executing program 0 (id=770): fsopen(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5008000090780000"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "610500", 0x14, 0x6, 0x0, @private1, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x7f, 0x10000) ioctl$SG_EMULATED_HOST(r2, 0x2203, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 3.340475847s ago: executing program 0 (id=771): mmap$IORING_OFF_SQ_RING(&(0x7f000071c000/0xe000)=nil, 0xe000, 0x0, 0x810, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x309201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000800)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_on}]}) r3 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r3, &(0x7f00000002c0)='./bus\x00', r3, &(0x7f0000000780)='./file1\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x9, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0xa1, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x5, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0xc8}, {0x14, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x8a, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x7, 0x4, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xc}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x3}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x12}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) chown(&(0x7f0000000580)='./file1\x00', 0x0, 0x0) listen(r5, 0x80) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}, {&(0x7f00000004c0)="a27996190162232c7e264aac5d3b1c9c1951d3ba4f3cde38ae6acbdf1a6e975b476b6add3d11f1", 0x27}, {&(0x7f00000005c0)="3e3101ba7a9b3c627e7959218e57311b4cf90c93d1bc6426325a6d3672cd65f62eaf86caba6a26c381f95abd0b3c2ca90ab93c4e7313dc5a16f4f8dbfe5ca4d31701960f87df2d7d13519d2d21964d3dd3ecb8673aeb5081905046e9c8b33c11c70e6097a7587384b18d6e60a9656c85ea1add43a91f84b455bb01ca1a81dbebf348c0c2aff7915356f9991aa2def0a71b06131f7e699e6e", 0x98}, {&(0x7f0000001640)="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", 0xff8}, {&(0x7f0000000500)="191d8ca1dbc1b0f61dce17d879b7b570e64ddaf21d1ed5646e784d21a95ce4ddf86e4895627279239ec6cf4915981fd9c69d295659a65f29e6d0e1757efd37d50b9795e93f30cdeef11f5dd9f6efab415fe9", 0x52}, {&(0x7f0000000680)="3040905fb8440fd2ee0b0ec8cfccd0bdc7448df49e37c5fdd258b00d07f3f271d2bda70c9d49cac29e60f547e2277c506c71", 0x32}], 0x6) r7 = syz_open_dev$I2C(&(0x7f0000000180), 0x19a, 0x200) ioctl$I2C_SLAVE(r7, 0x703, 0x4) ioctl$KVM_RESET_DIRTY_RINGS(r4, 0xaec7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) 3.288670943s ago: executing program 4 (id=772): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r3, 0x0, 0x0) socket(0x10, 0x803, 0x0) timerfd_create(0x9, 0x80000) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000300)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r7}, 0x18) ioperm(0x0, 0x2, 0x7e) r8 = gettid() timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) 3.275192218s ago: executing program 1 (id=773): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(r0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r3, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r5, 0x303, 0x80000004, 0x25dfdbfa, {0x3d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) execve(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r7, 0x5452, 0x0) fcntl$setstatus(r7, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xfffffffd, 0x0, 'syz0\x00', 0x3040000}, 0x5, 0x0, 0x1, r6, 0x0, 0x8, 'syz0\x00', 0x0}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0) 2.864713775s ago: executing program 3 (id=774): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00756f64aee9668017f9d2cf75c6ed4211b0a3ed0acef6e0a6b592212f9219003b7d1b451df1eceac2005603e00a48ff03107f3c55000000000000000000000000000000000000000015125f5b4727a243cdc4cacd593c1dcf69559ec5dfeef205f2a0818a1badfa5a4cd237a37fcb247e0a0b9be2174b2e81ead3bd96830783c95d36dcc5c5ca4e529bb61ebb436f35404c4904f57701dbd8da351b5f6494987652ace2fd515f", @ANYRES32, @ANYBLOB="050000006a6f7c9a00"/20, @ANYRES32, @ANYRESDEC=0x0, @ANYRESHEX], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x5078, &(0x7f0000000300)={0x0, 0xe58, 0x1, 0xfffffffc, 0x278}, &(0x7f0000000280), &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='io_uring_cqe_overflow\x00', r1, 0x0, 0x9}, 0x18) io_uring_enter(r2, 0x36e2, 0xf7ffbffe, 0x8, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) pipe2(&(0x7f0000000400), 0x80800) ioctl$VIDIOC_G_SLICED_VBI_CAP(r4, 0xc0745645, &(0x7f0000000080)={0x1, [0x40, 0x4, 0x9, 0x2, 0x4, 0x7, 0x0, 0x28b, 0x3, 0x2, 0x2, 0x2, 0x7fff, 0x0, 0x8, 0x1, 0x74, 0x3, 0x5, 0x699, 0xa50, 0xfff, 0x0, 0x6, 0x9, 0x5, 0x7665, 0x3, 0x4, 0x10, 0x8001, 0x0, 0x3e, 0x1, 0xe40b, 0x8, 0x400, 0x3, 0x9, 0xff81, 0x2477, 0x1, 0x9, 0x3, 0xfff7, 0xf7a, 0x8a1, 0x2], 0xd}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) getresgid(&(0x7f0000000240), &(0x7f0000000380), &(0x7f00000003c0)) 1.663083785s ago: executing program 0 (id=775): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a000100080000803cda04060a8080000000000800010000"], 0x1c}}, 0x20000050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000140)="cb", 0x1}], 0x1, 0x0, 0xe0}}], 0x1, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f0000000140), 0x0}, 0x20) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x4, 0x9, 0x4}, 0x50) sendmsg$netlink(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000540)=@req={0x28, &(0x7f0000000480)={'veth0_to_bridge\x00', @ifru_addrs=@can}}) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00", 0x2) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0xffffffd9}, {&(0x7f00000002c0)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800) r7 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r7, 0x40000) ioctl$TUNSETIFF(r1, 0x400454ca, 0xfffffffffffffffd) ioctl$TUNGETVNETLE(r1, 0x400454de, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) 1.402084184s ago: executing program 3 (id=776): openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0x12, 0x80, 0x10000, 0x6, 0xc5, 0x2, 0xa0, 0x46, 0x2f6, 0x81, 0x6, 0x3, 0x8, 0x8008, 0x7ffe, 0xae, 0x101, 0x7, 0xfff, 0x4d, 0x1000000, 0x1000002, 0x15b}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000100)={0xb, 0xa53, 0x7b, 0x4, 0x5, 0x7, 0x5}, 0xfffffffffffffda1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) 916.685684ms ago: executing program 0 (id=777): mkdir(&(0x7f00000000c0)='./file0\x00', 0x2f) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCSETSW2(r6, 0x80047456, 0x0) socket$inet(0x2, 0x3, 0x13) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000002c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000740)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0xc0182101, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb392ee6262d168b33aca6c4419e26a06d31"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') socket$inet_tcp(0x2, 0x1, 0x0) 527.272544ms ago: executing program 2 (id=778): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x157b}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r3, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 466.098516ms ago: executing program 3 (id=779): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20040040) 209.287548ms ago: executing program 3 (id=780): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000a90b950000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x101200, 0x0) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0xa, 0x5, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x10c000) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000340), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000640)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) 0s ago: executing program 1 (id=781): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r3, 0x0, 0x20, 0x0, 0x300) r4 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) syz_emit_ethernet(0x104, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40002103) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) kernel console output (not intermixed with test programs): ep_enable returned -22 [ 150.466015][ T5990] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 150.475657][ T5990] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 150.515819][ T6858] rdma_op ffff88807b3539f0 conn xmit_rdma 0000000000000000 [ 150.539228][ T5990] scsi host1: microtekX6 [ 150.685350][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.924226][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 150.937305][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 151.031348][ T10] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 151.049353][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 151.072067][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 151.087356][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.099370][ T9] usb 2-1: Product: syz [ 151.163534][ T9] usb 2-1: Manufacturer: syz [ 151.163539][ T5990] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 151.175785][ T9] usb 2-1: SerialNumber: syz [ 151.226755][ T9] usb 2-1: config 0 descriptor?? [ 151.242865][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 151.252213][ T10] usb 5-1: config 1 has an invalid interface number: 126 but max is 0 [ 151.261096][ T10] usb 5-1: config 1 has no interface number 0 [ 151.270822][ T10] usb 5-1: config 1 interface 126 has no altsetting 0 [ 151.290392][ T10] usb 5-1: string descriptor 0 read error: -22 [ 151.296908][ T10] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=f2.d0 [ 151.306196][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.329463][ T10] empeg 5-1:1.126: empeg converter detected [ 151.389289][ T5990] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 151.398629][ T5990] usb 3-1: config 0 has no interface number 0 [ 151.420472][ T5990] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 151.439165][ T9] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 151.527910][ T5990] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.536332][ T10] empeg 5-1:1.126: probe with driver empeg failed with error -71 [ 151.556875][ T5990] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 151.590918][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.600039][ T10] usb 5-1: USB disconnect, device number 7 [ 151.605613][ T5990] usb 3-1: Product: syz [ 151.610436][ T5990] usb 3-1: Manufacturer: syz [ 151.617038][ T5990] usb 3-1: SerialNumber: syz [ 151.643598][ T5990] usb 3-1: config 0 descriptor?? [ 151.698874][ T92] usb 2-1: USB disconnect, device number 5 [ 151.699787][ T6866] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 151.758594][ T5990] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 151.831719][ T5990] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 152.651107][ T6877] FAULT_INJECTION: forcing a failure. [ 152.651107][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 152.717509][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.0.224 Not tainted syzkaller #0 PREEMPT(full) [ 152.717539][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 152.717550][ T6877] Call Trace: [ 152.717556][ T6877] [ 152.717563][ T6877] dump_stack_lvl+0x16c/0x1f0 [ 152.717596][ T6877] should_fail_ex+0x512/0x640 [ 152.717626][ T6877] should_failslab+0xc2/0x120 [ 152.717648][ T6877] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 152.717669][ T6877] ? skb_clone+0x190/0x3f0 [ 152.717698][ T6877] skb_clone+0x190/0x3f0 [ 152.717724][ T6877] netlink_deliver_tap+0xabd/0xd30 [ 152.717756][ T6877] netlink_unicast+0x64c/0x870 [ 152.717787][ T6877] ? __pfx_netlink_unicast+0x10/0x10 [ 152.717814][ T6877] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 152.717849][ T6877] netlink_sendmsg+0x8d1/0xdd0 [ 152.717880][ T6877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.717920][ T6877] ____sys_sendmsg+0xa98/0xc70 [ 152.717950][ T6877] ? copy_msghdr_from_user+0x10a/0x160 [ 152.717973][ T6877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.718016][ T6877] ___sys_sendmsg+0x134/0x1d0 [ 152.718043][ T6877] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.718106][ T6877] __sys_sendmsg+0x16d/0x220 [ 152.718131][ T6877] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.718173][ T6877] do_syscall_64+0xcd/0x4e0 [ 152.718203][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.718223][ T6877] RIP: 0033:0x7f1339b8eec9 [ 152.718240][ T6877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.718258][ T6877] RSP: 002b:00007f133aae6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 152.718278][ T6877] RAX: ffffffffffffffda RBX: 00007f1339de5fa0 RCX: 00007f1339b8eec9 [ 152.718291][ T6877] RDX: 0000000024000800 RSI: 0000200000000280 RDI: 0000000000000003 [ 152.718302][ T6877] RBP: 00007f133aae6090 R08: 0000000000000000 R09: 0000000000000000 [ 152.718313][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.718325][ T6877] R13: 00007f1339de6038 R14: 00007f1339de5fa0 R15: 00007ffc05ca8148 [ 152.718352][ T6877] [ 153.045665][ T5917] usb 4-1: USB disconnect, device number 6 [ 153.184124][ T6888] siw: device registration error -23 [ 154.264834][ T6877] team0: Device gtp0 is of different type [ 154.303672][ T6890] lo: entered promiscuous mode [ 154.723130][ T6890] tunl0: entered promiscuous mode [ 154.756919][ T6890] gre0: entered promiscuous mode [ 154.870244][ T6890] gretap0: entered promiscuous mode [ 155.097425][ T6890] erspan0: entered promiscuous mode [ 155.712481][ T6890] ip_vti0: entered promiscuous mode [ 155.720117][ T6890] ip6_vti0: entered promiscuous mode [ 155.728657][ T6890] sit0: entered promiscuous mode [ 155.743746][ T30] audit: type=1400 audit(1759122852.512:367): avc: denied { connect } for pid=6884 comm="syz.3.227" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.824881][ T6890] ip6tnl0: entered promiscuous mode [ 155.839700][ T6890] ip6gre0: entered promiscuous mode [ 155.947632][ T6890] syz_tun: entered promiscuous mode [ 156.034896][ T9] usb 3-1: USB disconnect, device number 4 [ 156.063513][ T6890] ip6gretap0: entered promiscuous mode [ 156.093554][ T6908] gfs2: gfs2 mount does not exist [ 156.137810][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 156.162351][ T9] cyberjack 3-1:0.69: device disconnected [ 156.189229][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.196610][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.209444][ T6890] bridge0: entered promiscuous mode [ 156.301254][ T6890] net_ratelimit: 12 callbacks suppressed [ 156.301266][ T6890] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 159.182930][ T30] audit: type=1400 audit(1759122855.102:368): avc: denied { mount } for pid=6919 comm="syz.4.235" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 159.561243][ T6928] sctp: [Deprecated]: syz.1.236 (pid 6928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.561243][ T6928] Use struct sctp_sack_info instead [ 159.902487][ T30] audit: type=1400 audit(1759122856.712:369): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 159.980272][ T30] audit: type=1400 audit(1759122856.732:370): avc: denied { listen } for pid=6927 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 159.999617][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.051181][ T6929] sctp: failed to load transform for md5: -4 [ 160.240848][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 160.692992][ T30] audit: type=1400 audit(1759122857.492:371): avc: denied { read } for pid=6935 comm="syz.4.239" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 160.736720][ T5917] usb 1-1: unable to get BOS descriptor or descriptor too short [ 160.737514][ T30] audit: type=1400 audit(1759122857.492:372): avc: denied { open } for pid=6935 comm="syz.4.239" path="/45/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 160.765031][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.767516][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.927900][ T5917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 160.985578][ T5917] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 161.033367][ T5917] usb 1-1: config 1 interface 0 has no altsetting 0 [ 161.045396][ T30] audit: type=1400 audit(1759122857.492:373): avc: denied { ioctl } for pid=6935 comm="syz.4.239" path="/45/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 161.069635][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.085754][ T5917] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 161.099196][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.117888][ T5917] usb 1-1: Product: syz [ 161.122618][ T6951] capability: warning: `syz.1.242' uses 32-bit capabilities (legacy support in use) [ 161.154015][ T5917] usb 1-1: Manufacturer: syz [ 161.158693][ T5917] usb 1-1: SerialNumber: syz [ 161.482540][ T6959] siw: device registration error -23 [ 161.514485][ T5917] smsusb:smsusb_probe: board id=8, interface number 0 [ 161.525129][ T5917] smsusb:smsusb_probe: Device initialized with return code -19 [ 161.661279][ T5917] usb 1-1: USB disconnect, device number 2 [ 161.970831][ T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 162.152598][ T6964] FAULT_INJECTION: forcing a failure. [ 162.152598][ T6964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.168675][ T6964] CPU: 1 UID: 0 PID: 6964 Comm: syz.0.246 Not tainted syzkaller #0 PREEMPT(full) [ 162.168701][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.168712][ T6964] Call Trace: [ 162.168719][ T6964] [ 162.168728][ T6964] dump_stack_lvl+0x16c/0x1f0 [ 162.168758][ T6964] should_fail_ex+0x512/0x640 [ 162.168788][ T6964] _copy_to_user+0x32/0xd0 [ 162.168820][ T6964] simple_read_from_buffer+0xcb/0x170 [ 162.168844][ T6964] proc_fail_nth_read+0x197/0x240 [ 162.168870][ T6964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.168896][ T6964] ? rw_verify_area+0xcf/0x6c0 [ 162.168926][ T6964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.168950][ T6964] vfs_read+0x1e4/0xcf0 [ 162.168975][ T6964] ? __pfx___mutex_lock+0x10/0x10 [ 162.169003][ T6964] ? __pfx_vfs_read+0x10/0x10 [ 162.169033][ T6964] ? __fget_files+0x20e/0x3c0 [ 162.169066][ T6964] ksys_read+0x12a/0x250 [ 162.169086][ T6964] ? __pfx_ksys_read+0x10/0x10 [ 162.169115][ T6964] do_syscall_64+0xcd/0x4e0 [ 162.169145][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.169165][ T6964] RIP: 0033:0x7f1339b8d8dc [ 162.169181][ T6964] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.169199][ T6964] RSP: 002b:00007f133aae6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.169217][ T6964] RAX: ffffffffffffffda RBX: 00007f1339de5fa0 RCX: 00007f1339b8d8dc [ 162.169231][ T6964] RDX: 000000000000000f RSI: 00007f133aae60a0 RDI: 0000000000000004 [ 162.169243][ T6964] RBP: 00007f133aae6090 R08: 0000000000000000 R09: 0000000000000000 [ 162.169255][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 162.169266][ T6964] R13: 00007f1339de6038 R14: 00007f1339de5fa0 R15: 00007ffc05ca8148 [ 162.169297][ T6964] [ 162.369823][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 162.415004][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 162.426206][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24697, setting to 1024 [ 162.437351][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.451932][ T24] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 162.462702][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.474472][ T24] usb 4-1: config 0 descriptor?? [ 162.743687][ T6974] fuse: Unknown parameter '00000000000000000000T8ΟPjxkn~\K\gDkE.ݯY龏LX7<ŗ^{bF`/ġS僄}xWmS' [ 162.918737][ T24] hid-multitouch 0003:0457:07DA.0003: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.3-1/input0 [ 163.024589][ T6978] netlink: 36 bytes leftover after parsing attributes in process `syz.4.251'. [ 163.496502][ T24] usb 4-1: USB disconnect, device number 7 [ 163.568078][ T6984] random: crng reseeded on system resumption [ 163.669651][ T30] audit: type=1400 audit(1759122860.372:374): avc: denied { write } for pid=6983 comm="syz.2.252" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 163.742347][ T6980] fido_id[6980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 163.837333][ T30] audit: type=1400 audit(1759122860.372:375): avc: denied { open } for pid=6983 comm="syz.2.252" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 164.170800][ T30] audit: type=1400 audit(1759122860.642:376): avc: denied { name_connect } for pid=6983 comm="syz.2.252" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 164.785894][ T30] audit: type=1400 audit(1759122861.592:377): avc: denied { bind } for pid=6997 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.787706][ T7000] netlink: 36 bytes leftover after parsing attributes in process `syz.3.257'. [ 164.871034][ T30] audit: type=1400 audit(1759122861.592:378): avc: denied { setopt } for pid=6997 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 165.465266][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 165.511520][ T7000] netlink: 48 bytes leftover after parsing attributes in process `syz.3.257'. [ 166.513137][ T7028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 166.596550][ T7027] siw: device registration error -23 [ 166.637834][ T7020] syz.1.263 (7020): /proc/7018/oom_adj is deprecated, please use /proc/7018/oom_score_adj instead. [ 167.073436][ T30] audit: type=1400 audit(1759122863.622:379): avc: denied { connect } for pid=7021 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.188735][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.264433][ T30] audit: type=1400 audit(1759122863.642:380): avc: denied { write } for pid=7021 comm="syz.2.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 167.631875][ T30] audit: type=1400 audit(1759122863.882:381): avc: denied { read } for pid=7018 comm="syz.1.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 167.681359][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 167.709898][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 167.816508][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 168.052604][ T9] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 168.081264][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.102409][ T9] usb 1-1: Product: syz [ 168.130400][ T9] usb 1-1: Manufacturer: syz [ 168.138682][ T9] usb 1-1: SerialNumber: syz [ 168.151377][ T9] usb 1-1: config 0 descriptor?? [ 168.421125][ T9] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 168.434661][ T9] usb 1-1: USB disconnect, device number 3 [ 170.341905][ T30] audit: type=1326 audit(1759122867.142:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cf38eec9 code=0x7ffc0000 [ 170.422641][ T30] audit: type=1326 audit(1759122867.142:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cf38eec9 code=0x7ffc0000 [ 170.482089][ T7076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7076 comm=syz.0.276 [ 170.512851][ T7065] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 170.575836][ T7076] netlink: 52 bytes leftover after parsing attributes in process `syz.0.276'. [ 170.580963][ T30] audit: type=1326 audit(1759122867.142:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f36cf38eec9 code=0x7ffc0000 [ 170.607877][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.823883][ T7065] siw: device registration error -23 [ 171.054928][ T30] audit: type=1326 audit(1759122867.142:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cf38eec9 code=0x7ffc0000 [ 171.154002][ T30] audit: type=1326 audit(1759122867.142:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cf38eec9 code=0x7ffc0000 [ 171.545769][ T30] audit: type=1326 audit(1759122867.142:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36cf38eec9 code=0x7ffc0000 [ 171.597193][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 171.709709][ T7095] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 171.802531][ T24] usb 5-1: too many configurations: 12, using maximum allowed: 8 [ 171.837048][ T24] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 215 [ 171.851024][ T30] audit: type=1326 audit(1759122867.142:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cf38eec9 code=0x7ffc0000 [ 171.860954][ T24] usb 5-1: can't read configurations, error -22 [ 171.874208][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.160894][ T30] audit: type=1326 audit(1759122867.152:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f36cf38eec9 code=0x7ffc0000 [ 172.659681][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 172.884189][ T30] audit: type=1400 audit(1759122867.322:390): avc: denied { map } for pid=7060 comm="syz.4.273" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.925392][ T30] audit: type=1400 audit(1759122867.322:391): avc: denied { execute } for pid=7060 comm="syz.4.273" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 172.957184][ T30] audit: type=1326 audit(1759122868.242:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cf38eec9 code=0x7ffc0000 [ 172.981089][ T30] audit: type=1326 audit(1759122868.242:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7060 comm="syz.4.273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cf38eec9 code=0x7ffc0000 [ 173.004674][ C0] vkms_vblank_simulate: vblank timer overrun [ 173.261261][ T9] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 173.316044][ T7115] netlink: 830 bytes leftover after parsing attributes in process `syz.1.285'. [ 173.424817][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 173.447491][ T9] usb 1-1: config 0 has no interface number 0 [ 173.546143][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 173.698881][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 173.712148][ T9] usb 1-1: config 0 has no interface number 0 [ 173.721114][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 173.729194][ T9] usb 1-1: config 0 has no interface number 0 [ 173.751805][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 173.759914][ T9] usb 1-1: config 0 has no interface number 0 [ 173.769096][ T9] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 173.990762][ T9] usb 1-1: config 0 has no interface number 0 [ 174.009198][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=87.f7 [ 174.028569][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.446822][ T9] usb 1-1: Product: syz [ 174.670858][ T30] audit: type=1400 audit(1759122870.972:394): avc: denied { execute } for pid=7122 comm="syz.2.288" name="file0" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.720962][ T9] usb 1-1: Manufacturer: syz [ 174.740255][ T9] usb 1-1: SerialNumber: syz [ 174.802320][ T9] usb 1-1: config 0 descriptor?? [ 174.836942][ T9] ttusb_dec_send_command: command bulk message failed: error -22 [ 174.861328][ T30] audit: type=1400 audit(1759122870.972:395): avc: denied { execute_no_trans } for pid=7122 comm="syz.2.288" path="/60/file0" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 174.903378][ T7133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7133 comm=syz.4.289 [ 174.916556][ T9] ttusb-dec 1-1:0.50: probe with driver ttusb-dec failed with error -22 [ 174.947283][ T7138] netlink: 52 bytes leftover after parsing attributes in process `syz.4.289'. [ 174.976874][ T7136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7136 comm=syz.1.290 [ 174.994000][ T7136] netlink: 52 bytes leftover after parsing attributes in process `syz.1.290'. [ 176.458655][ T7111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=7111 comm=syz.0.284 [ 176.820524][ T9] usb 1-1: USB disconnect, device number 4 [ 176.930339][ T30] audit: type=1400 audit(1759122873.732:396): avc: denied { accept } for pid=7144 comm="syz.1.292" lport=42919 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 176.978063][ T30] audit: type=1400 audit(1759122873.772:397): avc: denied { read } for pid=7144 comm="syz.1.292" lport=42919 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 177.048454][ T30] audit: type=1400 audit(1759122873.852:398): avc: denied { setopt } for pid=7144 comm="syz.1.292" lport=42919 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 177.071852][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.379095][ T7148] FAULT_INJECTION: forcing a failure. [ 177.379095][ T7148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.392504][ T7148] CPU: 0 UID: 0 PID: 7148 Comm: syz.1.292 Not tainted syzkaller #0 PREEMPT(full) [ 177.392531][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 177.392549][ T7148] Call Trace: [ 177.392557][ T7148] [ 177.392565][ T7148] dump_stack_lvl+0x16c/0x1f0 [ 177.392597][ T7148] should_fail_ex+0x512/0x640 [ 177.392627][ T7148] _copy_from_user+0x2e/0xd0 [ 177.392658][ T7148] kstrtouint_from_user+0xd6/0x1d0 [ 177.392682][ T7148] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 177.392704][ T7148] ? __lock_acquire+0xb97/0x1ce0 [ 177.392751][ T7148] proc_fail_nth_write+0x83/0x220 [ 177.392777][ T7148] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 177.392810][ T7148] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 177.392833][ T7148] vfs_write+0x29d/0x11d0 [ 177.392860][ T7148] ? __pfx___mutex_lock+0x10/0x10 [ 177.392888][ T7148] ? __pfx_vfs_write+0x10/0x10 [ 177.392920][ T7148] ? __fget_files+0x20e/0x3c0 [ 177.392952][ T7148] ksys_write+0x12a/0x250 [ 177.392973][ T7148] ? __pfx_ksys_write+0x10/0x10 [ 177.393004][ T7148] do_syscall_64+0xcd/0x4e0 [ 177.393034][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.393055][ T7148] RIP: 0033:0x7f236c78d97f [ 177.393072][ T7148] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 177.393091][ T7148] RSP: 002b:00007f236d5a5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 177.393111][ T7148] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f236c78d97f [ 177.393125][ T7148] RDX: 0000000000000001 RSI: 00007f236d5a50a0 RDI: 0000000000000007 [ 177.393137][ T7148] RBP: 00007f236d5a5090 R08: 0000000000000000 R09: 0000000000000000 [ 177.393150][ T7148] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 177.393163][ T7148] R13: 00007f236c9e6128 R14: 00007f236c9e6090 R15: 00007ffc9f9b6208 [ 177.393194][ T7148] [ 177.584937][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.972411][ T7156] tipc: Started in network mode [ 177.977267][ T7156] tipc: Node identity 82c322a4a864, cluster identity 4711 [ 178.027039][ T7158] FAULT_INJECTION: forcing a failure. [ 178.027039][ T7158] name failslab, interval 1, probability 0, space 0, times 0 [ 178.050929][ T7158] CPU: 0 UID: 0 PID: 7158 Comm: syz.2.297 Not tainted syzkaller #0 PREEMPT(full) [ 178.050957][ T7158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.050968][ T7158] Call Trace: [ 178.050975][ T7158] [ 178.050982][ T7158] dump_stack_lvl+0x16c/0x1f0 [ 178.051013][ T7158] should_fail_ex+0x512/0x640 [ 178.051038][ T7158] ? fs_reclaim_acquire+0xae/0x150 [ 178.051067][ T7158] ? tomoyo_encode2+0x100/0x3e0 [ 178.051092][ T7158] should_failslab+0xc2/0x120 [ 178.051116][ T7158] __kmalloc_noprof+0xd2/0x510 [ 178.051136][ T7158] ? d_absolute_path+0x136/0x1a0 [ 178.051168][ T7158] tomoyo_encode2+0x100/0x3e0 [ 178.051199][ T7158] tomoyo_encode+0x29/0x50 [ 178.051223][ T7158] tomoyo_realpath_from_path+0x18f/0x6e0 [ 178.051264][ T7158] tomoyo_path_number_perm+0x245/0x580 [ 178.051286][ T7158] ? tomoyo_path_number_perm+0x237/0x580 [ 178.051310][ T7158] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.051332][ T7156] tipc: Enabled bearer , priority 0 [ 178.051334][ T7158] ? find_held_lock+0x2b/0x80 [ 178.051378][ T7158] ? find_held_lock+0x2b/0x80 [ 178.051399][ T7158] ? hook_file_ioctl_common+0x145/0x410 [ 178.051427][ T7158] ? __fget_files+0x20e/0x3c0 [ 178.051454][ T7158] security_file_ioctl+0x9b/0x240 [ 178.051484][ T7158] __x64_sys_ioctl+0xb7/0x210 [ 178.051522][ T7158] do_syscall_64+0xcd/0x4e0 [ 178.051551][ T7158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.051570][ T7158] RIP: 0033:0x7f8a2938eec9 [ 178.051586][ T7158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.051604][ T7158] RSP: 002b:00007f8a2a222038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.051623][ T7158] RAX: ffffffffffffffda RBX: 00007f8a295e5fa0 RCX: 00007f8a2938eec9 [ 178.051636][ T7158] RDX: 0000000000000000 RSI: 0000000000007001 RDI: 0000000000000003 [ 178.051648][ T7158] RBP: 00007f8a2a222090 R08: 0000000000000000 R09: 0000000000000000 [ 178.051661][ T7158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.051672][ T7158] R13: 00007f8a295e6038 R14: 00007f8a295e5fa0 R15: 00007fffeffe49d8 [ 178.051701][ T7158] [ 178.051809][ T7158] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.221553][ T7160] syzkaller0: entered promiscuous mode [ 178.542318][ T7160] syzkaller0: entered allmulticast mode [ 178.624870][ T7156] tipc: Resetting bearer [ 178.823391][ T7165] siw: device registration error -23 [ 179.292264][ T7174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 179.325853][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 179.327837][ T5929] tipc: Node number set to 715596452 [ 179.352177][ T7155] tipc: Resetting bearer [ 179.357551][ T7174] netlink: 'syz.3.300': attribute type 11 has an invalid length. [ 179.366217][ T7174] netlink: 'syz.3.300': attribute type 13 has an invalid length. [ 179.381500][ T7155] tipc: Disabling bearer [ 179.406952][ T30] audit: type=1400 audit(1759122876.212:399): avc: denied { ioctl } for pid=7168 comm="syz.2.299" path="socket:[12041]" dev="sockfs" ino=12041 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 179.431382][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.533628][ T30] audit: type=1400 audit(1759122876.342:400): avc: denied { ioctl } for pid=7168 comm="syz.2.299" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 179.689301][ T30] audit: type=1400 audit(1759122876.392:401): avc: denied { ioctl } for pid=7181 comm="syz.1.302" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5410 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 179.696028][ T7180] siw: device registration error -23 [ 179.860979][ T7185] ======================================================= [ 179.860979][ T7185] WARNING: The mand mount option has been deprecated and [ 179.860979][ T7185] and is ignored by this kernel. Remove the mand [ 179.860979][ T7185] option from the mount to silence this warning. [ 179.860979][ T7185] ======================================================= [ 179.895826][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.903151][ T7185] cgroup: noprefix used incorrectly [ 180.054732][ T7185] lo speed is unknown, defaulting to 1000 [ 180.570818][ T30] audit: type=1400 audit(1759122877.362:402): avc: denied { create } for pid=7187 comm="syz.1.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 180.623912][ T30] audit: type=1400 audit(1759122877.422:403): avc: denied { map } for pid=7187 comm="syz.1.304" path="/dev/video4" dev="devtmpfs" ino=936 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 180.647049][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.659101][ T7190] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7190 comm=syz.0.303 [ 180.799059][ T7194] netlink: 52 bytes leftover after parsing attributes in process `syz.0.303'. [ 181.952625][ T7199] FAULT_INJECTION: forcing a failure. [ 181.952625][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 181.966117][ T7199] CPU: 0 UID: 0 PID: 7199 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT(full) [ 181.966145][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 181.966157][ T7199] Call Trace: [ 181.966164][ T7199] [ 181.966172][ T7199] dump_stack_lvl+0x16c/0x1f0 [ 181.966211][ T7199] should_fail_ex+0x512/0x640 [ 181.966237][ T7199] ? fs_reclaim_acquire+0xae/0x150 [ 181.966267][ T7199] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 181.966297][ T7199] should_failslab+0xc2/0x120 [ 181.966322][ T7199] __kmalloc_noprof+0xd2/0x510 [ 181.966350][ T7199] tomoyo_realpath_from_path+0xc2/0x6e0 [ 181.966384][ T7199] ? tomoyo_profile+0x47/0x60 [ 181.966408][ T7199] tomoyo_path_number_perm+0x245/0x580 [ 181.966433][ T7199] ? tomoyo_path_number_perm+0x237/0x580 [ 181.966463][ T7199] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 181.966491][ T7199] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.966547][ T7199] ? find_held_lock+0x2b/0x80 [ 181.966572][ T7199] ? hook_file_ioctl_common+0x145/0x410 [ 181.966601][ T7199] ? __fget_files+0x20e/0x3c0 [ 181.966630][ T7199] security_file_ioctl+0x9b/0x240 [ 181.966661][ T7199] __x64_sys_ioctl+0xb7/0x210 [ 181.966695][ T7199] do_syscall_64+0xcd/0x4e0 [ 181.966724][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.966745][ T7199] RIP: 0033:0x7effd4b8eec9 [ 181.966761][ T7199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.966781][ T7199] RSP: 002b:00007effd5a79038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.966801][ T7199] RAX: ffffffffffffffda RBX: 00007effd4de6180 RCX: 00007effd4b8eec9 [ 181.966815][ T7199] RDX: 0000200000000140 RSI: 00000000c2604111 RDI: 0000000000000007 [ 181.966828][ T7199] RBP: 00007effd5a79090 R08: 0000000000000000 R09: 0000000000000000 [ 181.966841][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.966853][ T7199] R13: 00007effd4de6218 R14: 00007effd4de6180 R15: 00007ffdfc194438 [ 181.966883][ T7199] [ 181.966911][ T7199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 183.049453][ T7212] cgroup2: Unknown parameter 'memory_hugetlb_accountin' [ 183.058032][ T30] audit: type=1400 audit(1759122879.852:404): avc: denied { mounton } for pid=7211 comm="syz.3.310" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 183.918584][ T30] audit: type=1400 audit(1759122880.722:405): avc: denied { append } for pid=7213 comm="syz.3.311" name="dlm-control" dev="devtmpfs" ino=94 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.218304][ T7241] siw: device registration error -23 [ 186.472306][ T7243] overlay: filesystem on ./bus not supported as upperdir [ 188.802236][ T7274] siw: device registration error -23 [ 190.637955][ T30] audit: type=1400 audit(1759122887.442:406): avc: denied { write } for pid=7297 comm="syz.4.334" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 190.948421][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 190.954519][ T5862] Bluetooth: hci0: command 0x0406 tx timeout [ 190.954554][ T5860] Bluetooth: hci2: command 0x0406 tx timeout [ 190.960578][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 190.969720][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 191.420435][ T7294] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.997274][ T7294] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.024678][ T7317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=7317 comm=syz.1.336 [ 192.129271][ T7313] siw: device registration error -23 [ 192.605913][ T7294] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.053845][ T7294] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.228820][ T7329] trusted_key: syz.1.341 sent an empty control message without MSG_MORE. [ 193.588730][ T30] audit: type=1400 audit(1759122890.392:407): avc: denied { map } for pid=7330 comm="syz.4.342" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 193.961055][ T3171] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.990793][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.997126][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.056307][ T3171] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.074658][ T30] audit: type=1400 audit(1759122890.882:408): avc: denied { listen } for pid=7334 comm="syz.2.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 194.094027][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.106361][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.191806][ T7344] rdma_rxe: rxe_newlink: failed to add erspan0 [ 194.583212][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.298887][ T7358] binder: 7357:7358 ioctl c0306201 200000000000 returned -22 [ 195.306608][ T30] audit: type=1400 audit(1759122892.102:409): avc: denied { ioctl } for pid=7357 comm="syz.3.347" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 195.426038][ T30] audit: type=1400 audit(1759122892.102:410): avc: denied { set_context_mgr } for pid=7357 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 195.445676][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.515229][ T30] audit: type=1400 audit(1759122892.852:411): avc: denied { setopt } for pid=7357 comm="syz.3.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 197.740411][ T5928] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 198.430788][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 198.442500][ T5928] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 198.460089][ T5928] usb 5-1: config 0 has no interface number 0 [ 198.646918][ T5928] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.683349][ T5928] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 198.730505][ T5928] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 198.770916][ T5928] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 198.820735][ T5928] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 198.849948][ T5928] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.884983][ T5928] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 198.915337][ T5928] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 198.927054][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 198.945264][ T5928] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 198.970974][ T5928] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.021594][ T5928] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 199.031380][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.047960][ T5928] usb 5-1: Product: syz [ 199.053387][ T5928] usb 5-1: Manufacturer: syz [ 199.059067][ T5928] usb 5-1: SerialNumber: syz [ 199.136833][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 200.280032][ T5928] usb 5-1: config 0 descriptor?? [ 200.370633][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.414021][ T7399] bond0: (slave bridge0): Releasing backup interface [ 200.431837][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.480184][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 200.514470][ T30] audit: type=1400 audit(1759122897.322:412): avc: denied { create } for pid=7401 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.520759][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.553327][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.560676][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.607103][ T9] usb 3-1: config 0 descriptor?? [ 200.637589][ T5928] usb 5-1: can't set config #0, error -71 [ 200.783775][ T7399] batman_adv: batadv0: Interface deactivated: dummy0 [ 200.790474][ T7399] batman_adv: batadv0: Removing interface: dummy0 [ 200.798296][ T5928] usb 5-1: USB disconnect, device number 10 [ 202.224746][ T7399] bridge_slave_0: left allmulticast mode [ 202.251997][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 202.267760][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 202.948221][ T7399] bridge_slave_0: left promiscuous mode [ 203.215069][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.223058][ T9] usb 3-1: USB disconnect, device number 5 [ 203.291949][ T7399] bridge_slave_1: left allmulticast mode [ 203.297593][ T7399] bridge_slave_1: left promiscuous mode [ 203.312934][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.377092][ T7399] bond0: (slave bond_slave_0): Releasing backup interface [ 203.448502][ T7399] bond0: (slave bond_slave_1): Releasing backup interface [ 203.486823][ T7399] team0: Port device team_slave_0 removed [ 203.509070][ T7399] team0: Port device team_slave_1 removed [ 203.516412][ T7399] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.932801][ T7399] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.982185][ T7399] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.015960][ T7399] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.512623][ T7454] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 205.525543][ T7453] input: syz1 as /devices/virtual/input/input7 [ 205.548308][ T7454] netlink: 456 bytes leftover after parsing attributes in process `syz.0.372'. [ 205.612021][ T7455] FAULT_INJECTION: forcing a failure. [ 205.612021][ T7455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.683386][ T7455] CPU: 1 UID: 0 PID: 7455 Comm: syz.3.371 Not tainted syzkaller #0 PREEMPT(full) [ 205.683414][ T7455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.683426][ T7455] Call Trace: [ 205.683433][ T7455] [ 205.683440][ T7455] dump_stack_lvl+0x16c/0x1f0 [ 205.683472][ T7455] should_fail_ex+0x512/0x640 [ 205.683503][ T7455] _copy_from_user+0x2e/0xd0 [ 205.683532][ T7455] input_event_from_user+0x133/0x3b0 [ 205.683555][ T7455] ? __pfx_input_event_from_user+0x10/0x10 [ 205.683575][ T7455] ? __pfx___might_resched+0x10/0x10 [ 205.683600][ T7455] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 205.683625][ T7455] ? input_event+0xb6/0xd0 [ 205.683657][ T7455] uinput_write+0xbb4/0x12b0 [ 205.683689][ T7455] ? __pfx_uinput_write+0x10/0x10 [ 205.683716][ T7455] ? bpf_lsm_file_permission+0x9/0x10 [ 205.683742][ T7455] ? security_file_permission+0x71/0x210 [ 205.683774][ T7455] ? rw_verify_area+0xcf/0x6c0 [ 205.683806][ T7455] ? __pfx_uinput_write+0x10/0x10 [ 205.683829][ T7455] vfs_write+0x29d/0x11d0 [ 205.683856][ T7455] ? __pfx_vfs_write+0x10/0x10 [ 205.683875][ T7455] ? find_held_lock+0x2b/0x80 [ 205.683901][ T7455] ? __fget_files+0x204/0x3c0 [ 205.683928][ T7455] ? __fget_files+0x20e/0x3c0 [ 205.683959][ T7455] ksys_write+0x1f8/0x250 [ 205.683980][ T7455] ? __pfx_ksys_write+0x10/0x10 [ 205.684010][ T7455] do_syscall_64+0xcd/0x4e0 [ 205.684040][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.684060][ T7455] RIP: 0033:0x7effd4b8eec9 [ 205.684076][ T7455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.684095][ T7455] RSP: 002b:00007effd5a9a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.684114][ T7455] RAX: ffffffffffffffda RBX: 00007effd4de6090 RCX: 00007effd4b8eec9 [ 205.684133][ T7455] RDX: 000000000000045c RSI: 0000200000000900 RDI: 0000000000000003 [ 205.684145][ T7455] RBP: 00007effd5a9a090 R08: 0000000000000000 R09: 0000000000000000 [ 205.684157][ T7455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.684169][ T7455] R13: 00007effd4de6128 R14: 00007effd4de6090 R15: 00007ffdfc194438 [ 205.684199][ T7455] [ 206.188079][ T30] audit: type=1400 audit(1759122902.972:413): avc: denied { connect } for pid=7456 comm="syz.1.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 206.660819][ T30] audit: type=1400 audit(1759122902.982:414): avc: denied { ioctl } for pid=7456 comm="syz.1.373" path="socket:[13634]" dev="sockfs" ino=13634 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 208.017795][ T30] audit: type=1400 audit(1759122904.822:415): avc: denied { append } for pid=7463 comm="syz.4.375" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 209.582072][ T7510] FAULT_INJECTION: forcing a failure. [ 209.582072][ T7510] name failslab, interval 1, probability 0, space 0, times 0 [ 209.623649][ T7510] CPU: 0 UID: 0 PID: 7510 Comm: syz.4.387 Not tainted syzkaller #0 PREEMPT(full) [ 209.623678][ T7510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 209.623690][ T7510] Call Trace: [ 209.623697][ T7510] [ 209.623704][ T7510] dump_stack_lvl+0x16c/0x1f0 [ 209.623726][ T7510] should_fail_ex+0x512/0x640 [ 209.623740][ T7510] ? fs_reclaim_acquire+0xae/0x150 [ 209.623756][ T7510] ? tomoyo_init_log+0x1385/0x2140 [ 209.623772][ T7510] should_failslab+0xc2/0x120 [ 209.623785][ T7510] __kmalloc_noprof+0xd2/0x510 [ 209.623802][ T7510] tomoyo_init_log+0x1385/0x2140 [ 209.623826][ T7510] ? __pfx_tomoyo_init_log+0x10/0x10 [ 209.623841][ T7510] ? tomoyo_profile+0x47/0x60 [ 209.623851][ T7510] ? tomoyo_domain_quota_is_ok+0x2f6/0x5a0 [ 209.623868][ T7510] tomoyo_supervisor+0x302/0x13b0 [ 209.623883][ T7510] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 209.623901][ T7510] ? rcu_is_watching+0x12/0xc0 [ 209.623920][ T7510] ? tomoyo_check_acl+0x1f7/0x410 [ 209.623935][ T7510] tomoyo_unix_entry+0x49c/0x650 [ 209.623952][ T7510] ? __pfx_tomoyo_unix_entry+0x10/0x10 [ 209.623978][ T7510] tomoyo_socket_bind_permission+0x305/0x350 [ 209.623995][ T7510] ? __pfx_tomoyo_socket_bind_permission+0x10/0x10 [ 209.624010][ T7510] ? __might_fault+0xe3/0x190 [ 209.624021][ T7510] ? __might_fault+0xe3/0x190 [ 209.624038][ T7510] security_socket_bind+0x9b/0x240 [ 209.624053][ T7510] __sys_bind+0x13e/0x260 [ 209.624065][ T7510] ? __pfx___sys_bind+0x10/0x10 [ 209.624075][ T7510] ? __fget_files+0x20e/0x3c0 [ 209.624093][ T7510] ? __pfx_ksys_write+0x10/0x10 [ 209.624109][ T7510] __x64_sys_bind+0x72/0xb0 [ 209.624119][ T7510] ? lockdep_hardirqs_on+0x7c/0x110 [ 209.624133][ T7510] do_syscall_64+0xcd/0x4e0 [ 209.624148][ T7510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.624160][ T7510] RIP: 0033:0x7f36cf38eec9 [ 209.624176][ T7510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.624187][ T7510] RSP: 002b:00007f36d02c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 209.624198][ T7510] RAX: ffffffffffffffda RBX: 00007f36cf5e5fa0 RCX: 00007f36cf38eec9 [ 209.624205][ T7510] RDX: 000000000000006e RSI: 0000200000003000 RDI: 0000000000000005 [ 209.624212][ T7510] RBP: 00007f36d02c7090 R08: 0000000000000000 R09: 0000000000000000 [ 209.624219][ T7510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.624225][ T7510] R13: 00007f36cf5e6038 R14: 00007f36cf5e5fa0 R15: 00007ffe49ec9f28 [ 209.624241][ T7510] [ 209.876079][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.484839][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.384'. [ 210.560228][ T30] audit: type=1400 audit(1759122907.362:416): avc: denied { ioctl } for pid=7516 comm="syz.4.389" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 211.054046][ T7526] rdma_rxe: rxe_newlink: failed to add erspan0 [ 212.757361][ T7539] siw: device registration error -23 [ 213.400951][ T7546] syzkaller0: entered promiscuous mode [ 213.406455][ T7546] syzkaller0: entered allmulticast mode [ 217.272369][ T7569] syz.3.401 (7569): drop_caches: 2 [ 218.459806][ T30] audit: type=1400 audit(1759122915.262:417): avc: denied { execute } for pid=7580 comm="syz.3.406" path="/selinux/status" dev="selinuxfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 219.226040][ T7585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.405'. [ 219.553591][ T7597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7597 comm=syz.1.412 [ 219.566714][ T7597] netlink: 52 bytes leftover after parsing attributes in process `syz.1.412'. [ 221.196133][ T7620] QAT: failed to copy from user cfg_data. [ 221.268571][ T30] audit: type=1400 audit(1759122918.062:418): avc: denied { create } for pid=7619 comm="syz.1.416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 221.268619][ T30] audit: type=1400 audit(1759122918.062:419): avc: denied { read } for pid=7619 comm="syz.1.416" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 221.268661][ T30] audit: type=1400 audit(1759122918.062:420): avc: denied { open } for pid=7619 comm="syz.1.416" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 221.268703][ T30] audit: type=1400 audit(1759122918.062:421): avc: denied { ioctl } for pid=7619 comm="syz.1.416" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 221.327849][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.341108][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 221.428207][ C0] vkms_vblank_simulate: vblank timer overrun [ 221.551471][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 221.577948][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.595384][ T978] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 221.614291][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.650219][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 221.675630][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.703339][ T9] usb 4-1: config 0 descriptor?? [ 221.782769][ T978] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.819422][ T978] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.829921][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.964963][ T7630] can0: slcan on ttyS3. [ 222.854217][ T978] usb 1-1: config 0 descriptor?? [ 222.982161][ T7624] can0 (unregistered): slcan off ttyS3. [ 223.776173][ T7628] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 223.792139][ T978] usb 1-1: can't set config #0, error -71 [ 223.808304][ T9] ft260 0003:0403:6030.0004: unknown main item tag 0x7 [ 223.825660][ T978] usb 1-1: USB disconnect, device number 5 [ 223.949479][ T7633] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 224.037122][ T9] ft260 0003:0403:6030.0004: chip code: 6424 8183 [ 224.236225][ T9] ft260 0003:0403:6030.0004: failed to retrieve system status [ 224.273498][ T9] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -71 [ 224.285269][ T7634] siw: device registration error -23 [ 224.360601][ T9] usb 4-1: USB disconnect, device number 8 [ 225.180455][ T30] audit: type=1400 audit(1759122921.982:422): avc: denied { read append } for pid=7641 comm="syz.1.423" name="file1" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 225.204002][ T7642] sd 0:0:1:0: PR command failed: 1026 [ 225.215633][ T7642] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 225.225713][ T7642] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 225.227263][ T30] audit: type=1400 audit(1759122921.982:423): avc: denied { open } for pid=7641 comm="syz.1.423" path="/95/file0/file1" dev="fuse" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 225.368819][ T30] audit: type=1400 audit(1759122921.992:424): avc: denied { ioctl } for pid=7641 comm="syz.1.423" path="/95/file0/file1" dev="fuse" ino=3 ioctlcmd=0x70c8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 225.527186][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 225.650293][ T30] audit: type=1400 audit(1759122922.042:425): avc: denied { create } for pid=7647 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 225.848564][ T30] audit: type=1400 audit(1759122922.652:426): avc: denied { bind } for pid=7649 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 225.880803][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 225.890599][ T30] audit: type=1400 audit(1759122922.652:427): avc: denied { setopt } for pid=7649 comm="syz.0.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 226.031022][ T9] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 226.048712][ T9] usb 5-1: config 0 has no interface number 0 [ 226.295561][ T9] usb 5-1: config 0 interface 184 has no altsetting 0 [ 226.305219][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 226.324193][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.470762][ T9] usb 5-1: Product: syz [ 226.491627][ T9] usb 5-1: Manufacturer: syz [ 226.496513][ T9] usb 5-1: SerialNumber: syz [ 226.506439][ T9] usb 5-1: config 0 descriptor?? [ 226.545534][ T9] smsc75xx v1.0.0 [ 226.751045][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 226.924431][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 226.961595][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 226.984550][ T9] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 227.055167][ T7673] FAULT_INJECTION: forcing a failure. [ 227.055167][ T7673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.068359][ T7673] CPU: 0 UID: 0 PID: 7673 Comm: syz.1.430 Not tainted syzkaller #0 PREEMPT(full) [ 227.068387][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.068399][ T7673] Call Trace: [ 227.068407][ T7673] [ 227.068415][ T7673] dump_stack_lvl+0x16c/0x1f0 [ 227.068447][ T7673] should_fail_ex+0x512/0x640 [ 227.068478][ T7673] _copy_from_user+0x2e/0xd0 [ 227.068509][ T7673] copy_msghdr_from_user+0x98/0x160 [ 227.068535][ T7673] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 227.068567][ T7673] ? finish_task_switch.isra.0+0x221/0xc10 [ 227.068602][ T7673] ___sys_sendmsg+0xfe/0x1d0 [ 227.068629][ T7673] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.068693][ T7673] __sys_sendmsg+0x16d/0x220 [ 227.068719][ T7673] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.068743][ T7673] ? ksys_write+0x1a2/0x250 [ 227.068789][ T7673] do_syscall_64+0xcd/0x4e0 [ 227.068819][ T7673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.068841][ T7673] RIP: 0033:0x7f236c78eec9 [ 227.068857][ T7673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.068877][ T7673] RSP: 002b:00007f236d584038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.068897][ T7673] RAX: ffffffffffffffda RBX: 00007f236c9e6180 RCX: 00007f236c78eec9 [ 227.068911][ T7673] RDX: 0000000000000080 RSI: 00002000000003c0 RDI: 0000000000000009 [ 227.068924][ T7673] RBP: 00007f236d584090 R08: 0000000000000000 R09: 0000000000000000 [ 227.068937][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.068949][ T7673] R13: 00007f236c9e6218 R14: 00007f236c9e6180 R15: 00007ffc9f9b6208 [ 227.068978][ T7673] [ 227.423657][ T9] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 227.876945][ T30] audit: type=1400 audit(1759122924.662:428): avc: denied { map } for pid=7643 comm="syz.4.424" path="socket:[14865]" dev="sockfs" ino=14865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 227.979381][ T7683] netlink: 264 bytes leftover after parsing attributes in process `syz.2.434'. [ 228.872730][ T30] audit: type=1400 audit(1759122925.302:429): avc: denied { mount } for pid=7681 comm="syz.1.433" name="/" dev="autofs" ino=14068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 229.120723][ T30] audit: type=1400 audit(1759122925.912:430): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 229.198935][ T7695] bridge0: port 3(gretap0) entered blocking state [ 229.206285][ T7695] bridge0: port 3(gretap0) entered disabled state [ 229.215278][ T7695] gretap0: entered allmulticast mode [ 229.466278][ T24] hid-generic 0000:0003:0001.0005: item fetching failed at offset 0/2 [ 229.497652][ T24] hid-generic 0000:0003:0001.0005: probe with driver hid-generic failed with error -22 [ 229.579043][ T7705] gfs2: gfs2 mount does not exist [ 230.274852][ T5929] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 230.942499][ T5929] usb 3-1: config index 0 descriptor too short (expected 45, got 27) [ 230.950624][ T5929] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 231.031802][ T5929] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 231.051743][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.067379][ T5929] usb 3-1: Product: syz [ 231.076007][ T5929] usb 3-1: Manufacturer: syz [ 231.104549][ T5929] usb 3-1: SerialNumber: syz [ 231.116632][ T5990] IPVS: starting estimator thread 0... [ 231.152814][ T5929] rtl8150 3-1:1.0: couldn't find required endpoints [ 231.159645][ T5929] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 231.234551][ T5929] usb 5-1: USB disconnect, device number 11 [ 231.271157][ T7719] IPVS: using max 62 ests per chain, 148800 per kthread [ 231.374458][ T7726] fuse: Unknown parameter '0x00000000000000030x000000000000000500000000000000000003' [ 231.376471][ T7707] netlink: 172 bytes leftover after parsing attributes in process `syz.2.439'. [ 231.500165][ T7721] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 231.961212][ T30] audit: type=1400 audit(1759122928.652:431): avc: denied { remove_name } for pid=7723 comm="syz.1.446" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.991535][ T30] audit: type=1400 audit(1759122928.652:432): avc: denied { unlink } for pid=7723 comm="syz.1.446" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.211121][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 232.652649][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.664888][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.694118][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 232.753677][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.778248][ T9] usb 4-1: config 0 descriptor?? [ 233.364785][ T9] arvo 0003:1E7D:30D4.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 233.618620][ T9] usb 3-1: USB disconnect, device number 6 [ 233.722587][ T10] usb 4-1: USB disconnect, device number 9 [ 234.795996][ T30] audit: type=1400 audit(1759122931.602:433): avc: denied { write } for pid=7768 comm="syz.4.456" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.839197][ T30] audit: type=1400 audit(1759122931.632:434): avc: denied { open } for pid=7768 comm="syz.4.456" path="/88/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.890806][ T24] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 234.907502][ T30] audit: type=1400 audit(1759122931.672:435): avc: denied { read } for pid=7768 comm="syz.4.456" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 236.540964][ T30] audit: type=1400 audit(1759122933.322:436): avc: denied { unmount } for pid=5857 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 236.831997][ T7798] netlink: 68 bytes leftover after parsing attributes in process `syz.2.462'. [ 237.136081][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 237.280956][ T7804] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 237.290949][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 237.410245][ T7807] siw: device registration error -23 [ 237.461823][ T5990] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 237.475241][ T9] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 237.494796][ T9] usb 2-1: config 0 has no interface number 0 [ 237.583890][ T24] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 237.584280][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.631402][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 237.664092][ T24] usb 1-1: can't read configurations, error -71 [ 237.780824][ T5990] usb 4-1: Using ep0 maxpacket: 32 [ 237.783921][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 237.800081][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 237.817398][ T5990] usb 4-1: config 0 has an invalid interface number: 146 but max is 0 [ 237.825936][ T5990] usb 4-1: config 0 has no interface number 0 [ 237.832605][ T5990] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 237.847186][ T5990] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 237.875283][ T9] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 237.889942][ T5990] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 237.904979][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.912808][ T5990] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 237.927704][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 237.949508][ T9] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 237.955825][ T5990] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 237.976175][ T5990] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.993927][ T9] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 237.997518][ T5990] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 238.014134][ T9] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.029634][ T9] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 238.056133][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.348774][ T9] usb 2-1: Product: syz [ 238.353661][ T9] usb 2-1: Manufacturer: syz [ 238.358269][ T9] usb 2-1: SerialNumber: syz [ 238.397089][ T9] usb 2-1: config 0 descriptor?? [ 238.419927][ T7794] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 238.428953][ T7794] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 238.438924][ T9] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 238.450799][ T9] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 238.463862][ T9] scsi host1: microtekX6 [ 238.516736][ T5990] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 238.554406][ T5990] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 238.565601][ T5990] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.583613][ T5990] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 238.593091][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.601776][ T5990] usb 4-1: Product: syz [ 238.605964][ T5990] usb 4-1: Manufacturer: syz [ 238.610575][ T5990] usb 4-1: SerialNumber: syz [ 238.633714][ T5990] usb 4-1: config 0 descriptor?? [ 238.640885][ T7800] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 238.660811][ T7800] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 238.677373][ T5990] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 238.687330][ T5990] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 238.709085][ T5990] scsi host2: microtekX6 [ 238.734916][ T3189] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 238.745427][ T30] audit: type=1400 audit(1759122935.552:437): avc: denied { checkpoint_restore } for pid=7825 comm="syz.2.472" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 238.960808][ T3189] usb 5-1: Using ep0 maxpacket: 16 [ 238.967560][ T3189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.980023][ T3189] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 238.980092][ T3189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.983385][ T3189] usb 5-1: config 0 descriptor?? [ 239.898260][ T3189] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 241.450803][ T30] audit: type=1326 audit(1759122938.202:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7817 comm="syz.4.470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cf38eec9 code=0x7fc00000 [ 241.501589][ T3189] usb 5-1: USB disconnect, device number 12 [ 242.132195][ T7863] gfs2: gfs2 mount does not exist [ 243.009076][ T3189] usb 2-1: USB disconnect, device number 6 [ 243.051025][ T5990] usb 4-1: USB disconnect, device number 10 [ 243.108897][ T7871] netlink: 60 bytes leftover after parsing attributes in process `syz.2.482'. [ 243.269068][ T30] audit: type=1400 audit(1759122939.912:439): avc: denied { ioctl } for pid=7870 comm="syz.2.482" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 243.294116][ C0] vkms_vblank_simulate: vblank timer overrun [ 243.396990][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 243.782450][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 243.797652][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.812069][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 243.835747][ T9] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 243.848449][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.857190][ T9] usb 5-1: Product: syz [ 243.883701][ T9] usb 5-1: Manufacturer: syz [ 243.888629][ T9] usb 5-1: SerialNumber: syz [ 243.903524][ T9] usb 5-1: config 0 descriptor?? [ 244.202313][ T9] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 244.712746][ T9] usb 5-1: USB disconnect, device number 13 [ 245.034328][ T7903] cgroup: Invalid name [ 245.315958][ T7903] block device autoloading is deprecated and will be removed. [ 245.419613][ T7901] tmpfs: Bad value for 'mpol' [ 245.424846][ T30] audit: type=1400 audit(1759122942.222:440): avc: denied { mounton } for pid=7900 comm="syz.2.493" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 245.742851][ T7903] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 245.759135][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 245.770776][ T7903] qnx6: wrong signature (magic) in superblock #1. [ 245.777270][ T7903] qnx6: unable to read the first superblock [ 246.050752][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 246.059813][ T30] audit: type=1400 audit(1759122942.862:441): avc: denied { relabelfrom } for pid=7912 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 246.090623][ T9] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 246.104279][ T9] usb 5-1: config 0 has no interface number 0 [ 246.116689][ T9] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 246.138733][ T30] audit: type=1400 audit(1759122942.862:442): avc: denied { relabelto } for pid=7912 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 246.164211][ T9] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 246.205566][ T9] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 246.232974][ T9] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 246.253353][ T9] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 246.267295][ T9] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 246.277355][ T9] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 246.299046][ T7915] siw: device registration error -23 [ 246.663868][ T9] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 246.686576][ T9] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 246.814382][ T9] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.334689][ T9] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 247.350561][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.358862][ T9] usb 5-1: Product: syz [ 247.364143][ T9] usb 5-1: Manufacturer: syz [ 247.368773][ T9] usb 5-1: SerialNumber: syz [ 247.377226][ T9] usb 5-1: config 0 descriptor?? [ 247.397290][ T7909] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 247.448718][ T7909] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 247.466955][ T7929] fuse: Unknown parameter '00000000000000000000T8ΟPjxkn~\K\gDkE.ݯY龏LX7<ŗ^{bF`/ġS僄}xWmS' [ 247.469377][ T9] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 247.553000][ T9] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 247.614279][ T9] scsi host1: microtekX6 [ 247.887164][ T7940] can0: slcan on ttyS3. [ 248.589117][ T7938] can0 (unregistered): slcan off ttyS3. [ 248.687320][ T7944] capability: warning: `syz.3.501' uses deprecated v2 capabilities in a way that may be insecure [ 249.480068][ T30] audit: type=1400 audit(1759122946.282:443): avc: denied { bind } for pid=7965 comm="syz.2.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 249.780792][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 250.027686][ T7976] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.507'. [ 250.272366][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 250.298075][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 250.332897][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 250.365188][ T24] usb 5-1: USB disconnect, device number 14 [ 250.458009][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 250.481226][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.491202][ T9] usb 4-1: Product: syz [ 250.557134][ T9] usb 4-1: Manufacturer: syz [ 250.611610][ T7992] siw: device registration error -23 [ 250.644157][ T9] usb 4-1: SerialNumber: syz [ 250.940981][ T9] usb 4-1: config 0 descriptor?? [ 251.896513][ T9] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 252.031486][ T8004] binder: 8000:8004 ioctl 4018620d 0 returned -22 [ 252.081278][ T8004] binder: 8000:8004 ioctl c0306201 0 returned -14 [ 252.110383][ T24] usb 4-1: USB disconnect, device number 11 [ 253.935376][ T8020] /dev/sg0: Can't lookup blockdev [ 254.326823][ T92] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 254.385549][ T92] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 254.450879][ T8028] netlink: 20 bytes leftover after parsing attributes in process `syz.0.517'. [ 254.483463][ T8027] FAULT_INJECTION: forcing a failure. [ 254.483463][ T8027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.588088][ T8027] CPU: 0 UID: 0 PID: 8027 Comm: syz.3.518 Not tainted syzkaller #0 PREEMPT(full) [ 254.588116][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 254.588127][ T8027] Call Trace: [ 254.588133][ T8027] [ 254.588141][ T8027] dump_stack_lvl+0x16c/0x1f0 [ 254.588169][ T8027] should_fail_ex+0x512/0x640 [ 254.588197][ T8027] _copy_to_user+0x32/0xd0 [ 254.588225][ T8027] simple_read_from_buffer+0xcb/0x170 [ 254.588249][ T8027] proc_fail_nth_read+0x197/0x240 [ 254.588274][ T8027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.588301][ T8027] ? rw_verify_area+0xcf/0x6c0 [ 254.588332][ T8027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.588356][ T8027] vfs_read+0x1e4/0xcf0 [ 254.588381][ T8027] ? __pfx___mutex_lock+0x10/0x10 [ 254.588409][ T8027] ? __pfx_vfs_read+0x10/0x10 [ 254.588438][ T8027] ? __fget_files+0x20e/0x3c0 [ 254.588469][ T8027] ksys_read+0x12a/0x250 [ 254.588489][ T8027] ? __pfx_ksys_read+0x10/0x10 [ 254.588519][ T8027] do_syscall_64+0xcd/0x4e0 [ 254.588549][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.588570][ T8027] RIP: 0033:0x7effd4b8d8dc [ 254.588588][ T8027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.588607][ T8027] RSP: 002b:00007effd5abb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.588627][ T8027] RAX: ffffffffffffffda RBX: 00007effd4de5fa0 RCX: 00007effd4b8d8dc [ 254.588641][ T8027] RDX: 000000000000000f RSI: 00007effd5abb0a0 RDI: 0000000000000007 [ 254.588654][ T8027] RBP: 00007effd5abb090 R08: 0000000000000000 R09: 0000000000000000 [ 254.588666][ T8027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.588678][ T8027] R13: 00007effd4de6038 R14: 00007effd4de5fa0 R15: 00007ffdfc194438 [ 254.588716][ T8027] [ 255.551817][ T30] audit: type=1400 audit(1759122951.852:444): avc: denied { setopt } for pid=8031 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 255.553655][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.586073][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.937923][ T30] audit: type=1400 audit(1759122952.062:445): avc: denied { append } for pid=8033 comm="syz.3.521" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.067703][ T5170] Bluetooth: hci4: command 0x0406 tx timeout [ 256.091663][ T92] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 256.241940][ T92] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.252097][ T92] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.272184][ T92] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 256.320763][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.341603][ T92] usb 2-1: config 0 descriptor?? [ 256.872639][ T92] usbhid 2-1:0.0: can't add hid device: -71 [ 256.878598][ T92] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 256.982392][ T92] usb 2-1: USB disconnect, device number 7 [ 257.593482][ T24] hid-generic 0000:0003:0001.0009: item fetching failed at offset 0/2 [ 257.618594][ T24] hid-generic 0000:0003:0001.0009: probe with driver hid-generic failed with error -22 [ 259.052367][ T5928] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 259.475625][ T5928] usb 3-1: Using ep0 maxpacket: 8 [ 259.499490][ T30] audit: type=1400 audit(1759122956.222:446): avc: denied { name_bind } for pid=8077 comm="syz.0.531" src=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 259.511933][ T5928] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 259.554278][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.583339][ T5928] usb 3-1: Product: syz [ 259.611218][ T5928] usb 3-1: Manufacturer: syz [ 259.624343][ T5928] usb 3-1: SerialNumber: syz [ 259.647030][ T5928] usb 3-1: config 0 descriptor?? [ 259.673295][ T5928] gspca_main: sq930x-2.14.0 probing 2770:930c [ 260.490880][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 260.551435][ T30] audit: type=1400 audit(1759122957.042:447): avc: denied { write } for pid=8094 comm="syz.1.534" name="usbmon4" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 260.741525][ T9] usb 2-1: too many configurations: 234, using maximum allowed: 8 [ 260.751020][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 260.758617][ T9] usb 2-1: can't read configurations, error -61 [ 260.911043][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 261.081473][ T9] usb 2-1: too many configurations: 234, using maximum allowed: 8 [ 261.106696][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 261.130834][ T9] usb 2-1: can't read configurations, error -61 [ 261.139809][ T9] usb usb2-port1: attempt power cycle [ 261.311462][ T5928] gspca_sq930x: reg_w 0105 0e00 failed -71 [ 261.450766][ T8121] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 261.546504][ T8123] siw: device registration error -23 [ 261.621801][ T5928] gspca_sq930x: Sensor ov9630 not yet treated [ 261.809624][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 261.819544][ T5928] sq930x 3-1:0.0: probe with driver sq930x failed with error -22 [ 261.832290][ T9] usb 2-1: too many configurations: 234, using maximum allowed: 8 [ 261.846394][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 261.859116][ T9] usb 2-1: can't read configurations, error -61 [ 261.933955][ T5928] usb 3-1: USB disconnect, device number 7 [ 262.094245][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 262.205317][ T8126] o2cb: This node has not been configured. [ 262.211452][ T8126] o2cb: Cluster check failed. Fix errors before retrying. [ 262.218725][ T8126] (syz.2.541,8126,0):user_dlm_register:674 ERROR: status = -22 [ 262.226521][ T8126] (syz.2.541,8126,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "bus" [ 262.387093][ T30] audit: type=1400 audit(1759122959.002:448): avc: denied { ioctl } for pid=8124 comm="syz.2.541" path="socket:[15838]" dev="sockfs" ino=15838 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 262.443780][ T9] usb 2-1: too many configurations: 234, using maximum allowed: 8 [ 262.462181][ T30] audit: type=1400 audit(1759122959.012:449): avc: denied { add_name } for pid=8124 comm="syz.2.541" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 262.483443][ T9] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 262.491095][ T9] usb 2-1: can't read configurations, error -61 [ 262.502184][ T9] usb usb2-port1: unable to enumerate USB device [ 262.533716][ T30] audit: type=1400 audit(1759122959.012:450): avc: denied { create } for pid=8124 comm="syz.2.541" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 262.594029][ T30] audit: type=1400 audit(1759122959.012:451): avc: denied { associate } for pid=8124 comm="syz.2.541" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 262.760764][ T5928] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 263.384209][ T5928] usb 3-1: config 0 has an invalid interface number: 207 but max is 0 [ 264.591830][ T5928] usb 3-1: config 0 has no interface number 0 [ 264.598015][ T5928] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=da.df [ 264.612398][ T5928] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.636830][ T5928] usb 3-1: config 0 descriptor?? [ 264.934077][ T5928] usb 3-1: selecting invalid altsetting 3 [ 264.940010][ T5928] comedi comedi5: could not set alternate setting 3 in high speed [ 264.960362][ T5928] usbdux 3-1:0.207: driver 'usbdux' failed to auto-configure device. [ 264.985185][ T5928] usbdux 3-1:0.207: probe with driver usbdux failed with error -22 [ 265.717658][ T5928] usb 3-1: USB disconnect, device number 8 [ 265.786909][ T8150] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 266.811234][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 267.204100][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 267.243975][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 267.255654][ T9] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 267.280720][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.292815][ T9] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 267.380886][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.411432][ T9] usb 4-1: Product: syz [ 267.431429][ T9] usb 4-1: Manufacturer: syz [ 267.444134][ T9] usb 4-1: SerialNumber: syz [ 267.472673][ T9] usb 4-1: config 0 descriptor?? [ 267.601606][ T8176] siw: device registration error -23 [ 268.029659][ T9] gs_usb 4-1:0.0: Configuring for 2 interfaces [ 269.051633][ T30] audit: type=1400 audit(1759122965.852:452): avc: denied { connect } for pid=8181 comm="syz.1.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.089993][ T9] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EREMOTEIO) [ 269.320881][ T3189] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 270.108581][ T9] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 270.384411][ T3189] usb 2-1: not running at top speed; connect to a high speed hub [ 270.399233][ T9] usb 4-1: USB disconnect, device number 12 [ 270.416472][ T3189] usb 2-1: config 2 has an invalid interface number: 181 but max is 1 [ 270.448405][ T3189] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 270.481211][ T3189] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 270.497496][ T3189] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 270.516768][ T3189] usb 2-1: config 2 has no interface number 0 [ 270.528741][ T3189] usb 2-1: config 2 interface 181 altsetting 1 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 270.557272][ T3189] usb 2-1: config 2 interface 181 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 2 [ 270.571449][ T3189] usb 2-1: config 2 interface 181 has no altsetting 0 [ 270.580047][ T3189] usb 2-1: New USB device found, idVendor=19d2, idProduct=1167, bcdDevice=26.ba [ 270.589517][ T3189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.597767][ T3189] usb 2-1: Product: syz [ 270.604296][ T3189] usb 2-1: Manufacturer: syz [ 270.608886][ T3189] usb 2-1: SerialNumber: syz [ 270.721132][ T30] audit: type=1400 audit(1759122967.502:453): avc: denied { remount } for pid=8203 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 270.767033][ T8209] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.775410][ T8209] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.791725][ T8209] bridge0: entered allmulticast mode [ 270.889640][ T5928] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 271.061168][ T8207] bridge_slave_1: left allmulticast mode [ 271.071014][ T8207] bridge_slave_1: left promiscuous mode [ 271.081979][ T3189] option 2-1:2.181: GSM modem (1-port) converter detected [ 271.192121][ T8207] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.227605][ T8207] bridge_slave_0: left allmulticast mode [ 271.237060][ T8207] bridge_slave_0: left promiscuous mode [ 271.238104][ T3189] usb 2-1: USB disconnect, device number 12 [ 271.711804][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 271.719207][ T8207] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.736663][ T3189] option 2-1:2.181: device disconnected [ 271.750928][ T5928] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 271.770781][ T5928] usb 5-1: config 0 has no interface number 0 [ 271.852361][ T5928] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 271.871024][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.878887][ T8217] FAULT_INJECTION: forcing a failure. [ 271.878887][ T8217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.879176][ T5928] usb 5-1: Product: syz [ 271.901001][ T5928] usb 5-1: Manufacturer: syz [ 271.906269][ T5928] usb 5-1: SerialNumber: syz [ 271.920902][ T8217] CPU: 1 UID: 0 PID: 8217 Comm: syz.2.566 Not tainted syzkaller #0 PREEMPT(full) [ 271.920928][ T8217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.920943][ T8217] Call Trace: [ 271.920950][ T8217] [ 271.920958][ T8217] dump_stack_lvl+0x16c/0x1f0 [ 271.920989][ T8217] should_fail_ex+0x512/0x640 [ 271.921020][ T8217] _copy_from_user+0x2e/0xd0 [ 271.921050][ T8217] copy_msghdr_from_user+0x98/0x160 [ 271.921074][ T8217] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 271.921114][ T8217] ___sys_sendmsg+0xfe/0x1d0 [ 271.921141][ T8217] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.921209][ T8217] __sys_sendmsg+0x16d/0x220 [ 271.921235][ T8217] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.921280][ T8217] do_syscall_64+0xcd/0x4e0 [ 271.921309][ T8217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.921330][ T8217] RIP: 0033:0x7f8a2938eec9 [ 271.921345][ T8217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.921364][ T8217] RSP: 002b:00007f8a2a222038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.921380][ T8217] RAX: ffffffffffffffda RBX: 00007f8a295e5fa0 RCX: 00007f8a2938eec9 [ 271.921393][ T8217] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 271.921404][ T8217] RBP: 00007f8a2a222090 R08: 0000000000000000 R09: 0000000000000000 [ 271.921415][ T8217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.921426][ T8217] R13: 00007f8a295e6038 R14: 00007f8a295e5fa0 R15: 00007fffeffe49d8 [ 271.921455][ T8217] [ 272.085532][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.405153][ T5928] usb 5-1: config 0 descriptor?? [ 272.451533][ T5928] smsc95xx v2.0.0 [ 273.004853][ T8198] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.561' sets config #1 [ 273.524773][ T8198] bond_slave_0: entered allmulticast mode [ 274.130098][ T8235] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 274.354843][ T8233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 274.851843][ T5928] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 275.687250][ T5928] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 276.367148][ T5928] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 276.574950][ T8268] netlink: 40 bytes leftover after parsing attributes in process `syz.4.579'. [ 276.657483][ T5928] usb 5-1: USB disconnect, device number 15 [ 278.034487][ T30] audit: type=1400 audit(1759122974.822:454): avc: denied { read write } for pid=8284 comm="syz.1.584" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 278.161327][ T30] audit: type=1400 audit(1759122974.822:455): avc: denied { open } for pid=8284 comm="syz.1.584" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 279.624709][ T8304] C: renamed from team_slave_0 (while UP) [ 279.749391][ T8304] netlink: 'syz.3.589': attribute type 3 has an invalid length. [ 279.868262][ T8304] netlink: 152 bytes leftover after parsing attributes in process `syz.3.589'. [ 279.946081][ T8283] CUSE: unknown device info "KJ H+ۤ2LhnL1`Ccn80(3նi>f_ٮ,<_eF" [ 279.958565][ T8283] CUSE: unknown device info "3ܟ,̘" [ 279.964412][ T8283] CUSE: unknown device info "J2S Z !e/J+-na4D|G$5O~q [ 279.964412][ T8283] fzXSAxjTǔw xRɐQ(hҏj pVdY0|M?2JIv^R@" [ 279.983277][ T8283] CUSE: unknown device info "!To}ݝ&|L+Uoϲ"FstV:׌E gJ<@c4TMM|" [ 279.994575][ T8283] CUSE: DEVNAME unspecified [ 280.151269][ T8304] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 281.672241][ T8319] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 281.798453][ T8320] siw: device registration error -23 [ 282.748159][ T8330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8330 comm=syz.2.594 [ 286.595346][ T8372] mkiss: ax0: crc mode is auto. [ 287.302858][ T30] audit: type=1400 audit(1759122984.112:456): avc: denied { write } for pid=8373 comm="syz.0.607" name="sg0" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 287.326263][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.725686][ T8415] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 288.796709][ T8418] siw: device registration error -23 [ 288.819533][ T8419] mkiss: ax0: crc mode is auto. [ 290.001461][ T8430] FAULT_INJECTION: forcing a failure. [ 290.001461][ T8430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.098854][ T8430] CPU: 1 UID: 0 PID: 8430 Comm: syz.1.623 Not tainted syzkaller #0 PREEMPT(full) [ 290.098883][ T8430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 290.098895][ T8430] Call Trace: [ 290.098901][ T8430] [ 290.098909][ T8430] dump_stack_lvl+0x16c/0x1f0 [ 290.098940][ T8430] should_fail_ex+0x512/0x640 [ 290.098971][ T8430] _copy_from_user+0x2e/0xd0 [ 290.099000][ T8430] copy_msghdr_from_user+0x98/0x160 [ 290.099026][ T8430] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 290.099055][ T8430] ? kfree+0x24f/0x4d0 [ 290.099082][ T8430] ? __pfx__kstrtoull+0x10/0x10 [ 290.099110][ T8430] ___sys_sendmsg+0xfe/0x1d0 [ 290.099135][ T8430] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.099185][ T8430] ? __pfx___might_resched+0x10/0x10 [ 290.099217][ T8430] __sys_sendmmsg+0x200/0x420 [ 290.099246][ T8430] ? __pfx___sys_sendmmsg+0x10/0x10 [ 290.099280][ T8430] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 290.099320][ T8430] ? fput+0x9b/0xd0 [ 290.099347][ T8430] ? ksys_write+0x1ac/0x250 [ 290.099368][ T8430] ? __pfx_ksys_write+0x10/0x10 [ 290.099394][ T8430] __x64_sys_sendmmsg+0x9c/0x100 [ 290.099419][ T8430] ? lockdep_hardirqs_on+0x7c/0x110 [ 290.099444][ T8430] do_syscall_64+0xcd/0x4e0 [ 290.099474][ T8430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.099494][ T8430] RIP: 0033:0x7f236c78eec9 [ 290.099511][ T8430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.099530][ T8430] RSP: 002b:00007f236d5c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 290.099550][ T8430] RAX: ffffffffffffffda RBX: 00007f236c9e5fa0 RCX: 00007f236c78eec9 [ 290.099563][ T8430] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 290.099577][ T8430] RBP: 00007f236d5c6090 R08: 0000000000000000 R09: 0000000000000000 [ 290.099588][ T8430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.099600][ T8430] R13: 00007f236c9e6038 R14: 00007f236c9e5fa0 R15: 00007ffc9f9b6208 [ 290.099628][ T8430] [ 292.223179][ T8451] mkiss: ax0: crc mode is auto. [ 292.786092][ T8462] gfs2: gfs2 mount does not exist [ 293.873155][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.636'. [ 293.991173][ T8470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.552788][ T8478] i2c i2c-0: Invalid block write size 33 [ 294.909320][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 295.222034][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 295.391235][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 295.402376][ T9] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 295.444001][ T8491] netlink: 48 bytes leftover after parsing attributes in process `syz.4.640'. [ 295.454505][ T30] audit: type=1400 audit(1759122992.252:457): avc: denied { nlmsg_read } for pid=8486 comm="syz.4.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 295.479689][ T9] usb 1-1: config 0 has no interface number 0 [ 295.623013][ T9] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 295.638863][ T9] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 295.648185][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.674409][ T9] usb 1-1: Product: syz [ 295.686994][ T9] usb 1-1: Manufacturer: syz [ 295.696189][ T9] usb 1-1: SerialNumber: syz [ 295.878951][ T9] usb 1-1: config 0 descriptor?? [ 296.120151][ T9] usbtouchscreen 1-1:0.214: Failed to read FW rev: 0 [ 296.127893][ T9] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 296.323627][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.332426][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.345926][ T9] usb 1-1: USB disconnect, device number 8 [ 296.352041][ T5853] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 296.956446][ T8517] netlink: 32 bytes leftover after parsing attributes in process `syz.3.646'. [ 298.151771][ T8536] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.651'. [ 300.854253][ T8572] loop5: detected capacity change from 0 to 7 [ 300.935769][ T8572] Dev loop5: unable to read RDB block 7 [ 301.032812][ T8572] loop5: AHDI p1 p2 [ 301.048198][ T8572] loop5: partition table partially beyond EOD, truncated [ 301.255142][ T8572] loop5: p1 start 1702000233 is beyond EOD, truncated [ 301.370570][ T30] audit: type=1400 audit(1759122998.172:458): avc: denied { ioctl } for pid=8586 comm="syz.3.664" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 301.866399][ T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 302.044117][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 302.060815][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.101765][ T9] usb 3-1: config 0 descriptor?? [ 302.198990][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 302.807030][ T30] audit: type=1400 audit(1759122999.612:459): avc: denied { read } for pid=8599 comm="syz.0.667" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 302.859313][ T30] audit: type=1400 audit(1759122999.642:460): avc: denied { open } for pid=8599 comm="syz.0.667" path="/133/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 302.886811][ T30] audit: type=1400 audit(1759122999.642:461): avc: denied { ioctl } for pid=8599 comm="syz.0.667" path="/133/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 303.102356][ T8610] hub 8-0:1.0: USB hub found [ 303.108149][ T8610] hub 8-0:1.0: 1 port detected [ 303.599127][ T30] audit: type=1400 audit(1759123000.402:462): avc: denied { module_request } for pid=8613 comm="syz.1.672" kmod="rtnl-link-bridg" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 303.794406][ T9] usb 3-1: USB disconnect, device number 9 [ 303.817642][ T30] audit: type=1400 audit(1759123000.622:463): avc: denied { map } for pid=8620 comm="syz.4.674" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 303.822316][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 304.052560][ T24] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 304.069753][ T5990] hid-generic 0000:0003:0001.000B: item fetching failed at offset 0/2 [ 304.093035][ T5990] hid-generic 0000:0003:0001.000B: probe with driver hid-generic failed with error -22 [ 304.635400][ T8633] gfs2: gfs2 mount does not exist [ 306.180720][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 306.339192][ T8650] fuse: Unknown parameter '00000000000000000000T8ΟPjxkn~\K\gDkE.ݯY龏LX7<ŗ^{bF`/ġS僄}xWmSHnc̄eۭKG6j%BjBR}Af-W7;ZN' [ 306.490888][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 306.510776][ T24] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 306.519036][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.550701][ T24] usb 5-1: config 0 has no interface number 0 [ 306.588369][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 306.620201][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.703017][ T24] usb 5-1: Product: syz [ 306.736410][ T24] usb 5-1: Manufacturer: syz [ 306.786407][ T24] usb 5-1: SerialNumber: syz [ 306.813821][ T8655] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.683'. [ 306.880702][ T24] usb 5-1: config 0 descriptor?? [ 306.951799][ T8657] FAULT_INJECTION: forcing a failure. [ 306.951799][ T8657] name failslab, interval 1, probability 0, space 0, times 0 [ 307.067379][ T24] usb 5-1: can't set config #0, error -71 [ 307.075016][ T24] usb 5-1: USB disconnect, device number 16 [ 307.275510][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 307.597419][ T8665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.686'. [ 307.611999][ T8657] CPU: 1 UID: 0 PID: 8657 Comm: syz.3.684 Not tainted syzkaller #0 PREEMPT(full) [ 307.612024][ T8657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 307.612048][ T8657] Call Trace: [ 307.612055][ T8657] [ 307.612067][ T8657] dump_stack_lvl+0x16c/0x1f0 [ 307.612098][ T8657] should_fail_ex+0x512/0x640 [ 307.612123][ T8657] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 307.612148][ T8657] should_failslab+0xc2/0x120 [ 307.612172][ T8657] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 307.612194][ T8657] ? security_file_alloc+0x34/0x2b0 [ 307.612230][ T8657] security_file_alloc+0x34/0x2b0 [ 307.612261][ T8657] init_file+0x93/0x4c0 [ 307.612289][ T8657] alloc_empty_file+0x73/0x1e0 [ 307.612318][ T8657] path_openat+0xda/0x2cb0 [ 307.612340][ T8657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.612372][ T8657] ? __pfx_path_openat+0x10/0x10 [ 307.612403][ T8657] do_filp_open+0x20b/0x470 [ 307.612427][ T8657] ? __pfx_do_filp_open+0x10/0x10 [ 307.612472][ T8657] ? alloc_fd+0x471/0x7d0 [ 307.612503][ T8657] do_sys_openat2+0x11b/0x1d0 [ 307.612532][ T8657] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.612562][ T8657] ? __fget_files+0x20e/0x3c0 [ 307.612590][ T8657] __x64_sys_openat+0x174/0x210 [ 307.612619][ T8657] ? __pfx___x64_sys_openat+0x10/0x10 [ 307.612646][ T8657] ? ksys_write+0x1ac/0x250 [ 307.612679][ T8657] do_syscall_64+0xcd/0x4e0 [ 307.612708][ T8657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.612733][ T8657] RIP: 0033:0x7effd4b8eec9 [ 307.612749][ T8657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.612767][ T8657] RSP: 002b:00007effd5abb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.612787][ T8657] RAX: ffffffffffffffda RBX: 00007effd4de5fa0 RCX: 00007effd4b8eec9 [ 307.612801][ T8657] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 307.612815][ T8657] RBP: 00007effd5abb090 R08: 0000000000000000 R09: 0000000000000000 [ 307.612828][ T8657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.612840][ T8657] R13: 00007effd4de6038 R14: 00007effd4de5fa0 R15: 00007ffdfc194438 [ 307.612869][ T8657] [ 308.380984][ T30] audit: type=1400 audit(1759123005.162:464): avc: denied { setopt } for pid=8676 comm="syz.3.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 308.410860][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 308.462581][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 308.600961][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 308.649989][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 308.659547][ T24] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 308.691370][ T9] usb 3-1: device descriptor read/64, error -71 [ 308.726975][ T24] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 308.773350][ T8680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8680 comm=syz.4.692 [ 308.793490][ T24] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 308.803717][ T8680] netlink: 52 bytes leftover after parsing attributes in process `syz.4.692'. [ 308.823640][ T24] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 308.835499][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 308.845175][ T24] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 308.854556][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.941088][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 308.981447][ T24] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 309.773427][ T24] scsi host1: usb-storage 1-1:1.0 [ 309.774591][ T9] usb 3-1: device descriptor read/64, error -71 [ 309.990589][ T9] usb usb3-port1: attempt power cycle [ 310.008039][ T8698] fuse: Unknown parameter '00000000000000000000T8ΟPjxkn~\K\gDkE.ݯY龏LX7<ŗ^{bF`/ġS僄}xWmSHnc̄eۭKG6j%BjBR}Af-W7;ZN' [ 310.046051][ T8675] kvm: faulting far call emulation tainted memory [ 310.062928][ T30] audit: type=1400 audit(1759123006.872:465): avc: denied { create } for pid=8674 comm="syz.0.689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 310.245425][ T5928] usb 1-1: USB disconnect, device number 9 [ 310.351068][ T9] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 310.371445][ T9] usb 3-1: device descriptor read/8, error -71 [ 310.610774][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 310.641299][ T9] usb 3-1: device descriptor read/8, error -71 [ 310.755619][ T9] usb usb3-port1: unable to enumerate USB device [ 310.901534][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.3.697'. [ 311.495061][ T8717] siw: device registration error -23 [ 314.726513][ T8751] fuse: Unknown parameter '00000000000000000000T8ΟPjxkn~\K\gDkE.ݯY龏LX7<ŗ^{bF`/ġS僄}xWmSHnc̄eۭKG6j%BjBR}Af-W7;ZN' [ 314.861010][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 315.518961][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 315.611300][ T8762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 316.046901][ T9] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 316.058862][ T9] usb 3-1: config 0 has no interface number 0 [ 316.130579][ T9] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.143154][ T9] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 316.155970][ T9] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 316.169436][ T9] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 316.179628][ T9] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 316.195621][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 316.206927][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.220811][ T9] usb 3-1: Product: syz [ 316.225015][ T9] usb 3-1: Manufacturer: syz [ 316.233962][ T9] usb 3-1: SerialNumber: syz [ 316.241978][ T9] usb 3-1: config 0 descriptor?? [ 316.642697][ T8770] 9pnet_fd: Insufficient options for proto=fd [ 316.975483][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.065018][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.154147][ T30] audit: type=1400 audit(1759123013.962:466): avc: denied { mount } for pid=8763 comm="syz.3.713" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 317.432202][ T9] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 317.470798][ T30] audit: type=1400 audit(1759123014.002:467): avc: denied { search } for pid=8763 comm="syz.3.713" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 317.653188][ T30] audit: type=1400 audit(1759123014.012:468): avc: denied { unmount } for pid=8763 comm="syz.3.713" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 318.253710][ T8744] vivid-000: disconnect [ 318.412617][ T9] usb 3-1: USB disconnect, device number 14 [ 318.421472][ T8741] vivid-000: reconnect [ 318.650959][ T5929] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 318.904839][ T5929] usb 1-1: Using ep0 maxpacket: 8 [ 318.916518][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.934085][ T5929] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.960868][ T5929] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 318.975394][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.011678][ T5990] hid-generic 0000:0003:0001.000C: item fetching failed at offset 0/2 [ 319.033799][ T5990] hid-generic 0000:0003:0001.000C: probe with driver hid-generic failed with error -22 [ 319.106497][ T8796] vivid-002: ================= START STATUS ================= [ 319.115508][ T8796] vivid-002: Radio HW Seek Mode: Bounded [ 319.116183][ T5929] usb 1-1: config 0 descriptor?? [ 319.126752][ T8796] vivid-002: Radio Programmable HW Seek: false [ 319.133430][ T8796] vivid-002: RDS Rx I/O Mode: Block I/O [ 319.139347][ T8796] vivid-002: Generate RBDS Instead of RDS: false [ 319.146501][ T8796] vivid-002: RDS Reception: true [ 319.151850][ T8796] vivid-002: RDS Program Type: 0 inactive [ 319.164941][ T8796] vivid-002: RDS PS Name: inactive [ 319.174372][ T8796] vivid-002: RDS Radio Text: inactive [ 319.180237][ T8796] vivid-002: RDS Traffic Announcement: false inactive [ 319.187662][ T8796] vivid-002: RDS Traffic Program: false inactive [ 319.194372][ T8796] vivid-002: RDS Music: false inactive [ 319.200092][ T8796] vivid-002: ================== END STATUS ================== [ 319.804865][ T5929] logitech 0003:046D:C298.000D: unknown main item tag 0x0 [ 319.820843][ T5929] logitech 0003:046D:C298.000D: unknown main item tag 0x0 [ 319.827989][ T5929] logitech 0003:046D:C298.000D: unknown main item tag 0x0 [ 319.850783][ T5929] logitech 0003:046D:C298.000D: unknown main item tag 0x0 [ 319.871387][ T5929] logitech 0003:046D:C298.000D: unknown main item tag 0x0 [ 319.887504][ T5929] logitech 0003:046D:C298.000D: unknown main item tag 0x0 [ 319.905712][ T5929] logitech 0003:046D:C298.000D: unknown main item tag 0x0 [ 319.920737][ T5929] logitech 0003:046D:C298.000D: unknown main item tag 0x0 [ 319.929917][ T5929] logitech 0003:046D:C298.000D: unknown main item tag 0x0 [ 319.937178][ T5929] logitech 0003:046D:C298.000D: unknown main item tag 0x0 [ 319.952933][ T8782] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 319.963386][ T5929] logitech 0003:046D:C298.000D: hidraw0: USB HID v0.00 Device [HID 046d:c298] on usb-dummy_hcd.0-1/input0 [ 320.076303][ T8780] netlink: 'syz.0.718': attribute type 11 has an invalid length. [ 320.084674][ T5990] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 320.261238][ T5929] logitech 0003:046D:C298.000D: no inputs found [ 320.430801][ T5990] usb 3-1: Using ep0 maxpacket: 32 [ 320.579963][ T5990] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 320.615383][ T8780] tmpfs: Bad value for 'mpol' [ 320.620153][ T5990] usb 3-1: config 9 has no interfaces? [ 320.741327][ T5990] usb 3-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 320.752218][ T5990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.988602][ T5928] usb 1-1: USB disconnect, device number 10 [ 321.137128][ T30] audit: type=1400 audit(1759123017.872:469): avc: denied { write } for pid=8799 comm="syz.2.723" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 321.160186][ T30] audit: type=1400 audit(1759123017.872:470): avc: denied { setattr } for pid=8799 comm="syz.2.723" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 323.350713][ T5990] usb 3-1: string descriptor 0 read error: -71 [ 323.369191][ T5990] usb 3-1: USB disconnect, device number 15 [ 324.697270][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880332c1800: rx timeout, send abort [ 324.812811][ T30] audit: type=1400 audit(1759123021.522:471): avc: denied { read } for pid=5202 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 324.976982][ T30] audit: type=1400 audit(1759123021.522:472): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.275664][ T30] audit: type=1400 audit(1759123021.532:473): avc: denied { search } for pid=5202 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.380297][ T30] audit: type=1400 audit(1759123021.532:474): avc: denied { add_name } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 325.603793][ T30] audit: type=1400 audit(1759123021.532:475): avc: denied { create } for pid=5202 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.685548][ T30] audit: type=1400 audit(1759123021.532:476): avc: denied { append open } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.712824][ T30] audit: type=1400 audit(1759123021.532:477): avc: denied { getattr } for pid=5202 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 325.767334][ T8857] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.059811][ T24] hid-generic 0000:0003:0001.000E: item fetching failed at offset 0/2 [ 326.070709][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 326.073751][ T24] hid-generic 0000:0003:0001.000E: probe with driver hid-generic failed with error -22 [ 326.340880][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 326.354306][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.365978][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 326.394996][ T5990] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 326.778274][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.803129][ T9] usb 4-1: config 0 descriptor?? [ 326.924916][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 327.219162][ T8869] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.741'. [ 327.233029][ T5990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.250704][ T5990] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 327.271034][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.404716][ T5990] usb 5-1: config 0 descriptor?? [ 328.080970][ T92] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 328.132379][ T9] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 328.290691][ T92] usb 2-1: Using ep0 maxpacket: 32 [ 329.009551][ T92] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 329.010534][ T5990] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 329.018899][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.021734][ T92] usb 2-1: config 0 descriptor?? [ 329.050197][ T92] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 329.384281][ T30] audit: type=1326 audit(1759123026.192:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8858 comm="syz.3.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effd4b8eec9 code=0x7fc00000 [ 329.476658][ T5990] usb 4-1: USB disconnect, device number 13 [ 329.703792][ T92] gspca_vc032x: reg_w err -71 [ 329.708659][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.714286][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.721076][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.727959][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.757563][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.766119][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.776409][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.796125][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.843009][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.863059][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.875209][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.895364][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.910835][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 329.972785][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.206289][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.222007][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.236935][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.257841][ T92] gspca_vc032x: I2c Bus Busy Wait 00 [ 330.377372][ T30] audit: type=1326 audit(1759123027.182:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.4.739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36cf38eec9 code=0x7fc00000 [ 330.440957][ T5928] usb 5-1: USB disconnect, device number 17 [ 330.539876][ T92] gspca_vc032x: Unknown sensor... [ 330.555308][ T92] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 330.660419][ T92] usb 2-1: USB disconnect, device number 13 [ 331.694185][ T30] audit: type=1400 audit(1759123028.502:480): avc: denied { setopt } for pid=8911 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 331.720863][ T8917] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 331.738223][ T8916] sp0: Synchronizing with TNC [ 331.747608][ T8918] IPVS: stopping master sync thread 8917 ... [ 332.092708][ T30] audit: type=1400 audit(1759123028.892:481): avc: denied { ioctl } for pid=8911 comm="syz.2.751" path="socket:[19173]" dev="sockfs" ino=19173 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 332.119720][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 332.441761][ T8931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8931 comm=syz.3.755 [ 332.460161][ T8931] netlink: 52 bytes leftover after parsing attributes in process `syz.3.755'. [ 333.453460][ T8932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.756'. [ 333.845541][ T30] audit: type=1326 audit(1759123030.642:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8940 comm="syz.1.759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f236c78eec9 code=0x0 [ 334.030758][ T5990] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 334.539759][ T5990] usb 3-1: Using ep0 maxpacket: 16 [ 334.554747][ T5990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.569210][ T5990] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 334.584776][ T5990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.640012][ T5990] usb 3-1: config 0 descriptor?? [ 335.571017][ T5990] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 335.763564][ T30] audit: type=1400 audit(1759123032.572:483): avc: denied { create } for pid=8962 comm="syz.3.763" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 335.833189][ T30] audit: type=1400 audit(1759123032.602:484): avc: denied { mounton } for pid=8962 comm="syz.3.763" path="/144/file0" dev="tmpfs" ino=853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 336.250596][ T30] audit: type=1400 audit(1759123033.052:485): avc: denied { append } for pid=8966 comm="syz.4.764" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 337.027746][ T8968] lo speed is unknown, defaulting to 1000 [ 337.115897][ T30] audit: type=1400 audit(1759123033.412:486): avc: denied { read } for pid=8966 comm="syz.4.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.126218][ T5928] usb 3-1: USB disconnect, device number 16 [ 337.141167][ T30] audit: type=1326 audit(1759123033.822:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8938 comm="syz.2.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2938eec9 code=0x7fc00000 [ 338.810747][ T92] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 338.995755][ T92] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 339.014285][ T92] usb 5-1: config 1 has no interface number 0 [ 339.060574][ T92] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 339.071219][ T8997] lo speed is unknown, defaulting to 1000 [ 339.133878][ T92] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 339.220965][ T92] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.248858][ T92] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 339.266427][ T92] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.297895][ T92] usb 5-1: Product: syz [ 339.312012][ T92] usb 5-1: Manufacturer: syz [ 339.322339][ T92] usb 5-1: SerialNumber: syz [ 339.556931][ T8992] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 339.770380][ T8992] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 340.422679][ T30] audit: type=1400 audit(1759123037.202:488): avc: denied { ioctl } for pid=9006 comm="syz.0.775" path="socket:[19330]" dev="sockfs" ino=19330 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 341.090744][ T5929] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 341.240749][ T5929] usb 1-1: Using ep0 maxpacket: 16 [ 341.273901][ T5929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.314816][ T5929] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 341.338643][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.385136][ T5929] usb 1-1: config 0 descriptor?? [ 342.310501][ T5929] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 342.324426][ T92] usb 5-1: Incompatible driver and firmware versions [ 342.506611][ C1] ================================================================== [ 342.514687][ C1] BUG: KASAN: use-after-free in mcp2221_raw_event+0x1070/0x10a0 [ 342.522325][ C1] Read of size 1 at addr ffff888060a67fff by task syz.3.780/9027 [ 342.530015][ C1] [ 342.532323][ C1] CPU: 1 UID: 0 PID: 9027 Comm: syz.3.780 Not tainted syzkaller #0 PREEMPT(full) [ 342.532344][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 342.532354][ C1] Call Trace: [ 342.532359][ C1] [ 342.532365][ C1] dump_stack_lvl+0x116/0x1f0 [ 342.532387][ C1] print_report+0xcd/0x630 [ 342.532404][ C1] ? __virt_addr_valid+0x81/0x610 [ 342.532424][ C1] ? __phys_addr+0xe8/0x180 [ 342.532444][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 342.532467][ C1] kasan_report+0xe0/0x110 [ 342.532482][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 342.532506][ C1] mcp2221_raw_event+0x1070/0x10a0 [ 342.532536][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 342.532561][ C1] __hid_input_report.constprop.0+0x311/0x450 [ 342.532579][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 342.532602][ C1] hid_irq_in+0x35e/0x870 [ 342.532625][ C1] __usb_hcd_giveback_urb+0x388/0x610 [ 342.532641][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 342.532656][ C1] dummy_timer+0x1814/0x3a30 [ 342.532683][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 342.532701][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.532719][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 342.532737][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 342.532752][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 342.532772][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 342.532789][ C1] ? read_tsc+0x9/0x20 [ 342.532815][ C1] hrtimer_run_softirq+0x17d/0x350 [ 342.532833][ C1] handle_softirqs+0x219/0x8e0 [ 342.532854][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 342.532874][ C1] __irq_exit_rcu+0x109/0x170 [ 342.532891][ C1] irq_exit_rcu+0x9/0x30 [ 342.532909][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 342.532927][ C1] [ 342.532932][ C1] [ 342.532937][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 342.532953][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 342.532974][ C1] Code: fb 09 00 00 44 8b 05 09 8c 22 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 4f 65 3a 00 fb 65 48 8b 1d ae c3 4d 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 342.532989][ C1] RSP: 0018:ffffc900038c76f0 EFLAGS: 00000202 [ 342.533001][ C1] RAX: 00000000000095f7 RBX: ffff88806d052440 RCX: ffffffff81c380af [ 342.533011][ C1] RDX: 0000000000000000 RSI: ffffffff8de52fc1 RDI: ffffffff8c163380 [ 342.533021][ C1] RBP: ffffc900038c7738 R08: 0000000000000001 R09: 0000000000000001 [ 342.533030][ C1] R10: ffffffff90ab7697 R11: 0000000000000000 R12: ffff8880b853a300 [ 342.533039][ C1] R13: ffff888023b74880 R14: ffff8880b843a300 R15: ffff8880b853b130 [ 342.533051][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 342.533073][ C1] ? __switch_to+0x7a5/0x11a0 [ 342.533091][ C1] __schedule+0x1198/0x5de0 [ 342.533113][ C1] ? __pfx___schedule+0x10/0x10 [ 342.533131][ C1] ? find_held_lock+0x2b/0x80 [ 342.533149][ C1] ? schedule+0x2d7/0x3a0 [ 342.533166][ C1] schedule+0xe7/0x3a0 [ 342.533182][ C1] schedule_timeout+0x257/0x290 [ 342.533196][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 342.533213][ C1] ? rcu_is_watching+0x12/0xc0 [ 342.533230][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.533247][ C1] __wait_for_common+0x2ff/0x4e0 [ 342.533265][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 342.533280][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 342.533300][ C1] ? generic_exec_single+0xbb/0x390 [ 342.533320][ C1] rdmsr_safe_on_cpu+0x1dc/0x210 [ 342.533336][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 342.533351][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 342.533385][ C1] msr_read+0x19d/0x250 [ 342.533420][ C1] ? __pfx_msr_read+0x10/0x10 [ 342.533443][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 342.533463][ C1] ? security_file_permission+0x71/0x210 [ 342.533486][ C1] ? rw_verify_area+0xcf/0x6c0 [ 342.533508][ C1] ? __pfx_msr_read+0x10/0x10 [ 342.533535][ C1] vfs_read+0x1e4/0xcf0 [ 342.533563][ C1] ? __pfx_vfs_read+0x10/0x10 [ 342.533576][ C1] ? find_held_lock+0x2b/0x80 [ 342.533594][ C1] ? __fget_files+0x204/0x3c0 [ 342.533611][ C1] ? __fget_files+0x20e/0x3c0 [ 342.533628][ C1] ksys_read+0x12a/0x250 [ 342.533642][ C1] ? __pfx_ksys_read+0x10/0x10 [ 342.533659][ C1] do_syscall_64+0xcd/0x4e0 [ 342.533679][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.533693][ C1] RIP: 0033:0x7effd4b8eec9 [ 342.533705][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.533719][ C1] RSP: 002b:00007effd5abb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.533733][ C1] RAX: ffffffffffffffda RBX: 00007effd4de5fa0 RCX: 00007effd4b8eec9 [ 342.533743][ C1] RDX: 0000000000018ff8 RSI: 0000200000002700 RDI: 0000000000000004 [ 342.533751][ C1] RBP: 00007effd4c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 342.533760][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.533769][ C1] R13: 00007effd4de6038 R14: 00007effd4de5fa0 R15: 00007ffdfc194438 [ 342.533783][ C1] [ 342.533788][ C1] [ 343.020018][ C1] The buggy address belongs to the physical page: [ 343.026411][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2000000a9 pfn:0x60a67 [ 343.035853][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 343.042976][ C1] raw: 00fff00000000000 ffffea000174f008 ffffea0001829988 0000000000000000 [ 343.051550][ C1] raw: 00000002000000a9 0000000000000000 00000000ffffffff 0000000000000000 [ 343.060112][ C1] page dumped because: kasan: bad access detected [ 343.066526][ C1] page_owner tracks the page as freed [ 343.071877][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x500cc2(GFP_HIGHUSER|__GFP_ACCOUNT), pid 8964, tgid 8962 (syz.3.763), ts 336138364474, free_ts 336138781959 [ 343.089247][ C1] post_alloc_hook+0x1c0/0x230 [ 343.094024][ C1] get_page_from_freelist+0x132b/0x38e0 [ 343.099562][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 343.105444][ C1] alloc_pages_mpol+0x1fb/0x550 [ 343.110285][ C1] alloc_pages_noprof+0x131/0x390 [ 343.115299][ C1] anon_pipe_write+0xbc2/0x1a90 [ 343.120143][ C1] vfs_write+0x7d0/0x11d0 [ 343.124460][ C1] ksys_write+0x1f8/0x250 [ 343.128783][ C1] do_syscall_64+0xcd/0x4e0 [ 343.133285][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.139170][ C1] page last free pid 8963 tgid 8962 stack trace: [ 343.145477][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 343.150678][ C1] __folio_put+0x329/0x450 [ 343.155082][ C1] anon_pipe_buf_release+0x40a/0x520 [ 343.160362][ C1] anon_pipe_read+0x5cd/0x1210 [ 343.165116][ C1] __io_read+0x354/0x14a0 [ 343.169441][ C1] io_read+0x1e/0x70 [ 343.173319][ C1] __io_issue_sqe+0xe5/0x7c0 [ 343.177904][ C1] io_issue_sqe+0x86/0xe50 [ 343.182308][ C1] io_submit_sqes+0x94b/0x25c0 [ 343.187060][ C1] __do_sys_io_uring_enter+0xd6a/0x1630 [ 343.192592][ C1] do_syscall_64+0xcd/0x4e0 [ 343.197096][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.202976][ C1] [ 343.205281][ C1] Memory state around the buggy address: [ 343.210887][ C1] ffff888060a67e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 343.218945][ C1] ffff888060a67f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 343.226998][ C1] >ffff888060a67f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 343.235042][ C1] ^ [ 343.243005][ C1] ffff888060a68000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 343.251053][ C1] ffff888060a68080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 343.259096][ C1] ================================================================== [ 343.267141][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 343.274321][ C1] CPU: 1 UID: 0 PID: 9027 Comm: syz.3.780 Not tainted syzkaller #0 PREEMPT(full) [ 343.283508][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.293552][ C1] Call Trace: [ 343.296817][ C1] [ 343.299648][ C1] dump_stack_lvl+0x3d/0x1f0 [ 343.304241][ C1] vpanic+0x6e8/0x7a0 [ 343.308213][ C1] ? __pfx_vpanic+0x10/0x10 [ 343.312711][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 343.317738][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 343.323024][ C1] panic+0xca/0xd0 [ 343.326736][ C1] ? __pfx_panic+0x10/0x10 [ 343.331140][ C1] ? end_report+0x4c/0x170 [ 343.335551][ C1] ? rcu_is_watching+0x12/0xc0 [ 343.340324][ C1] ? lock_release+0x201/0x2f0 [ 343.345009][ C1] check_panic_on_warn+0xab/0xb0 [ 343.349935][ C1] end_report+0x107/0x170 [ 343.354257][ C1] kasan_report+0xee/0x110 [ 343.358667][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 343.363965][ C1] mcp2221_raw_event+0x1070/0x10a0 [ 343.369077][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 343.374880][ C1] __hid_input_report.constprop.0+0x311/0x450 [ 343.380940][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 343.386403][ C1] hid_irq_in+0x35e/0x870 [ 343.390737][ C1] __usb_hcd_giveback_urb+0x388/0x610 [ 343.396111][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 343.401299][ C1] dummy_timer+0x1814/0x3a30 [ 343.405899][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 343.410830][ C1] ? rcu_is_watching+0x12/0xc0 [ 343.415609][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 343.421410][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 343.426342][ C1] __hrtimer_run_queues+0x1ff/0xad0 [ 343.431543][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 343.437266][ C1] ? read_tsc+0x9/0x20 [ 343.441340][ C1] hrtimer_run_softirq+0x17d/0x350 [ 343.446458][ C1] handle_softirqs+0x219/0x8e0 [ 343.451233][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 343.456523][ C1] __irq_exit_rcu+0x109/0x170 [ 343.461203][ C1] irq_exit_rcu+0x9/0x30 [ 343.465444][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 343.471075][ C1] [ 343.473988][ C1] [ 343.476902][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.482881][ C1] RIP: 0010:finish_task_switch.isra.0+0x22a/0xc10 [ 343.489296][ C1] Code: fb 09 00 00 44 8b 05 09 8c 22 0f 45 85 c0 0f 85 be 01 00 00 4c 89 e7 e8 a4 f6 ff ff e8 4f 65 3a 00 fb 65 48 8b 1d ae c3 4d 12 <48> 8d bb 18 16 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 [ 343.508895][ C1] RSP: 0018:ffffc900038c76f0 EFLAGS: 00000202 [ 343.514952][ C1] RAX: 00000000000095f7 RBX: ffff88806d052440 RCX: ffffffff81c380af [ 343.522909][ C1] RDX: 0000000000000000 RSI: ffffffff8de52fc1 RDI: ffffffff8c163380 [ 343.530864][ C1] RBP: ffffc900038c7738 R08: 0000000000000001 R09: 0000000000000001 [ 343.538819][ C1] R10: ffffffff90ab7697 R11: 0000000000000000 R12: ffff8880b853a300 [ 343.546781][ C1] R13: ffff888023b74880 R14: ffff8880b843a300 R15: ffff8880b853b130 [ 343.554747][ C1] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 343.560733][ C1] ? __switch_to+0x7a5/0x11a0 [ 343.565407][ C1] __schedule+0x1198/0x5de0 [ 343.569914][ C1] ? __pfx___schedule+0x10/0x10 [ 343.574759][ C1] ? find_held_lock+0x2b/0x80 [ 343.579432][ C1] ? schedule+0x2d7/0x3a0 [ 343.583754][ C1] schedule+0xe7/0x3a0 [ 343.587815][ C1] schedule_timeout+0x257/0x290 [ 343.592655][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 343.598021][ C1] ? rcu_is_watching+0x12/0xc0 [ 343.602781][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.607972][ C1] __wait_for_common+0x2ff/0x4e0 [ 343.612904][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 343.618265][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 343.623723][ C1] ? generic_exec_single+0xbb/0x390 [ 343.628921][ C1] rdmsr_safe_on_cpu+0x1dc/0x210 [ 343.633855][ C1] ? __pfx_rdmsr_safe_on_cpu+0x10/0x10 [ 343.639303][ C1] ? __pfx___rdmsr_safe_on_cpu+0x10/0x10 [ 343.644951][ C1] msr_read+0x19d/0x250 [ 343.649108][ C1] ? __pfx_msr_read+0x10/0x10 [ 343.653781][ C1] ? bpf_lsm_file_permission+0x9/0x10 [ 343.659149][ C1] ? security_file_permission+0x71/0x210 [ 343.664785][ C1] ? rw_verify_area+0xcf/0x6c0 [ 343.669551][ C1] ? __pfx_msr_read+0x10/0x10 [ 343.674224][ C1] vfs_read+0x1e4/0xcf0 [ 343.678371][ C1] ? __pfx_vfs_read+0x10/0x10 [ 343.683036][ C1] ? find_held_lock+0x2b/0x80 [ 343.687711][ C1] ? __fget_files+0x204/0x3c0 [ 343.692468][ C1] ? __fget_files+0x20e/0x3c0 [ 343.697140][ C1] ksys_read+0x12a/0x250 [ 343.701370][ C1] ? __pfx_ksys_read+0x10/0x10 [ 343.706129][ C1] do_syscall_64+0xcd/0x4e0 [ 343.710635][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.716517][ C1] RIP: 0033:0x7effd4b8eec9 [ 343.720920][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.740517][ C1] RSP: 002b:00007effd5abb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.748921][ C1] RAX: ffffffffffffffda RBX: 00007effd4de5fa0 RCX: 00007effd4b8eec9 [ 343.756878][ C1] RDX: 0000000000018ff8 RSI: 0000200000002700 RDI: 0000000000000004 [ 343.764832][ C1] RBP: 00007effd4c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 343.772789][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.780741][ C1] R13: 00007effd4de6038 R14: 00007effd4de5fa0 R15: 00007ffdfc194438 [ 343.788709][ C1] [ 343.791957][ C1] Kernel Offset: disabled [ 343.796257][ C1] Rebooting in 86400 seconds..