last executing test programs: 1m14.993206373s ago: executing program 3 (id=140): syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x103901) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001a00)) pselect6(0x40, &(0x7f0000001a80), &(0x7f0000001ac0)={0x1f, 0x0, 0x40000000, 0x0, 0x100000000, 0x300}, 0x0, 0x0, 0x0) 1m14.990828153s ago: executing program 3 (id=141): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) poll(&(0x7f00000002c0)=[{r0, 0x20}, {r0, 0x2000}, {r0, 0xa480}], 0x3, 0x5) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x10c, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0xa8, 0x5, 0x0, 0x1, [@nested={0xa4, 0xce, 0x0, 0x1, [@nested={0xa0, 0x13e, 0x0, 0x1, [@nested={0x9c, 0xa0, 0x0, 0x1, [@nested={0x98, 0x61, 0x0, 0x1, [@nested={0x94, 0x9d, 0x0, 0x1, [@nested={0x8d, 0x63, 0x0, 0x1, [@typed={0x4, 0xa5}, @nested={0x10, 0x90, 0x0, 0x1, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @fd=r0}]}]}, @nested={0x4, 0x70}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}, @nested={0x28, 0xde, 0x0, 0x1, [@typed={0x8, 0x14d, 0x0, 0x0, @fd=r0}, @nested={0x1c, 0x132, 0x0, 0x1, [@typed={0x8, 0x8, 0x0, 0x0, @u32=0xfffffff7}, @nested={0x4, 0x88}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @nested={0x4, 0x14}]}]}, @generic="67bc0ca816bfd690a5b2bc965f642f86fcbaa1ef938c5fa66781695122165b300ce9a004e74d8dd0acd8aea39f0cf5ea1f", @nested={0x4, 0xb8}]}]}]}]}]}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f00000001c0)={0x9, 0x4}) syz_usb_connect$uac2(0x3, 0x90, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x582, 0xb2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7e, 0x3, 0x1, 0x80, 0xe0, 0x9, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x106, 0x7, 0x1e, 0x2}, [@effect_unit={0x9, 0x24, 0x7, 0x2, 0x0, 0x5, [0x1]}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x101, 0xff, 0x2, 0x1f, 0x401}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x8, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x0, 0x10, {0x8, 0x25, 0x1, 0x83, 0x0, 0xa, 0x2}}}}}}}}]}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 1m13.793339977s ago: executing program 3 (id=144): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000000)='270', 0x3) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) write(r0, &(0x7f0000000000)='3', 0x4e) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r2, 0xc138fd03, &(0x7f0000000280)="04000000000000000000000038010000000000000000000000000000ea600000000000000000000000000000000000002e") syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) unshare(0x40000000) 1m13.543302393s ago: executing program 3 (id=145): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2710, 0x0, 0xf0000000, 0x1000, &(0x7f0000200000/0x1000)=nil}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) read$FUSE(r2, &(0x7f0000001580)={0x2020}, 0x6d) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001540)={0x10201, 0x1, 0x8080000, 0x1000, &(0x7f0000ef3000/0x1000)=nil}) 1m13.417481226s ago: executing program 3 (id=148): r0 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000006c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000010700)={@id={0x2, 0x0, @b}}) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r3, r4, r3, 0x1) add_key(&(0x7f0000000200)='dns_resolver\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="e529ffa7206eb527e94ec7d649f10422cce38574c6fd1a0e67161b46eb7d0dd35343d90078f596ac693a6976583656de24b2dd4f9f2007c9b023be76befb20fe512e69f6b05f67ac82b221a8df424e9436abbbf889eabbabc8e73a728424", 0x5e, r4) r5 = openat(r1, &(0x7f0000000180)='driver_override\x00', 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x10, 0x80082) ioctl$LOOP_GET_STATUS64(r6, 0x301, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newsa={0x138, 0x18, 0x1, 0x70bd27, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x60, 0x73}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, {0x0, 0x4, 0x6, 0x800000ffff, 0x8251c, 0x2, 0x9}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0x3dca}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$P9_RLINK(r5, &(0x7f0000000480)={0x7}, 0x7) sendto(r0, &(0x7f0000000100)="44000000100005060000000000000000000000000000000000000000000000000c0003006d796c6f7770616e0800050002320000100012000b0001006c6f7770616e0000", 0x44, 0x0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) r9 = getgid() keyctl$chown(0x4, r3, r8, r9) 1m13.351426572s ago: executing program 3 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x0) mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x14) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="4c9002005800000003000110000000000000000000000000000000000010"]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r4, 0x7, 0x2, r3}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000540)={0x10, 0x0, 0x1}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0x4004e502, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4, 0x7, 0x1}) setns(0xc9, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000002740)) 57.795497167s ago: executing program 32 (id=150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x0) mount(&(0x7f0000000240)=@filename='./dev/sda1\x00', &(0x7f0000000280)='./mnt\x00', &(0x7f00000002c0)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x14) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)=ANY=[@ANYBLOB="4c9002005800000003000110000000000000000000000000000000000010"]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = eventfd2(0xe5c, 0x80000) r4 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r4, 0x7, 0x2, r3}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = socket(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000540)={0x10, 0x0, 0x1}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) connect$unix(r2, &(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r5, 0x4004e502, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r4, 0x7, 0x1}) setns(0xc9, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r8, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000002740)) 6.971189291s ago: executing program 0 (id=628): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000440), 0x12) (async) write$cgroup_pid(r1, &(0x7f0000000440), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000500)='cpuset.memory_spread_slab\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000540)=ANY=[@ANYBLOB='1'], 0x31) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/split_huge_pages\x00', 0x1, 0x0) write$FUSE_IOCTL(r3, 0x0, 0x2f) unshare(0x22020600) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x2e, 0x34, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x2004, 0xf39, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x108}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) (async) r7 = socket$tipc(0x1e, 0x2, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) (async) r8 = syz_usb_connect(0x3, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f00000003c0)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000640)={0x40, 0xf, 0x2, "e805"}, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) bind$tipc(r7, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x1}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r9, &(0x7f0000000080)={&(0x7f00000000c0)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r10 = dup(r6) syz_ublk_setup_queues(r10, r5, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0xe1}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x5d, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r4, '\x00', {0xfff7, 0x4, 0x0, 0x0}}, 0x0) 5.463718396s ago: executing program 4 (id=639): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf99f, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x1, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xc3a, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000000c0)={0xd000, 0x112000}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000001a00010028bd70f013c8f2ced072b5a20800300006000000f2cb830a789c5c641b3aa5cea48ac371363979ec764f0350"], 0x1c}}, 0x800) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair(0x5, 0x0, 0xc, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendto$inet6(r5, &(0x7f0000000340)="a5c8d16ca406869ea8a098961c0dabf179f25bea6dbda9c334358f9f181cceedd33b1f201a0f232f228cee1ba9fe8eea9d8e6ca81d81a41c6ef4ce820f20c7869e850061c97a46c260617b00aea5a2b40e9fc69fcc8abed0a4e46b94081f5b4123173ffb9e99875dc599e15c1e880a6108489fabf7eddef87e52ff14ce8013c2a667d54bd00a864a4ee8656d8642d4a06efcd8d82dcc9439a6b8928f52291466cea9cf5265bea983d461451d1929db81551a40242d08908057e05bc5163af7af2f9c46aaddf72adca30aff", 0xcb, 0x5, &(0x7f0000000440)={0xa, 0x4e20, 0xff, @empty, 0xc2c7}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4.508481315s ago: executing program 4 (id=641): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000050000000000000000000000000000009bffffff7f000000000000000000000000020000000000400000000000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000001000103"], 0xfc}}, 0x0) 4.484534197s ago: executing program 4 (id=642): syz_usb_connect$uac1(0x5, 0x95, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8214, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0x9, 0x70, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x2, 0xb, 0x3, "b80cd7a06a2d837f"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xfff, 0x3, 0x8, 0x2}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0xc, 0x81, "", '4'}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x45}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x3, 0x4, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}}}}}]}}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 3.954403042s ago: executing program 0 (id=645): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x365feea0fb306afc, 0x800, 0x2}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x180000000) 3.905402637s ago: executing program 0 (id=646): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./proc\x00', &(0x7f0000000580)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000007c0)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x1c8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000880), 0x42, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(r1, 0x40809440, &(0x7f0000000300)={&(0x7f00000002c0)=[{0x0}, {0x0}, {&(0x7f00000001c0)="96084e25e6ae8fc0de239b1ec955abcda4d69c2f7cb62824b63fba889b1255a633d9761bce6bd0f095d2091522628e49c199571f72cbef7f2f9c65753dfbfbae634186e5ad8b6e533cbb8d67c2ab2f955f278a1343df4f5771b3f589ae261b81", 0x60}, {&(0x7f0000000240)="c259adbf053c6ead0ce52eac6fca69bb1ea1f2a901d4095543bb7ce6916a3ed465b16ce9fb082589fd374931f0affeb11db44bb72245c9d2ec3406f972591f56e51598cb", 0x44}], 0x4, 0x8, 0x0, 0x7, 0xd57a, 0x9, 0x8, 0xe3d}) mount$fuse(0x100000000000000, &(0x7f00000008c0)='./file0\x00', &(0x7f0000000900), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.820796506s ago: executing program 0 (id=648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc00000013000500010000000000000000000000000000000000003c000000010000000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) 3.749167123s ago: executing program 0 (id=650): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905824c"], 0x0) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000100)="1c00000018000718ab092500090007000a0700000000000600003693", 0x1c) r4 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @ro32=0x4406, 0x10200000}}], 0x68}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.235152526s ago: executing program 4 (id=654): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000440)={{0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x6100, &(0x7f0000000040)={@_ha_fsid={[0x0, 0x3]}, {0x2, 0x1, 0x5, 0x1}}, 0x400, &(0x7f0000000080), &(0x7f00000000c0)=0x3}, 0x3, &(0x7f00000003c0)=[{0x1, 0x130, &(0x7f0000000100)='b){+:\x00', &(0x7f0000000140)="48f5dd8c8c3b1997a77d672a81f17637ec81ea0529309a69353e4508dbc49d25f40d49fac338edeb82a3112b92fc482cfc52ad38eff7026e785397e8c0d8a3b6f320ba0bf846f730dbb0bfad2386280b21565bf315163f43d3a1805efa632d59578c2c38e46828dc6b2e46b1556da69fb1f650ac82b965e96a738b45", 0x7c}, {0x2, 0xf, &(0x7f00000001c0)='#\xf9*:\x9f,*\'-!\x00', &(0x7f0000000200)="52fdddfdd3e3c654553781ab1f03fd2225a3e85f12b3ba64fd2174fb3ee55f3e34b91ee35ff5e8e775e0912946ee3fae9ebc4a04b06c9a51b09da72b65b75677de0eb71da75618f37d95c1b340c55f248a16d8292843e74bb0ee2079055cf9927a4f36", 0x63, 0x28}, {0x2, 0x5, &(0x7f0000000280)='*^@]]^]@\x00', &(0x7f00000002c0)="f2e2ea5d2d6bacab80b63ee63ccb4e2d9a3db9eaf00d352d1d42954d887d09810349d32eff758bbb56fc5af2d3efe1fdea9c1369004ef3fdb73c2ec9cc478f5e7d4e0b11eb943397690173e121b18a72b5b5ea6e541f2455f5898ffd0c854468e22d5df1369c65a5664772a4be6ba34fa3f88af8cddecb582916e0cd95f11b5d127dbc67f838abc06ff3dd7a0bd98327192962e92463326ac3430ee01f1406b83855bc86f3d625dbdf04ce24f1acc244fb202ed7230de2ea1738a0c2fa667bced518f40bf4e875601d83a4c265c238d547f7ec0c0697eddb674cf79e38569b2c1432f6e94f37e8bda8a85fe7978e", 0xee, 0x8}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000500)={r1, 0x1, 0x6, @broadcast}, 0x10) pipe2(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000580)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x73, r1}) mmap$IORING_OFF_SQ_RING(0x0, 0x3, 0x1, 0x10010, r0, 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000002880)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002840)={&(0x7f0000000600)={0x2204, 0x12, 0x100, 0x70bd27, 0x25dfdbfc, {0x28, 0x4, 0x2, 0x8, {0x4e24, 0x4e24, [0xa71, 0x5, 0x4, 0x2], [0x200, 0xa, 0x8, 0x5], r1, [0xff, 0x2]}, 0x7, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "cd4a42232b4f76b613eb728342278c227875f33a45196108457c4c199b061581984c84138a1287139626276c4764aaeb47fae3a925086bef6027bfec14b3b447ba40d019ff5bd542d7fa7ca92c29f866a12d70b414b3fc3f7ba679887b2c2bbf57da13362ced6c161d8799f51d274912282a3585458caa41146b9e0686922a4f7b8d55c5bc23e71041d263001dff56cfdbe737c4f7136b6ec0058d3e6c39fe16d2053fe8e6aa9e3d9cb31817aaf035932f9aaae4970441e9bc35c70280b616c6"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x3d, 0x1, "a8fccf050908c187e74260a3adf452026855d8b840442ef8ed894e86c2d8426d34e9de4caf603cfb6b1f85d864d0bd2d04f59b8c4cb1b74d6e"}, @INET_DIAG_REQ_BYTECODE={0xac, 0x1, "63e0762f873826930b9eb488446ee79069f7945abf7f2e6a6828ad2ee1dd2da35f74c023f4deeb838c2995dcf401eb776cd1b59a0cc6ca1b3746f06a3ebb58a3fd9fe32a9d2bf0cd63529a48d83f12c5a64a9b2406c4be50c18f9aea93ff1c36b816dfae4a3b9186ab647a812a6a909063c5f4748d2031f5398a0c280b285e15a0add5b1016ea541a57d5e505f0f30883bbc67bf3b71bd08105f3caf211b0e7b9f2b422b7665d3fa"}]}, 0x2204}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002900), r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x38, r4, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x8045}, 0x8040) splice(r0, &(0x7f0000002a00)=0x3, r0, &(0x7f0000002a40)=0x8, 0x6, 0x2) timer_create(0x4, &(0x7f0000002a80)={0x0, 0x3e, 0x4}, &(0x7f0000002ac0)=0x0) timer_settime(r5, 0x1, &(0x7f0000002b00)={{0x77359400}, {0x77359400}}, &(0x7f0000002b40)) setsockopt$MRT_DEL_MFC(r3, 0x0, 0xcd, &(0x7f0000002b80)={@dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, "02ab2f5362c41329dc369ca1af5563aa84431a240f3d06f19fb55ae269025544", 0xff, 0xb1af, 0xa2, 0x9}, 0x3c) timer_create(0x6, &(0x7f0000002d00)={0x0, 0x1c, 0x1, @thr={&(0x7f0000002bc0)="47109c2d64daaddd91d0a0abdc6136f6cce158407e59f80784dea566fb0ce6aafa0b05d503d0d3c6bf558cd86e7c94d6808b3a730ce391d3d637942ad562ebce5a492d6894cb666e6f0d9437b0c8a5a57cfb5cdaeacc8877236e7c102cce4fb3d3334568c0b181710c699c70a974318a07db1ab7e89a5ce64ca77f88fbcd947664c1fa821f10f045602adefd329a3ae818b791542bc268108ee539ac6cb2504a52a9d123025fc9d3323416aaf6795389b1bece", &(0x7f0000002c80)="fa8927b5da606a3d3db6fec73f955447c62c04754ad737a574105e994a2ffcc713708216d70746ef45d746a2c1f0b9342062f9bfd59b3b4fefcbb42f24f8cf9ced02745829d1f0654904d3ad9e82f62c3ee447767c4b18e1507c9c28c523b2fd11913db3bcc9fb"}}, &(0x7f0000002d40)=0x0) clock_gettime(0x0, &(0x7f0000002d80)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000002dc0)={{r7, r8+10000000}, {0x77359400}}, &(0x7f0000002e00)) read$FUSE(0xffffffffffffffff, &(0x7f0000002e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$userns(r9, &(0x7f0000004e80)) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000004ec0), &(0x7f0000004f00)=0x4) pipe(&(0x7f0000004f40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_gettime(0xffffffffffffffff, &(0x7f0000004f80)) r11 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000004fc0), 0xc4182, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000005040), r0) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f0000005140)={&(0x7f0000005000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005100)={&(0x7f0000005080)={0x54, r12, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}]}, 0x54}}, 0x24004884) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r10, &(0x7f0000005240)={&(0x7f0000005180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000005200)={&(0x7f00000051c0)={0x34, r12, 0x100, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xec0900}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd0}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe42}]}, 0x34}, 0x1, 0x0, 0x0, 0xf23844987d4f87cb}, 0x4000000) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000005340)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000005300)={&(0x7f00000052c0)={0x34, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005380)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000006e00)={0x0, 0x0}) recvmmsg$unix(r13, &(0x7f0000006c00)=[{{&(0x7f00000053c0)=@abs, 0x6e, &(0x7f00000055c0)=[{&(0x7f0000005440)=""/191, 0xbf}, {&(0x7f0000005500)=""/133, 0x85}], 0x2, &(0x7f0000005600)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005640)=@abs, 0x6e, &(0x7f0000005940)=[{&(0x7f00000056c0)=""/237, 0xed}, {&(0x7f00000057c0)=""/145, 0x91}, {&(0x7f0000005880)=""/63, 0x3f}, {&(0x7f00000058c0)=""/104, 0x68}], 0x4, &(0x7f0000005980)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd8}}, {{&(0x7f0000005a80), 0x6e, &(0x7f0000005f80)=[{&(0x7f0000005b00)=""/212, 0xd4}, {&(0x7f0000005c00)=""/211, 0xd3}, {&(0x7f0000005d00)=""/37, 0x25}, {&(0x7f0000005d40)=""/254, 0xfe}, {&(0x7f0000005e40)=""/61, 0x3d}, {&(0x7f0000005e80)=""/241, 0xf1}], 0x6}}, {{&(0x7f0000006000)=@abs, 0x6e, &(0x7f0000006180)=[{&(0x7f0000006080)=""/102, 0x66}, {&(0x7f0000006100)=""/63, 0x3f}, {&(0x7f0000006140)=""/12, 0xc}], 0x3, &(0x7f00000061c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0x110}}, {{0x0, 0x0, &(0x7f0000006640)=[{&(0x7f0000006300)=""/173, 0xad}, {&(0x7f00000063c0)=""/165, 0xa5}, {&(0x7f0000006480)=""/171, 0xab}, {&(0x7f0000006540)}, {&(0x7f0000006580)=""/135, 0x87}], 0x5}}, {{&(0x7f00000066c0), 0x6e, &(0x7f0000006840)=[{&(0x7f0000006740)=""/206, 0xce}], 0x1, &(0x7f0000006880)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000006940), 0x6e, &(0x7f00000069c0), 0x0, &(0x7f0000006a00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000006a40)=@abs, 0x6e, &(0x7f0000006b80)=[{&(0x7f0000006ac0)=""/135, 0x87}], 0x1, &(0x7f0000006bc0)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x2000, &(0x7f0000006e40)={r14, r15+60000000}) 2.588126033s ago: executing program 1 (id=656): r0 = socket(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000f40)={0x0, 0xfcff, &(0x7f0000000f80)=[{&(0x7f0000000fc0)="1c00000021006bcd210002006e04000381000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) r3 = epoll_create1(0x80000) r4 = socket(0xa, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)) shutdown(r4, 0x0) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000500)={0x0, 0xfffffe2e, &(0x7f0000000600)=[{&(0x7f0000000640)="5500000020007fafb70000000000000081000000030b47026c26236925000400ff7f0000bd2dca8a9848a3c728f1c4fdffffffdc1338d5e801e0b009000000000100005ae5e8458f58acbb0051a9098383de0dd7d8", 0x55}], 0x1}, 0x802) 2.309072192s ago: executing program 4 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc\x00', 0x17c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000010000c2000905", @ANYRES32], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00') fchdir(r3) statx(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000500)) ioctl$TCSETAF(r2, 0x5408, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x141c, &(0x7f0000000440)={0x0, 0x42ba, 0x800, 0x1, 0x139}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40081, 0x0) clock_settime(0xfffffffb, 0x0) write$binfmt_aout(r2, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000004c0)={0x0, 0x44, 0x1, 0x80000005, 0x18, "b0bf2ebb48c849ac4800"}) ioctl$TCSETSW(r2, 0x5403, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)) syz_open_pts(r2, 0x412040) 2.308777652s ago: executing program 1 (id=660): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) setresgid(0xee00, 0xee01, 0x0) (async) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000140)={0x8, 'veth0_macvtap\x00', {'veth0_to_batadv\x00'}, 0xfa8a}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) futex_waitv(&(0x7f0000000280)=[{0x0, &(0x7f00000002c0), 0x2}, {0x0, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000440)=0x5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc\x00', 0x1df) (async) mkdir(&(0x7f0000000740)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x0, 0x10000, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='myproc/iomem\x00', 0x0, 0x0) read(r3, &(0x7f0000000800), 0xfa0) syz_clone3(&(0x7f0000000840)={0x4284000, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f00000008c0), 0x0, {r3}}, 0x58) (async) openat(0xffffffffffffff9c, 0x0, 0x280, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1\x00', 0x17c) (async) mount(0x0, &(0x7f0000000940)='./config\x00', &(0x7f0000000980)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./config/usb_gadget/g1\x00', 0x1ff) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r4, &(0x7f0000000a40)='Mid', 0x3) (async) write(0xffffffffffffffff, &(0x7f0000000a80)='2\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r5, &(0x7f0000000b00), 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000b80)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') 2.291921964s ago: executing program 1 (id=661): syz_open_dev$tty20(0xc, 0x4, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x8002, 0xa2) write(r0, &(0x7f0000000100)='7', 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, &(0x7f0000000400)) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/wireless\x00') pread64(r2, &(0x7f0000000e80)=""/102400, 0x19000, 0x1000000300) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x4100, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010002000000406a05310300010000000109022400010000000009040000010300000009211001000122170009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022170000000600ff0901b3"], 0x0}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="440100001000130726bd70000000000000000000000000000000ffffe0000002ac14142400000000000000000000f5f273402e83a8563326e46300004e220001", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000010000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a0000000000000006000000000000000000000000000000fdffffffffffffff0300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000135000002"], 0x144}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3c0200001900010000000000fddbdf25ac1414bb000000000000000000000000ac1414bb0000000000000000000000000003000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000080000000000000000000000000000000000000000000000001000202000000008401050000000000000000000000ffffac1414aa000000003c"], 0x23c}}, 0x4000) 885.252538ms ago: executing program 0 (id=668): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000038840)={0x24, 0x0, 0x0, &(0x7f0000038880)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000388c0)={0x24, 0x0, &(0x7f0000038900)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x459}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, 0x0, 0x4000) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2014) 854.279121ms ago: executing program 2 (id=670): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xec, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xbc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x14, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0xec}}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000200)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{&(0x7f00000002c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/100, 0x321}, {&(0x7f0000000440)=""/85, 0x21}, {&(0x7f00000004c0)=""/4096, 0x197}, {&(0x7f00000014c0)=""/106, 0x659}, {&(0x7f0000001540)=""/73, 0xd}, {&(0x7f00000015c0)=""/77, 0x69}, {&(0x7f0000001640)=""/141, 0xc4}, {&(0x7f0000001700)=""/17, 0x1d8}], 0x21, &(0x7f0000001740)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000001800)={0x77359400}) write(r0, &(0x7f0000000040)='\a', 0x1) syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x20200) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x65, 0xff80000000000000, 0x0, 0x2, 0xa, 0x1, "0f9b222812e5942f10a91e99fe770b4436558ff55fd207ad70074c68cf0799b4855a86fd4472d3a25f9a5f3d667ecb97d801a415738520d4b351e1df5e394b03", "1c7917c331ac85df41977e3e956507bdb69a237fc0402df4e3a76d4a2efc41cbd13b48e9022d8233bdf35a9d7dd833b18a3f3b539d600d6d50013cf97dc8db7b", "c66f2b53d4931ec84fa4bfbde5360420b63e0603ff8bf99bb648c6d2b8ba3f56", [0xfffffffffffff246, 0x1ff]}) 734.990874ms ago: executing program 4 (id=671): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x24, 0x0, 0x155555555555578d, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000a80)={0x20, 0x11, 0x94, "66bc6c1fe17f5721d08125d9599eac52c09c963b20a48290f168b718d8d728c61ae1afd7b26b22914767c4b2e226f7f49b945ffa7816ddbaf594178c3bd758c24bfd7f7c264769f98cc60051d69b77fea4ab198f976c214b0290d198cdaa4fbd4c083925013a1d1e45bfe6e8b41cfafc9812bb05303673c4ae8b4b76900715734a841ae7c7919c885645347c6ff2ded57658a67d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x5, 0x6d, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x1, 0x1, 0xf8, 0x20, 0x1, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x88, {{0xb, 0x24, 0x6, 0x0, 0x0, "42e0ceebcd5a"}, {0x5, 0x24, 0x0, 0xf3d1}, {0xd, 0x24, 0xf, 0x1, 0x60b, 0x1, 0x3, 0x9}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @ncm={0x6, 0x24, 0x1a, 0xfff9, 0x38}, @acm={0x4, 0x24, 0x2, 0x4}, @acm={0x4, 0x24, 0x2, 0x4}, @dmm={0x7, 0x24, 0x14, 0x7, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0xe, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x6, 0xe, 0xc}}}}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x110, 0x6, 0x6, 0x9, 0x20, 0x4}, 0x84, &(0x7f0000000f00)={0x5, 0xf, 0x84, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x8, 0x800}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "fe471d279712f2384c8346c9e3dbade8"}, @generic={0x61, 0x10, 0x2, "f9ef6c66ebdab9b1eadb7feb1da043c15168fee15d87ceb1a81b274c12b0d70fac647096f442e71e14aef0b9c0546c52a9dc2f208838cbaf5d86462d6b54a1d16be3caea0985a0ad09b2ec57ba1c9c673da5049c0c9bf71fa52095cfd4b1"}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000001140)='./proc\x00', 0x1ff) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) umount2(0x0, 0x9) mount(0x0, &(0x7f0000001180)='./proc\x00', &(0x7f00000011c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r1, &(0x7f0000001240)='27', 0x2) socket$inet(0x2, 0x5, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001280)='./cgroup.net/syz1\x00', 0x1ff) syz_usb_control_io(r0, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000100)={0x20, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x3, 0x4, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000fc0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f00000010c0)="c10e000018001f06b9409b0dffff110d0207be040205fe0506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160006000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001000)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r3, 0xc018aec0, &(0x7f0000001040)={0x1}) syz_usb_control_io(r0, &(0x7f00000007c0)={0x2c, &(0x7f0000000600)={0x0, 0x11, 0x7d, {0x7d, 0x6, "9a74214b6815236f2d132bd88103c9c6f2eff2f5c1c805cbf060d300135cfca6a4453f9de987a29f12f6b76940813116befeb35391accfbf6a57abe2486bb46d79009fb6f28e04a4a128ec638a25bd2d0d2540853311900545368eac6c4283fad1df915827a6ade5637d27eb5294148094bf7741c011cc749a2e68"}}, &(0x7f00000006c0)={0x0, 0x3, 0x26, @string={0x26, 0x3, "57e2007c440485a8cf206f4d7b4ca2f0bb37f0330279a29a54951e4823b12ab46495b006"}}, &(0x7f0000000700)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x1, 0x1, 0xfa, 'g`S\a', "91df2d13"}}, &(0x7f0000000780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x88b6d6323e08bbf2, 0x7, 0x9, 0x8a, 0xe, 0x2}}}, &(0x7f0000000d40)={0x84, &(0x7f0000000800)={0x40, 0xf, 0x7c, "07cef2aa23ac64ebe1a3de6a88829dc4120318157076b681e785782ce459339a09052cf46c5c6410f5a9a125c20b2df1cca0405c5fc05f1bcddeb86dabd367fa3aac97255a6e2c18ac90dbf5b2351c4e64a85d572c3f983a97aa4ac59c4b06d78c6bfe8f2daf33aafebb9c5880cf3f10a8592347e7b4349fe2b1007c"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xeb}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x0, 0x10}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0xf7}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "e38e"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "54a0"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x10}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x5}}) 385.09604ms ago: executing program 2 (id=672): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x3, '\x00', 0xe}, {0x2, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x1, 0x9, 0x9, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0xa3}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xa, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x80000008, 0x0, 0x3, 0xf, 0x5c08, 0xffff, 0xe3}]}) sendmsg$netlink(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)={0x18, 0x56, 0x1, 0x0, 0x800000, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4f21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x402}, 0x925ec13f8c8c163c) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_opts(r5, 0x0, 0x16, 0x0, &(0x7f00000000c0)) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f00000002c0)=0xb, 0x4) getpid() r6 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r6, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) 360.112883ms ago: executing program 1 (id=673): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/sda\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x5319, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) rt_sigqueueinfo(r4, 0x3a, &(0x7f0000000000)={0x20, 0x6c, 0xfffffffe}) r5 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000400)=[@nested_vmresume={0x130, 0x18, 0x3}], 0x18}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001540)={0x10201, 0x1, 0x8080000, 0x1000, &(0x7f0000ef3000/0x1000)=nil}) 337.019825ms ago: executing program 2 (id=674): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc0000001300050001000000000000000000000000000000000080ff000000010000000000000000000000000000000100000000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000100000000000000440005"], 0xfc}}, 0x0) 326.179587ms ago: executing program 2 (id=675): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}], 0x20, 0x24040805}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000080)=0x2001, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) clock_gettime(0x0, &(0x7f0000003880)) setrlimit(0x1, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) truncate(&(0x7f00000003c0)='./cgroup.cpu/cgroup.procs\x00', 0x400000efff) 292.32045ms ago: executing program 2 (id=676): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="fc0000001900010000000000000000000000000000000000000000000000000000000000000000000000ffffe000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000050000000000000000000000000000009bffffff7f00000000000000000000000002000000000000fffff00000000000000000000000000000feffffffffffffffffffffffffffffff00000000000000000000000000000000000000000001000103"], 0xfc}}, 0x0) 237.049445ms ago: executing program 1 (id=677): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xd8, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0xff, 0x4, 0x20, 0x0, 0x1000000}], 0x2}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='wchan\x00') sendmsg$unix(0xffffffffffffffff, 0x0, 0x2004c897) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="050000000000000002004e23ffffffff000000000000000000000000000000000000000000000000000000002400"/144], 0x90) r3 = socket$inet_tcp(0x2, 0x1, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000900)="e83884cb28bd5a3a", 0x8}]) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000940)=@generic={0x0, 0x2}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f00000002c0)=0x10000, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r5, 0xff, 0x1, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0x6, 0x2, 0xb83e, &(0x7f0000000b00)) r7 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r7, 0x2, &(0x7f0000000140)='nomand\x00', &(0x7f0000000180)="4765f2a9a2f91accfc031d7c871441548d74d83dbbac8571af812a1b67c548791e02ca5e", 0x24) getsockopt(r6, 0x8, 0x10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = syz_io_uring_complete(0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r8, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f0000000440)={0x424, 0x3f4, 0x400, 0x70bd2a, 0x25dfdbfb, {0x6, 0x0, 0x3b, [0x80, 0x991, 0x5, 0x0, 0x4, 0x7, 0x1, 0xf2, 0xf6, 0x4bf, 0x9, 0xfffff57c, 0x9, 0x7fffffff, 0x7, 0x4, 0xe, 0x7, 0x1, 0x1100, 0x401, 0x9, 0x7f, 0x7f, 0xd27, 0x6, 0x7, 0x403f7a25, 0xde, 0x3, 0x9, 0x6, 0x54fe2d81, 0xb, 0x8f, 0x5, 0x4, 0x4, 0xe, 0x0, 0x7, 0x7, 0x40, 0x1, 0x7, 0x7ff, 0x2fd99671, 0xffff, 0x0, 0x73fd39c2, 0xfffffff7, 0x1, 0x1, 0xffffff80, 0x3, 0x874, 0x4, 0x8000, 0x2, 0x6, 0xdbf, 0x0, 0x1, 0xfffffffa], [0x0, 0xaee, 0xe6, 0x7b2b, 0x1, 0x81, 0xffff, 0x233, 0x401, 0x3, 0x10000, 0x1, 0xfffffffd, 0x7, 0x8, 0x9, 0xd4, 0x40000000, 0x0, 0x6, 0x1, 0x3, 0x4, 0x0, 0x4, 0x3ff, 0xfffffffb, 0x0, 0x8, 0x0, 0x1ff, 0x4, 0x4, 0x0, 0x0, 0x6ce57a99, 0x9, 0x7, 0xfffffff0, 0x1, 0x10, 0x1000, 0xafe2, 0xf, 0x4, 0xfffffbff, 0x40, 0x2, 0x3, 0x5e8, 0xc, 0xca1a, 0x401, 0x5093, 0x7, 0x7, 0x8, 0x9b, 0x9, 0xc45, 0xeb1, 0x8000000, 0x5991, 0x8], [0x3, 0xb58, 0x80000000, 0x0, 0x1d144897, 0x7, 0x7, 0x7fff, 0x8, 0x3, 0x8, 0xfffffffb, 0x1, 0x0, 0x6, 0xffffff20, 0x1, 0x1000, 0x8, 0x751e, 0x1, 0x80000001, 0x8, 0x1, 0x9, 0xc9, 0x3, 0xc8000000, 0x9, 0x7, 0x1, 0x9, 0x4, 0xffffff80, 0xff, 0xc, 0x5, 0x4, 0x7, 0x401, 0xffffffff, 0xaee7, 0x5, 0x4, 0xa, 0xe, 0x3, 0x9, 0x9, 0x8000, 0x3, 0x6, 0x3, 0x2, 0x6, 0x0, 0x3, 0x30ca, 0x0, 0xa, 0xffffffff, 0x40, 0x7ff, 0x6], [0x9, 0x8, 0xb57, 0x6, 0x7, 0x3, 0x2, 0xb, 0x101, 0x5, 0x9, 0x6c1, 0x0, 0x5, 0x73d, 0x7, 0x7fffffff, 0x8001, 0x7a1, 0x3ff, 0x10, 0x2, 0x6, 0xcb3b, 0x80000001, 0x779, 0x6, 0x8, 0x3ff, 0x1, 0xd0c, 0x6, 0x2, 0x2, 0xb, 0x24, 0xaad, 0x6, 0x80000000, 0x2, 0x1, 0xffffff7f, 0x624, 0x9, 0x0, 0xc, 0x6, 0x0, 0x5, 0x56bf, 0x6, 0x4, 0x6, 0x0, 0x1, 0x9, 0xfffffffd, 0x80, 0x5, 0x1ff, 0x9, 0x6, 0xab, 0x6], 0x1, ['\x00']}, [""]}, 0x424}, 0x1, 0x0, 0x0, 0x8044}, 0x4001) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r10 = syz_io_uring_setup(0x67c8, &(0x7f00000009c0)={0x0, 0xf24f, 0x40, 0x2, 0x3a8, 0x0, r8}, &(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x3000000, 0x4000010, r10, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbfe, 0x10}, 0xc) ioctl$KVM_RUN(r9, 0xae80, 0x0) 152.795394ms ago: executing program 2 (id=678): r0 = syz_usb_connect(0x0, 0x46, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x6f, 0x68, 0x8b, 0x40, 0x10c4, 0x818a, 0x12f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x8, 0x9, 0x20, 0x40, "", [{{0x9, 0x4, 0xa3, 0x7d, 0x3, 0x3, 0x0, 0x0, 0xd, [], [{{0x9, 0x5, 0xd, 0x2, 0x10, 0x71, 0x7, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x80, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x6}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x3, 0x9, 0x3}}]}}]}}]}}, 0x0) syz_usb_connect$uac2(0x0, 0x80, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb082501010305f9ff090402000001022000090400010101022000090582", @ANYRES16=r0, @ANYRESHEX, @ANYRESHEX], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 34.638096ms ago: executing program 1 (id=679): r0 = open$dir(&(0x7f0000000040)='./proc/../file0\x00', 0x0, 0x80) mkdirat(r0, &(0x7f0000000140)='./proc\x00', 0x17c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, 0x0) ptrace$peek(0x1, r1, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000004c0)={0x0, 0x44, 0x1, 0x80000005, 0x18, "b0bf2ebb48c849ac4800"}) ioctl$TCSETSW(r3, 0x5403, 0x0) r4 = syz_open_pts(r3, 0x0) open(&(0x7f0000000080)='./proc\x00', 0x80400, 0x4) r5 = dup3(r4, r3, 0x0) read$FUSE(r5, 0x0, 0x0) write(r2, &(0x7f0000000240)='7', 0x1) 0s ago: executing program 33 (id=679): r0 = open$dir(&(0x7f0000000040)='./proc/../file0\x00', 0x0, 0x80) mkdirat(r0, &(0x7f0000000140)='./proc\x00', 0x17c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x8, 0x20132, 0xffffffffffffffff, 0xb2993000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x8, 0x0) ptrace$peek(0x1, r1, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, 0x0) write$binfmt_aout(r3, &(0x7f0000000480)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000004c0)={0x0, 0x44, 0x1, 0x80000005, 0x18, "b0bf2ebb48c849ac4800"}) ioctl$TCSETSW(r3, 0x5403, 0x0) r4 = syz_open_pts(r3, 0x0) open(&(0x7f0000000080)='./proc\x00', 0x80400, 0x4) r5 = dup3(r4, r3, 0x0) read$FUSE(r5, 0x0, 0x0) write(r2, &(0x7f0000000240)='7', 0x1) kernel console output (not intermixed with test programs): ast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 73.358493][ T1451] tipc: Enabled bearer , priority 10 [ 73.441783][ T876] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 73.601763][ T876] usb 1-1: Using ep0 maxpacket: 32 [ 73.608198][ T876] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 73.616627][ T876] usb 1-1: config 0 has no interface number 0 [ 73.622941][ T876] usb 1-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 73.642909][ T876] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 73.652033][ T876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.660045][ T876] usb 1-1: Product: syz [ 73.664445][ T876] usb 1-1: Manufacturer: syz [ 73.669045][ T876] usb 1-1: SerialNumber: syz [ 73.677618][ T876] usb 1-1: config 0 descriptor?? [ 73.692171][ T876] smsc95xx v2.0.0 [ 73.695855][ T876] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 73.707462][ T876] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 73.886157][ T1445] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.898453][ T1445] SELinux: policydb string does not match my string SE Linux [ 73.906267][ T1445] SELinux: failed to load policy [ 73.913244][ T353] usb 1-1: USB disconnect, device number 15 [ 74.471733][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 74.471905][ T641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.478057][ T876] tipc: Node number set to 2886997162 [ 74.504619][ T36] audit: type=1400 audit(1793134220.720:317): avc: denied { read append } for pid=1461 comm="syz.2.379" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 74.531728][ T375] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 74.681727][ T375] usb 5-1: Using ep0 maxpacket: 8 [ 74.687780][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.698725][ T375] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 74.711573][ T375] usb 5-1: New USB device found, idVendor=046d, idProduct=c215, bcdDevice= 0.00 [ 74.720706][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.728843][ T1364] usbhid 2-1:0.0: reset_resume error -110 [ 74.735473][ T375] usb 5-1: config 0 descriptor?? [ 74.741351][ T375] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 74.772262][ T1468] netlink: 68 bytes leftover after parsing attributes in process `syz.0.380'. [ 74.821931][ T353] usb 2-1: USB disconnect, device number 22 [ 74.843460][ T1478] tipc: Enabling of bearer rejected, failed to enable media [ 74.852270][ T1478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.384'. [ 74.863751][ T1478] tipc: Enabling of bearer rejected, already enabled [ 74.887695][ T1482] fuse: Bad value for 'user_id' [ 74.892685][ T1482] fuse: Bad value for 'user_id' [ 74.897334][ T708] Bluetooth: hci0: Frame reassembly failed (-84) [ 74.943168][ T375] usbhid 5-1:0.0: can't add hid device: -71 [ 74.951228][ T375] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 74.959949][ T375] usb 5-1: USB disconnect, device number 10 [ 75.151767][ T31] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 75.302786][ T31] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 75.311612][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.321769][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 75.330624][ T31] usb 1-1: config 1 has no interface number 0 [ 75.336801][ T31] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 75.347616][ T31] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 75.363145][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 75.368967][ T1491] netlink: 68 bytes leftover after parsing attributes in process `syz.2.390'. [ 75.372291][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.389157][ T31] usb 1-1: Product: syz [ 75.393378][ T31] usb 1-1: Manufacturer: syz [ 75.395539][ T1493] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.391'. [ 75.397978][ T31] usb 1-1: SerialNumber: syz [ 75.595259][ T36] audit: type=1400 audit(1793134221.810:318): avc: denied { bind } for pid=1494 comm="syz.4.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.651733][ T876] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 75.661063][ T1496] cgroup: fork rejected by pids controller in /syz4 [ 75.801712][ T876] usb 3-1: Using ep0 maxpacket: 32 [ 75.812292][ T876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.821154][ T353] usb 1-1: USB disconnect, device number 16 [ 75.833446][ T876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.849474][ T876] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 75.860244][ T876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.869614][ T876] usb 3-1: config 0 descriptor?? [ 75.875774][ T876] hub 3-1:0.0: USB hub found [ 76.076023][ T876] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 76.223949][ T1568] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 76.233393][ T1568] kvm: pic: non byte read [ 76.237936][ T1568] kvm: pic: level sensitive irq not supported [ 76.238011][ T1568] kvm: pic: non byte read [ 76.248713][ T1568] kvm: pic: level sensitive irq not supported [ 76.248770][ T1568] kvm: pic: non byte read [ 76.259525][ T1568] kvm: pic: level sensitive irq not supported [ 76.259599][ T1568] kvm: pic: non byte read [ 76.270339][ T1568] kvm: pic: level sensitive irq not supported [ 76.270404][ T1568] kvm: pic: non byte read [ 76.280995][ T1568] kvm: pic: level sensitive irq not supported [ 76.281057][ T1568] kvm: pic: non byte read [ 76.291753][ T1568] kvm: pic: level sensitive irq not supported [ 76.291829][ T1568] kvm: pic: non byte read [ 76.302450][ T1568] kvm: pic: level sensitive irq not supported [ 76.302512][ T1568] kvm: pic: non byte read [ 76.313687][ T1568] kvm: pic: level sensitive irq not supported [ 76.313762][ T1568] kvm: pic: non byte read [ 76.324681][ T1568] kvm: pic: level sensitive irq not supported [ 76.324753][ T1568] kvm: pic: non byte read [ 76.335467][ T1568] kvm: pic: level sensitive irq not supported [ 76.411498][ T1572] tipc: Enabling of bearer rejected, failed to enable media [ 76.426403][ T1572] netlink: 4 bytes leftover after parsing attributes in process `syz.4.395'. [ 76.436265][ T1572] tipc: Enabling of bearer rejected, already enabled [ 76.491263][ T876] hid-generic 0003:046D:C31C.0007: unknown main item tag 0x0 [ 76.501160][ T876] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 76.550665][ T1585] netlink: 68 bytes leftover after parsing attributes in process `syz.0.399'. [ 76.569512][ T1587] netlink: 'syz.0.400': attribute type 4 has an invalid length. [ 76.622824][ T36] audit: type=1400 audit(1793134222.840:319): avc: denied { accept } for pid=1579 comm="syz.4.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.644058][ T36] audit: type=1400 audit(1793134222.840:320): avc: denied { ioctl } for pid=1579 comm="syz.4.397" path="pid:[4026532302]" dev="nsfs" ino=4026532302 ioctlcmd=0xb708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.664771][ T1592] input: syz1 as /devices/virtual/input/input8 [ 76.684005][ T1592] 9pnet_virtio: no channels available for device /dev/syzrnull [ 76.692387][ T1592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.400'. [ 76.709494][ T36] audit: type=1400 audit(1793134222.920:321): avc: denied { read write } for pid=1593 comm="syz.4.401" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 76.712065][ T1594] netlink: 16 bytes leftover after parsing attributes in process `syz.4.401'. [ 76.733022][ T36] audit: type=1400 audit(1793134222.920:322): avc: denied { open } for pid=1593 comm="syz.4.401" path="/41/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 76.765730][ T36] audit: type=1400 audit(1793134222.920:323): avc: denied { setattr } for pid=1593 comm="syz.4.401" path="/41/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 76.796818][ T1601] tipc: Enabling of bearer rejected, failed to enable media [ 76.806210][ T1601] tipc: Enabling of bearer rejected, already enabled [ 76.938185][ T1610] futex_wake_op: syz.4.406 tries to shift op by 144; fix this program [ 76.951747][ T641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.951969][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 76.999374][ T36] audit: type=1400 audit(1793134223.210:324): avc: denied { ioctl } for pid=1606 comm="syz.4.406" path="/46/proc/mtrr" dev="proc" ino=4026532004 ioctlcmd=0x4d00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 77.140193][ T1620] veth0_to_bridge: entered allmulticast mode [ 77.202417][ T1619] veth0_to_bridge: left allmulticast mode [ 77.216405][ T1623] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 77.225473][ T1623] overlayfs: missing 'lowerdir' [ 77.247250][ T1627] tipc: Enabling of bearer rejected, failed to enable media [ 77.255611][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 77.256759][ T1627] tipc: Enabling of bearer rejected, already enabled [ 77.302591][ T36] audit: type=1400 audit(1793134223.520:325): avc: denied { append } for pid=1628 comm="syz.4.414" name="001" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 77.402151][ T1493] usb 3-1: reset high-speed USB device number 22 using dummy_hcd [ 77.413183][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 77.417726][ T1633] FAULT_INJECTION: forcing a failure. [ 77.417726][ T1633] name failslab, interval 1, probability 0, space 0, times 0 [ 77.418581][ T711] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.431370][ T1633] CPU: 0 UID: 0 PID: 1633 Comm: syz.0.415 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 77.431395][ T1633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.431407][ T1633] Call Trace: [ 77.431412][ T1633] [ 77.431418][ T1633] __dump_stack+0x21/0x30 [ 77.431446][ T1633] dump_stack_lvl+0x140/0x1c0 [ 77.431469][ T1633] ? __cfi_dump_stack_lvl+0x10/0x10 [ 77.431492][ T1633] ? do_vfs_ioctl+0x1824/0x2010 [ 77.431512][ T1633] dump_stack+0x19/0x20 [ 77.431534][ T1633] should_fail_ex+0x3c2/0x510 [ 77.431551][ T1633] should_failslab+0xac/0x100 [ 77.431567][ T1633] kmem_cache_alloc_node_noprof+0x45/0x420 [ 77.431589][ T1633] ? __alloc_skb+0x10c/0x360 [ 77.431608][ T1633] __alloc_skb+0x10c/0x360 [ 77.431626][ T1633] create_monitor_ctrl_open+0x161/0x830 [ 77.431646][ T1633] ? selinux_capable+0x38/0x50 [ 77.431668][ T1633] ? security_capable+0x44/0x130 [ 77.431690][ T1633] ? hci_sock_gen_cookie+0x120/0x120 [ 77.431710][ T1633] ? ns_capable+0x90/0xf0 [ 77.431728][ T1633] hci_sock_ioctl+0x3b8/0x9e0 [ 77.431747][ T1633] sock_do_ioctl+0x118/0x330 [ 77.431764][ T1633] ? sock_show_fdinfo+0xd0/0xd0 [ 77.431780][ T1633] ? __cfi_vfs_write+0x10/0x10 [ 77.431801][ T1633] ? __kasan_check_write+0x18/0x20 [ 77.431822][ T1633] ? mutex_unlock+0x90/0x240 [ 77.431843][ T1633] sock_ioctl+0x568/0x7e0 [ 77.431858][ T1633] ? __cfi_sock_ioctl+0x10/0x10 [ 77.431874][ T1633] ? __fget_files+0x2bc/0x330 [ 77.431891][ T1633] ? bpf_lsm_file_ioctl+0xd/0x20 [ 77.431907][ T1633] ? security_file_ioctl+0x3e/0x110 [ 77.431928][ T1633] ? __cfi_sock_ioctl+0x10/0x10 [ 77.431943][ T1633] __se_sys_ioctl+0x123/0x1b0 [ 77.431960][ T1633] __x64_sys_ioctl+0x7f/0xa0 [ 77.431975][ T1633] x64_sys_call+0x1878/0x2ee0 [ 77.431992][ T1633] do_syscall_64+0x57/0xf0 [ 77.432010][ T1633] ? clear_bhb_loop+0x50/0xa0 [ 77.432032][ T1633] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 77.432052][ T1633] RIP: 0033:0x7fd86159f559 [ 77.432067][ T1633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.432081][ T1633] RSP: 002b:00007fd86247c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 77.432099][ T1633] RAX: ffffffffffffffda RBX: 00007fd861825fa0 RCX: 00007fd86159f559 [ 77.432111][ T1633] RDX: 00002000000000c0 RSI: 00000000400448c9 RDI: 0000000000000005 [ 77.432122][ T1633] RBP: 00007fd86247c090 R08: 0000000000000000 R09: 0000000000000000 [ 77.432134][ T1633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.432144][ T1633] R13: 00007fd861826038 R14: 00007fd861825fa0 R15: 00007fff861ced08 [ 77.432158][ T1633] [ 77.700410][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.711339][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.721168][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.734013][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.743124][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.751728][ T353] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 77.759482][ T31] usb 2-1: config 0 descriptor?? [ 77.911751][ T353] usb 5-1: Using ep0 maxpacket: 16 [ 77.918297][ T353] usb 5-1: unable to get BOS descriptor or descriptor too short [ 77.926738][ T353] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.936877][ T353] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.945878][ T353] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 77.960077][ T353] usb 5-1: New USB device found, idVendor=17cc, idProduct=0839, bcdDevice= 0.40 [ 77.969193][ T353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.977380][ T353] usb 5-1: Product: syz [ 77.981591][ T353] usb 5-1: Manufacturer: syz [ 77.986256][ T353] usb 5-1: SerialNumber: syz [ 78.181805][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 78.189108][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 78.196788][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 78.204085][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 78.211325][ T31] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 78.218789][ T31] microsoft 0003:045E:07DA.0008: No inputs registered, leaving [ 78.381076][ T1615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.389685][ T1615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.398663][ T1615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.407274][ T1615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.716630][ T353] usb 5-1: unit 5 not found! [ 78.731284][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 78.747184][ T353] usb 5-1: USB disconnect, device number 11 [ 79.041743][ T353] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 79.192778][ T353] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 79.203761][ T353] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 79.214585][ T353] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 79.223668][ T353] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.431827][ T640] Bluetooth: hci0: command 0x1003 tx timeout [ 79.431933][ T641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.440182][ T1638] FAULT_INJECTION: forcing a failure. [ 79.440182][ T1638] name fail_futex, interval 1, probability 0, space 0, times 0 [ 79.457334][ T1638] CPU: 0 UID: 0 PID: 1638 Comm: syz.4.417 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 79.457368][ T1638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 79.457380][ T1638] Call Trace: [ 79.457386][ T1638] [ 79.457394][ T1638] __dump_stack+0x21/0x30 [ 79.457426][ T1638] dump_stack_lvl+0x140/0x1c0 [ 79.457450][ T1638] ? __cfi_dump_stack_lvl+0x10/0x10 [ 79.457477][ T1638] dump_stack+0x19/0x20 [ 79.457499][ T1638] should_fail_ex+0x3c2/0x510 [ 79.457518][ T1638] should_fail+0xf/0x20 [ 79.457532][ T1638] get_futex_key+0x178/0x940 [ 79.457550][ T1638] ? __cfi___futex_wait+0x10/0x10 [ 79.457566][ T1638] ? __cfi_get_futex_key+0x10/0x10 [ 79.457581][ T1638] ? __cfi_futex_wake_mark+0x10/0x10 [ 79.457598][ T1638] futex_wake+0x150/0x950 [ 79.457617][ T1638] ? futex_wait+0x2b8/0x7c0 [ 79.457636][ T1638] ? __cfi_futex_wake+0x10/0x10 [ 79.457656][ T1638] ? vfs_write+0xbcf/0xfd0 [ 79.457677][ T1638] do_futex+0x37d/0x510 [ 79.457694][ T1638] ? __cfi_do_futex+0x10/0x10 [ 79.457711][ T1638] __se_sys_futex+0x13c/0x320 [ 79.457729][ T1638] ? fput+0x1a4/0x230 [ 79.457748][ T1638] ? __x64_sys_futex+0x110/0x110 [ 79.457768][ T1638] __x64_sys_futex+0xe9/0x110 [ 79.457787][ T1638] x64_sys_call+0x227f/0x2ee0 [ 79.457806][ T1638] do_syscall_64+0x57/0xf0 [ 79.457825][ T1638] ? clear_bhb_loop+0x50/0xa0 [ 79.457850][ T1638] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 79.457874][ T1638] RIP: 0033:0x7f5d7279f559 [ 79.457891][ T1638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 79.457905][ T1638] RSP: 002b:00007f5d7363c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 79.457925][ T1638] RAX: ffffffffffffffda RBX: 00007f5d72a25fa8 RCX: 00007f5d7279f559 [ 79.457939][ T1638] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5d72a25fac [ 79.457951][ T1638] RBP: 00007f5d72a25fa0 R08: 4000000000000000 R09: 0000000000000000 [ 79.457962][ T1638] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 79.457972][ T1638] R13: 00007f5d72a26038 R14: 00007ffe2240d9e0 R15: 00007ffe2240dac8 [ 79.457984][ T1638] [ 79.702795][ T353] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 79.711387][ T353] usb 5-1: USB disconnect, device number 12 [ 79.751799][ T315] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 79.902910][ T315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 79.911375][ T315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.921562][ T315] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 79.930551][ T315] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 79.941538][ T315] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 79.955248][ T315] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 79.966059][ T315] usb 1-1: config 1 interface 1 has no altsetting 0 [ 79.974731][ T315] usb 1-1: string descriptor 0 read error: -22 [ 79.980949][ T315] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 79.990064][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.222764][ T1644] rust_binder: 1643:1644 error while translating object: EPERM [ 80.230493][ T1644] rust_binder: 1643:1644 transaction call to 1643:0 failed EPERM, code 4294967295 size 96-24 line thread.rs:995 [ 80.242902][ T353] rust_binder: 1643: undelivered TRANSACTION_ERROR: 29201 [ 80.267881][ T36] audit: type=1400 audit(1793134226.480:326): avc: denied { unmount } for pid=1044 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 80.404019][ T1642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.415330][ T1642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.426846][ T1642] FAULT_INJECTION: forcing a failure. [ 80.426846][ T1642] name failslab, interval 1, probability 0, space 0, times 0 [ 80.439656][ T1642] CPU: 0 UID: 0 PID: 1642 Comm: syz.0.419 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 80.439692][ T1642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 80.439706][ T1642] Call Trace: [ 80.439714][ T1642] [ 80.439723][ T1642] __dump_stack+0x21/0x30 [ 80.439760][ T1642] dump_stack_lvl+0x140/0x1c0 [ 80.439789][ T1642] ? __cfi_dump_stack_lvl+0x10/0x10 [ 80.439818][ T1642] ? selinux_kernfs_init_security+0x14b/0x4b0 [ 80.439846][ T1642] dump_stack+0x19/0x20 [ 80.439872][ T1642] should_fail_ex+0x3c2/0x510 [ 80.439892][ T1642] should_failslab+0xac/0x100 [ 80.439911][ T1642] kmem_cache_alloc_noprof+0x42/0x410 [ 80.439937][ T1642] ? __kernfs_new_node+0xf1/0x740 [ 80.439958][ T1642] __kernfs_new_node+0xf1/0x740 [ 80.439978][ T1642] ? down_write+0xee/0x2b0 [ 80.440002][ T1642] ? kernfs_new_node+0x280/0x280 [ 80.440024][ T1642] ? __kasan_check_write+0x18/0x20 [ 80.440050][ T1642] ? down_write+0xee/0x2b0 [ 80.440079][ T1642] ? __cfi_down_write+0x10/0x10 [ 80.440109][ T1642] ? __kasan_check_write+0x18/0x20 [ 80.440136][ T1642] kernfs_new_node+0x154/0x280 [ 80.440156][ T1642] __kernfs_create_file+0x52/0x280 [ 80.440181][ T1642] cgroup_addrm_files+0x775/0xac0 [ 80.440205][ T1642] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 80.440232][ T1642] ? __kasan_check_write+0x18/0x20 [ 80.440256][ T1642] ? _raw_spin_lock_irq+0x93/0x120 [ 80.440276][ T1642] css_populate_dir+0x1a4/0x3d0 [ 80.440300][ T1642] cgroup_mkdir+0x11da/0x1590 [ 80.440319][ T1642] ? __cfi_cgroup_mkdir+0x10/0x10 [ 80.440337][ T1642] kernfs_iop_mkdir+0x1be/0x2d0 [ 80.440357][ T1642] vfs_mkdir+0x58e/0x810 [ 80.440379][ T1642] do_mkdirat+0x240/0x530 [ 80.440400][ T1642] ? __cfi_do_mkdirat+0x10/0x10 [ 80.440421][ T1642] ? __kasan_check_write+0x18/0x20 [ 80.440446][ T1642] ? getname_flags+0x203/0x6b0 [ 80.440470][ T1642] ? __kasan_check_write+0x18/0x20 [ 80.440495][ T1642] __x64_sys_mkdirat+0x8b/0xa0 [ 80.440528][ T1642] x64_sys_call+0x2ba8/0x2ee0 [ 80.440550][ T1642] do_syscall_64+0x57/0xf0 [ 80.440571][ T1642] ? clear_bhb_loop+0x50/0xa0 [ 80.440598][ T1642] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 80.440623][ T1642] RIP: 0033:0x7fd86159f559 [ 80.440641][ T1642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.440660][ T1642] RSP: 002b:00007fd86247c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 80.440681][ T1642] RAX: ffffffffffffffda RBX: 00007fd861825fa0 RCX: 00007fd86159f559 [ 80.440698][ T1642] RDX: 00000000000001ff RSI: 0000200000001280 RDI: ffffffffffffff9c [ 80.440713][ T1642] RBP: 00007fd861636b20 R08: 0000000000000000 R09: 0000000000000000 [ 80.440725][ T1642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.440739][ T1642] R13: 00007fd861826038 R14: 00007fd861825fa0 R15: 00007fff861ced08 [ 80.440755][ T1642] [ 80.440820][ T1642] cgroup: cgroup_addrm_files: failed to add notify_on_release, err=-12 [ 80.873042][ T1642] netlink: 'syz.0.419': attribute type 4 has an invalid length. [ 80.880934][ T1642] netlink: 'syz.0.419': attribute type 6 has an invalid length. [ 80.889027][ T1642] __nla_validate_parse: 2 callbacks suppressed [ 80.889043][ T1642] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.419'. [ 81.031768][ T641] Bluetooth: hci1: command 0x1003 tx timeout [ 81.031819][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 81.115913][ T1642] netlink: 24 bytes leftover after parsing attributes in process `syz.0.419'. [ 81.191023][ T1666] SELinux: policydb string does not match my string SE Linux [ 81.198739][ T1666] SELinux: failed to load policy [ 81.285497][ T1668] FAULT_INJECTION: forcing a failure. [ 81.285497][ T1668] name failslab, interval 1, probability 0, space 0, times 0 [ 81.298253][ T1668] CPU: 1 UID: 0 PID: 1668 Comm: syz.1.427 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 81.298297][ T1668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.298310][ T1668] Call Trace: [ 81.298316][ T1668] [ 81.298324][ T1668] __dump_stack+0x21/0x30 [ 81.298355][ T1668] dump_stack_lvl+0x140/0x1c0 [ 81.298378][ T1668] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.298400][ T1668] ? kernfs_add_one+0x301/0x400 [ 81.298418][ T1668] dump_stack+0x19/0x20 [ 81.298439][ T1668] should_fail_ex+0x3c2/0x510 [ 81.298457][ T1668] should_failslab+0xac/0x100 [ 81.298475][ T1668] __kmalloc_cache_noprof+0x41/0x470 [ 81.298499][ T1668] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 81.298519][ T1668] ? kobject_uevent_env+0x2a3/0x7e0 [ 81.298540][ T1668] kobject_uevent_env+0x2a3/0x7e0 [ 81.298562][ T1668] kobject_uevent+0x21/0x40 [ 81.298582][ T1668] device_add+0x599/0xbf0 [ 81.298604][ T1668] netdev_register_kobject+0x196/0x330 [ 81.298631][ T1668] register_netdevice+0x1042/0x1a80 [ 81.298651][ T1668] ? __cfi_register_netdevice+0x10/0x10 [ 81.298668][ T1668] ? alloc_netdev_mqs+0xda9/0x13d0 [ 81.298688][ T1668] ? __asan_memcpy+0x5a/0x80 [ 81.298710][ T1668] ip6gre_tunnel_locate+0x323/0x6b0 [ 81.298729][ T1668] ? ip6gre_tnl_link_config+0x240/0x240 [ 81.298747][ T1668] ? selinux_capable+0x38/0x50 [ 81.298766][ T1668] ? ip6gre_changelink_common+0x4a0/0x4a0 [ 81.298785][ T1668] ? ip6gre_tnl_parm_from_user+0x21d/0x420 [ 81.298805][ T1668] ip6gre_tunnel_siocdevprivate+0x542/0x870 [ 81.298825][ T1668] ? __cfi_ip6gre_tunnel_siocdevprivate+0x10/0x10 [ 81.298847][ T1668] ? full_name_hash+0xa1/0xf0 [ 81.298864][ T1668] dev_ifsioc+0x94e/0xc10 [ 81.298884][ T1668] dev_ioctl+0xa62/0x1000 [ 81.298901][ T1668] sock_ioctl+0x74e/0x7e0 [ 81.298918][ T1668] ? __cfi_sock_ioctl+0x10/0x10 [ 81.298933][ T1668] ? __fget_files+0x2bc/0x330 [ 81.298950][ T1668] ? bpf_lsm_file_ioctl+0xd/0x20 [ 81.298967][ T1668] ? security_file_ioctl+0x3e/0x110 [ 81.298990][ T1668] ? __cfi_sock_ioctl+0x10/0x10 [ 81.299006][ T1668] __se_sys_ioctl+0x123/0x1b0 [ 81.299024][ T1668] __x64_sys_ioctl+0x7f/0xa0 [ 81.299042][ T1668] x64_sys_call+0x1878/0x2ee0 [ 81.299060][ T1668] do_syscall_64+0x57/0xf0 [ 81.299079][ T1668] ? clear_bhb_loop+0x50/0xa0 [ 81.299103][ T1668] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.299126][ T1668] RIP: 0033:0x7f926dd9f559 [ 81.299144][ T1668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.299159][ T1668] RSP: 002b:00007f926ed06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.299179][ T1668] RAX: ffffffffffffffda RBX: 00007f926e025fa0 RCX: 00007f926dd9f559 [ 81.299194][ T1668] RDX: 0000200000000480 RSI: 00000000000089f1 RDI: 0000000000000008 [ 81.299207][ T1668] RBP: 00007f926de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 81.299220][ T1668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.299231][ T1668] R13: 00007f926e026038 R14: 00007f926e025fa0 R15: 00007fffd6dbcab8 [ 81.299247][ T1668] [ 81.635150][ T315] usb 1-1: Warning! Unlikely big volume range (=21774), cval->res is probably wrong. [ 81.644901][ T315] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = -21774/0/1 [ 81.675336][ T36] audit: type=1400 audit(1793134227.890:327): avc: denied { accept } for pid=1673 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.694945][ T36] audit: type=1400 audit(1793134227.890:328): avc: denied { write } for pid=1673 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.715832][ T36] audit: type=1400 audit(1793134227.890:329): avc: denied { read } for pid=1673 comm="syz.4.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 81.749920][ T1679] kvm: pic: non byte write [ 81.754695][ T1679] kvm: pic: non byte write [ 81.811213][ T1684] FAULT_INJECTION: forcing a failure. [ 81.811213][ T1684] name failslab, interval 1, probability 0, space 0, times 0 [ 81.824042][ T1684] CPU: 0 UID: 0 PID: 1684 Comm: syz.1.433 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 81.824073][ T1684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 81.824084][ T1684] Call Trace: [ 81.824091][ T1684] [ 81.824098][ T1684] __dump_stack+0x21/0x30 [ 81.824127][ T1684] dump_stack_lvl+0x140/0x1c0 [ 81.824151][ T1684] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.824176][ T1684] dump_stack+0x19/0x20 [ 81.824205][ T1684] should_fail_ex+0x3c2/0x510 [ 81.824216][ T1684] should_failslab+0xac/0x100 [ 81.824226][ T1684] __kmalloc_cache_noprof+0x41/0x470 [ 81.824240][ T1684] ? fuse_dev_alloc+0x62/0x410 [ 81.824251][ T1684] fuse_dev_alloc+0x62/0x410 [ 81.824265][ T1684] fuse_fill_super_common+0x566/0x1450 [ 81.824284][ T1684] ? mutex_unlock+0x90/0x240 [ 81.824305][ T1684] ? __cfi_fuse_fill_super_common+0x10/0x10 [ 81.824324][ T1684] ? _raw_spin_lock+0x92/0x120 [ 81.824341][ T1684] ? __cfi__raw_spin_lock+0x10/0x10 [ 81.824353][ T1684] ? __kasan_check_write+0x18/0x20 [ 81.824365][ T1684] ? shrinker_register+0x162/0x220 [ 81.824379][ T1684] fuse_fill_super+0x71/0x250 [ 81.824391][ T1684] get_tree_nodev+0xcb/0x170 [ 81.824403][ T1684] ? __cfi_fuse_fill_super+0x10/0x10 [ 81.824423][ T1684] fuse_get_tree+0x2cb/0x640 [ 81.824445][ T1684] vfs_get_tree+0x9e/0x290 [ 81.824466][ T1684] do_new_mount+0x251/0xb40 [ 81.824488][ T1684] ? security_capable+0x44/0x130 [ 81.824504][ T1684] path_mount+0x66a/0xff0 [ 81.824516][ T1684] ? putname+0x113/0x150 [ 81.824529][ T1684] __se_sys_mount+0x2bf/0x480 [ 81.824542][ T1684] ? ksys_write+0x1f3/0x260 [ 81.824561][ T1684] ? __x64_sys_mount+0xf0/0xf0 [ 81.824584][ T1684] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 81.824608][ T1684] __x64_sys_mount+0xc3/0xf0 [ 81.824631][ T1684] x64_sys_call+0x2021/0x2ee0 [ 81.824641][ T1684] do_syscall_64+0x57/0xf0 [ 81.824651][ T1684] ? clear_bhb_loop+0x50/0xa0 [ 81.824664][ T1684] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 81.824677][ T1684] RIP: 0033:0x7f926dd9f559 [ 81.824687][ T1684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.824701][ T1684] RSP: 002b:00007f926ed06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 81.824722][ T1684] RAX: ffffffffffffffda RBX: 00007f926e025fa0 RCX: 00007f926dd9f559 [ 81.824735][ T1684] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000000000000000 [ 81.824749][ T1684] RBP: 00007f926ed06090 R08: 0000200000000940 R09: 0000000000000000 [ 81.824761][ T1684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 81.824773][ T1684] R13: 00007f926e026038 R14: 00007f926e025fa0 R15: 00007fffd6dbcab8 [ 81.824785][ T1684] [ 82.122750][ T1688] tipc: Enabling of bearer rejected, failed to enable media [ 82.131331][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.435'. [ 82.141771][ T1608] usb 1-1: USB disconnect, device number 17 [ 82.141939][ T1688] tipc: Enabling of bearer rejected, already enabled [ 82.661211][ T36] audit: type=1400 audit(1793134228.870:330): avc: denied { setopt } for pid=1691 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.680642][ T36] audit: type=1400 audit(1793134228.880:331): avc: denied { connect } for pid=1691 comm="syz.0.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.963373][ T36] audit: type=1400 audit(1793134229.180:332): avc: denied { associate } for pid=1699 comm="syz.0.438" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 83.031966][ T1493] usbhid 3-1:0.0: reset_resume error -110 [ 83.096934][ T31] microsoft 0003:045E:07DA.0008: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 83.121566][ T31] microsoft 0003:045E:07DA.0008: no inputs found [ 83.128180][ T375] usb 3-1: USB disconnect, device number 22 [ 83.138381][ T31] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 83.157380][ T31] usb 2-1: USB disconnect, device number 23 [ 83.206930][ T1703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.215562][ T1703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.461763][ T31] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 83.501745][ T375] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 83.612820][ T31] usb 2-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 83.625796][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.632488][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 83.641721][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.650211][ T31] usb 2-1: config 0 descriptor?? [ 83.661724][ T375] usb 3-1: Using ep0 maxpacket: 16 [ 83.667897][ T375] usb 3-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 83.678536][ T375] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.688834][ T375] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.697996][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.698479][ T36] audit: type=1326 audit(1793134229.920:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1696 comm="syz.0.438" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86159f559 code=0x7fc00000 [ 83.706043][ T375] usb 3-1: Product: syz [ 83.736166][ T375] usb 3-1: Manufacturer: syz [ 83.740821][ T375] usb 3-1: SerialNumber: syz [ 83.751721][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.821750][ T1708] futex_wake_op: syz.4.441 tries to shift op by -1; fix this program [ 83.866888][ T36] audit: type=1400 audit(1793134230.080:334): avc: denied { read } for pid=1707 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 83.893935][ T36] audit: type=1400 audit(1793134230.090:335): avc: denied { read } for pid=1707 comm="syz.4.441" name="ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:public_content_rw_t:s0" [ 83.933866][ T1716] FAULT_INJECTION: forcing a failure. [ 83.933866][ T1716] name failslab, interval 1, probability 0, space 0, times 0 [ 83.947330][ T1716] CPU: 1 UID: 0 PID: 1716 Comm: syz.0.442 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 83.947362][ T1716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 83.947375][ T1716] Call Trace: [ 83.947381][ T1716] [ 83.947388][ T1716] __dump_stack+0x21/0x30 [ 83.947421][ T1716] dump_stack_lvl+0x140/0x1c0 [ 83.947445][ T1716] ? __cfi_dump_stack_lvl+0x10/0x10 [ 83.947469][ T1716] dump_stack+0x19/0x20 [ 83.947505][ T1716] should_fail_ex+0x3c2/0x510 [ 83.947523][ T1716] should_failslab+0xac/0x100 [ 83.947541][ T1716] __kmalloc_cache_noprof+0x41/0x470 [ 83.947565][ T1716] ? fuse_dev_alloc+0xac/0x410 [ 83.947585][ T1716] fuse_dev_alloc+0xac/0x410 [ 83.947604][ T1716] fuse_fill_super_common+0x566/0x1450 [ 83.947625][ T1716] ? mutex_unlock+0x90/0x240 [ 83.947647][ T1716] ? __cfi_fuse_fill_super_common+0x10/0x10 [ 83.947666][ T1716] ? _raw_spin_lock+0x92/0x120 [ 83.947684][ T1716] ? __cfi__raw_spin_lock+0x10/0x10 [ 83.947702][ T1716] ? __kasan_check_write+0x18/0x20 [ 83.947724][ T1716] ? shrinker_register+0x162/0x220 [ 83.947748][ T1716] fuse_fill_super+0x71/0x250 [ 83.947769][ T1716] get_tree_nodev+0xcb/0x170 [ 83.947790][ T1716] ? __cfi_fuse_fill_super+0x10/0x10 [ 83.947811][ T1716] fuse_get_tree+0x2cb/0x640 [ 83.947833][ T1716] vfs_get_tree+0x9e/0x290 [ 83.947854][ T1716] do_new_mount+0x251/0xb40 [ 83.947874][ T1716] ? security_capable+0x44/0x130 [ 83.947899][ T1716] path_mount+0x66a/0xff0 [ 83.947921][ T1716] ? putname+0x113/0x150 [ 83.947944][ T1716] __se_sys_mount+0x2bf/0x480 [ 83.947966][ T1716] ? ksys_write+0x1f3/0x260 [ 83.947988][ T1716] ? __x64_sys_mount+0xf0/0xf0 [ 83.948011][ T1716] __x64_sys_mount+0xc3/0xf0 [ 83.948034][ T1716] x64_sys_call+0x2021/0x2ee0 [ 83.948052][ T1716] do_syscall_64+0x57/0xf0 [ 83.948069][ T1716] ? clear_bhb_loop+0x50/0xa0 [ 83.948090][ T1716] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 83.948109][ T1716] RIP: 0033:0x7fd86159f559 [ 83.948123][ T1716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.948135][ T1716] RSP: 002b:00007fd86247c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.948154][ T1716] RAX: ffffffffffffffda RBX: 00007fd861825fa0 RCX: 00007fd86159f559 [ 83.948165][ T1716] RDX: 0000200000000900 RSI: 00002000000008c0 RDI: 0000000000000000 [ 83.948178][ T1716] RBP: 00007fd86247c090 R08: 0000200000000940 R09: 0000000000000000 [ 83.948189][ T1716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 83.948199][ T1716] R13: 00007fd861826038 R14: 00007fd861825fa0 R15: 00007fff861ced08 [ 83.948212][ T1716] [ 84.214661][ T375] usb 3-1: 0:2 : does not exist [ 84.222158][ T375] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 84.229727][ T31] hid (null): report_id 10367 is invalid [ 84.237599][ T31] wacom 0003:056A:0016.0009: report_id 10367 is invalid [ 84.244604][ T31] wacom 0003:056A:0016.0009: item 0 2 1 8 parsing failed [ 84.252077][ T31] wacom 0003:056A:0016.0009: parse failed [ 84.258095][ T31] wacom 0003:056A:0016.0009: probe with driver wacom failed with error -22 [ 84.260115][ T1721] tipc: Enabling of bearer rejected, failed to enable media [ 84.271594][ T375] usb 3-1: USB disconnect, device number 23 [ 84.292463][ T1721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 84.296087][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.302355][ T1721] tipc: Enabling of bearer rejected, already enabled [ 84.395115][ T1730] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.447'. [ 84.432823][ T1608] usb 2-1: USB disconnect, device number 24 [ 84.641730][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 84.751722][ T310] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 84.802208][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 84.811363][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.829080][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.845470][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 84.858561][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.872365][ T31] usb 1-1: config 0 descriptor?? [ 84.882270][ T31] hub 1-1:0.0: USB hub found [ 84.932052][ T310] usb 3-1: Using ep0 maxpacket: 32 [ 84.944088][ T310] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 84.955604][ T310] usb 3-1: config 0 has no interface number 0 [ 84.966977][ T310] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 84.977143][ T310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.986040][ T310] usb 3-1: Product: syz [ 84.990686][ T310] usb 3-1: Manufacturer: syz [ 84.996133][ T310] usb 3-1: SerialNumber: syz [ 85.005497][ T310] usb 3-1: config 0 descriptor?? [ 85.013078][ T310] smsc95xx v2.0.0 [ 85.082201][ T31] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 85.201732][ T876] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 85.352997][ T876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.364728][ T876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.375904][ T876] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 85.385982][ T876] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 85.394851][ T876] usb 2-1: Manufacturer: syz [ 85.415160][ T876] usb 2-1: config 0 descriptor?? [ 85.483886][ T31] hid-generic 0003:046D:C31C.000A: unknown main item tag 0x0 [ 85.503846][ T31] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 85.612498][ T1732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.622181][ T1734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.632430][ T1732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.647107][ T1734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.233904][ T876] uclogic 0003:256C:006D.000B: failed retrieving string descriptor #200: -71 [ 86.250909][ T876] uclogic 0003:256C:006D.000B: failed retrieving pen parameters: -71 [ 86.259604][ T876] uclogic 0003:256C:006D.000B: failed probing pen v2 parameters: -71 [ 86.268635][ T876] uclogic 0003:256C:006D.000B: failed probing parameters: -71 [ 86.276756][ T876] uclogic 0003:256C:006D.000B: probe with driver uclogic failed with error -71 [ 86.292129][ T876] usb 2-1: USB disconnect, device number 25 [ 86.391977][ T1730] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 87.465313][ T310] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 87.476361][ T310] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 87.484185][ T1746] netlink: 68 bytes leftover after parsing attributes in process `syz.2.451'. [ 87.486418][ T310] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 87.505560][ T310] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 87.513986][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 87.514003][ T36] audit: type=1400 audit(1793134233.730:338): avc: denied { ioctl } for pid=1747 comm="syz.2.452" path="socket:[20546]" dev="sockfs" ino=20546 ioctlcmd=0xf504 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 87.545995][ T310] usb 3-1: USB disconnect, device number 24 [ 87.642233][ T1750] tipc: Enabling of bearer rejected, already enabled [ 87.650301][ T1750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.453'. [ 87.660301][ T1750] tipc: Enabling of bearer rejected, already enabled [ 87.752759][ T36] audit: type=1326 audit(1793134233.970:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1759 comm="syz.2.457" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dabb9f559 code=0x7ffc0000 [ 87.756286][ T1760] FAULT_INJECTION: forcing a failure. [ 87.756286][ T1760] name failslab, interval 1, probability 0, space 0, times 0 [ 87.778241][ T36] audit: type=1326 audit(1793134233.970:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1759 comm="syz.2.457" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dabb9f559 code=0x7ffc0000 [ 87.790785][ T1760] CPU: 1 UID: 0 PID: 1760 Comm: syz.2.457 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 87.790812][ T1760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 87.790823][ T1760] Call Trace: [ 87.790829][ T1760] [ 87.790835][ T1760] __dump_stack+0x21/0x30 [ 87.790866][ T1760] dump_stack_lvl+0x140/0x1c0 [ 87.790891][ T1760] ? __cfi_dump_stack_lvl+0x10/0x10 [ 87.790917][ T1760] dump_stack+0x19/0x20 [ 87.790941][ T1760] should_fail_ex+0x3c2/0x510 [ 87.790960][ T1760] should_failslab+0xac/0x100 [ 87.790978][ T1760] __kmalloc_cache_node_noprof+0x46/0x430 [ 87.791003][ T1760] ? alloc_workqueue+0x83c/0x1ca0 [ 87.791026][ T1760] alloc_workqueue+0x83c/0x1ca0 [ 87.791049][ T1760] ? xas_nomem+0x71/0x2c0 [ 87.791072][ T1760] ? __cfi_alloc_workqueue+0x10/0x10 [ 87.791097][ T1760] ? __kasan_kmalloc+0x96/0xb0 [ 87.791115][ T1760] ? __kmalloc_cache_noprof+0x23c/0x470 [ 87.791139][ T1760] hci_register_dev+0x1dc/0x800 [ 87.791163][ T1760] hci_uart_tty_ioctl+0x855/0xa00 [ 87.791187][ T1760] ? __cfi_hci_uart_tty_ioctl+0x10/0x10 [ 87.791255][ T1760] tty_ioctl+0xa61/0xec0 [ 87.791274][ T1760] ? __cfi_tty_ioctl+0x10/0x10 [ 87.791290][ T1760] __se_sys_ioctl+0x123/0x1b0 [ 87.791309][ T1760] __x64_sys_ioctl+0x7f/0xa0 [ 87.791327][ T1760] x64_sys_call+0x1878/0x2ee0 [ 87.791345][ T1760] do_syscall_64+0x57/0xf0 [ 87.791376][ T1760] ? clear_bhb_loop+0x50/0xa0 [ 87.791401][ T1760] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 87.791423][ T1760] RIP: 0033:0x7f7dabb9f559 [ 87.791439][ T1760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.791455][ T1760] RSP: 002b:00007f7dac98d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.791475][ T1760] RAX: ffffffffffffffda RBX: 00007f7dabe25fa0 RCX: 00007f7dabb9f559 [ 87.791489][ T1760] RDX: 0000000000000004 RSI: 00000000400455c8 RDI: 0000000000000008 [ 87.791501][ T1760] RBP: 00007f7dabc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 87.791513][ T1760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.791525][ T1760] R13: 00007f7dabe26038 R14: 00007f7dabe25fa0 R15: 00007ffe18343ca8 [ 87.791540][ T1760] [ 87.791562][ T1760] Bluetooth: Can't register HCI device [ 87.818460][ T36] audit: type=1326 audit(1793134233.970:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1759 comm="syz.2.457" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dabb9f559 code=0x7ffc0000 [ 88.067522][ T36] audit: type=1326 audit(1793134233.970:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1759 comm="syz.2.457" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7dabb9f559 code=0x7ffc0000 [ 88.092843][ T36] audit: type=1326 audit(1793134233.970:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1759 comm="syz.2.457" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dabb9f559 code=0x7ffc0000 [ 88.118279][ T36] audit: type=1326 audit(1793134233.970:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1759 comm="syz.2.457" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dabb9f559 code=0x7ffc0000 [ 88.143425][ T36] audit: type=1326 audit(1793134233.970:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1759 comm="syz.2.457" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dabb9f559 code=0x7ffc0000 [ 88.168561][ T36] audit: type=1326 audit(1793134233.970:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1759 comm="syz.2.457" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dabb9f559 code=0x7ffc0000 [ 88.193930][ T36] audit: type=1326 audit(1793134233.970:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1759 comm="syz.2.457" exe="/root/ci2-android-6-12-rust/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dabb9f559 code=0x7ffc0000 [ 88.225222][ T1760] netlink: 'syz.2.457': attribute type 4 has an invalid length. [ 88.251776][ T375] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 88.401726][ T375] usb 2-1: Invalid ep0 maxpacket: 64 [ 88.481964][ T310] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 88.531733][ T375] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 88.632724][ T310] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.642918][ T310] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 88.651990][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.660572][ T310] usb 3-1: config 0 descriptor?? [ 88.666348][ T310] usb 3-1: bad CDC descriptors [ 88.691764][ T375] usb 2-1: Invalid ep0 maxpacket: 64 [ 88.697232][ T375] usb usb2-port1: attempt power cycle [ 88.868935][ T1770] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 88.878683][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.878758][ T641] Bluetooth: hci0: command 0x1003 tx timeout [ 88.886581][ T310] usb 3-1: USB disconnect, device number 25 [ 88.908768][ T1772] netlink: 68 bytes leftover after parsing attributes in process `syz.4.460'. [ 89.041757][ T375] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 89.062111][ T375] usb 2-1: Invalid ep0 maxpacket: 64 [ 89.161756][ T31] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 89.191750][ T375] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 89.212124][ T375] usb 2-1: Invalid ep0 maxpacket: 64 [ 89.217588][ T375] usb usb2-port1: unable to enumerate USB device [ 89.311755][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 89.318071][ T31] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 89.326287][ T31] usb 5-1: config 0 has no interface number 0 [ 89.332415][ T31] usb 5-1: config 0 interface 184 has no altsetting 0 [ 89.340875][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 89.349985][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.358034][ T31] usb 5-1: Product: syz [ 89.362230][ T31] usb 5-1: Manufacturer: syz [ 89.366842][ T31] usb 5-1: SerialNumber: syz [ 89.372097][ T31] usb 5-1: config 0 descriptor?? [ 89.377804][ T31] smsc75xx v1.0.0 [ 89.400687][ T1776] netlink: 'syz.2.462': attribute type 16 has an invalid length. [ 89.423241][ T1781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 89.433283][ T1781] tipc: Enabling of bearer rejected, already enabled [ 89.779884][ T1774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.788508][ T1774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.861729][ T375] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 89.998012][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 90.008902][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 90.019220][ T375] usb 3-1: config 1 has an invalid interface number: 1 but max is 0 [ 90.027330][ T375] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.037445][ T375] usb 3-1: config 1 has no interface number 0 [ 90.043568][ T375] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 90.054453][ T375] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 90.065467][ T375] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 90.074580][ T375] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 90.082613][ T375] usb 3-1: Product: syz [ 90.086791][ T375] usb 3-1: Manufacturer: syz [ 90.091394][ T375] usb 3-1: SerialNumber: syz [ 90.676253][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 90.687171][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 90.696910][ T31] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 90.706407][ T31] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 90.879833][ T310] usb 5-1: USB disconnect, device number 13 [ 91.043839][ T1800] rust_binder: 1799:1800 error while translating object: EBADF [ 91.051518][ T1800] rust_binder: 1799:1800 transaction call to 1799:0 failed EBADF, code 0 size 104-24 line thread.rs:889 [ 91.401736][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 91.552790][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.564727][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 91.576303][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 91.587794][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.600975][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.610530][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.619955][ T31] usb 2-1: config 0 descriptor?? [ 91.628896][ T1800] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.992160][ T1730] usbhid 1-1:0.0: reset_resume error -110 [ 92.039574][ T31] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 92.048897][ T31] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 92.065200][ T31] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 92.083548][ T310] usb 1-1: USB disconnect, device number 18 [ 92.277994][ T1808] netlink: 80 bytes leftover after parsing attributes in process `syz.0.471'. [ 92.303259][ T31] usb 2-1: USB disconnect, device number 30 [ 92.320372][ T353] rust_binder: 1799: undelivered TRANSACTION_ERROR: 29201 [ 92.369063][ T1812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 92.379448][ T1812] tipc: Enabling of bearer rejected, already enabled [ 92.537787][ T375] usb 3-1: USB disconnect, device number 26 [ 92.549865][ T326] udevd[326]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 92.578682][ T1831] netlink: 68 bytes leftover after parsing attributes in process `syz.2.477'. [ 92.641844][ T310] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 92.792887][ T310] usb 5-1: config 0 has too many interfaces: 223, using maximum allowed: 32 [ 92.801637][ T310] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.812017][ T310] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 223 [ 92.821379][ T310] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 92.830745][ T310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.840573][ T310] usb 5-1: config 0 descriptor?? [ 92.846748][ T310] usb 5-1: Found UVC 9.00 device (046d:0825) [ 93.071741][ T375] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 93.181255][ T1841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 93.191259][ T1841] tipc: Enabling of bearer rejected, already enabled [ 93.209397][ T1843] SELinux: policydb string does not match my string SE Linux [ 93.217126][ T1843] SELinux: failed to load policy [ 93.241724][ T375] usb 2-1: Using ep0 maxpacket: 32 [ 93.247409][ T310] usb 5-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 93.248309][ T375] usb 2-1: unable to get BOS descriptor or descriptor too short [ 93.257563][ T310] uvcvideo 5-1:0.1: Failed to query (129) UVC probe control : -32 (exp. 48). [ 93.265360][ T375] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 93.277230][ T310] uvcvideo 5-1:0.1: Failed to initialize the device (-5). [ 93.283999][ T375] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.302200][ T375] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 93.311658][ T375] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.313795][ T310] usb 5-1: USB disconnect, device number 14 [ 93.319841][ T375] usb 2-1: Product: syz [ 93.319858][ T375] usb 2-1: Manufacturer: syz [ 93.319872][ T375] usb 2-1: SerialNumber: syz [ 93.543092][ T375] usb 2-1: selecting invalid altsetting 1 [ 93.550435][ T375] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 93.551735][ T1608] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 93.562387][ T375] usb 2-1: USB disconnect, device number 31 [ 93.606260][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 93.711762][ T1608] usb 1-1: Using ep0 maxpacket: 32 [ 93.717967][ T1608] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.728887][ T1608] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 93.741872][ T1608] usb 1-1: config 0 interface 0 has no altsetting 0 [ 93.748558][ T1608] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 93.757598][ T1608] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.766090][ T1608] usb 1-1: config 0 descriptor?? [ 93.903998][ T1853] device-mapper: ioctl: Invalid geometry supplied. [ 93.923935][ T36] kauditd_printk_skb: 86 callbacks suppressed [ 93.923961][ T36] audit: type=1400 audit(1793134240.140:434): avc: denied { append } for pid=1858 comm="syz.4.487" name="ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:public_content_rw_t:s0" [ 94.101704][ T36] audit: type=1400 audit(1793134240.310:435): avc: denied { setattr } for pid=1861 comm="syz.1.488" name="PPTP" dev="sockfs" ino=19901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 94.177807][ T1608] usbhid 1-1:0.0: can't add hid device: -71 [ 94.185129][ T1608] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 94.196866][ T1608] usb 1-1: USB disconnect, device number 19 [ 94.391728][ T310] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 94.489062][ T1872] tipc: Enabling of bearer rejected, already enabled [ 94.552888][ T310] usb 5-1: config index 0 descriptor too short (expected 45, got 28) [ 94.561059][ T310] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 94.568591][ T310] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 94.583028][ T310] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 94.592211][ T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.600209][ T310] usb 5-1: Product: syz [ 94.604633][ T310] usb 5-1: Manufacturer: syz [ 94.609246][ T310] usb 5-1: SerialNumber: syz [ 94.624320][ T310] rtl8150 5-1:1.0: couldn't find required endpoints [ 94.631210][ T310] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 94.824355][ T1859] netlink: 188 bytes leftover after parsing attributes in process `syz.4.487'. [ 94.834714][ T1859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.843207][ T1859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.851647][ T1859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.860155][ T1859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.271806][ T641] Bluetooth: hci0: command 0x1003 tx timeout [ 95.271801][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 95.296706][ T36] audit: type=1400 audit(1793134241.510:436): avc: denied { getopt } for pid=1880 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.418690][ T375] usb 5-1: USB disconnect, device number 15 [ 95.515263][ T1896] tipc: Enabling of bearer rejected, already enabled [ 95.539131][ T1898] SELinux: policydb string does not match my string SE Linux [ 95.547277][ T1898] SELinux: failed to load policy [ 95.674857][ T1916] device-mapper: table: 252:2: crypt: Device size is not multiple of sector_size feature (-EINVAL) [ 95.685677][ T1916] device-mapper: ioctl: error adding target to table [ 95.873912][ T1922] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3393688969 (54299023504 ns) > initial count (49421972784 ns). Using initial count to start timer. [ 95.901819][ T375] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 96.052726][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.063776][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.073632][ T375] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.086625][ T375] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.095715][ T375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.104307][ T375] usb 5-1: config 0 descriptor?? [ 96.390826][ T1934] tipc: Enabling of bearer rejected, already enabled [ 96.428930][ T1937] veth1: entered allmulticast mode [ 96.435604][ T1936] veth1: left allmulticast mode [ 96.583286][ T1946] SELinux: policydb string does not match my string SE Linux [ 96.590908][ T1946] SELinux: failed to load policy [ 96.712060][ T375] usbhid 5-1:0.0: can't add hid device: -71 [ 96.720004][ T375] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 96.731434][ T375] usb 5-1: USB disconnect, device number 16 [ 96.811786][ T353] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 96.961716][ T353] usb 1-1: Using ep0 maxpacket: 16 [ 96.968079][ T353] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.978571][ T353] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.989837][ T353] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.999974][ T353] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 97.013039][ T353] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.019730][ T353] usb 1-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 97.029089][ T353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.039033][ T353] usb 1-1: config 0 descriptor?? [ 97.246718][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 97.255477][ T1945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.264534][ T1945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.293099][ T36] audit: type=1400 audit(1793134243.510:437): avc: denied { connect } for pid=1953 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.326587][ T36] audit: type=1400 audit(1793134243.530:438): avc: denied { ioctl } for pid=1953 comm="syz.2.518" path="socket:[21358]" dev="sockfs" ino=21358 ioctlcmd=0x9413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.351363][ T36] audit: type=1400 audit(1793134243.540:439): avc: denied { create } for pid=1956 comm="syz.1.520" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.372101][ T36] audit: type=1400 audit(1793134243.540:440): avc: denied { write } for pid=1956 comm="syz.1.520" name="file2" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.394580][ T36] audit: type=1400 audit(1793134243.540:441): avc: denied { open } for pid=1956 comm="syz.1.520" path="/139/file2" dev="tmpfs" ino=774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.417215][ T36] audit: type=1400 audit(1793134243.540:442): avc: denied { ioctl } for pid=1956 comm="syz.1.520" path="/139/file0" dev="tmpfs" ino=775 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 97.456670][ T1962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 97.466234][ T353] usbhid 1-1:0.0: can't add hid device: -71 [ 97.472782][ T353] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 97.488714][ T353] usb 1-1: USB disconnect, device number 20 [ 97.656218][ T1974] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 97.663868][ T1974] SELinux: failed to load policy [ 98.008874][ T1980] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.018354][ T1980] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 98.025773][ T1980] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 98.239439][ T36] audit: type=1400 audit(1793134244.450:443): avc: denied { unlink } for pid=293 comm="syz-executor" name="file0" dev="tmpfs" ino=775 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 98.269704][ T1993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 98.465226][ T2006] SELinux: policydb string does not match my string SE Linux [ 98.472979][ T2006] SELinux: failed to load policy [ 98.501777][ T353] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 98.601359][ T2010] kvm: user requested TSC rate below hardware speed [ 98.608685][ T2010] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 98.652906][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.664030][ T353] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.673883][ T353] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.686979][ T353] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.696122][ T353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.705094][ T353] usb 2-1: config 0 descriptor?? [ 99.116908][ T353] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 99.137687][ T353] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 99.178457][ T2016] netlink: 104 bytes leftover after parsing attributes in process `syz.0.539'. [ 99.271871][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 99.310824][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 99.310844][ T36] audit: type=1400 audit(1793134245.520:445): avc: denied { create } for pid=2018 comm="syz.4.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 99.337859][ T2026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.541'. [ 100.091731][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 100.242773][ T31] usb 1-1: config 243 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.252759][ T31] usb 1-1: config 243 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 100.264031][ T31] usb 1-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 100.273237][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.281233][ T31] usb 1-1: Product: syz [ 100.285427][ T31] usb 1-1: Manufacturer: syz [ 100.290028][ T31] usb 1-1: SerialNumber: syz [ 100.296211][ T31] ums-sddr09 1-1:243.0: USB Mass Storage device detected [ 100.304176][ T31] ums-sddr09 1-1:243.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 100.304176][ T31] Please send a copy of this message to and [ 100.341873][ C0] plantronics 0003:047F:FFFF.000D: usb_submit_urb(ctrl) failed: -1 [ 100.353368][ T31] ums-sddr09 1-1:243.0: probe with driver ums-sddr09 failed with error -22 [ 100.496075][ T65] usb 1-1: USB disconnect, device number 21 [ 100.502711][ T1608] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 100.652747][ T1608] usb 5-1: unable to get BOS descriptor set [ 100.659422][ T1608] usb 5-1: config 0 has no interfaces? [ 100.667000][ T1608] usb 5-1: string descriptor 0 read error: -22 [ 100.671734][ T31] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 100.673272][ T1608] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.689840][ T1608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.698561][ T1608] usb 5-1: config 0 descriptor?? [ 100.811755][ T31] usb 3-1: device descriptor read/64, error -71 [ 100.906980][ T2055] tipc: Enabling of bearer rejected, failed to enable media [ 100.908020][ T353] usb 5-1: USB disconnect, device number 17 [ 100.916566][ T2055] tipc: Enabling of bearer rejected, already enabled [ 100.937679][ T2057] netlink: 68 bytes leftover after parsing attributes in process `syz.1.552'. [ 101.051757][ T31] usb 3-1: device descriptor read/64, error -71 [ 101.291746][ T31] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 101.381739][ T310] usb 2-1: reset high-speed USB device number 32 using dummy_hcd [ 101.389951][ T310] usb 2-1: device reset changed ep0 maxpacket size! [ 101.396881][ T876] usb 2-1: USB disconnect, device number 32 [ 101.421734][ T31] usb 3-1: device descriptor read/64, error -71 [ 101.456200][ T36] audit: type=1400 audit(1793134247.670:446): avc: denied { write } for pid=2074 comm="syz.4.558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 101.456801][ T2075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 101.541750][ T876] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 101.559461][ T2079] tipc: Enabling of bearer rejected, failed to enable media [ 101.569183][ T2079] tipc: Enabling of bearer rejected, already enabled [ 101.584709][ T2081] netlink: 68 bytes leftover after parsing attributes in process `syz.4.561'. [ 101.654137][ T2083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 101.663141][ T31] usb 3-1: device descriptor read/64, error -71 [ 101.683355][ T2088] SELinux: policydb version 1426740024 does not match my version range 15-33 [ 101.691730][ T876] usb 2-1: Using ep0 maxpacket: 16 [ 101.692328][ T2088] SELinux: failed to load policy [ 101.698548][ T876] usb 2-1: config 12 has an invalid interface number: 130 but max is 3 [ 101.705171][ T2088] SELinux: policydb string does not match my string SE Linux [ 101.710769][ T876] usb 2-1: config 12 has an invalid interface number: 37 but max is 3 [ 101.718450][ T2088] SELinux: failed to load policy [ 101.726680][ T876] usb 2-1: config 12 has an invalid interface number: 49 but max is 3 [ 101.739669][ T876] usb 2-1: config 12 has an invalid interface number: 88 but max is 3 [ 101.747892][ T876] usb 2-1: config 12 has no interface number 0 [ 101.754102][ T876] usb 2-1: config 12 has no interface number 1 [ 101.760272][ T876] usb 2-1: config 12 has no interface number 2 [ 101.766450][ T876] usb 2-1: config 12 has no interface number 3 [ 101.772640][ T876] usb 2-1: config 12 interface 130 altsetting 7 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 101.781811][ T31] usb usb3-port1: attempt power cycle [ 101.784090][ T876] usb 2-1: config 12 interface 130 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 101.800411][ T876] usb 2-1: config 12 interface 130 altsetting 7 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 101.811473][ T876] usb 2-1: config 12 interface 130 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 101.822560][ T876] usb 2-1: config 12 interface 37 altsetting 8 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 101.833668][ T876] usb 2-1: config 12 interface 37 altsetting 8 bulk endpoint 0xA has invalid maxpacket 16 [ 101.843769][ T876] usb 2-1: config 12 interface 37 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 101.854790][ T876] usb 2-1: config 12 interface 37 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 101.866069][ T876] usb 2-1: config 12 interface 37 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 101.866919][ T2092] FAULT_INJECTION: forcing a failure. [ 101.866919][ T2092] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 101.877072][ T876] usb 2-1: config 12 interface 37 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 101.877108][ T876] usb 2-1: config 12 interface 49 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 101.890815][ T2092] CPU: 1 UID: 0 PID: 2092 Comm: syz.0.566 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 101.890843][ T2092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 101.890855][ T2092] Call Trace: [ 101.890862][ T2092] [ 101.890868][ T2092] __dump_stack+0x21/0x30 [ 101.890901][ T2092] dump_stack_lvl+0x140/0x1c0 [ 101.890928][ T2092] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.890954][ T2092] ? __kasan_check_write+0x18/0x20 [ 101.890978][ T2092] dump_stack+0x19/0x20 [ 101.891001][ T2092] should_fail_ex+0x3c2/0x510 [ 101.891019][ T2092] should_fail_alloc_page+0xec/0x110 [ 101.891036][ T2092] __alloc_pages_noprof+0x1c0/0x7e0 [ 101.891056][ T2092] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 101.891078][ T2092] ? folio_add_lru+0x116/0x400 [ 101.891107][ T2092] ? __cfi_folio_add_lru+0x10/0x10 [ 101.891124][ T2092] __folio_alloc_noprof+0x14/0x80 [ 101.891145][ T2092] shmem_alloc_and_add_folio+0x45f/0x10b0 [ 101.891165][ T2092] ? shmem_replace_folio+0x9b0/0x9b0 [ 101.891182][ T2092] ? shmem_huge_global_enabled+0x2da/0x360 [ 101.891208][ T2092] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 101.891236][ T2092] shmem_get_folio_gfp+0x5cd/0x12e0 [ 101.891262][ T2092] ? shmem_get_folio+0xc0/0xc0 [ 101.891285][ T2092] ? inode_to_bdi+0x6d/0x100 [ 101.891306][ T2092] shmem_write_begin+0xf4/0x260 [ 101.891322][ T2092] generic_perform_write+0x32c/0x970 [ 101.891344][ T2092] ? __cfi_generic_perform_write+0x10/0x10 [ 101.891362][ T2092] ? generic_write_checks_count+0x426/0x540 [ 101.891382][ T2092] ? file_update_time+0xa3/0x210 [ 101.891403][ T2092] shmem_file_write_iter+0x105/0x130 [ 101.891423][ T2092] vfs_write+0x762/0xfd0 [ 101.891450][ T2092] ? __cfi_vfs_write+0x10/0x10 [ 101.891473][ T2092] ? __cfi_mutex_lock+0x10/0x10 [ 101.891497][ T2092] ksys_write+0x145/0x260 [ 101.891519][ T2092] ? xfd_validate_state+0x68/0x140 [ 101.891544][ T2092] ? __cfi_ksys_write+0x10/0x10 [ 101.891568][ T2092] ? __kasan_check_write+0x18/0x20 [ 101.891589][ T2092] ? fpregs_restore_userregs+0x11c/0x260 [ 101.891612][ T2092] __x64_sys_write+0x7f/0x90 [ 101.891635][ T2092] x64_sys_call+0x271c/0x2ee0 [ 101.891653][ T2092] do_syscall_64+0x57/0xf0 [ 101.891670][ T2092] ? clear_bhb_loop+0x50/0xa0 [ 101.891693][ T2092] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.891716][ T2092] RIP: 0033:0x7fd86159f559 [ 101.891733][ T2092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.891748][ T2092] RSP: 002b:00007fd86247c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.891769][ T2092] RAX: ffffffffffffffda RBX: 00007fd861825fa0 RCX: 00007fd86159f559 [ 101.891783][ T2092] RDX: 00000000ffffff6a RSI: 0000200000000840 RDI: 0000000000000007 [ 101.891795][ T2092] RBP: 00007fd861636b20 R08: 0000000000000000 R09: 0000000000000000 [ 101.891808][ T2092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.891819][ T2092] R13: 00007fd861826038 R14: 00007fd861825fa0 R15: 00007fff861ced08 [ 101.891836][ T2092] [ 101.991736][ T375] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 101.994615][ T876] usb 2-1: config 12 interface 49 altsetting 13 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 102.131739][ T31] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 102.132073][ T876] usb 2-1: config 12 interface 49 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 102.162941][ T31] usb 3-1: device descriptor read/8, error -71 [ 102.164628][ T876] usb 2-1: config 12 interface 49 altsetting 13 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 102.172799][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.180579][ T876] usb 2-1: config 12 interface 49 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 102.192313][ T375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.197984][ T876] usb 2-1: config 12 interface 49 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 102.209291][ T375] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.215280][ T876] usb 2-1: config 12 interface 49 altsetting 13 has a duplicate endpoint with address 0x6, skipping [ 102.233700][ T375] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 102.233723][ T375] usb 5-1: Manufacturer: syz [ 102.237796][ T375] usb 5-1: config 0 descriptor?? [ 102.245064][ T876] usb 2-1: config 12 interface 49 altsetting 13 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 102.322743][ T31] usb 3-1: device descriptor read/8, error -71 [ 102.324329][ T876] usb 2-1: config 12 interface 49 altsetting 13 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 102.370038][ T876] usb 2-1: config 12 interface 49 altsetting 13 has a duplicate endpoint with address 0xE, skipping [ 102.380909][ T876] usb 2-1: config 12 interface 88 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 102.391627][ T876] usb 2-1: config 12 interface 88 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 102.402579][ T876] usb 2-1: config 12 interface 88 altsetting 8 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 102.414653][ T876] usb 2-1: config 12 interface 88 altsetting 8 has a duplicate endpoint with address 0x8E, skipping [ 102.425541][ T876] usb 2-1: config 12 interface 88 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 102.436262][ T876] usb 2-1: config 12 interface 88 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 102.447140][ T876] usb 2-1: config 12 interface 88 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 102.454622][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.457871][ T876] usb 2-1: config 12 interface 88 altsetting 8 has a duplicate endpoint with address 0x9, skipping [ 102.467602][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.476899][ T876] usb 2-1: config 12 interface 130 has no altsetting 0 [ 102.491497][ T876] usb 2-1: config 12 interface 37 has no altsetting 0 [ 102.492381][ T2090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.498338][ T876] usb 2-1: config 12 interface 49 has no altsetting 0 [ 102.508561][ T2090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.513511][ T876] usb 2-1: config 12 interface 88 has no altsetting 0 [ 102.529386][ T876] usb 2-1: New USB device found, idVendor=12d1, idProduct=fac1, bcdDevice=11.9e [ 102.539005][ T876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.547044][ T876] usb 2-1: Product: ဌ [ 102.551233][ T876] usb 2-1: Manufacturer: 갭畁䫲姝ꈐ뷺ꛜ瘑ﺾ걙軪폥 [ 102.560609][ T876] usb 2-1: SerialNumber: ఊ [ 102.571744][ T31] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 102.581470][ T2101] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer. [ 102.600622][ T31] usb 3-1: device descriptor read/8, error -71 [ 102.642882][ T2104] tipc: Enabling of bearer rejected, failed to enable media [ 102.653344][ T2104] tipc: Enabling of bearer rejected, already enabled [ 102.733007][ T31] usb 3-1: device descriptor read/8, error -71 [ 102.733635][ T2108] netlink: 68 bytes leftover after parsing attributes in process `syz.0.571'. [ 102.762067][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.780105][ T876] usb 2-1: USB disconnect, device number 33 [ 102.841839][ T31] usb usb3-port1: unable to enumerate USB device [ 102.928148][ T375] uclogic 0003:256C:006D.000E: failed retrieving Huion firmware version: -71 [ 102.937019][ T375] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 102.944555][ T375] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 102.956015][ T375] usb 5-1: USB disconnect, device number 18 [ 103.327884][ T2115] netlink: 44 bytes leftover after parsing attributes in process `syz.1.574'. [ 103.336875][ T2115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.574'. [ 103.345845][ T2115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.574'. [ 103.356300][ T2115] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 103.365928][ T2115] SELinux: failed to load policy [ 103.452756][ T2126] tipc: Enabling of bearer rejected, already enabled [ 103.461231][ T2126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 103.472237][ T2126] tipc: Enabling of bearer rejected, already enabled [ 103.491518][ T2130] Dead loop on virtual device ip6_vti0, fix it urgently! [ 103.499936][ T2130] netlink: 132 bytes leftover after parsing attributes in process `syz.2.580'. [ 103.518205][ T2132] netlink: 68 bytes leftover after parsing attributes in process `syz.2.581'. [ 103.558528][ T2142] SELinux: policydb string does not match my string SE Linux [ 103.566441][ T2142] SELinux: failed to load policy [ 103.590121][ T2152] tipc: Enabling of bearer rejected, failed to enable media [ 103.598833][ T2152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 103.608672][ T2152] tipc: Enabling of bearer rejected, already enabled [ 103.621741][ T375] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 103.631942][ T2154] netlink: 12 bytes leftover after parsing attributes in process `syz.4.589'. [ 103.645044][ T36] audit: type=1400 audit(1793134249.860:447): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.666271][ T36] audit: type=1400 audit(1793134249.860:448): avc: denied { read } for pid=149 comm="dhcpcd" name="n6294" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.688144][ T36] audit: type=1400 audit(1793134249.860:449): avc: denied { open } for pid=149 comm="dhcpcd" path="/run/udev/data/n6294" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.715189][ T36] audit: type=1400 audit(1793134249.860:450): avc: denied { getattr } for pid=149 comm="dhcpcd" path="/run/udev/data/n6294" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 103.739504][ T36] audit: type=1400 audit(1793134249.930:451): avc: denied { read } for pid=2158 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.762968][ T36] audit: type=1400 audit(1793134249.930:452): avc: denied { open } for pid=2158 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.771728][ T375] usb 2-1: device descriptor read/64, error -71 [ 103.788561][ T36] audit: type=1400 audit(1793134249.930:453): avc: denied { getattr } for pid=2158 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.820666][ T36] audit: type=1400 audit(1793134250.030:454): avc: denied { write } for pid=2157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 103.843999][ T876] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 103.854682][ T149] dummy0: entered promiscuous mode [ 103.901736][ T1608] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 103.981752][ T876] usb 3-1: device descriptor read/64, error -71 [ 104.031733][ T1608] usb 5-1: device descriptor read/64, error -71 [ 104.041745][ T375] usb 2-1: device descriptor read/64, error -71 [ 104.231976][ T876] usb 3-1: device descriptor read/64, error -71 [ 104.271731][ T1608] usb 5-1: device descriptor read/64, error -71 [ 104.291867][ T375] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 104.421774][ T375] usb 2-1: device descriptor read/64, error -71 [ 104.471735][ T876] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 104.511761][ T1608] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 104.601731][ T876] usb 3-1: device descriptor read/64, error -71 [ 104.641761][ T1608] usb 5-1: device descriptor read/64, error -71 [ 104.661751][ T375] usb 2-1: device descriptor read/64, error -71 [ 104.771840][ T375] usb usb2-port1: attempt power cycle [ 104.791737][ T641] Bluetooth: hci0: command 0x1003 tx timeout [ 104.791737][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.805860][ T2110] can0: slcan on ptm0. [ 104.832583][ T2109] can0 (unregistered): slcan off ptm0. [ 104.851726][ T876] usb 3-1: device descriptor read/64, error -71 [ 104.891750][ T1608] usb 5-1: device descriptor read/64, error -71 [ 104.971809][ T876] usb usb3-port1: attempt power cycle [ 105.001851][ T1608] usb usb5-port1: attempt power cycle [ 105.112010][ T375] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 105.132692][ T375] usb 2-1: device descriptor read/8, error -71 [ 105.262704][ T375] usb 2-1: device descriptor read/8, error -71 [ 105.311726][ T876] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 105.332664][ T876] usb 3-1: device descriptor read/8, error -71 [ 105.351863][ T1608] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 105.374126][ T1608] usb 5-1: device descriptor read/8, error -71 [ 105.411632][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 105.411648][ T36] audit: type=1400 audit(1793134251.620:461): avc: denied { create } for pid=2199 comm="syz.0.590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 105.462727][ T876] usb 3-1: device descriptor read/8, error -71 [ 105.502735][ T1608] usb 5-1: device descriptor read/8, error -71 [ 105.511926][ T375] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 105.532765][ T375] usb 2-1: device descriptor read/8, error -71 [ 105.651757][ T31] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 105.662805][ T375] usb 2-1: device descriptor read/8, error -71 [ 105.701726][ T876] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 105.722744][ T876] usb 3-1: device descriptor read/8, error -71 [ 105.751778][ T1608] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 105.772684][ T1608] usb 5-1: device descriptor read/8, error -71 [ 105.781867][ T31] usb 1-1: device descriptor read/64, error -71 [ 105.788189][ T375] usb usb2-port1: unable to enumerate USB device [ 105.852811][ T876] usb 3-1: device descriptor read/8, error -71 [ 105.902813][ T1608] usb 5-1: device descriptor read/8, error -71 [ 105.961809][ T876] usb usb3-port1: unable to enumerate USB device [ 106.021822][ T1608] usb usb5-port1: unable to enumerate USB device [ 106.051744][ T31] usb 1-1: device descriptor read/64, error -71 [ 106.291752][ T31] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 106.403143][ T2204] netlink: 68 bytes leftover after parsing attributes in process `syz.1.591'. [ 106.421854][ T31] usb 1-1: device descriptor read/64, error -71 [ 106.423456][ T36] audit: type=1400 audit(1793134252.640:462): avc: denied { listen } for pid=2205 comm="syz.1.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.655937][ T2218] tipc: Enabling of bearer rejected, failed to enable media [ 106.664304][ T31] usb 1-1: device descriptor read/64, error -71 [ 106.664714][ T2218] netlink: 4 bytes leftover after parsing attributes in process `syz.4.597'. [ 106.682544][ T2218] tipc: Enabling of bearer rejected, already enabled [ 106.702921][ T2222] 9p: Unknown Cache mode or invalid value se [ 106.707864][ T2224] FAULT_INJECTION: forcing a failure. [ 106.707864][ T2224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.722243][ T2224] CPU: 1 UID: 0 PID: 2224 Comm: syz.2.600 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 106.722276][ T2224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.722289][ T2224] Call Trace: [ 106.722295][ T2224] [ 106.722302][ T2224] __dump_stack+0x21/0x30 [ 106.722330][ T2224] dump_stack_lvl+0x140/0x1c0 [ 106.722353][ T2224] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.722377][ T2224] dump_stack+0x19/0x20 [ 106.722399][ T2224] should_fail_ex+0x3c2/0x510 [ 106.722419][ T2224] should_fail+0xf/0x20 [ 106.722435][ T2224] should_fail_usercopy+0x1e/0x30 [ 106.722454][ T2224] _copy_from_iter+0x1a6/0x1520 [ 106.722475][ T2224] ? __kmalloc_node_noprof+0x252/0x500 [ 106.722499][ T2224] ? __kvmalloc_node_noprof+0x128/0x300 [ 106.722522][ T2224] ? __cfi__copy_from_iter+0x10/0x10 [ 106.722542][ T2224] ? __check_object_size+0x54c/0x870 [ 106.722566][ T2224] ? __cfi___check_object_size+0x10/0x10 [ 106.722590][ T2224] file_tty_write+0x4b2/0xa50 [ 106.722617][ T2224] tty_write+0x40/0x50 [ 106.722639][ T2224] vfs_write+0x762/0xfd0 [ 106.722660][ T2224] ? __cfi_vfs_write+0x10/0x10 [ 106.722684][ T2224] ksys_write+0x145/0x260 [ 106.722706][ T2224] ? __cfi_ksys_write+0x10/0x10 [ 106.722730][ T2224] ? __kasan_check_read+0x15/0x20 [ 106.722752][ T2224] __x64_sys_write+0x7f/0x90 [ 106.722775][ T2224] x64_sys_call+0x271c/0x2ee0 [ 106.722792][ T2224] do_syscall_64+0x57/0xf0 [ 106.722809][ T2224] ? clear_bhb_loop+0x50/0xa0 [ 106.722830][ T2224] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.722852][ T2224] RIP: 0033:0x7f7dabb9f559 [ 106.722869][ T2224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.722883][ T2224] RSP: 002b:00007f7dac98d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.722901][ T2224] RAX: ffffffffffffffda RBX: 00007f7dabe25fa0 RCX: 00007f7dabb9f559 [ 106.722913][ T2224] RDX: 000000000000ff2e RSI: 0000200000000480 RDI: 0000000000000004 [ 106.722924][ T2224] RBP: 00007f7dac98d090 R08: 0000000000000000 R09: 0000000000000000 [ 106.722935][ T2224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.722947][ T2224] R13: 00007f7dabe26038 R14: 00007f7dabe25fa0 R15: 00007ffe18343ca8 [ 106.722960][ T2224] [ 106.955950][ T31] usb usb1-port1: attempt power cycle [ 106.959990][ T36] audit: type=1400 audit(1793134253.180:463): avc: denied { execute } for pid=2221 comm="syz.4.599" dev="tmpfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.982555][ T36] audit: type=1400 audit(1793134253.180:464): avc: denied { execute_no_trans } for pid=2221 comm="syz.4.599" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.061954][ T36] audit: type=1400 audit(1793134253.280:465): avc: denied { name_bind } for pid=2232 comm="syz.2.604" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 107.064167][ T2239] tipc: Enabling of bearer rejected, already enabled [ 107.107763][ T36] audit: type=1400 audit(1793134253.320:466): avc: denied { create } for pid=2241 comm="syz.1.608" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.128966][ T36] audit: type=1400 audit(1793134253.320:467): avc: denied { mounton } for pid=2241 comm="syz.1.608" path="/156/file0" dev="tmpfs" ino=873 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.277514][ T2267] tipc: Enabling of bearer rejected, already enabled [ 107.291728][ T353] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 107.299439][ T31] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 107.342725][ T31] usb 1-1: device descriptor read/8, error -71 [ 107.352385][ T36] audit: type=1400 audit(1793134253.570:468): avc: denied { watch } for pid=2273 comm="syz.2.619" path="/174/file0" dev="tmpfs" ino=998 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.460496][ T2285] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 107.461023][ T2285] @0: renamed from bond_slave_1 [ 107.501779][ T353] usb 5-1: Using ep0 maxpacket: 32 [ 107.564250][ T31] usb 1-1: device descriptor read/8, error -71 [ 107.570668][ T353] usb 5-1: unable to get BOS descriptor or descriptor too short [ 107.579034][ T353] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 107.589163][ T353] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 107.600942][ T353] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 107.610059][ T353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.618184][ T353] usb 5-1: Product: syz [ 107.623503][ T353] usb 5-1: Manufacturer: syz [ 107.628106][ T353] usb 5-1: SerialNumber: syz [ 107.791765][ T1608] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 107.801719][ T31] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 107.822687][ T31] usb 1-1: device descriptor read/8, error -71 [ 107.837759][ T36] audit: type=1400 audit(1793134254.050:469): avc: denied { unmount } for pid=2236 comm="syz.4.606" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 107.857891][ T353] usb 5-1: selecting invalid altsetting 1 [ 107.865147][ T353] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 107.871753][ T876] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 107.877164][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.897420][ T353] usb 5-1: USB disconnect, device number 23 [ 107.941759][ T1608] usb 2-1: Using ep0 maxpacket: 32 [ 107.948110][ T1608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.959185][ T1608] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.962765][ T31] usb 1-1: device descriptor read/8, error -71 [ 107.969163][ T1608] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 107.984236][ T1608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.992862][ T1608] usb 2-1: config 0 descriptor?? [ 107.998682][ T1608] hub 2-1:0.0: USB hub found [ 108.021732][ T876] usb 3-1: device descriptor read/64, error -71 [ 108.081844][ T31] usb usb1-port1: unable to enumerate USB device [ 108.191728][ T353] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 108.202383][ T1608] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 108.211491][ T1608] usbhid 2-1:0.0: can't add hid device: -71 [ 108.217466][ T1608] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 108.261750][ T876] usb 3-1: device descriptor read/64, error -71 [ 108.361722][ T353] usb 5-1: Using ep0 maxpacket: 32 [ 108.368186][ T353] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.380029][ T353] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 108.390161][ T353] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.400448][ T353] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 108.403743][ T1608] usb 2-1: reset high-speed USB device number 38 using dummy_hcd [ 108.409590][ T353] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.417964][ T1608] usb 2-1: device reset changed ep0 maxpacket size! [ 108.425703][ T353] usb 5-1: Product: syz [ 108.432497][ T1608] usb 2-1: USB disconnect, device number 38 [ 108.436056][ T353] usb 5-1: Manufacturer: syz [ 108.436074][ T353] usb 5-1: SerialNumber: syz [ 108.460070][ T2296] tipc: Enabling of bearer rejected, already enabled [ 108.501734][ T876] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 108.513495][ T36] audit: type=1400 audit(1793134254.730:470): avc: denied { nlmsg_write } for pid=2299 comm="syz.0.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 108.584289][ T2304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.592888][ T2304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.641344][ T353] usb 5-1: selecting invalid altsetting 1 [ 108.649486][ T353] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 108.653308][ T876] usb 3-1: device descriptor read/64, error -71 [ 108.659104][ T353] usb 5-1: USB disconnect, device number 24 [ 108.665710][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 108.741724][ T1608] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 108.841732][ T310] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 108.891721][ T1608] usb 2-1: Using ep0 maxpacket: 16 [ 108.897962][ T1608] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.908394][ T1608] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 108.919153][ T1608] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 108.928470][ T876] usb 3-1: device descriptor read/64, error -71 [ 108.934809][ T1608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.943046][ T1608] usb 2-1: Product: syz [ 108.947319][ T1608] usb 2-1: Manufacturer: syz [ 108.952382][ T1608] usb 2-1: SerialNumber: syz [ 108.961912][ T1608] usb 2-1: config 0 descriptor?? [ 108.991721][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 108.998070][ T310] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 109.006352][ T310] usb 1-1: config 0 has no interface number 0 [ 109.012541][ T310] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 109.022702][ T310] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 109.034348][ T310] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 109.043601][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.051812][ T876] usb usb3-port1: attempt power cycle [ 109.057357][ T310] usb 1-1: Product: syz [ 109.061889][ T310] usb 1-1: Manufacturer: syz [ 109.066548][ T310] usb 1-1: SerialNumber: syz [ 109.081613][ T310] usb 1-1: config 0 descriptor?? [ 109.088498][ T2305] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 109.095736][ T2305] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 109.401746][ T876] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 109.432780][ T876] usb 3-1: device descriptor read/8, error -71 [ 109.562751][ T876] usb 3-1: device descriptor read/8, error -71 [ 109.705256][ T353] usb 2-1: USB disconnect, device number 39 [ 109.768366][ T2319] __nla_validate_parse: 3 callbacks suppressed [ 109.768388][ T2319] netlink: 68 bytes leftover after parsing attributes in process `syz.1.632'. [ 109.811728][ T876] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 109.819811][ T2321] zero sized request [ 109.842731][ T876] usb 3-1: device descriptor read/8, error -71 [ 109.863761][ T2324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.634'. [ 109.884996][ T2324] tipc: Enabling of bearer rejected, already enabled [ 109.975988][ T876] usb 3-1: device descriptor read/8, error -71 [ 110.067743][ T706] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.092009][ T876] usb usb3-port1: unable to enumerate USB device [ 110.658095][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 110.658112][ T36] audit: type=1326 audit(1793134256.870:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.2.640" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7dabb9f559 code=0x0 [ 110.793598][ T36] audit: type=1400 audit(1793134257.010:474): avc: denied { read } for pid=2338 comm="syz.2.640" name="usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.841581][ T36] audit: type=1400 audit(1793134257.010:475): avc: denied { open } for pid=2338 comm="syz.2.640" path="/dev/usbmon7" dev="devtmpfs" ino=112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.889199][ T36] audit: type=1400 audit(1793134257.010:476): avc: denied { ioctl } for pid=2338 comm="syz.2.640" path="/dev/usbmon7" dev="devtmpfs" ino=112 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.942120][ T36] audit: type=1326 audit(1793134257.010:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.2.640" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7dabb9f559 code=0x0 [ 111.046956][ T2369] netlink: 68 bytes leftover after parsing attributes in process `syz.4.641'. [ 111.323288][ T876] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 111.484242][ T876] usb 5-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 111.499689][ T876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.513945][ T876] usb 5-1: Product: syz [ 111.518397][ T876] usb 5-1: Manufacturer: syz [ 111.523596][ T876] usb 5-1: SerialNumber: syz [ 111.529193][ T2373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.643'. [ 111.541081][ T2373] tipc: Enabling of bearer rejected, already enabled [ 111.580201][ T310] asix 1-1:0.34: probe with driver asix failed with error -71 [ 111.608023][ T310] usb 1-1: USB disconnect, device number 26 [ 111.746003][ T876] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 111.771939][ T876] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 111.817881][ T876] usb 5-1: USB disconnect, device number 25 [ 112.088717][ T641] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.095259][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 112.186830][ T36] audit: type=1400 audit(1793134258.400:478): avc: denied { name_bind } for pid=2428 comm="syz.1.652" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 112.352823][ T2434] netlink: 68 bytes leftover after parsing attributes in process `syz.1.653'. [ 112.530525][ T2437] FAULT_INJECTION: forcing a failure. [ 112.530525][ T2437] name failslab, interval 1, probability 0, space 0, times 0 [ 112.610475][ T2437] CPU: 1 UID: 0 PID: 2437 Comm: syz.1.655 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 112.610511][ T2437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.610524][ T2437] Call Trace: [ 112.610531][ T2437] [ 112.610538][ T2437] __dump_stack+0x21/0x30 [ 112.610568][ T2437] dump_stack_lvl+0x140/0x1c0 [ 112.610592][ T2437] ? __cfi_dump_stack_lvl+0x10/0x10 [ 112.610618][ T2437] dump_stack+0x19/0x20 [ 112.610640][ T2437] should_fail_ex+0x3c2/0x510 [ 112.610664][ T2437] should_failslab+0xac/0x100 [ 112.610683][ T2437] kmem_cache_alloc_noprof+0x42/0x410 [ 112.610706][ T2437] ? __kernfs_new_node+0xf1/0x740 [ 112.610727][ T2437] __kernfs_new_node+0xf1/0x740 [ 112.610746][ T2437] ? kernfs_new_node+0x280/0x280 [ 112.610765][ T2437] ? snprintf+0xe9/0x140 [ 112.610785][ T2437] kernfs_new_node+0x154/0x280 [ 112.610803][ T2437] __kernfs_create_file+0x52/0x280 [ 112.610825][ T2437] cgroup_addrm_files+0x775/0xac0 [ 112.610846][ T2437] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 112.610868][ T2437] ? delete_node+0x3df/0xa60 [ 112.610889][ T2437] ? idr_replace+0x137/0x1b0 [ 112.610913][ T2437] ? __cfi_idr_replace+0x10/0x10 [ 112.610938][ T2437] css_populate_dir+0x12d/0x3d0 [ 112.610962][ T2437] cgroup_apply_control_enable+0x62f/0xce0 [ 112.610982][ T2437] cgroup_mkdir+0x11f8/0x1590 [ 112.611001][ T2437] ? __cfi_cgroup_mkdir+0x10/0x10 [ 112.611017][ T2437] kernfs_iop_mkdir+0x1be/0x2d0 [ 112.611037][ T2437] vfs_mkdir+0x58e/0x810 [ 112.611057][ T2437] do_mkdirat+0x240/0x530 [ 112.611077][ T2437] ? __cfi_do_mkdirat+0x10/0x10 [ 112.611096][ T2437] ? __kasan_check_write+0x18/0x20 [ 112.611119][ T2437] ? getname_flags+0x203/0x6b0 [ 112.611142][ T2437] ? __kasan_check_write+0x18/0x20 [ 112.611166][ T2437] __x64_sys_mkdirat+0x8b/0xa0 [ 112.611185][ T2437] x64_sys_call+0x2ba8/0x2ee0 [ 112.611205][ T2437] do_syscall_64+0x57/0xf0 [ 112.611223][ T2437] ? clear_bhb_loop+0x50/0xa0 [ 112.611246][ T2437] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 112.611269][ T2437] RIP: 0033:0x7f926dd9f559 [ 112.611286][ T2437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.611301][ T2437] RSP: 002b:00007f926ed06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 112.611322][ T2437] RAX: ffffffffffffffda RBX: 00007f926e025fa0 RCX: 00007f926dd9f559 [ 112.611337][ T2437] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 112.611358][ T2437] RBP: 00007f926de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 112.611371][ T2437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.611383][ T2437] R13: 00007f926e026038 R14: 00007f926e025fa0 R15: 00007fffd6dbcab8 [ 112.611399][ T2437] [ 112.611412][ T2437] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 113.071833][ T2445] netlink: 'syz.1.656': attribute type 4 has an invalid length. [ 113.101710][ T2445] netlink: 17 bytes leftover after parsing attributes in process `syz.1.656'. [ 113.180069][ T36] audit: type=1400 audit(1793134259.390:479): avc: denied { accept } for pid=2448 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.255174][ T36] audit: type=1400 audit(1793134259.390:480): avc: denied { read } for pid=2448 comm="syz.2.658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 113.285092][ T375] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 113.289098][ T2458] FAULT_INJECTION: forcing a failure. [ 113.289098][ T2458] name failslab, interval 1, probability 0, space 0, times 0 [ 113.323137][ T2458] CPU: 0 UID: 0 PID: 2458 Comm: syz.1.661 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 113.323171][ T2458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.323183][ T2458] Call Trace: [ 113.323190][ T2458] [ 113.323198][ T2458] __dump_stack+0x21/0x30 [ 113.323227][ T2458] dump_stack_lvl+0x140/0x1c0 [ 113.323251][ T2458] ? __cfi_dump_stack_lvl+0x10/0x10 [ 113.323276][ T2458] dump_stack+0x19/0x20 [ 113.323299][ T2458] should_fail_ex+0x3c2/0x510 [ 113.323318][ T2458] should_failslab+0xac/0x100 [ 113.323336][ T2458] kmem_cache_alloc_noprof+0x42/0x410 [ 113.323359][ T2458] ? alloc_empty_file+0xbf/0x270 [ 113.323378][ T2458] ? _raw_spin_unlock+0x45/0x60 [ 113.323398][ T2458] alloc_empty_file+0xbf/0x270 [ 113.323416][ T2458] ? _raw_spin_unlock+0x45/0x60 [ 113.323452][ T2458] alloc_file_pseudo+0x142/0x1f0 [ 113.323471][ T2458] ? __cfi_alloc_file_pseudo+0x10/0x10 [ 113.323491][ T2458] sock_alloc_file+0xbe/0x2b0 [ 113.323510][ T2458] __sys_socket+0x14c/0x1c0 [ 113.323529][ T2458] __x64_sys_socket+0x7e/0x90 [ 113.323545][ T2458] x64_sys_call+0x2608/0x2ee0 [ 113.323563][ T2458] do_syscall_64+0x57/0xf0 [ 113.323581][ T2458] ? clear_bhb_loop+0x50/0xa0 [ 113.323604][ T2458] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 113.323626][ T2458] RIP: 0033:0x7f926dd9f559 [ 113.323642][ T2458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.323658][ T2458] RSP: 002b:00007f926ed06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 113.323678][ T2458] RAX: ffffffffffffffda RBX: 00007f926e025fa0 RCX: 00007f926dd9f559 [ 113.323692][ T2458] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001d [ 113.323706][ T2458] RBP: 00007f926de36b20 R08: 0000000000000000 R09: 0000000000000000 [ 113.323718][ T2458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.323730][ T2458] R13: 00007f926e026038 R14: 00007f926e025fa0 R15: 00007fffd6dbcab8 [ 113.323746][ T2458] [ 113.462784][ T375] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 113.566220][ T375] usb 1-1: config 1 has no interface number 0 [ 113.572503][ T375] usb 1-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.582483][ T375] usb 1-1: config 1 interface 105 has no altsetting 0 [ 113.590577][ T375] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 113.599675][ T375] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 113.607848][ T375] usb 1-1: Product: syz [ 113.612098][ T375] usb 1-1: Manufacturer: syz [ 113.616708][ T375] usb 1-1: SerialNumber: syz [ 113.712613][ T36] audit: type=1400 audit(1793134259.930:481): avc: denied { create } for pid=2464 comm="syz.2.663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 113.747621][ T36] audit: type=1400 audit(1793134259.960:482): avc: denied { read } for pid=2468 comm="syz.2.665" path="socket:[24499]" dev="sockfs" ino=24499 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.791754][ T315] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 113.799520][ T31] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 113.830550][ T2416] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.837910][ T2416] IPv6: NLM_F_CREATE should be set when creating new route [ 113.845167][ T2416] IPv6: NLM_F_CREATE should be set when creating new route [ 113.865799][ T375] aqc111 1-1:1.105: probe with driver aqc111 failed with error -22 [ 113.951764][ T315] usb 5-1: Using ep0 maxpacket: 32 [ 113.957970][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.969153][ T315] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.980696][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.990824][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.002529][ T31] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 1.00 [ 114.011584][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.019740][ T315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.031752][ T31] usb 2-1: config 0 descriptor?? [ 114.041649][ T315] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 114.050840][ T315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.059424][ T315] usb 5-1: Product: syz [ 114.063642][ T315] usb 5-1: Manufacturer: syz [ 114.068296][ T315] usb 5-1: SerialNumber: syz [ 114.074330][ T315] usb 5-1: config 0 descriptor?? [ 114.080498][ T2452] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 114.088745][ T315] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 114.102893][ T315] usb 1-1: USB disconnect, device number 27 [ 114.291231][ T65] usb 5-1: USB disconnect, device number 26 [ 114.460580][ T2459] netlink: 84 bytes leftover after parsing attributes in process `syz.1.661'. [ 114.461641][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.476463][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.483381][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.490248][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.497233][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.504133][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.511024][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.517923][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.524850][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.531733][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.538606][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.545501][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.552396][ T31] wacom 0003:056A:0331.000F: unknown main item tag 0x0 [ 114.560059][ T31] wacom 0003:056A:0331.000F: hidraw0: USB HID v1.10 Device [HID 056a:0331] on usb-dummy_hcd.1-1/input0 [ 114.606107][ T2480] overlayfs: failed to resolve './bus': -2 [ 114.670882][ T65] usb 2-1: USB disconnect, device number 40 [ 114.861725][ T876] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 115.012758][ T876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.041737][ T876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.053737][ T1608] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 115.065031][ T876] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 115.075393][ T876] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 115.085394][ T876] usb 1-1: Manufacturer: syz [ 115.090934][ T876] usb 1-1: config 0 descriptor?? [ 115.211626][ T2507] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 115.223097][ T1608] usb 5-1: unable to get BOS descriptor or descriptor too short [ 115.233264][ T1608] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.244668][ T1608] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 115.256912][ T1608] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 115.268201][ T1608] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 115.281475][ T2515] netlink: 68 bytes leftover after parsing attributes in process `syz.2.676'. [ 115.290642][ T1608] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 115.310999][ T1608] usb 5-1: config 1 interface 1 has no altsetting 0 [ 115.322547][ T1608] usb 5-1: string descriptor 0 read error: -22 [ 115.328796][ T1608] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 115.338125][ T1608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.452936][ T2422] bridge_slave_1: left allmulticast mode [ 115.458725][ T2422] bridge_slave_1: left promiscuous mode [ 115.464778][ T2422] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.472739][ T2422] bridge_slave_0: left allmulticast mode [ 115.478401][ T2422] bridge_slave_0: left promiscuous mode [ 115.484112][ T2422] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.551735][ T65] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 115.593544][ T2422] tipc: Disabling bearer [ 115.598995][ T2422] tipc: Left network mode [ 115.604877][ T2422] veth1_macvtap: left promiscuous mode [ 115.610474][ T2422] veth0_vlan: left promiscuous mode [ 115.680111][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.687268][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.694576][ T2520] bridge_slave_0: entered allmulticast mode [ 115.701712][ T2520] bridge_slave_0: entered promiscuous mode [ 115.708664][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.715789][ T2520] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.722913][ T2520] bridge_slave_1: entered allmulticast mode [ 115.729291][ T2520] bridge_slave_1: entered promiscuous mode [ 115.729592][ T65] usb 3-1: config 8 has an invalid interface number: 163 but max is 0 [ 115.743432][ T65] usb 3-1: config 8 has no interface number 0 [ 115.749582][ T65] usb 3-1: config 8 interface 163 altsetting 125 bulk endpoint 0xD has invalid maxpacket 16 [ 115.749788][ T2489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.760829][ T65] usb 3-1: config 8 interface 163 altsetting 125 bulk endpoint 0x7 has invalid maxpacket 1023 [ 115.778441][ T65] usb 3-1: config 8 interface 163 has no altsetting 0 [ 115.786829][ T2489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.795648][ T65] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=12.f9 [ 115.804824][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.806792][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.816707][ T65] usb 3-1: Product: syz [ 115.819926][ T2520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.825347][ T2489] FAULT_INJECTION: forcing a failure. [ 115.825347][ T2489] name failslab, interval 1, probability 0, space 0, times 0 [ 115.831333][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.843963][ T65] usb 3-1: Manufacturer: syz [ 115.850880][ T2520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.862805][ T2489] CPU: 0 UID: 0 PID: 2489 Comm: syz.4.671 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 115.862836][ T2489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.862849][ T2489] Call Trace: [ 115.862856][ T2489] [ 115.862864][ T2489] __dump_stack+0x21/0x30 [ 115.862898][ T2489] dump_stack_lvl+0x140/0x1c0 [ 115.862924][ T2489] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.862948][ T2489] ? cgroup_addrm_files+0x775/0xac0 [ 115.862969][ T2489] dump_stack+0x19/0x20 [ 115.862993][ T2489] should_fail_ex+0x3c2/0x510 [ 115.863012][ T2489] should_failslab+0xac/0x100 [ 115.863030][ T2489] __kmalloc_node_track_caller_noprof+0x65/0x4f0 [ 115.863057][ T2489] ? kstrdup_const+0x45/0x60 [ 115.863079][ T2489] kstrdup+0x4d/0x130 [ 115.863098][ T2489] ? kstrdup_const+0x3a/0x60 [ 115.863119][ T2489] kstrdup_const+0x45/0x60 [ 115.863139][ T2489] __kernfs_new_node+0xaa/0x740 [ 115.863177][ T2489] ? kernfs_new_node+0x280/0x280 [ 115.863196][ T2489] ? snprintf+0xe9/0x140 [ 115.863216][ T2489] kernfs_new_node+0x154/0x280 [ 115.863232][ T2489] __kernfs_create_file+0x52/0x280 [ 115.863252][ T2489] cgroup_addrm_files+0x775/0xac0 [ 115.863273][ T2489] ? trace_raw_output_cgroup_rstat+0x1f0/0x1f0 [ 115.863292][ T2489] ? delete_node+0x3df/0xa60 [ 115.863313][ T2489] ? idr_replace+0x137/0x1b0 [ 115.863337][ T2489] ? __cfi_idr_replace+0x10/0x10 [ 115.863363][ T2489] css_populate_dir+0x12d/0x3d0 [ 115.863387][ T2489] cgroup_apply_control_enable+0x62f/0xce0 [ 115.863406][ T2489] cgroup_mkdir+0x11f8/0x1590 [ 115.863464][ T2489] ? __cfi_cgroup_mkdir+0x10/0x10 [ 115.863480][ T2489] kernfs_iop_mkdir+0x1be/0x2d0 [ 115.863501][ T2489] vfs_mkdir+0x58e/0x810 [ 115.863525][ T2489] do_mkdirat+0x240/0x530 [ 115.863544][ T2489] ? __cfi_do_mkdirat+0x10/0x10 [ 115.863562][ T2489] ? __kasan_check_write+0x18/0x20 [ 115.863585][ T2489] ? getname_flags+0x203/0x6b0 [ 115.863609][ T2489] ? __kasan_check_write+0x18/0x20 [ 115.863631][ T2489] __x64_sys_mkdirat+0x8b/0xa0 [ 115.863651][ T2489] x64_sys_call+0x2ba8/0x2ee0 [ 115.863670][ T2489] do_syscall_64+0x57/0xf0 [ 115.863688][ T2489] ? clear_bhb_loop+0x50/0xa0 [ 115.863713][ T2489] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.863736][ T2489] RIP: 0033:0x7f5d7279f559 [ 115.863753][ T2489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.863769][ T2489] RSP: 002b:00007f5d7363c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 115.863791][ T2489] RAX: ffffffffffffffda RBX: 00007f5d72a25fa0 RCX: 00007f5d7279f559 [ 115.863806][ T2489] RDX: 00000000000001ff RSI: 0000200000001280 RDI: ffffffffffffff9c [ 115.863820][ T2489] RBP: 00007f5d72836b20 R08: 0000000000000000 R09: 0000000000000000 [ 115.863833][ T2489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.863846][ T2489] R13: 00007f5d72a26038 R14: 00007f5d72a25fa0 R15: 00007ffe2240dac8 [ 115.863862][ T2489] [ 115.864080][ T65] usb 3-1: SerialNumber: syz [ 115.892537][ T2520] veth0_vlan: entered promiscuous mode [ 115.912115][ T2489] cgroup: cgroup_addrm_files: failed to add reset_stats, err=-12 [ 115.924557][ T2520] veth1_macvtap: entered promiscuous mode [ 115.925793][ T876] uclogic 0003:256C:006D.0010: failed retrieving string descriptor #200: -71 [ 116.184564][ T876] uclogic 0003:256C:006D.0010: failed retrieving pen parameters: -71 [ 116.192903][ T2517] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 116.200148][ T2517] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 116.207395][ T876] uclogic 0003:256C:006D.0010: failed probing pen v2 parameters: -71 [ 116.215857][ T876] uclogic 0003:256C:006D.0010: failed probing parameters: -71 [ 116.223472][ T876] uclogic 0003:256C:006D.0010: probe with driver uclogic failed with error -71 [ 116.237124][ T876] usb 1-1: USB disconnect, device number 28 [ 116.238427][ T2489] netlink: 'syz.4.671': attribute type 4 has an invalid length. [ 116.252110][ T2489] netlink: 'syz.4.671': attribute type 6 has an invalid length. [ 116.259884][ T2489] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.671'. [ 116.272235][ T2422] ------------[ cut here ]------------ [ 116.277754][ T2422] WARNING: CPU: 0 PID: 2422 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 116.287889][ T2422] Modules linked in: [ 116.291896][ T2422] CPU: 0 UID: 0 PID: 2422 Comm: kworker/u8:42 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 116.303737][ T2422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 116.313829][ T2422] Workqueue: netns cleanup_net [ 116.318617][ T2422] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 116.324681][ T2422] Code: e8 21 83 d4 fc 4b 83 3c 3e 00 75 19 e8 85 f2 7a fc 49 81 ff f8 07 00 00 74 1b e8 77 f2 7a fc 49 83 c7 08 eb c9 e8 6c f2 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 116.344347][ T2422] RSP: 0018:ffffc900010dfb90 EFLAGS: 00010293 [ 116.350426][ T2422] RAX: ffffffff850e6364 RBX: ffff88812e5c3540 RCX: ffff888120368000 [ 116.358439][ T2422] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888106a7c0b8 [ 116.366494][ T2422] RBP: ffffc900010dfbb0 R08: ffffffff8854fb07 R09: 1ffffffff10a9f60 [ 116.374491][ T2422] R10: dffffc0000000000 R11: fffffbfff10a9f61 R12: dffffc0000000000 [ 116.382507][ T2422] R13: dffffc0000000000 R14: ffff888106a7c000 R15: 00000000000000b8 [ 116.390487][ T2422] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 116.399540][ T2422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.406171][ T2422] CR2: 00007ffe90614ff8 CR3: 000000010cf2c000 CR4: 00000000003526b0 [ 116.414214][ T2422] DR0: 0000000000000000 DR1: ffffff7ffffffffa DR2: 0000000000000000 [ 116.418333][ T2517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.422221][ T2422] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 116.422240][ T2422] Call Trace: [ 116.422247][ T2422] [ 116.441283][ T2517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.441909][ T2422] cleanup_net+0x6ba/0xc90 [ 116.456990][ T2422] ? __cfi_cleanup_net+0x10/0x10 [ 116.461989][ T2422] ? kick_pool+0xb9/0x540 [ 116.466356][ T2422] process_scheduled_works+0x7f4/0x1060 [ 116.471987][ T2422] worker_thread+0xc99/0x13f0 [ 116.476686][ T2422] kthread+0x2c4/0x360 [ 116.480750][ T2422] ? __cfi_worker_thread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 116.485882][ T2422] ? __cfi_kthread+0x10/0x10 [ 116.490487][ T2422] ret_from_fork+0x64/0xa0 [ 116.494931][ T2422] ? __cfi_kthread+0x10/0x10 [ 116.499530][ T2422] ret_from_fork_asm+0x1a/0x30 [ 116.504315][ T2422] [ 116.507427][ T2422] ---[ end trace 0000000000000000 ]--- [ 116.513824][ T2422] ------------[ cut here ]------------ [ 116.519308][ T2422] WARNING: CPU: 0 PID: 2422 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 116.520778][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 116.520794][ T36] audit: type=1400 audit(1793134262.740:489): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[2942]" dev="pipefs" ino=2942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 116.529534][ T2422] Modules linked in: [ 116.529550][ T2422] CPU: 0 UID: 0 PID: 2422 Comm: kworker/u8:42 Tainted: G W syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 116.575699][ T2422] Tainted: [W]=WARN [ 116.579523][ T2422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 116.589657][ T2422] Workqueue: netns cleanup_net [ 116.594475][ T2422] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 116.600590][ T2422] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 30 f2 7a fc 49 81 ff f8 07 00 00 74 1b e8 22 f2 7a fc 49 83 c7 08 eb c5 e8 17 f2 7a fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 07 f2 7a fc 5b 41 5c 41 5e 41 [ 116.620255][ T2422] RSP: 0018:ffffc900010dfb90 EFLAGS: 00010293 [ 116.626381][ T2422] RAX: ffffffff850e63b9 RBX: ffff888106a7c800 RCX: ffff888120368000 [ 116.634508][ T2422] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888106a7c808 [ 116.642533][ T2422] RBP: ffffc900010dfbb0 R08: ffffffff8854fb07 R09: 1ffffffff10a9f60 [ 116.650507][ T2422] R10: dffffc0000000000 R11: fffffbfff10a9f61 R12: dffffc0000000000 [ 116.658499][ T2422] R13: dffffc0000000000 R14: ffff888106a7c000 R15: 0000000000000008 [ 116.666504][ T2422] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 116.675455][ T2422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.682066][ T2422] CR2: 00007ffe90614ff8 CR3: 000000010cf2c000 CR4: 00000000003526b0 [ 116.690045][ T2422] DR0: 0000000000000000 DR1: ffffff7ffffffffa DR2: 0000000000000000 [ 116.698051][ T2422] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 116.706075][ T2422] Call Trace: [ 116.709402][ T2422] [ 116.712350][ T2422] cleanup_net+0x6ba/0xc90 [ 116.716803][ T2422] ? __cfi_cleanup_net+0x10/0x10 [ 116.721760][ T2422] ? kick_pool+0xb9/0x540 [ 116.726112][ T2422] process_scheduled_works+0x7f4/0x1060 [ 116.731655][ T2422] worker_thread+0xc99/0x13f0 [ 116.736401][ T2422] kthread+0x2c4/0x360 [ 116.740485][ T2422] ? __cfi_worker_thread+0x10/0x10 [ 116.745744][ T2422] ? __cfi_kthread+0x10/0x10 [ 116.750381][ T2422] ret_from_fork+0x64/0xa0 [ 116.754846][ T2422] ? __cfi_kthread+0x10/0x10 [ 116.759450][ T2422] ret_from_fork_asm+0x1a/0x30 [ 116.764253][ T2422] [ 116.767277][ T2422] ---[ end trace 0000000000000000 ]--- [ 116.774197][ T65] usbhid 3-1:8.163: couldn't find an input interrupt endpoint [ 116.783799][ T65] usb 3-1: USB disconnect, device number 39 [ 116.792095][ T2422] ------------[ cut here ]------------ [ 116.797576][ T2422] WARNING: CPU: 1 PID: 2422 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 116.807265][ T2422] Modules linked in: [ 116.811171][ T2422] CPU: 1 UID: 0 PID: 2422 Comm: kworker/u8:42 Tainted: G W syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 116.824524][ T2422] Tainted: [W]=WARN [ 116.828330][ T2422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 116.838418][ T2422] Workqueue: netns cleanup_net [ 116.843229][ T2422] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 116.848783][ T2422] Code: 3c 20 00 74 08 48 89 df e8 bf 5f ef fc 48 8b 3b e8 67 4c da fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 cf 95 fc <0f> 0b e9 b0 fd ff ff e8 06 cf 95 fc 0f 0b e9 18 fe ff ff e8 fa ce [ 116.868433][ T2422] RSP: 0018:ffffc900010dfb70 EFLAGS: 00010293 [ 116.874631][ T2422] RAX: ffffffff84f386be RBX: ffff88812e5c3540 RCX: ffff888120368000 [ 116.882634][ T2422] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888120368000 [ 116.890607][ T2422] RBP: ffffc900010dfb98 R08: ffffffff8854fb07 R09: 1ffffffff10a9f60 [ 116.898604][ T2422] R10: dffffc0000000000 R11: fffffbfff10a9f61 R12: 1ffffffff10a9cb4 [ 116.906625][ T2422] R13: dffffc0000000000 R14: ffff88812e5c4140 R15: dffffc0000000000 [ 116.914640][ T2422] FS: 0000000000000000(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 116.923615][ T2422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.930205][ T2422] CR2: 00007fff8a15effc CR3: 0000000130c20000 CR4: 00000000003526b0 [ 116.938232][ T2422] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.946342][ T2422] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 116.954582][ T2422] Call Trace: [ 116.957877][ T2422] [ 116.960836][ T2422] xfrm_net_exit+0x31/0x80 [ 116.965311][ T2422] cleanup_net+0x6ba/0xc90 [ 116.969745][ T2422] ? __cfi_cleanup_net+0x10/0x10 [ 116.974742][ T2422] ? kick_pool+0xb9/0x540 [ 116.979080][ T2422] process_scheduled_works+0x7f4/0x1060 [ 116.984657][ T2422] worker_thread+0xc99/0x13f0 [ 116.989346][ T2422] kthread+0x2c4/0x360 [ 116.993436][ T2422] ? __cfi_worker_thread+0x10/0x10 [ 116.998550][ T2422] ? __cfi_kthread+0x10/0x10 [ 117.003178][ T2422] ret_from_fork+0x64/0xa0 [ 117.007594][ T2422] ? __cfi_kthread+0x10/0x10 [ 117.012202][ T2422] ret_from_fork_asm+0x1a/0x30 [ 117.016997][ T2422] [ 117.020015][ T2422] ---[ end trace 0000000000000000 ]--- [ 117.038164][ T1608] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 117.048213][ T1608] usb 5-1: Warning! Unlikely big volume range (=21774), cval->res is probably wrong. [ 117.061704][ T1608] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = -21774/0/1 [ 117.098117][ T1608] usb 5-1: USB disconnect, device number 27 [ 117.127384][ T2422] bridge_slave_1: left allmulticast mode [ 117.133112][ T2422] bridge_slave_1: left promiscuous mode [ 117.138766][ T2422] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.146425][ T2422] bridge_slave_0: left allmulticast mode [ 117.152168][ T2422] bridge_slave_0: left promiscuous mode [ 117.157740][ T2422] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.172144][ T2422] bridge_slave_1: left allmulticast mode [ 117.177816][ T2422] bridge_slave_1: left promiscuous mode [ 117.183684][ T2422] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.191323][ T2422] bridge_slave_0: left allmulticast mode [ 117.197061][ T2422] bridge_slave_0: left promiscuous mode [ 117.203087][ T2422] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.403914][ T2422] tipc: Disabling bearer [ 117.409198][ T2422] tipc: Disabling bearer [ 117.414639][ T2422] tipc: Left network mode [ 117.420318][ T2422] veth1_macvtap: left promiscuous mode [ 117.425891][ T2422] veth0_vlan: left promiscuous mode [ 117.431377][ T2422] veth1_macvtap: left promiscuous mode [ 117.436915][ T2422] veth0_vlan: left promiscuous mode [ 117.774266][ T2422] bridge_slave_1: left allmulticast mode [ 117.779921][ T2422] bridge_slave_1: left promiscuous mode [ 117.785589][ T2422] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.793022][ T2422] bridge_slave_0: left allmulticast mode [ 117.798663][ T2422] bridge_slave_0: left promiscuous mode [ 117.804437][ T2422] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.812073][ T2422] bridge_slave_1: left allmulticast mode [ 117.817715][ T2422] bridge_slave_1: left promiscuous mode [ 117.823410][ T2422] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.830829][ T2422] bridge_slave_0: left allmulticast mode [ 117.836589][ T2422] bridge_slave_0: left promiscuous mode [ 117.842207][ T2422] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.003783][ T2422] tipc: Disabling bearer [ 118.009067][ T2422] tipc: Left network mode [ 118.013759][ T2422] tipc: Disabling bearer [ 118.019024][ T2422] tipc: Left network mode [ 118.024632][ T2422] veth1_macvtap: left promiscuous mode [ 118.030108][ T2422] veth0_vlan: left promiscuous mode [ 118.035627][ T2422] veth1_macvtap: left promiscuous mode [ 118.041099][ T2422] veth0_vlan: left promiscuous mode [ 118.350720][ T2422] ------------[ cut here ]------------ [ 118.356247][ T2422] WARNING: CPU: 0 PID: 2422 at net/xfrm/xfrm_state.c:3230 xfrm_state_fini+0x2be/0x310 [ 118.365819][ T2422] Modules linked in: [ 118.369707][ T2422] CPU: 0 UID: 0 PID: 2422 Comm: kworker/u8:42 Tainted: G W syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 118.383057][ T2422] Tainted: [W]=WARN [ 118.386861][ T2422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 118.396934][ T2422] Workqueue: netns cleanup_net [ 118.401729][ T2422] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 118.407279][ T2422] Code: 3c 20 00 74 08 48 89 df e8 bf 5f ef fc 48 8b 3b e8 67 4c da fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 cf 95 fc <0f> 0b e9 b0 fd ff ff e8 06 cf 95 fc 0f 0b e9 18 fe ff ff e8 fa ce [ 118.426907][ T2422] RSP: 0018:ffffc900010dfb70 EFLAGS: 00010293 [ 118.433014][ T2422] RAX: ffffffff84f386be RBX: ffff88812e5c58c0 RCX: ffff888120368000 [ 118.440986][ T2422] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: ffff888120368000 [ 118.448981][ T2422] RBP: ffffc900010dfb98 R08: ffffffff8854fb07 R09: 1ffffffff10a9f60 [ 118.456989][ T2422] R10: dffffc0000000000 R11: fffffbfff10a9f61 R12: 1ffffffff10a9cb4 [ 118.464975][ T2422] R13: dffffc0000000000 R14: ffff88812e5c64c0 R15: dffffc0000000000 [ 118.472979][ T2422] FS: 0000000000000000(0000) GS:ffff8881f6c00000(0000) knlGS:0000000000000000 [ 118.481953][ T2422] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.488551][ T2422] CR2: 00005633e3973400 CR3: 000000010cf04000 CR4: 00000000003526b0 [ 118.496555][ T2422] DR0: 0000000000000000 DR1: ffffff7ffffffffa DR2: 0000000000000000 [ 118.504566][ T2422] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 118.512548][ T2422] Call Trace: [ 118.515817][ T2422] [ 118.518730][ T2422] xfrm_net_exit+0x31/0x80 [ 118.523162][ T2422] cleanup_net+0x6ba/0xc90 [ 118.527576][ T2422] ? __cfi_cleanup_net+0x10/0x10 [ 118.532542][ T2422] ? kick_pool+0xb9/0x540 [ 118.536876][ T2422] process_scheduled_works+0x7f4/0x1060 [ 118.542438][ T2422] worker_thread+0xc99/0x13f0 [ 118.547114][ T2422] kthread+0x2c4/0x360 [ 118.551234][ T2422] ? __cfi_worker_thread+0x10/0x10 [ 118.556394][ T2422] ? __cfi_kthread+0x10/0x10 [ 118.560993][ T2422] ret_from_fork+0x64/0xa0 [ 118.565450][ T2422] ? __cfi_kthread+0x10/0x10 [ 118.570046][ T2422] ret_from_fork_asm+0x1a/0x30 [ 118.574833][ T2422] [ 118.577847][ T2422] ---[ end trace 0000000000000000 ]---