last executing test programs: 6.083579223s ago: executing program 1 (id=1981): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000040)={0x2000000, [[0x859, 0x0, 0x8, 0x4, 0x0, 0x0, 0x1, 0x1], [0x0, 0x4, 0x0, 0x0, 0x974, 0x7f], [0x3, 0x8, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x3]], '\x00', [{}, {}, {0x0, 0x100000}, {}, {}, {}, {}, {0x3}, {0xffff667a, 0x1000}, {0x1}, {0x0, 0x3}, {0x400000}], '\x00', 0xfffffffc}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x8001}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@gettaction={0x24, 0x5a, 0xc6b747b6bf1c6b95, 0x70bd29, 0x0, {}, [@action_dump_flags]}, 0x7e}}, 0x0) 5.874640456s ago: executing program 1 (id=1984): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000002, 0x59032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x300}]}]}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x6}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r4}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000cc0)}, 0x20) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000240)) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x514) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 5.863536636s ago: executing program 3 (id=1985): io_submit(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a9"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xc1000000}], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000000e0a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a3000000000080003400000000814000000117f010000000000000000000000000a"], 0x64}}, 0x0) 5.388568868s ago: executing program 1 (id=1986): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x87, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x2, 0x6, 0x20}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000200300", @ANYRES32=r4, @ANYBLOB='\b\x00&\x00l\t\x00\x00\b\x00\'\x00g)|H'], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc000) pipe2(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x801}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) recvmsg$can_raw(r1, &(0x7f0000000880)={&(0x7f00000004c0)=@xdp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/24, 0x18}, {&(0x7f0000000540)=""/79, 0x4f}, {&(0x7f00000005c0)=""/153, 0x99}, {&(0x7f0000000680)=""/65, 0x41}, {&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000300)}, {&(0x7f0000000440)=""/18, 0x12}], 0x7, &(0x7f0000000800)=""/79, 0x4f}, 0x100) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020080000000000000000000000000000000000000000000000000000000000000000000000a0000000000000042201e5d8b44c6e462c1aa5b766c3166eedc61f598f619", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/112], 0xb8}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket(0x10, 0x3, 0x0) connect$netlink(r10, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x10000) r11 = socket$nl_generic(0x10, 0x3, 0x10) fchdir(r11) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="92010000fdd796405e0484022c6a010203010902240001000000000904"], 0x0) 4.651057053s ago: executing program 3 (id=1987): write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x0, {"7d735931001800007f004103ff0100"}}}}, 0x118) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="800202000a004200577f0000aabb004020000e8005"], 0x48}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000033b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c000b"], 0x34}}, 0xc000) 4.606711613s ago: executing program 3 (id=1988): r0 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket(0xa, 0x801, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x6, 0x10, 0x0, 0x20000000) preadv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000040)=""/95, 0x63}], 0x100002fb, 0x4000000, 0x0) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x0, r0, 0x0}, &(0x7f0000000040)={0x0, 0x0, 0x41, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r4, r4, r5}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={'sha256-avx\x00'}}) close(r2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="1c002c80080000006c09"], 0x38}}, 0x0) r10 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000540)=0xf) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8c0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r9, @ANYBLOB="a41efb7fbbfb9060434f25e5bc22b717083123299eb6d00bc5804000a3fb092054ec650fbbd22533792db692b47ba59dcecd2fe870faa50d21b2a17bc3d2a4246cac99c8e11d980da085ee8a5ee243b22f8a897d5d5dd39e4bbacf7069105d6317c163e52fe47afc760030bc100e410e3dfadb8b1133835ab37931774848ce682e8692249960e029f5b5ccfa5295123ca2"], 0x1c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r12 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r12, 0x0, 0x0, 0x0, 0x0, 0x2b) preadv(r3, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.48873395s ago: executing program 3 (id=1990): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, &(0x7f0000000100)={0x20005100, 0x4fa5, 0x5}) syz_usb_connect(0x0, 0x10e, &(0x7f0000000000)=ANY=[@ANYBLOB="59b332aeb27c316e37ad60ab798376abd197af476a05082636c527434a4ac1a1261a2114574e54e6b631fc09d4b482608f0e1a9d45f831d70d68992d04074ffc2487d18ebfbfadc919b226ce153d6e13df942be054cfa77be5c126632883fb4da2f5274b6594108c2967ba085dc800d4e95a3a1d2f6e26ad", @ANYBLOB="143139bd385bf62041d11bd8907ba8d7a854d9c634f57996deb1feb9bb970c1fcf2fc476bbf355060297646040d87101ac8f7b9cbf85ea65042b49ff5daada85dad571684a8b957605d9a445c2903555e8ee82cccdd72e21009c7528dc7bbd9e6ab598f422a4d44971cb1e34fe57a8385880ff20237b98c18c3d002187a5051fad2bb4c3a6cd6a42ad90d2162bd5b30f51df2bf7dd8d894c", @ANYRES16, @ANYRES16=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x0) 4.157816592s ago: executing program 2 (id=1992): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x6302}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400028008000440000000000800084029ba70c408000240000000000800054000000000080003"], 0x9c}}, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) io_setup(0x2869b0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 3.71970658s ago: executing program 2 (id=1994): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) 3.422444654s ago: executing program 0 (id=1999): ioperm(0x9, 0xfffffffffffffff8, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x1d3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(0x0, 0x2, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x18, &(0x7f0000000280), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf200000000000002600020007ffffffbd0310000000000095002000000000006916000000000000bf6700000000000007070000b964b01a4607feff00200000540700000ee61e00bf150000000000000f5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f1d5af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916fcecc8158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7e090000000000000045eac1f2014f720e83b7838e3eede14308d582685e1becd6f35154bcb4000000000000000000000000000000bc3af2b170ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbf909a2cabf5b8ea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f4a2575fbe943a6c40000000000000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca68c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233bff7f0000000000009fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c1ba322fd4d6fbf19e617d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be691c334ea35bae71e76e160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7bcf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da04647aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ced4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b874c9a0c6c04b96360d6f499d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b257b5a786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc1364640250136729ba4f763ff25c33e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a5628878040000000000000017b68afd95d4abf7920de9ebe1c89661f4adc3d83d72b1b778e30c2bf2efbbcd054cf51f4205ebf9a98a0d9f18135cb1d8d567c3436fa697b72c3b0200000000000079c0b3339debc78352b2e65299223d7ef2bd540e78167b3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586360c3663531eb5995d228f011a10ffc8b17d716b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22d9669560d296287c13c92070000ee7553eb2df17839542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c8c0130187081c8d320642389f5f0c42dba0ff68e84d7b130906f17f6aa075a257310f2d92cb1d1e16468949f5675262ee318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0fde97a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1ff01000000000000bdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee807fc081e004ffb7d3104af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5e8bac16e79da9c2444420900000000000000f888a94365b99b72796fca1b922fc9aefaf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837beeedba483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c794846e403950bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be05a40fde69c350e59f11f1d26a4d04d8c8b2c4a4d23ec931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f64705f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680f346ff0ffbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705116b2f4fc20d4e93882bdd6ccea97f3a08d3565b0000000000000000000000000000d35fb97c2d7a9374294dcec3da3df9a13c4fc63b00426682534d894caee0b963a3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}]}}}]}, 0x44}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x7ffffff}, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x400, 0x0) 2.963836524s ago: executing program 4 (id=2000): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x6) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200004, 0x0, 0x20, 0x8000}) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, 0x0) 2.898305584s ago: executing program 0 (id=2001): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='rdma.current\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x3, 0xfffa, 0x1000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0c000000040000000400000009000000000000", @ANYRES32=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='fsi_master_aspeed_opb_error\x00', r0}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x6b5, 0x41) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000140)={0x80, 0x6, 0x101, 0x0, 0x7, 0x0, 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x7f) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0xffffffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x200000, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x2, 0x40800) ioctl$LOOP_GET_STATUS(r8, 0x4c03, 0x0) 2.897267844s ago: executing program 4 (id=2002): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) preadv2(r6, &(0x7f0000000080)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x80000000, 0x8, 0x6) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000440)=""/147) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000a00000000000000000000000800010002"], 0x20}}, 0x0) 1.850587156s ago: executing program 0 (id=2003): socket$inet6(0xa, 0x80002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0182, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = io_uring_setup(0xad5, &(0x7f0000000100)) close(r1) syz_io_uring_setup(0x4e5e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000200)={&(0x7f00000000c0)=@abs, 0x6e, 0x0}, 0x40000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB="400000000000000000000000000000000000007343302c99bcf6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x4, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(0xffffffffffffffff, 0x3) r5 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r5, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000020, &(0x7f00000006c0)=0x3, 0x4) r7 = socket$inet6(0xa, 0x5, 0x0) listen(r7, 0x80) listen(r5, 0x3) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000002c0)={r3, &(0x7f0000000200), 0x20000000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1.850162791s ago: executing program 2 (id=2004): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.840552169s ago: executing program 4 (id=2005): socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc0046209, 0xfffffffffffffffe) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map, r5, 0x2f, 0x2028, 0x4, @void, @void, @value}, 0x20) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000580)=0x14) add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) 1.827880394s ago: executing program 1 (id=2006): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000480)={0x0, 0x1, "00fa00"}) syz_io_uring_setup(0x6d71, &(0x7f0000000000)={0x0, 0x5904, 0x20, 0x0, 0x3b}, &(0x7f0000000140), &(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)='R', 0x1}], 0x1}}], 0x1, 0xc0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r2, &(0x7f0000002400)={0x2020}, 0x2020) 1.34606383s ago: executing program 1 (id=2007): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, &(0x7f0000000480)={0x0, 0x1, "00fa00"}) syz_io_uring_setup(0x6d71, &(0x7f0000000000)={0x0, 0x5904, 0x20, 0x0, 0x3b}, &(0x7f0000000140), &(0x7f00000001c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)='R', 0x1}], 0x1}}], 0x1, 0xc0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') read$FUSE(r2, &(0x7f0000002400)={0x2020}, 0x2020) 1.039912525s ago: executing program 3 (id=2008): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x6302}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000002c0)='./file1\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000048000480440001800c0001007061796c6f6164003400028008000440000000000800084029ba70c408000240000000000800054000000000080003"], 0x9c}}, 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000300)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000bd1000/0x2000)=nil, 0x400000, 0x2}) io_setup(0x2869b0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 904.646706ms ago: executing program 4 (id=2009): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x1d0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, 0x100, 0xc, [0x19, 0x1, 0x2a, 0x2b, 0x18, 0xc, 0x40, 0xb, 0x33, 0x20, 0x34, 0x16, 0x35, 0x7, 0x3c, 0x7], 0x0, 0x6, 0x1}}}, {{@uncond, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@ttl={{0x28}, {0x2}}, @common=@inet=@set1={{0x28}, {{0x0, 0x6, 0x2}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x21, "5b99442a5e001e8d6cc37eac7ed7e2bb741bf900a4590de917b97ff15666"}}}, {{@ip={@multicast1, @remote, 0xffffff, 0xff000000, 'batadv0\x00', 'macvlan0\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0xb8, 0x118, 0x0, {}, [@common=@icmp={{0x28}, {0x5, "04a0"}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x2, 0x4, 0x4, 0x5, 0x5, 0x1], 0x6, 0x5}, {0x0, [0x0, 0x2, 0x3, 0x0, 0x2, 0x2], 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket$isdn_base(0x22, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x3e3f) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000180)={0x4}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r3, &(0x7f00000000c0)=""/108, 0x6c) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x121201, 0x0) write$dsp(r4, &(0x7f00000001c0)="d2", 0x1) r5 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$F_SET_RW_HINT(r5, 0x40c, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYRES16=r4, @ANYRES64=r0, @ANYRES64=r4, @ANYRESOCT=r4, @ANYRES16=r4, @ANYRES32=r5, @ANYRES32=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x10, &(0x7f0000000240)=ANY=[@ANYRESDEC=r2, @ANYRES32=r6, @ANYBLOB="0000000000000000b702e6080000000000000000000000008500000083000000820961172eb8000055090100000000009500000000000000c3a000005000000001000000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x880400, @void, @value}, 0x94) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f0000000200)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @empty, 0xb}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x4c, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x4c, 0x0, @opaque="a5bcfea6c732ec8768cadcfc2c29b5bbbdeab044b53cf917841aa06342c045a3593510bfb669ee3e9524cd0519396372fb5cde5cb42324645cee7e9adb7555df70045881"}}}}}}, 0x0) 816.600381ms ago: executing program 1 (id=2010): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100009c147010861246205bb4018203010902240001000000000904000002ff04010009050a"], 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x509100, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x40000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x2, 0xa}}, 0x52) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000080)={0x4, 0x4, 0xfa00, {r3, 0xae32}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000040000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@quota}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) fstat(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000901, r8, 0x0) ptrace(0x10, r6) ptrace$setregs(0x1a, r6, 0x20000000007, &(0x7f0000000400)="d774be3f14b3a31b384861e827") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101}, 0x50) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x333, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xab, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x20b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x1, 0x3}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x6, 0x20, 0x6, 0x40, 0x81}, 0x20, &(0x7f00000002c0)={0x5, 0xf, 0x20, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xf, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "749508c18b6f7b1fae104489e4514c52"}]}, 0xa, [{0x18, &(0x7f0000000300)=@string={0x18, 0x3, "2916c0b0de56524697b33a1078f35f49d7de44933d90"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1204}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3001}}, {0xf1, &(0x7f00000006c0)=@string={0xf1, 0x3, "892b61146af262bd6dcf806a3a797537bf685dc766e5617a3baf7680b97f959b0bfa29accb0c8b1dffffe543a72f5d21091abf831b688ac172caeb4d01575005cf9766c0b833ac3ce3f75493580f0dbd981f5459d22bca37da5ba49b2359889246ca698b5d478f0d610ff2f14046642d11fe2f517067deafa220bae5cb167b8885d12d5c177b0e02534fdb464326d55be019b3237b2a466789e571e230ae8a7268473258f37bd51413e9f7c979ecc4bbe73ddce3ee9d6e0850e42397ec89ccb6a2d72a3ad57eff04ac0f598f54a598575c474d08084aa9baf4c7935c785b06f2c0fd418986bb2357af784f48d93091"}}, {0x6b, &(0x7f00000007c0)=@string={0x6b, 0x3, "6a8fddaeb59aa421af1ea679523cd0650ecba22b545d911323a364a4d1d9fe5814552f8a085b0439035355114ee0c5893e8511585eff88687213a74dcd5f81cc0c835fc55d80bfa033c245a82c2cf97be2067fada861baaec67d3c305fa21c5cbb263f75d551a3458a"}}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 816.254346ms ago: executing program 4 (id=2011): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) pipe(&(0x7f0000000280)) (fail_nth: 7) 760.797514ms ago: executing program 2 (id=2012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x54, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x24}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x2a}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x10}, @NL80211_ATTR_PID={0x8, 0x52, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa, 0x52}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x49}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000044}, 0x80) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x0, 0x20040091) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) (async) timer_settime(0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a80258c6394f92024fc60030f030047000500053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) fstat(r6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000480)={[{@usrquota}, {@nr_inodes={'nr_inodes', 0x3d, [0x74, 0x74, 0x6d, 0x35, 0x32, 0x6d]}}, {@grpquota_inode_hardlimit}, {@uid={'uid', 0x3d, r7}}, {@huge_advise}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@mpol={'mpol', 0x3d, {'bind', '', @void}}}], [{@appraise}]}) 605.392306ms ago: executing program 0 (id=2013): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @empty, @broadcast}, &(0x7f0000000400)=0xc) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', r0, 0xffffffffffffffff, 0x5, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r1, 0x3, '\x00', r0, 0x0, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xf89, 0x0, r3, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'dummy0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000b0000000000050018000000000008000500", @ANYRES32=r6], 0x4c}}, 0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000500)={{0x0, 0x2710}, {r8, r9/1000+60000}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x5, 0x2, 0x6, 0x1200, r4, 0x8, '\x00', r6, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x6, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x401, &(0x7f0000000180)=0x0) r14 = timerfd_create(0x0, 0x800) io_submit(r13, 0x1, &(0x7f0000000240)=[&(0x7f0000000580)={0x4000000001000000, 0x0, 0x0, 0x0, 0x0, r14, 0x0, 0x60}]) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r15, 0x4) sendmsg$unix(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 588.082507ms ago: executing program 0 (id=2014): r0 = epoll_create(0x3f) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) r4 = fcntl$dupfd(r3, 0x0, r0) ppoll(&(0x7f00000005c0)=[{r4, 0x4000}, {r4, 0x1004}, {r2, 0x1104}, {r3, 0x100}], 0x4, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x8, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv4_newnexthop={0x1c, 0x68, 0x521, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 490.386015ms ago: executing program 0 (id=2015): r0 = syz_clone(0x160cd000, &(0x7f00000003c0)="4d5a1fb42dbf03a1621fe8e3590fd3fde99c73b6ed2fde2645bdeed1307136d9360d2d2d263074c36781d795c3f4b402546fa334dd22751783eaa3a7bac388046fe770713f70d2c272fef95822b325f09f87bbd9a1962fa2e72125f48725d00ff05ec5fcf33caad204465dce03f1f5cbc474c6fc74ae14c23e9822d9edd5ead5566fbaaf4efc1e5584cd3269bfea71e3d4eb956b6bf11a22f71b58f041f02bdda22284d8d980364e9f2dc845503f6712f85e10f9f480a6f71dac32704cfeabd41851c56514245b26ec1255651db4e900da62fcb6996bb11f7bb510802f", 0xdd, &(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000280)="481e24686beb54716312fea88574c13fc07e0bdf37b2cc166607c9068849856628594afa3a6a2237b654bb86ecd782ff6904930ecead07651f3110a92d3468b46d5d058977cc96589a25602428228d2d9727be7a15ac064613e0bc3d2c373e2685576c2cb8f6431ecb9ddde40b02d34a395182638c6c8f87bd13abe26376f9da0186154a094d5e3d232ed798857cff9e8460113e1d55bf992e72c6d68d1324cce0740e725dddd8d0cca82b9c305a23a4acb8fd59899fa3c1bb48246ef948321e") prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000340)=0x1, 0x4) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x88d6, 0x40) openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) r3 = syz_open_dev$loop(0x0, 0x75f, 0x103382) syz_io_uring_complete(0x0) r4 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000000080), 0x72a, 0x500, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) request_key(0x0, 0x0, &(0x7f0000000140)='0000111122223333', 0x0) sendfile(r3, r3, 0x0, 0x24002de8) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x1) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1000004, 0x600102) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000f0fd25a80f7ffffff080524fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x14) 426.587306ms ago: executing program 2 (id=2016): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}], 0x1c) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x200000100000011, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="d80000001a00810a1d08007b490d4f2881f8d804000100ff05142603600e12080005007a01e300a80016002000034004000000035c0461c9d67f6f940071342e8728a84942de4fe3aefb8000a007a290457f01e84460dd46302af989b316277ce06bbae5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5a024fdbb57a5025c4679e5a9ed90b2e0fb3e5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de4ccd40dd6e400003d93452a92954b43370e78", 0xd8}], 0x1}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r9, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040080}, 0x8081) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 300.14019ms ago: executing program 4 (id=2017): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000500)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [r4], [0x2b8]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400), 0xc) socket$netlink(0x10, 0x3, 0x0) syslog(0x4, &(0x7f0000000000)=""/34, 0x22) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f00000000c0)={0xf4, "6f30b31cd736929a8dc438caa9f9fae04a8c7dfedd279b762a00b87acafad9cd", 0x4, 0x200, 0xffffff81, 0x2, 0x4, 0x2, 0x80000000}) 710.233µs ago: executing program 2 (id=2018): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) r1 = dup(r0) ioctl$BLKROSET(r1, 0x125d, 0x0) close(0x3) mincore(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setreuid(0x0, 0x0) r3 = syz_io_uring_setup(0x95, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) io_uring_enter(r3, 0x47f6, 0x8dd1, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=2019): io_submit(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a9"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xc1000000}], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c0000000e0a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a3000000000080003400000000814000000117f010000000000000000000000000a"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): ysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 406.762798][ T5872] usb 2-1: GET_CAPABILITIES returned 0 [ 406.794902][ T5872] usbtmc 2-1:16.0: can't read capabilities [ 406.974289][ T965] usb 2-1: USB disconnect, device number 41 [ 408.523924][ T965] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 409.203917][ T965] usb 3-1: Using ep0 maxpacket: 16 [ 409.215221][ T965] usb 3-1: config index 0 descriptor too short (expected 8303, got 36) [ 409.233876][ T29] audit: type=1400 audit(1731899642.912:742): avc: denied { setopt } for pid=10810 comm="syz.3.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 409.234334][ T965] usb 3-1: config 73 has an invalid descriptor of length 101, skipping remainder of the config [ 409.234357][ T965] usb 3-1: config 73 has 0 interfaces, different from the descriptor's value: 32 [ 409.234388][ T965] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40 [ 409.234410][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.705553][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 410.423888][ T5872] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 410.483378][T10851] input: syz0 as /devices/virtual/input/input28 [ 410.505257][ T29] audit: type=1400 audit(1731899644.192:743): avc: denied { setopt } for pid=10850 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 410.568918][ T965] usb 3-1: string descriptor 0 read error: -71 [ 410.584179][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 410.586972][ T965] usb 3-1: USB disconnect, device number 55 [ 410.765505][ T5872] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 411.090080][ T5872] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 411.169360][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.267302][ T5872] usb 2-1: Product: syz [ 411.308543][ T5872] usb 2-1: Manufacturer: syz [ 411.319529][ T5872] usb 2-1: SerialNumber: syz [ 411.335121][ T5872] usb 2-1: config 0 descriptor?? [ 411.352779][ T5872] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 411.361828][ T5872] usb 2-1: Detected FT232R [ 411.819506][ T5872] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 411.926510][T10868] can0: slcan on ttyS3. [ 412.203596][ T5872] ftdi_sio 2-1:0.0: GPIO initialisation failed: -5 [ 412.224794][T10868] can0 (unregistered): slcan off ttyS3. [ 412.231803][ T5872] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 413.423533][ T5872] usb 2-1: USB disconnect, device number 42 [ 413.549660][ T5872] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 413.565799][ T5872] ftdi_sio 2-1:0.0: device disconnected [ 414.093218][ T29] audit: type=1400 audit(1731899647.772:744): avc: denied { getopt } for pid=10891 comm="syz.0.1385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 414.263932][ T25] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 414.271689][ T1202] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 414.424220][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 414.451587][ T25] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 414.500567][ T1202] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 414.514615][ T25] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.534156][ T1202] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.570160][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.587589][ T1202] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 414.613823][ T25] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.624373][ T1202] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.651145][ T25] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.675796][ T1202] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.685206][ T1202] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.693210][ T1202] usb 4-1: Product: syz [ 414.698550][ T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 414.708127][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.717096][ T1202] usb 4-1: Manufacturer: syz [ 414.725171][ T1202] cdc_wdm 4-1:1.0: skipping garbage [ 414.730818][ T1202] cdc_wdm 4-1:1.0: skipping garbage [ 414.740810][ T1202] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 414.747149][ T1202] cdc_wdm 4-1:1.0: Unknown control protocol [ 414.952834][ T25] usb 3-1: usb_control_msg returned -32 [ 414.964199][ T5874] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 414.967553][ T25] usbtmc 3-1:16.0: can't read capabilities [ 415.011704][T10909] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10909 comm=syz.1.1389 [ 415.054140][ C0] wdm_int_callback: 151 callbacks suppressed [ 415.054161][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.066751][ C0] wdm_int_callback: 151 callbacks suppressed [ 415.066771][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.069340][T10911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.072931][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.095153][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.101655][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.107971][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.114566][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.120928][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.127533][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.133824][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.140419][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.146849][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.153453][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.159714][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.166313][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.172932][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.179537][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.185940][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.192540][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.198768][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 415.205370][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 415.214455][ T965] usb 4-1: USB disconnect, device number 47 [ 415.220409][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 415.465964][ T5874] usb 5-1: New USB device found, idVendor=f7e5, idProduct=0303, bcdDevice=a1.cb [ 415.503739][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.511786][ T5874] usb 5-1: Product: syz [ 415.517624][ T5874] usb 5-1: Manufacturer: syz [ 415.522922][ T5874] usb 5-1: SerialNumber: syz [ 415.530259][ T5874] usb 5-1: config 0 descriptor?? [ 415.891370][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.984936][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.023105][ T1202] usb 5-1: USB disconnect, device number 50 [ 416.874878][T10933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1395'. [ 417.059377][T10936] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=10936 comm=syz.4.1395 [ 417.330075][ T1202] usb 3-1: USB disconnect, device number 56 [ 417.794120][ T5872] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 417.968737][ T5872] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 417.983796][ T5872] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.003129][ T5872] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 418.019038][ T5872] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 418.032604][ T5872] usb 2-1: Manufacturer: syz [ 418.046708][ T5872] usb 2-1: config 0 descriptor?? [ 418.129217][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 418.154016][ T5872] rc_core: IR keymap rc-hauppauge not found [ 418.163228][ T5872] Registered IR keymap rc-empty [ 418.319183][ T5872] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 418.330119][ T5872] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 419.366600][ T965] usb 2-1: USB disconnect, device number 43 [ 419.907360][ T29] audit: type=1400 audit(1731899653.582:745): avc: denied { map } for pid=10978 comm="syz.4.1407" path="socket:[28398]" dev="sockfs" ino=28398 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 420.324048][ T5872] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 420.506497][ T5872] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 420.522458][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.539145][ T5872] usb 3-1: Product: syz [ 420.547714][ T5872] usb 3-1: Manufacturer: syz [ 420.557818][ T5872] usb 3-1: SerialNumber: syz [ 420.569477][ T5872] usb 3-1: config 0 descriptor?? [ 420.871751][ T5874] usb 3-1: USB disconnect, device number 57 [ 421.113899][ T5872] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 422.224981][ T5872] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 422.233794][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.258677][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 422.277992][ T5872] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.325708][ T5872] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 422.349438][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 422.387760][ T5872] usb 2-1: Product: syz [ 422.403917][ T5872] usb 2-1: Manufacturer: syz [ 422.432112][ T5872] cdc_wdm 2-1:1.0: skipping garbage [ 422.447974][ T5872] cdc_wdm 2-1:1.0: skipping garbage [ 422.460426][ T5872] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 422.470129][T11010] Mount JFS Failure: -22 [ 422.476837][ T5872] cdc_wdm 2-1:1.0: Unknown control protocol [ 423.299559][ T29] audit: type=1400 audit(1731899656.982:746): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 423.499977][ C0] wdm_int_callback: 17 callbacks suppressed [ 423.500001][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 423.512517][ C0] wdm_int_callback: 17 callbacks suppressed [ 423.512538][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 423.524919][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 423.531522][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 423.537855][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 423.544460][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 423.550729][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 423.557326][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 423.563722][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 423.570329][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 423.577597][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 423.584198][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 423.590483][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 423.597075][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 423.603351][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 423.609949][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 423.616685][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 423.623272][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 423.629517][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 423.636128][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 423.676482][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 423.686565][ T965] usb 2-1: USB disconnect, device number 44 [ 425.543894][ T5875] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 425.713750][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 425.720006][ T5875] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 425.729438][ T965] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 425.738968][ T5875] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 425.748098][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.756112][ T5875] usb 4-1: Product: syz [ 425.760247][ T5875] usb 4-1: Manufacturer: syz [ 425.764859][ T5875] usb 4-1: SerialNumber: syz [ 425.770539][ T5875] usb 4-1: config 0 descriptor?? [ 425.773829][ T25] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 425.776988][ T5875] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 425.790859][ T5875] usb 4-1: Detected FT232R [ 425.915106][ T965] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 425.925456][ T965] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 425.934081][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 425.935312][ T965] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 425.941306][ T25] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 425.948400][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 425.948421][ T965] usb 5-1: SerialNumber: syz [ 425.973297][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 425.983373][ T25] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 425.993394][ T25] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 426.003906][ T5875] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 426.006666][ T25] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 426.022187][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.157725][T11044] IPVS: Error connecting to the multicast addr [ 426.220166][ T5875] ftdi_sio 4-1:0.0: GPIO initialisation failed: -5 [ 426.227967][ T5875] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 426.320871][ T25] usb 2-1: GET_CAPABILITIES returned 0 [ 426.326787][ T25] usbtmc 2-1:16.0: can't read capabilities [ 426.937239][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.946041][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.960774][T11046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.974812][T11046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.296177][ T5875] usb 4-1: USB disconnect, device number 48 [ 428.317990][ T5875] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 428.345718][ T5875] ftdi_sio 4-1:0.0: device disconnected [ 428.527703][ T965] usb 5-1: 0:2 : does not exist [ 428.532686][ T965] usb 5-1: unit 5: unexpected type 0x0a [ 428.550428][ T965] usb 5-1: USB disconnect, device number 51 [ 428.552809][T11062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1430'. [ 428.908785][T10177] udevd[10177]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.056841][ T1202] usb 2-1: USB disconnect, device number 45 [ 429.127385][T11067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1431'. [ 431.463756][T11099] FAULT_INJECTION: forcing a failure. [ 431.463756][T11099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.476858][T11099] CPU: 0 UID: 0 PID: 11099 Comm: syz.3.1437 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 431.487620][T11099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 431.497699][T11099] Call Trace: [ 431.500973][T11099] [ 431.503903][T11099] dump_stack_lvl+0x16c/0x1f0 [ 431.508599][T11099] should_fail_ex+0x497/0x5b0 [ 431.513290][T11099] _copy_from_user+0x2e/0xd0 [ 431.517896][T11099] kstrtouint_from_user+0xd7/0x1c0 [ 431.523018][T11099] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 431.528751][T11099] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 431.534388][T11099] proc_fail_nth_write+0x84/0x250 [ 431.539417][T11099] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 431.545059][T11099] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 431.550694][T11099] vfs_write+0x24c/0x1150 [ 431.555044][T11099] ? __fget_files+0x23a/0x3f0 [ 431.559725][T11099] ? fdget_pos+0x24c/0x360 [ 431.564141][T11099] ? __pfx_lock_release+0x10/0x10 [ 431.569164][T11099] ? trace_lock_acquire+0x14a/0x1d0 [ 431.574374][T11099] ? __pfx_vfs_write+0x10/0x10 [ 431.579144][T11099] ? __pfx___mutex_lock+0x10/0x10 [ 431.584177][T11099] ? __fget_files+0x244/0x3f0 [ 431.588869][T11099] ksys_write+0x12f/0x260 [ 431.593197][T11099] ? __pfx_ksys_write+0x10/0x10 [ 431.598051][T11099] do_syscall_64+0xcd/0x250 [ 431.602556][T11099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.608522][T11099] RIP: 0033:0x7f4d16b7d1ff [ 431.612935][T11099] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 431.632549][T11099] RSP: 002b:00007f4d178fc030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 431.640966][T11099] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d16b7d1ff [ 431.648935][T11099] RDX: 0000000000000001 RSI: 00007f4d178fc0a0 RDI: 0000000000000006 [ 431.656912][T11099] RBP: 00007f4d178fc090 R08: 0000000000000000 R09: 0000000000000000 [ 431.664873][T11099] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 431.672827][T11099] R13: 0000000000000000 R14: 00007f4d16d36130 R15: 00007ffc1adaf138 [ 431.680801][T11099] [ 432.164415][ T5875] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 432.420320][ T5875] usb 4-1: config 7 descriptor has 1 excess byte, ignoring [ 432.579552][ T5875] usb 4-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 432.616965][ T5875] usb 4-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 432.630856][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.653730][ T5875] usb 4-1: Product: syz [ 432.657921][ T5875] usb 4-1: Manufacturer: syz [ 432.669237][ T5875] usb 4-1: SerialNumber: syz [ 432.703103][ T5875] rndis_host 4-1:7.0: skipping garbage [ 432.715311][ T5875] usb 4-1: bad CDC descriptors [ 432.743171][ T5875] option 4-1:7.0: GSM modem (1-port) converter detected [ 432.818315][ T29] audit: type=1400 audit(1731899666.502:747): avc: denied { create } for pid=11117 comm="syz.1.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 433.463355][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 433.472397][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 433.485060][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 433.494069][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 433.503246][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 433.512493][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 433.521727][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 433.530881][T11128] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 433.705259][T11134] __nla_validate_parse: 58 callbacks suppressed [ 433.705277][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1450'. [ 434.556151][T11147] serio: Serial port ptm0 [ 434.834998][ T5875] usb 4-1: USB disconnect, device number 49 [ 434.905985][ T5875] option 4-1:7.0: device disconnected [ 438.570046][ T29] audit: type=1400 audit(1731899672.252:748): avc: denied { ioctl } for pid=11201 comm="syz.4.1470" path="socket:[29793]" dev="sockfs" ino=29793 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 438.594687][ C1] vkms_vblank_simulate: vblank timer overrun [ 438.631427][ T29] audit: type=1400 audit(1731899672.292:749): avc: denied { getopt } for pid=11201 comm="syz.4.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 438.933957][ T5876] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 438.983803][ T965] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 439.103802][ T5876] usb 5-1: Using ep0 maxpacket: 16 [ 439.110184][ T5876] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 439.123219][ T5876] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 439.132375][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.140541][ T5876] usb 5-1: Product: syz [ 439.144812][ T5876] usb 5-1: Manufacturer: syz [ 439.149576][ T5876] usb 5-1: SerialNumber: syz [ 439.162177][ T965] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 439.171023][ T5876] usb 5-1: config 0 descriptor?? [ 439.176024][ T965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.187568][ T5876] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 439.196274][ T5876] usb 5-1: Detected FT232R [ 439.201321][ T965] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 439.210410][ T965] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 439.218487][ T965] usb 2-1: Manufacturer: syz [ 439.224963][ T965] usb 2-1: config 0 descriptor?? [ 439.273919][ T965] rc_core: IR keymap rc-hauppauge not found [ 439.279890][ T965] Registered IR keymap rc-empty [ 439.286574][ T965] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 439.298900][ T965] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input30 [ 439.403291][ T5876] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 439.612121][ T5876] ftdi_sio 5-1:0.0: GPIO initialisation failed: -5 [ 439.619414][ T5876] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 439.646895][ T5876] usb 2-1: USB disconnect, device number 46 [ 439.728343][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.391071][ T1202] usb 5-1: USB disconnect, device number 52 [ 440.413938][ T1202] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 440.439386][ T1202] ftdi_sio 5-1:0.0: device disconnected [ 441.715398][T11240] input input31: cannot allocate more than FF_MAX_EFFECTS effects [ 441.975526][ T965] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 442.134336][ T965] usb 4-1: device descriptor read/64, error -71 [ 442.277122][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 442.321648][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1487'. [ 442.398196][ T965] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 442.566485][T11262] netlink: 'syz.4.1486': attribute type 21 has an invalid length. [ 442.574642][T11262] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1486'. [ 442.646666][T11262] workqueue: Failed to create a rescuer kthread for wq "reiserfs/nullb0": -EINTR [ 442.854561][ T965] usb 4-1: device descriptor read/64, error -71 [ 443.063723][ T965] usb usb4-port1: attempt power cycle [ 443.180910][ T5875] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 443.418885][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 443.425218][ T5875] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 443.437127][ T5875] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 443.453627][T11273] cifs: Unknown parameter 'mode' [ 443.459162][ T5875] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 444.019512][ T965] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 444.027289][ T5875] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 444.070465][ T5875] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 444.079540][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.125007][ T965] usb 4-1: device descriptor read/8, error -71 [ 444.135694][T11276] bio_check_eod: 2 callbacks suppressed [ 444.135728][T11276] syz.4.1490: attempt to access beyond end of device [ 444.135728][T11276] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 444.155123][T11276] SQUASHFS error: Failed to read block 0x0: -5 [ 444.161529][T11276] unable to read squashfs_super_block [ 444.331518][ T5875] usb 2-1: GET_CAPABILITIES returned 0 [ 444.337189][ T5875] usbtmc 2-1:16.0: can't read capabilities [ 444.373815][ T965] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 444.394375][ T965] usb 4-1: device descriptor read/8, error -71 [ 444.504004][ T965] usb usb4-port1: unable to enumerate USB device [ 444.545447][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.669357][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.155340][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.176156][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.397712][T11294] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1495'. [ 446.099464][ T5875] libceph: connect (1)[c::]:6789 error -101 [ 446.123344][ T5875] libceph: mon0 (1)[c::]:6789 connect error [ 446.339043][T11313] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1500'. [ 446.386124][ T965] libceph: connect (1)[c::]:6789 error -101 [ 446.389199][ T1202] usb 2-1: USB disconnect, device number 47 [ 446.393728][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 446.449969][ T29] audit: type=1400 audit(1731899680.132:750): avc: denied { setattr } for pid=11314 comm="syz.1.1501" name="ALG" dev="sockfs" ino=29322 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 446.687494][T11306] ceph: No mds server is up or the cluster is laggy [ 447.370149][ T965] libceph: connect (1)[c::]:6789 error -101 [ 447.437697][ T965] libceph: mon0 (1)[c::]:6789 connect error [ 447.651976][T11330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 448.186146][ T5875] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 448.404160][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 448.424163][ T5875] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 448.437646][ T5875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 448.451663][ T5875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.463859][ T5875] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.484532][ T5875] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 448.498495][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.603878][ T965] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 448.773904][ T5875] usb 5-1: GET_CAPABILITIES returned 0 [ 448.779484][ T5875] usbtmc 5-1:16.0: can't read capabilities [ 448.873083][ T965] usb 2-1: Using ep0 maxpacket: 8 [ 448.900097][ T965] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 448.936574][T11335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.945349][T11335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.960307][T11335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.965421][ T965] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 448.973773][T11359] pim6reg1: entered promiscuous mode [ 448.979179][ T965] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.985496][T11335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.008253][T11359] pim6reg1: entered allmulticast mode [ 449.231574][ T965] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 449.439278][ T965] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 449.448620][ T965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.099035][ T29] audit: type=1326 audit(1731899683.782:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11365 comm="syz.2.1516" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4109d7e719 code=0x0 [ 450.234152][ T965] usb 2-1: GET_CAPABILITIES returned 0 [ 450.239662][ T965] usbtmc 2-1:16.0: can't read capabilities [ 450.859656][T11348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.944233][T11348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.979875][T11348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.003500][T11348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.326824][ T5875] usb 5-1: USB disconnect, device number 53 [ 452.419952][ T1202] usb 2-1: USB disconnect, device number 48 [ 453.026875][T11409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1527'. [ 453.443757][ T8] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 453.593784][ T5875] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 453.603204][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 453.623783][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.637717][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 453.647242][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.659488][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 453.668859][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 453.677358][ T8] usb 2-1: Product: syz [ 453.681529][ T8] usb 2-1: Manufacturer: syz [ 453.693638][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 453.698980][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 453.707950][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 453.713970][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 453.753998][ T5875] usb 5-1: Using ep0 maxpacket: 8 [ 453.760700][ T5875] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 453.771872][ T5875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 453.781909][ T5875] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.791896][ T5875] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.804937][ T5875] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 453.814459][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.863938][ T5921] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 454.024071][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 454.041433][ T5921] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 454.047680][ C0] wdm_int_callback: 188 callbacks suppressed [ 454.047699][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 454.062229][ C0] wdm_int_callback: 188 callbacks suppressed [ 454.062240][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 454.074847][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 454.081447][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 454.087734][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 454.094311][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 454.100541][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 454.107166][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 454.113497][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 454.120079][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 454.126358][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 454.132936][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 454.139203][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 454.145789][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 454.152036][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 454.158623][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 454.164862][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 454.171434][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 454.177695][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 454.184290][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 454.304145][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 454.306082][T11407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.312918][ T8] usb 2-1: USB disconnect, device number 49 [ 454.365741][ T5875] usb 5-1: GET_CAPABILITIES returned 0 [ 454.381097][ T5875] usbtmc 5-1:16.0: can't read capabilities [ 454.387937][ T5921] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.436689][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.454135][T11407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.466039][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 454.479059][ T5921] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.493011][ T5921] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.552446][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.879429][ T5921] usb 4-1: usb_control_msg returned -32 [ 454.902812][ T5921] usbtmc 4-1:16.0: can't read capabilities [ 454.916760][T11407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.929962][T11407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.124816][T11423] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 456.412689][ T8] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 456.615815][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 456.671637][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 456.702444][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.711225][ T5875] usb 4-1: USB disconnect, device number 54 [ 456.738239][ T8] usb 2-1: Product: syz [ 456.743341][ T8] usb 2-1: Manufacturer: syz [ 456.751650][ T8] usb 2-1: SerialNumber: syz [ 456.775149][ T8] usb 2-1: config 0 descriptor?? [ 456.798147][ T1202] usb 5-1: USB disconnect, device number 54 [ 457.057939][ T8] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 457.585760][T11451] cifs: Unknown parameter 'mode' [ 457.620422][T11451] syz.3.1538: attempt to access beyond end of device [ 457.620422][T11451] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 457.633705][T11451] SQUASHFS error: Failed to read block 0x0: -5 [ 457.640029][T11451] unable to read squashfs_super_block [ 458.003200][ T8] usb write operation failed. (-71) [ 458.017727][ T8] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 458.038017][ T8] dvbdev: DVB: registering new adapter (Terratec H7) [ 458.046837][ T8] usb 2-1: media controller created [ 458.056793][ T8] usb read operation failed. (-71) [ 458.079706][ T8] usb write operation failed. (-71) [ 458.096161][ T8] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 458.115746][ T8] usb 2-1: USB disconnect, device number 50 [ 458.508042][T11458] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1541'. [ 458.615986][T11465] vti0: entered promiscuous mode [ 460.044021][ T5872] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 460.220964][ T5872] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 460.230952][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.274321][ T5872] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 460.323174][ T5872] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.368733][ T5872] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 460.380633][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 460.388945][ T5872] usb 2-1: Product: syz [ 460.393279][ T5872] usb 2-1: Manufacturer: syz [ 460.414311][ T5872] cdc_wdm 2-1:1.0: skipping garbage [ 460.421169][ T5872] cdc_wdm 2-1:1.0: skipping garbage [ 460.604626][ T5872] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 460.624546][ T5872] cdc_wdm 2-1:1.0: Unknown control protocol [ 461.066463][ T965] usb 2-1: USB disconnect, device number 51 [ 462.030917][T11509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.733864][ T965] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 462.973812][ T965] usb 5-1: Using ep0 maxpacket: 32 [ 462.990786][ T965] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.011048][ T965] usb 5-1: config 2 has an invalid interface number: 233 but max is 0 [ 463.019761][ T965] usb 5-1: config 2 has no interface number 0 [ 463.027674][ T965] usb 5-1: config 2 interface 233 altsetting 64 endpoint 0x9 has an invalid bInterval 128, changing to 7 [ 463.039392][ T965] usb 5-1: config 2 interface 233 has no altsetting 0 [ 463.049599][ T965] usb 5-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=88.cb [ 463.058986][ T965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.067416][ T965] usb 5-1: Product: syz [ 463.071622][ T965] usb 5-1: Manufacturer: syz [ 463.080417][ T965] usb 5-1: SerialNumber: syz [ 463.338157][ T965] usb 5-1: USB disconnect, device number 55 [ 465.220312][ T29] audit: type=1804 audit(1731899698.902:752): pid=11542 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1566" name="/newroot/301/bus/bus" dev="overlay" ino=1633 res=1 errno=0 [ 465.222007][T11542] evm: overlay not supported [ 465.243138][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.260222][ T29] audit: type=1400 audit(1731899698.942:753): avc: denied { module_load } for pid=11541 comm="syz.3.1566" path="/301/bus/bus" dev="overlay" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 465.260658][T11542] Invalid ELF header magic: != ELF [ 465.999262][T11560] netlink: 'syz.4.1570': attribute type 21 has an invalid length. [ 466.007317][T11560] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1570'. [ 466.158061][T11560] could not allocate digest TFM handle sha384-neon [ 466.165364][T11561] workqueue: Failed to create a rescuer kthread for wq "reiserfs/nullb0": -EINTR [ 466.444174][ T5872] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 467.120589][ T29] audit: type=1400 audit(1731899700.262:754): avc: denied { ioctl } for pid=11569 comm="syz.4.1574" path="socket:[30409]" dev="sockfs" ino=30409 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 467.484391][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 467.495610][ T5872] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 467.522029][ T5872] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.534323][ T5872] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.560314][ T5872] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.589911][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.627633][ T5872] usb 2-1: Product: syz [ 467.631976][ T5872] usb 2-1: Manufacturer: syz [ 467.653548][ T5872] usb 2-1: SerialNumber: syz [ 468.173761][ T1202] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 468.267641][ T5872] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 468.306202][ T1202] usb 5-1: device descriptor read/64, error -71 [ 468.353853][ T5921] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 468.464673][T11599] libceph: resolve ' [ 468.464673][T11599] -&fYǝa2i [ 468.464673][T11599] .?&*&' (ret=-3): failed [ 468.503822][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 468.510251][ T5921] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 468.522922][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 468.534194][ T5921] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.544279][ T1202] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 468.551958][ T5921] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.565672][ T5921] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 468.575543][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.703795][ T1202] usb 5-1: device descriptor read/64, error -71 [ 468.790683][ T5921] usb 4-1: GET_CAPABILITIES returned 0 [ 468.796402][ T5921] usbtmc 4-1:16.0: can't read capabilities [ 468.814090][ T1202] usb usb5-port1: attempt power cycle [ 468.880151][ T29] audit: type=1400 audit(1731899702.562:755): avc: denied { append } for pid=11555 comm="syz.1.1571" name="ppp" dev="devtmpfs" ino=712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 469.002193][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.011042][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.173837][ T1202] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 469.196724][ T1202] usb 5-1: device descriptor read/8, error -71 [ 469.834198][ T5872] usb 2-1: USB disconnect, device number 52 [ 469.944114][ T1202] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 469.964251][ T1202] usb 5-1: device descriptor read/8, error -71 [ 470.025086][T11052] udevd[11052]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.073991][ T1202] usb usb5-port1: unable to enumerate USB device [ 470.434449][ T5876] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 470.620946][ T5876] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 470.653762][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.674261][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 470.723900][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.784173][ T5876] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 470.874219][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 470.887494][ T5876] usb 2-1: Product: syz [ 470.891778][ T5876] usb 2-1: Manufacturer: syz [ 470.910499][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 470.915814][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 470.921708][ T5876] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 470.927934][ T5876] cdc_wdm 2-1:1.0: Unknown control protocol [ 470.996118][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1590'. [ 471.115182][T11618] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11618 comm=syz.4.1590 [ 471.162070][ T1202] usb 4-1: USB disconnect, device number 55 [ 471.462862][ T8] usb 2-1: USB disconnect, device number 53 [ 471.599782][ T5876] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 472.063057][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.076770][T11624] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1593'. [ 472.102413][ T5876] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=6a.2c [ 472.112745][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.131338][ T5876] usb 5-1: Product: syz [ 472.135997][ T5876] usb 5-1: Manufacturer: syz [ 472.140664][ T5876] usb 5-1: SerialNumber: syz [ 472.340861][T11630] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11630 comm=syz.2.1593 [ 472.518431][ T5876] usb 5-1: config 0 descriptor?? [ 472.749974][ T5876] usb 5-1: USB disconnect, device number 60 [ 473.553879][ T1202] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 473.557167][ T5875] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 473.703863][ T1202] usb 2-1: Using ep0 maxpacket: 16 [ 473.710445][ T1202] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 473.721880][ T1202] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 473.726027][ T5875] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 473.741231][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.753090][ T5875] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 473.756690][ T1202] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 473.762672][ T5875] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 473.782025][ T5875] usb 4-1: Manufacturer: syz [ 473.867031][ T1202] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 473.935940][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.936162][ T5875] usb 4-1: config 0 descriptor?? [ 473.969396][ T1202] usb 2-1: Product: syz [ 473.987293][ T1202] usb 2-1: Manufacturer: syz [ 474.004111][ T1202] usb 2-1: SerialNumber: syz [ 474.224286][ T5875] rc_core: IR keymap rc-hauppauge not found [ 474.230242][ T5875] Registered IR keymap rc-empty [ 474.236065][ T5875] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 474.252432][ T5875] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input32 [ 474.501077][ T1202] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 474.596961][ T5876] usb 4-1: USB disconnect, device number 56 [ 475.415366][ T1202] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 475.562112][ T1202] usb 2-1: USB disconnect, device number 54 [ 475.837488][T10128] udevd[10128]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.117020][T11711] sp0: Synchronizing with TNC [ 480.131928][ T29] audit: type=1400 audit(1731899713.812:756): avc: denied { read } for pid=11735 comm="syz.2.1623" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 480.221660][ T29] audit: type=1400 audit(1731899713.812:757): avc: denied { open } for pid=11735 comm="syz.2.1623" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 480.249542][T11736] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 480.334119][ T5921] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 480.353785][ T5876] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 480.487818][ T5921] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 480.501669][ T5921] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.518463][ T5921] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 480.528164][ T5921] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.546137][ T5921] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 480.561167][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 480.570506][ T5921] usb 4-1: Product: syz [ 480.578735][ T5921] usb 4-1: Manufacturer: syz [ 480.617093][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 480.625013][ T5876] usb 5-1: device descriptor read/64, error -71 [ 480.627739][ T5921] cdc_wdm 4-1:1.0: skipping garbage [ 480.642803][ T5921] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 480.653540][ T5921] cdc_wdm 4-1:1.0: Unknown control protocol [ 480.953916][ T5876] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 481.239221][ T5876] usb 5-1: device descriptor read/64, error -71 [ 481.305783][ C1] wdm_int_callback: 665 callbacks suppressed [ 481.305798][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 481.318379][ C1] wdm_int_callback: 665 callbacks suppressed [ 481.318398][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 481.331582][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 481.338193][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 481.354115][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 481.360827][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 481.367129][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 481.373738][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 481.380040][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 481.380560][ T5876] usb usb5-port1: attempt power cycle [ 481.386630][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 481.387090][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 481.404724][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 481.412410][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 481.419032][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 481.434058][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 481.440686][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 481.447150][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 481.453754][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 481.460208][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 481.466809][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 481.474295][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 481.483021][ T5872] usb 4-1: USB disconnect, device number 57 [ 481.853527][T11753] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.713976][ T5876] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 482.755277][ T5876] usb 5-1: device descriptor read/8, error -71 [ 482.925239][T11773] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1631'. [ 483.011171][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 483.178319][ T29] audit: type=1400 audit(1731899716.822:758): avc: denied { lock } for pid=11769 comm="syz.0.1632" path="socket:[31339]" dev="sockfs" ino=31339 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 483.543955][T11796] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1640'. [ 483.684494][T11797] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1640'. [ 485.206213][ T5872] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 485.350625][T11818] FAULT_INJECTION: forcing a failure. [ 485.350625][T11818] name failslab, interval 1, probability 0, space 0, times 0 [ 485.363501][T11818] CPU: 0 UID: 0 PID: 11818 Comm: syz.1.1646 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 485.374278][T11818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 485.384344][T11818] Call Trace: [ 485.387630][T11818] [ 485.390565][T11818] dump_stack_lvl+0x16c/0x1f0 [ 485.395261][T11818] should_fail_ex+0x497/0x5b0 [ 485.399952][T11818] ? fs_reclaim_acquire+0xae/0x150 [ 485.405107][T11818] should_failslab+0xc2/0x120 [ 485.409802][T11818] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 485.415359][T11818] ? getname_flags.part.0+0x4c/0x550 [ 485.420672][T11818] getname_flags.part.0+0x4c/0x550 [ 485.424074][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 485.425771][T11818] getname_flags+0x93/0xf0 [ 485.435183][T11818] user_path_at+0x24/0x60 [ 485.439492][T11818] __x64_sys_mount+0x1fc/0x320 [ 485.444235][T11818] ? __pfx___x64_sys_mount+0x10/0x10 [ 485.449512][T11818] do_syscall_64+0xcd/0x250 [ 485.454011][T11818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.459910][T11818] RIP: 0033:0x7f0afa37e719 [ 485.464309][T11818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.483913][T11818] RSP: 002b:00007f0afb249038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 485.492318][T11818] RAX: ffffffffffffffda RBX: 00007f0afa535f80 RCX: 00007f0afa37e719 [ 485.500267][T11818] RDX: 0000000020000080 RSI: 00000000200002c0 RDI: 0000000000000000 [ 485.508213][T11818] RBP: 00007f0afb249090 R08: 0000000020000400 R09: 0000000000000000 [ 485.516160][T11818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.524113][T11818] R13: 0000000000000000 R14: 00007f0afa535f80 R15: 00007ffeef1bda08 [ 485.532086][T11818] [ 485.540804][ T5872] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 485.552564][ T5872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 485.562823][ T5872] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 485.573325][ T5872] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.586730][ T5872] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 485.595959][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.740046][T11838] cifs: Unknown parameter 'mode' [ 485.939168][ T5872] usb 5-1: GET_CAPABILITIES returned 0 [ 485.945012][ T5872] usbtmc 5-1:16.0: can't read capabilities [ 488.152646][ T1202] usb 5-1: USB disconnect, device number 65 [ 489.415424][ T8] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 489.585554][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.607485][ T8] usb 4-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 489.643379][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.651812][ T5876] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 489.677540][ T8] usb 4-1: config 0 descriptor?? [ 489.689760][T11887] sp0: Synchronizing with TNC [ 489.691934][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 489.705069][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1667'. [ 489.714628][ T29] audit: type=1400 audit(1731899723.402:759): avc: denied { ioctl } for pid=11886 comm="syz.1.1666" path="socket:[31679]" dev="sockfs" ino=31679 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 489.715307][T11887] sp0: Found TNC [ 489.803801][ T5876] usb 5-1: device descriptor read/64, error -71 [ 490.085355][ T5876] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 490.136724][T11886] [U] ` [ 490.142961][ T8] hid-steam 0003:28DE:1205.000B: item fetching failed at offset 3/5 [ 490.159854][ T8] hid-steam 0003:28DE:1205.000B: steam_probe:parse of hid interface failed [ 490.171218][ T8] hid-steam 0003:28DE:1205.000B: probe with driver hid-steam failed with error -22 [ 490.321603][ T5876] usb 5-1: device descriptor read/64, error -71 [ 490.853697][ T5876] usb usb5-port1: attempt power cycle [ 491.744466][ T5876] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 491.804678][ T5876] usb 5-1: device descriptor read/8, error -71 [ 491.848230][ T1202] usb 4-1: USB disconnect, device number 58 [ 492.064161][ T5876] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 492.086506][ T5876] usb 5-1: device descriptor read/8, error -71 [ 492.103886][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1675'. [ 492.221930][ T5876] usb usb5-port1: unable to enumerate USB device [ 493.233769][ T5876] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 493.398039][ T5876] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 493.406904][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.467204][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 493.673610][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.731262][ T5876] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 493.756515][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 493.766077][ T5876] usb 5-1: Product: syz [ 493.770225][ T5876] usb 5-1: Manufacturer: syz [ 493.781892][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 493.829287][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 493.858896][ T5876] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 493.865221][ T5876] cdc_wdm 5-1:1.0: Unknown control protocol [ 493.971519][ T29] audit: type=1400 audit(1731899727.652:760): avc: denied { map } for pid=11949 comm="syz.0.1683" path="/dev/usbmon3" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 494.084955][ C0] wdm_int_callback: 7 callbacks suppressed [ 494.084977][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 494.097347][ C0] wdm_int_callback: 7 callbacks suppressed [ 494.097357][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 494.109483][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 494.116069][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 494.122334][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 494.128908][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 494.135239][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 494.141815][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 494.148067][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 494.154639][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 494.160881][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 494.167453][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 494.174106][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 494.180689][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 494.186921][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 494.193496][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 494.199771][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 494.206342][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 494.213027][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 494.219613][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 494.480286][ T5876] usb 5-1: USB disconnect, device number 70 [ 494.486224][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 494.610538][T11960] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1686'. [ 494.728078][T11961] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1686'. [ 494.833983][ T29] audit: type=1400 audit(1731899728.482:761): avc: denied { write } for pid=11962 comm="syz.1.1687" name="/" dev="configfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 495.111497][ T29] audit: type=1400 audit(1731899728.482:762): avc: denied { add_name } for pid=11962 comm="syz.1.1687" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 495.111658][ T29] audit: type=1400 audit(1731899728.482:763): avc: denied { create } for pid=11962 comm="syz.1.1687" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 497.964090][T12020] netlink: 'syz.3.1700': attribute type 1 has an invalid length. [ 498.063648][T12020] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1700'. [ 498.318380][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 498.481949][T12026] fuse: Unknown parameter 'f0x0000000000000003' [ 498.569019][T12030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.723813][ T5876] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 498.814852][ T29] audit: type=1326 audit(1731899732.502:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.4.1708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f222dd7e719 code=0x0 [ 498.874071][ T5872] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 498.876900][ T5876] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.901339][ T5876] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 498.911678][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.925685][ T5876] usb 4-1: config 0 descriptor?? [ 499.024075][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 499.032110][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 499.044402][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 499.055092][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 499.065835][ T5872] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.079178][ T5872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 499.088871][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.530904][ T5876] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 499.540943][T12043] syz.0.1709: attempt to access beyond end of device [ 499.540943][T12043] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 499.549077][T12032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.555002][ T5876] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input33 [ 499.566633][T12032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.593349][T12043] syz.0.1709: attempt to access beyond end of device [ 499.593349][T12043] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 499.613811][T12043] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 499.755377][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1711'. [ 499.821156][T12043] syz.0.1709: attempt to access beyond end of device [ 499.821156][T12043] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 499.835366][T12043] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 499.850058][T12043] syz.0.1709: attempt to access beyond end of device [ 499.850058][T12043] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 499.864638][T12043] syz.0.1709: attempt to access beyond end of device [ 499.864638][T12043] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 500.563006][T12053] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12053 comm=syz.2.1711 [ 500.918051][T12043] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 500.950717][T12043] syz.0.1709: attempt to access beyond end of device [ 500.950717][T12043] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 500.976148][ T5876] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 501.008092][T12043] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 501.011908][T12040] block nbd0: shutting down sockets [ 501.056767][T12043] syz.0.1709: attempt to access beyond end of device [ 501.056767][T12043] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 501.077852][T12043] syz.0.1709: attempt to access beyond end of device [ 501.077852][T12043] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 501.186474][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.431702][T12043] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 501.474581][T12043] syz.0.1709: attempt to access beyond end of device [ 501.474581][T12043] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 501.493878][T12043] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 501.509622][T12043] syz.0.1709: attempt to access beyond end of device [ 501.509622][T12043] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 501.559041][T12043] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 501.583995][T12043] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 501.665646][ T5872] usb 2-1: usb_control_msg returned -71 [ 501.671256][ T5872] usbtmc 2-1:16.0: can't read capabilities [ 501.701669][ T5872] usb 2-1: USB disconnect, device number 55 [ 501.718883][T12043] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 502.156474][ T5876] usb 4-1: USB disconnect, device number 59 [ 502.519945][ T5875] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 502.876217][T12082] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1719'. [ 503.078438][T12083] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1719'. [ 503.132775][ T5875] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.189314][ T5875] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 503.206988][ T5875] usb 5-1: New USB device found, idVendor=19d2, idProduct=1075, bcdDevice= 0.05 [ 503.231162][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 503.241661][ T5875] usb 5-1: SerialNumber: syz [ 503.252947][ T5875] usb 5-1: config 0 descriptor?? [ 503.691672][ T25] usb 5-1: USB disconnect, device number 71 [ 503.871569][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1724'. [ 504.695914][T12113] can0: slcan on ttyS3. [ 505.115056][T12116] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1729'. [ 505.183981][T12109] can0 (unregistered): slcan off ttyS3. [ 505.325173][ T29] audit: type=1400 audit(1731899738.982:765): avc: denied { execmem } for pid=12128 comm="syz.4.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 505.493835][ T5875] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 505.647122][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 505.679208][ T5875] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 505.718157][ T5875] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 505.734443][ T5875] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 505.763302][ T5875] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 505.793974][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.829081][ T5875] usb 4-1: Product: syz [ 505.849041][ T5875] usb 4-1: Manufacturer: syz [ 505.867292][ T5875] usb 4-1: SerialNumber: syz [ 506.099301][T12125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.110054][T12125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.132151][ T5875] adutux 4-1:168.0: interrupt endpoints not found [ 506.181491][ T5875] usb 4-1: USB disconnect, device number 60 [ 506.734289][ T5872] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 507.283930][ T5872] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 507.311448][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.322078][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 507.331649][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.344545][ T5872] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 507.353605][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 507.362069][ T5872] usb 5-1: Product: syz [ 507.366487][ T5872] usb 5-1: Manufacturer: syz [ 507.392700][ T5872] cdc_wdm 5-1:1.0: skipping garbage [ 507.406513][ T5872] cdc_wdm 5-1:1.0: skipping garbage [ 507.430739][T12171] netlink: 'syz.3.1737': attribute type 1 has an invalid length. [ 507.438971][T12171] netlink: 512 bytes leftover after parsing attributes in process `syz.3.1737'. [ 507.453492][ T5872] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 507.471323][ T5872] cdc_wdm 5-1:1.0: Unknown control protocol [ 508.136581][ C0] wdm_int_callback: 1543 callbacks suppressed [ 508.136605][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 508.149300][ C0] wdm_int_callback: 1543 callbacks suppressed [ 508.149321][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 508.161835][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 508.168445][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 508.174812][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 508.181420][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 508.187767][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 508.194366][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 508.200695][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 508.207304][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 508.213710][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 508.220306][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 508.226581][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 508.233182][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 508.239497][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 508.246106][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 508.252543][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 508.259148][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 508.265470][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 508.272076][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 508.281908][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 508.294166][ T965] usb 5-1: USB disconnect, device number 72 [ 509.133779][ T29] audit: type=1400 audit(1731899742.652:766): avc: denied { remount } for pid=12196 comm="syz.1.1746" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 509.959147][T12218] No such timeout policy "syz0" [ 510.350867][ T29] audit: type=1400 audit(1731899744.032:767): avc: denied { create } for pid=12229 comm="syz.3.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 510.389001][T12230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1756'. [ 510.465686][ T29] audit: type=1400 audit(1731899744.142:768): avc: denied { write } for pid=12229 comm="syz.3.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 510.488383][T12234] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12234 comm=syz.3.1756 [ 510.508140][ T29] audit: type=1400 audit(1731899744.142:769): avc: denied { nlmsg_write } for pid=12229 comm="syz.3.1756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 510.853797][ T5876] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 511.013385][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.025877][ T5876] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=6a.2c [ 511.035723][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.050142][ T5876] usb 4-1: Product: syz [ 511.055549][ T5876] usb 4-1: Manufacturer: syz [ 511.072630][ T5876] usb 4-1: SerialNumber: syz [ 511.149497][ T5876] usb 4-1: config 0 descriptor?? [ 511.463598][ T5876] usb 4-1: USB disconnect, device number 61 [ 513.416363][T12274] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1769'. [ 514.299481][T12290] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1773'. [ 514.908436][T12298] Process accounting resumed [ 516.655853][T12331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1785'. [ 517.342926][T12343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1788'. [ 517.424394][T12347] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12347 comm=syz.2.1788 [ 517.772504][T12350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 517.830763][T12336] syz.0.1786 (12336): drop_caches: 2 [ 518.215039][T12355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.547308][ T5876] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 518.754017][ T5876] usb 4-1: Using ep0 maxpacket: 32 [ 518.764819][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 518.773472][ T5876] usb 4-1: config 2 has an invalid interface number: 233 but max is 0 [ 518.789774][ T5876] usb 4-1: config 2 has no interface number 0 [ 518.800229][ T5876] usb 4-1: config 2 interface 233 altsetting 64 endpoint 0x9 has an invalid bInterval 128, changing to 7 [ 518.906246][ T5876] usb 4-1: config 2 interface 233 has no altsetting 0 [ 518.925218][ T5876] usb 4-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=88.cb [ 518.939503][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.027693][ T5876] usb 4-1: Product: syz [ 519.055761][ T5876] usb 4-1: Manufacturer: syz [ 519.105257][ T5876] usb 4-1: SerialNumber: syz [ 519.906356][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1800'. [ 519.964267][ T5876] usb 4-1: USB disconnect, device number 62 [ 521.194748][ T5875] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 521.384262][ T5872] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 521.475183][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 521.559676][ T5872] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 521.569386][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.606112][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.613714][ T5872] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.625377][ T5875] usb 4-1: config 0 has no interfaces? [ 521.639851][ T5875] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 521.656410][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.663702][ T5872] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.669082][ T5875] usb 4-1: Product: syz [ 521.688192][T12420] trusted_key: encrypted_key: insufficient parameters specified [ 521.695965][ T5875] usb 4-1: Manufacturer: syz [ 521.695987][ T5875] usb 4-1: SerialNumber: syz [ 521.697406][ T5875] usb 4-1: config 0 descriptor?? [ 521.705585][ T5872] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.725568][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.756019][ T5872] usb 5-1: Product: syz [ 521.762165][ T5872] usb 5-1: Manufacturer: syz [ 521.763790][ T29] audit: type=1400 audit(1731899755.442:770): avc: denied { bind } for pid=12422 comm="syz.0.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 521.773021][ T5872] cdc_wdm 5-1:1.0: skipping garbage [ 522.231334][ T5872] cdc_wdm 5-1:1.0: skipping garbage [ 522.260255][ T5872] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 522.266681][ T5872] cdc_wdm 5-1:1.0: Unknown control protocol [ 522.961967][ C0] wdm_int_callback: 14 callbacks suppressed [ 522.961992][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 522.974507][ C0] wdm_int_callback: 14 callbacks suppressed [ 522.974528][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 522.984793][T12433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.986630][ C0] vkms_vblank_simulate: vblank timer overrun [ 523.003082][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 523.009706][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 523.016089][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 523.022696][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 523.029000][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 523.035604][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 523.041872][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 523.048472][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 523.054762][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 523.061362][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 523.067607][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 523.074209][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 523.080496][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 523.087095][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 523.093361][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 523.099959][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 523.106224][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 523.112823][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 523.121246][ T5875] usb 5-1: USB disconnect, device number 73 [ 523.127214][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 523.274643][ T965] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 523.443743][ T965] usb 2-1: device descriptor read/64, error -71 [ 523.863808][ T965] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 523.993824][ T965] usb 2-1: device descriptor read/64, error -71 [ 524.104045][ T965] usb usb2-port1: attempt power cycle [ 524.657124][ T965] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 524.697348][ T965] usb 2-1: device descriptor read/8, error -71 [ 525.526213][ C0] vkms_vblank_simulate: vblank timer overrun [ 525.567993][ T25] usb 4-1: USB disconnect, device number 63 [ 526.889903][T12487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 528.911220][T12500] netlink: 'syz.2.1830': attribute type 309 has an invalid length. [ 529.274157][ T29] audit: type=1400 audit(1731899762.722:771): avc: denied { map } for pid=12488 comm="syz.1.1829" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 529.297459][ C0] vkms_vblank_simulate: vblank timer overrun [ 529.622041][ T1202] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 529.971499][T12519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.096463][ T1202] usb 5-1: Using ep0 maxpacket: 16 [ 530.139098][ T1202] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.226098][ T1202] usb 5-1: config 0 has no interfaces? [ 530.338668][ T1202] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 530.391187][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.505874][ T25] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 530.547307][ T1202] usb 5-1: Product: syz [ 530.551577][ T1202] usb 5-1: Manufacturer: syz [ 530.620565][ T1202] usb 5-1: SerialNumber: syz [ 530.653312][ T1202] usb 5-1: config 0 descriptor?? [ 530.703745][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 531.043100][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 531.090350][ T25] usb 4-1: config 2 has an invalid interface number: 233 but max is 0 [ 531.098660][ T25] usb 4-1: config 2 has no interface number 0 [ 531.104866][ T25] usb 4-1: config 2 interface 233 altsetting 64 endpoint 0x9 has an invalid bInterval 128, changing to 7 [ 531.107752][T12547] fuse: Unknown parameter 'g' [ 531.116215][ T25] usb 4-1: config 2 interface 233 has no altsetting 0 [ 531.122503][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=88.cb [ 531.138596][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.146827][ T25] usb 4-1: Product: syz [ 531.151203][ T25] usb 4-1: Manufacturer: syz [ 531.156129][ T25] usb 4-1: SerialNumber: syz [ 531.364161][ T5872] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 531.381183][ T25] usb 4-1: USB disconnect, device number 64 [ 531.554563][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 531.561167][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 531.569346][ T5872] usb 2-1: too many configurations: 59, using maximum allowed: 8 [ 531.578914][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 531.586784][ T5872] usb 2-1: can't read configurations, error -61 [ 531.723841][ T5872] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 531.873790][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 531.880553][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 531.895825][ T5872] usb 2-1: too many configurations: 59, using maximum allowed: 8 [ 531.908346][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 531.916067][ T5872] usb 2-1: can't read configurations, error -61 [ 531.922563][ T5872] usb usb2-port1: attempt power cycle [ 531.956019][T12555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1847'. [ 532.274290][ T5872] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 532.415974][T12560] fuse: Bad value for 'fd' [ 532.531843][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 532.541654][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 532.559870][ T5872] usb 2-1: too many configurations: 59, using maximum allowed: 8 [ 532.570123][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 532.584167][ T5872] usb 2-1: can't read configurations, error -61 [ 532.593226][T12555] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=12555 comm=syz.3.1847 [ 532.754411][ T5872] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 532.774204][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 532.780773][ T5872] usb 2-1: unable to get BOS descriptor or descriptor too short [ 532.790270][ T5872] usb 2-1: too many configurations: 59, using maximum allowed: 8 [ 532.799603][ T5872] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 532.807348][ T5872] usb 2-1: can't read configurations, error -61 [ 532.814006][ T5872] usb usb2-port1: unable to enumerate USB device [ 532.854106][ T25] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 533.005771][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.017511][ T25] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=6a.2c [ 533.026879][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.035184][ T25] usb 4-1: Product: syz [ 533.039435][ T25] usb 4-1: Manufacturer: syz [ 533.044218][ T25] usb 4-1: SerialNumber: syz [ 533.050141][ T25] usb 4-1: config 0 descriptor?? [ 533.270302][ T8] usb 4-1: USB disconnect, device number 65 [ 533.577085][ T8] usb 5-1: USB disconnect, device number 74 [ 534.489560][T12578] xt_CT: You must specify a L4 protocol and not use inversions on it [ 534.830602][ T8] IPVS: starting estimator thread 0... [ 534.924238][T12582] IPVS: using max 25 ests per chain, 60000 per kthread [ 535.174293][T12594] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 535.683033][T12607] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1858'. [ 535.697182][T12607] FAULT_INJECTION: forcing a failure. [ 535.697182][T12607] name failslab, interval 1, probability 0, space 0, times 0 [ 535.712499][T12607] CPU: 1 UID: 0 PID: 12607 Comm: syz.2.1858 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 535.723287][T12607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 535.733354][T12607] Call Trace: [ 535.736636][T12607] [ 535.739567][T12607] dump_stack_lvl+0x16c/0x1f0 [ 535.744251][T12607] should_fail_ex+0x497/0x5b0 [ 535.748936][T12607] ? fs_reclaim_acquire+0xae/0x150 [ 535.754052][T12607] should_failslab+0xc2/0x120 [ 535.758735][T12607] __kmalloc_noprof+0xcb/0x400 [ 535.763507][T12607] ? irq_work_queue+0x2a/0x80 [ 535.768199][T12607] ? __wake_up_klogd.part.0+0x99/0xf0 [ 535.773588][T12607] do_setlink+0x60b/0x41c0 [ 535.778016][T12607] ? trace_lock_acquire+0x14a/0x1d0 [ 535.783231][T12607] ? __pfx_do_setlink+0x10/0x10 [ 535.788079][T12607] ? vprintk+0x86/0xa0 [ 535.792127][T12607] ? _printk+0xc8/0x100 [ 535.796255][T12607] ? __pfx__printk+0x10/0x10 [ 535.800817][T12607] ? ___ratelimit+0x24c/0x570 [ 535.805482][T12607] ? __pfx____ratelimit+0x10/0x10 [ 535.810510][T12607] ? rcu_is_watching+0x12/0xc0 [ 535.815358][T12607] ? do_trace_netlink_extack+0x16d/0x1e0 [ 535.820966][T12607] ? __nla_validate_parse+0x601/0x2880 [ 535.826409][T12607] ? __pfx___nla_validate_parse+0x10/0x10 [ 535.832106][T12607] ? stack_trace_save+0x95/0xd0 [ 535.836945][T12607] ? __pfx_stack_trace_save+0x10/0x10 [ 535.842291][T12607] ? stack_depot_save_flags+0x28/0x8f0 [ 535.847723][T12607] ? __lock_acquire+0x163e/0x3ce0 [ 535.852727][T12607] ? __nla_parse+0x40/0x60 [ 535.857121][T12607] __rtnl_newlink+0xc35/0x1920 [ 535.861866][T12607] ? __pfx___rtnl_newlink+0x10/0x10 [ 535.867051][T12607] rtnl_newlink+0x67/0xa0 [ 535.871357][T12607] ? __pfx_rtnl_newlink+0x10/0x10 [ 535.876356][T12607] rtnetlink_rcv_msg+0x3c7/0xea0 [ 535.881270][T12607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 535.886708][T12607] netlink_rcv_skb+0x16b/0x440 [ 535.891445][T12607] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 535.896878][T12607] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 535.902142][T12607] ? netlink_deliver_tap+0x1ae/0xd90 [ 535.907408][T12607] netlink_unicast+0x53c/0x7f0 [ 535.912158][T12607] ? __pfx_netlink_unicast+0x10/0x10 [ 535.917421][T12607] netlink_sendmsg+0x8b8/0xd70 [ 535.922159][T12607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.927426][T12607] ____sys_sendmsg+0xaaf/0xc90 [ 535.932181][T12607] ? copy_msghdr_from_user+0x10b/0x160 [ 535.937616][T12607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.942880][T12607] ? __pfx___lock_acquire+0x10/0x10 [ 535.948067][T12607] ___sys_sendmsg+0x135/0x1e0 [ 535.952721][T12607] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.957901][T12607] ? lock_acquire+0x2f/0xb0 [ 535.962387][T12607] ? __fget_files+0x40/0x3f0 [ 535.966982][T12607] ? fdget+0x176/0x210 [ 535.971048][T12607] __sys_sendmsg+0x117/0x1f0 [ 535.975615][T12607] ? __pfx___sys_sendmsg+0x10/0x10 [ 535.980702][T12607] ? __fget_files+0x244/0x3f0 [ 535.985365][T12607] do_syscall_64+0xcd/0x250 [ 535.989844][T12607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.995726][T12607] RIP: 0033:0x7f4109d7e719 [ 536.000116][T12607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.019698][T12607] RSP: 002b:00007f410abbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.028084][T12607] RAX: ffffffffffffffda RBX: 00007f4109f35f80 RCX: 00007f4109d7e719 [ 536.036030][T12607] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 536.043984][T12607] RBP: 00007f410abbc090 R08: 0000000000000000 R09: 0000000000000000 [ 536.051945][T12607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.059892][T12607] R13: 0000000000000000 R14: 00007f4109f35f80 R15: 00007ffdcbfb18a8 [ 536.067846][T12607] [ 536.303901][ T25] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 536.453940][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 536.462369][ T25] usb 4-1: unable to get BOS descriptor or descriptor too short [ 536.472616][ T25] usb 4-1: config 2 has an invalid interface number: 233 but max is 0 [ 536.480960][ T25] usb 4-1: config 2 has no interface number 0 [ 536.489078][ T25] usb 4-1: config 2 interface 233 altsetting 64 endpoint 0x9 has an invalid bInterval 128, changing to 7 [ 536.501931][ T25] usb 4-1: config 2 interface 233 has no altsetting 0 [ 536.511237][ T25] usb 4-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=88.cb [ 536.521243][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.529664][ T25] usb 4-1: Product: syz [ 536.534175][ T25] usb 4-1: Manufacturer: syz [ 536.538854][ T25] usb 4-1: SerialNumber: syz [ 536.767221][T12600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.783522][ T25] usb 4-1: USB disconnect, device number 66 [ 537.663568][T12631] FAULT_INJECTION: forcing a failure. [ 537.663568][T12631] name failslab, interval 1, probability 0, space 0, times 0 [ 537.676866][T12631] CPU: 1 UID: 0 PID: 12631 Comm: syz.4.1865 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 537.687631][T12631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 537.697683][T12631] Call Trace: [ 537.700957][T12631] [ 537.703887][T12631] dump_stack_lvl+0x16c/0x1f0 [ 537.708570][T12631] should_fail_ex+0x497/0x5b0 [ 537.713250][T12631] ? fs_reclaim_acquire+0xae/0x150 [ 537.718365][T12631] should_failslab+0xc2/0x120 [ 537.723045][T12631] __kmalloc_noprof+0xcb/0x400 [ 537.727816][T12631] ? d_absolute_path+0x137/0x1b0 [ 537.732759][T12631] tomoyo_encode2+0x100/0x3e0 [ 537.737444][T12631] tomoyo_encode+0x29/0x50 [ 537.741863][T12631] tomoyo_realpath_from_path+0x19d/0x720 [ 537.747507][T12631] tomoyo_path_number_perm+0x245/0x590 [ 537.752963][T12631] ? tomoyo_path_number_perm+0x232/0x590 [ 537.758597][T12631] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 537.764582][T12631] ? find_held_lock+0x2d/0x110 [ 537.769353][T12631] ? __pfx_lock_release+0x10/0x10 [ 537.774393][T12631] ? rcu_is_watching+0x12/0xc0 [ 537.779164][T12631] ? __rcu_read_unlock+0x2b4/0x580 [ 537.784286][T12631] ? __fget_files+0x244/0x3f0 [ 537.788977][T12631] security_file_ioctl+0x9b/0x240 [ 537.794021][T12631] __x64_sys_ioctl+0xbb/0x220 [ 537.798706][T12631] do_syscall_64+0xcd/0x250 [ 537.803212][T12631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.809114][T12631] RIP: 0033:0x7f222dd7e719 [ 537.813530][T12631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.833139][T12631] RSP: 002b:00007f222c1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.841554][T12631] RAX: ffffffffffffffda RBX: 00007f222df36130 RCX: 00007f222dd7e719 [ 537.849524][T12631] RDX: 0000000020000840 RSI: 00000000c1105517 RDI: 0000000000000005 [ 537.857493][T12631] RBP: 00007f222c1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 537.865460][T12631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.873428][T12631] R13: 0000000000000000 R14: 00007f222df36130 R15: 00007ffe766e15c8 [ 537.881411][T12631] [ 537.885376][T12631] ERROR: Out of memory at tomoyo_realpath_from_path. [ 538.279287][T12637] FAULT_INJECTION: forcing a failure. [ 538.279287][T12637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.292570][T12637] CPU: 1 UID: 0 PID: 12637 Comm: syz.4.1868 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 538.303309][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 538.313342][T12637] Call Trace: [ 538.316611][T12637] [ 538.319531][T12637] dump_stack_lvl+0x16c/0x1f0 [ 538.324189][T12637] should_fail_ex+0x497/0x5b0 [ 538.328857][T12637] _copy_to_user+0x32/0xd0 [ 538.333251][T12637] bpf_test_finish.isra.0+0x55f/0x680 [ 538.338603][T12637] ? __pfx_bpf_test_finish.isra.0+0x10/0x10 [ 538.344472][T12637] ? __might_fault+0xe3/0x190 [ 538.349131][T12637] ? _copy_from_user+0x59/0xd0 [ 538.353873][T12637] bpf_prog_test_run_xdp+0xa13/0x1580 [ 538.359224][T12637] ? lock_acquire+0x2f/0xb0 [ 538.363699][T12637] ? __fget_files+0x40/0x3f0 [ 538.368265][T12637] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 538.374053][T12637] ? fput+0x30/0x390 [ 538.377922][T12637] ? __bpf_prog_get+0xa0/0x290 [ 538.382662][T12637] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 538.388468][T12637] __sys_bpf+0xfc6/0x49a0 [ 538.392783][T12637] ? ksys_write+0x21e/0x260 [ 538.397273][T12637] ? reacquire_held_locks+0x470/0x4c0 [ 538.402619][T12637] ? __pfx___sys_bpf+0x10/0x10 [ 538.407357][T12637] ? vfs_write+0x306/0x1150 [ 538.411843][T12637] ? __mutex_unlock_slowpath+0x164/0x650 [ 538.417460][T12637] ? fput+0x30/0x390 [ 538.421336][T12637] ? ksys_write+0x1ad/0x260 [ 538.425812][T12637] ? __pfx_ksys_write+0x10/0x10 [ 538.430644][T12637] __x64_sys_bpf+0x78/0xc0 [ 538.435037][T12637] ? lockdep_hardirqs_on+0x7c/0x110 [ 538.440213][T12637] do_syscall_64+0xcd/0x250 [ 538.444692][T12637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.450565][T12637] RIP: 0033:0x7f222dd7e719 [ 538.455232][T12637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.474815][T12637] RSP: 002b:00007f222eab5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 538.483213][T12637] RAX: ffffffffffffffda RBX: 00007f222df35f80 RCX: 00007f222dd7e719 [ 538.491158][T12637] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 538.499104][T12637] RBP: 00007f222eab5090 R08: 0000000000000000 R09: 0000000000000000 [ 538.507053][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 538.515007][T12637] R13: 0000000000000000 R14: 00007f222df35f80 R15: 00007ffe766e15c8 [ 538.522975][T12637] [ 538.562312][T12642] overlayfs: failed to resolve './file0': -2 [ 539.406271][ T8] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 539.571153][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 539.583150][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 539.593203][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.602398][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.642036][T12641] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 539.657488][ T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.309474][T12641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.322709][T12641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.555521][T12682] 9pnet_fd: Insufficient options for proto=fd [ 541.636418][T12685] binder: 12680:12685 ioctl c0046209 9999999999999999 returned -22 [ 542.723776][ T29] audit: type=1400 audit(1731899776.382:772): avc: denied { append } for pid=12678 comm="syz.3.1879" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 542.873849][ T5872] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 543.074540][ T5872] usb 5-1: Using ep0 maxpacket: 16 [ 543.091971][ T5872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.682229][ T5872] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 543.723477][T12713] binder: 12712:12713 ioctl 5429 20000840 returned -22 [ 544.313062][ T5872] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 544.322246][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.331003][ T5872] usb 5-1: Product: syz [ 544.335751][ T5872] usb 5-1: Manufacturer: syz [ 544.340366][ T5872] usb 5-1: SerialNumber: syz [ 544.411843][ T5872] usb 5-1: config 0 descriptor?? [ 544.471469][T12716] FAULT_INJECTION: forcing a failure. [ 544.471469][T12716] name failslab, interval 1, probability 0, space 0, times 0 [ 544.518724][ T29] audit: type=1326 audit(1731903873.195:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa37e719 code=0x7ffc0000 [ 544.549585][ T965] usb 2-1: USB disconnect, device number 64 [ 544.558328][T12716] CPU: 1 UID: 0 PID: 12716 Comm: syz.2.1887 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 544.561495][ T29] audit: type=1326 audit(1731903873.195:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa37e719 code=0x7ffc0000 [ 544.569096][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 544.569117][T12716] Call Trace: [ 544.569125][T12716] [ 544.569132][T12716] dump_stack_lvl+0x16c/0x1f0 [ 544.569160][T12716] should_fail_ex+0x497/0x5b0 [ 544.569182][T12716] ? fs_reclaim_acquire+0xae/0x150 [ 544.569204][T12716] should_failslab+0xc2/0x120 [ 544.569228][T12716] __kmalloc_noprof+0xcb/0x400 [ 544.593056][ T29] audit: type=1326 audit(1731903873.205:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f0afa37e719 code=0x7ffc0000 [ 544.602588][T12716] ? trace_kmalloc+0x2d/0xe0 [ 544.602615][T12716] ? trace_lock_acquire+0x14a/0x1d0 [ 544.605907][ T29] audit: type=1326 audit(1731903873.205:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa37e719 code=0x7ffc0000 [ 544.608792][T12716] tomoyo_realpath_from_path+0xb9/0x720 [ 544.613461][ T29] audit: type=1326 audit(1731903873.205:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa37e719 code=0x7ffc0000 [ 544.618099][T12716] ? tomoyo_fill_path_info+0x233/0x420 [ 544.618128][T12716] tomoyo_mount_acl+0x1af/0x880 [ 544.618147][T12716] ? hlock_class+0x4e/0x130 [ 544.618168][T12716] ? __lock_acquire+0x163e/0x3ce0 [ 544.618188][T12716] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 544.618211][T12716] ? __pfx___lock_acquire+0x10/0x10 [ 544.618227][T12716] ? stack_trace_save+0x95/0xd0 [ 544.618251][T12716] ? __pfx_lock_release+0x10/0x10 [ 544.618278][T12716] ? trace_lock_acquire+0x14a/0x1d0 [ 544.618297][T12716] ? tomoyo_mount_permission+0x146/0x410 [ 544.618316][T12716] ? lock_acquire+0x2f/0xb0 [ 544.618331][T12716] ? tomoyo_mount_permission+0x146/0x410 [ 544.618354][T12716] tomoyo_mount_permission+0x16b/0x410 [ 544.679826][ T29] audit: type=1326 audit(1731903873.205:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0afa37e719 code=0x7ffc0000 [ 544.689251][T12716] ? tomoyo_mount_permission+0x146/0x410 [ 544.689283][T12716] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 544.689312][T12716] ? get_current_fs_domain+0x184/0x1f0 [ 544.703683][ T29] audit: type=1326 audit(1731903873.205:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa37e719 code=0x7ffc0000 [ 544.718139][T12716] security_sb_mount+0x9b/0x260 [ 544.718168][T12716] path_mount+0x129/0x1f20 [ 544.718187][T12716] ? kmem_cache_free+0x152/0x4b0 [ 544.718207][T12716] ? __pfx_path_mount+0x10/0x10 [ 544.718227][T12716] ? putname+0x12e/0x170 [ 544.718250][T12716] __x64_sys_mount+0x294/0x320 [ 544.718270][T12716] ? __pfx___x64_sys_mount+0x10/0x10 [ 544.718295][T12716] do_syscall_64+0xcd/0x250 [ 544.718316][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.718344][T12716] RIP: 0033:0x7f4109d7e719 [ 544.718360][T12716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.718378][T12716] RSP: 002b:00007f410abbc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 544.718398][T12716] RAX: ffffffffffffffda RBX: 00007f4109f35f80 RCX: 00007f4109d7e719 [ 544.718411][T12716] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 544.718423][T12716] RBP: 00007f410abbc090 R08: 0000000000000000 R09: 0000000000000000 [ 544.718435][T12716] R10: 000000000001005b R11: 0000000000000246 R12: 0000000000000001 [ 544.718445][T12716] R13: 0000000000000000 R14: 00007f4109f35f80 R15: 00007ffdcbfb18a8 [ 544.718466][T12716] [ 544.738237][T12716] ERROR: Out of memory at tomoyo_realpath_from_path. [ 544.888841][ T29] audit: type=1326 audit(1731903873.205:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0afa37e719 code=0x7ffc0000 [ 545.017214][ T29] audit: type=1326 audit(1731903873.205:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12718 comm="syz.1.1889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0afa37e719 code=0x7ffc0000 [ 545.817404][T12752] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 547.143863][ T5875] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 547.303792][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 547.310446][ T5875] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 547.318891][ T5875] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 547.336334][ T5875] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 547.350027][ T5875] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 547.364248][ T5875] usb 4-1: config 0 interface 0 has no altsetting 0 [ 547.372416][ T5875] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 547.383465][ T5875] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 547.392505][ T5875] usb 4-1: Product: syz [ 547.396828][ T5875] usb 4-1: Manufacturer: syz [ 547.401425][ T5875] usb 4-1: SerialNumber: syz [ 547.407574][ T5875] usb 4-1: config 0 descriptor?? [ 547.413828][ T5872] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 547.414972][ T5875] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 547.431567][ T5875] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 547.573863][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 547.581627][ T5872] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 547.591141][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.600672][ T5872] usb 2-1: config 0 descriptor?? [ 547.608296][ T5872] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 547.616473][ T5872] dvb-usb: bulk message failed: -22 (3/0) [ 547.639122][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 547.650004][ T5872] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 547.655897][ T5875] usb 5-1: USB disconnect, device number 75 [ 547.658280][ T5872] usb 2-1: media controller created [ 547.669686][ T5872] dvb-usb: bulk message failed: -22 (5/0) [ 547.676274][ T5872] dvb-usb: MAC address reading failed. [ 547.691811][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 547.721782][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 547.731249][ T5872] dvb-usb: bulk message failed: -22 (6/0) [ 547.739623][ T5872] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 547.751975][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 547.769092][ T5872] dvb-usb: schedule remote query interval to 100 msecs. [ 547.776462][ T5872] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 547.887736][ T1202] dvb-usb: bulk message failed: -22 (2/0) [ 547.898818][ T1202] dvb-usb: error while querying for an remote control event. [ 548.115750][T12778] xt_hashlimit: max too large, truncated to 1048576 [ 548.120099][ T1202] dvb-usb: bulk message failed: -22 (2/0) [ 548.133127][ T1202] dvb-usb: error while querying for an remote control event. [ 548.274089][ T1202] dvb-usb: bulk message failed: -22 (2/0) [ 548.361594][ T1202] dvb-usb: error while querying for an remote control event. [ 548.503599][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 548.529778][ T5872] dvb-usb: error while querying for an remote control event. [ 548.604122][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 548.664286][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 548.670438][ T5872] dvb-usb: error while querying for an remote control event. [ 548.784279][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 548.791428][ T5872] dvb-usb: error while querying for an remote control event. [ 548.890137][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 548.890152][ T29] audit: type=1400 audit(1731903877.575:790): avc: denied { read } for pid=12785 comm="syz.4.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 548.915951][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 548.921712][ T5872] dvb-usb: error while querying for an remote control event. [ 549.047883][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 549.054237][ T5872] dvb-usb: error while querying for an remote control event. [ 549.164553][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 549.170358][ T5872] dvb-usb: error while querying for an remote control event. [ 549.283786][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 549.290247][ T5872] dvb-usb: error while querying for an remote control event. [ 549.360758][T12789] macvlan2: entered allmulticast mode [ 549.366954][T12789] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 549.375890][T12789] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 549.403903][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 549.409777][ T5872] dvb-usb: error while querying for an remote control event. [ 549.523983][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 549.530199][ T5872] dvb-usb: error while querying for an remote control event. [ 549.646829][ T5872] dvb-usb: bulk message failed: -22 (2/0) [ 549.652683][ T5872] dvb-usb: error while querying for an remote control event. [ 550.244735][ T5875] usb 4-1: USB disconnect, device number 67 [ 550.285451][ T1202] usb 2-1: USB disconnect, device number 65 [ 550.295791][ T5875] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 550.653810][ T965] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 550.810457][ T965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 550.825666][ T965] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 550.839524][ T965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.856460][ T965] usb 5-1: config 0 descriptor?? [ 550.871462][ T965] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 551.176549][ T1202] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 551.485446][T12813] openvswitch: netlink: Actions may not be safe on all matching packets [ 551.914650][ T29] audit: type=1400 audit(1731903880.605:791): avc: denied { read } for pid=12818 comm="syz.1.1915" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 551.937857][ T29] audit: type=1400 audit(1731903880.625:792): avc: denied { ioctl } for pid=12818 comm="syz.1.1915" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 551.980333][ T29] audit: type=1400 audit(1731903880.655:793): avc: denied { create } for pid=12820 comm="syz.0.1916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 552.143918][ T25] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 552.318211][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 552.326858][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.344939][ T25] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 552.359762][ T25] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 552.381157][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.396582][ T25] usb 4-1: Product: syz [ 552.406046][ T25] usb 4-1: Manufacturer: syz [ 552.413936][ T25] usb 4-1: SerialNumber: syz [ 552.429668][ T25] usb 4-1: config 0 descriptor?? [ 552.543234][T12838] @: renamed from vlan0 (while UP) [ 552.771017][T12847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.024053][ T25] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 553.173940][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 553.180607][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 553.189157][ T25] usb 2-1: config 2 has an invalid interface number: 233 but max is 0 [ 553.197573][ T25] usb 2-1: config 2 has no interface number 0 [ 553.204054][ T25] usb 2-1: config 2 interface 233 altsetting 64 endpoint 0x9 has an invalid bInterval 128, changing to 7 [ 553.215438][ T25] usb 2-1: config 2 interface 233 has no altsetting 0 [ 553.224971][ T25] usb 2-1: New USB device found, idVendor=0424, idProduct=7801, bcdDevice=88.cb [ 553.234399][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.242415][ T25] usb 2-1: Product: syz [ 553.247690][ T25] usb 2-1: Manufacturer: syz [ 553.252313][ T25] usb 2-1: SerialNumber: syz [ 553.386728][ T29] audit: type=1400 audit(1731903882.075:794): avc: denied { accept } for pid=12850 comm="syz.2.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 553.493570][ T25] usb 2-1: USB disconnect, device number 66 [ 553.521938][ T965] usb 5-1: USB disconnect, device number 76 [ 553.719794][T12862] binder: 12860:12862 ioctl c0046209 9999999999999999 returned -22 [ 555.328828][T12888] netlink: 'syz.4.1936': attribute type 4 has an invalid length. [ 555.373061][T12887] [U] ]pO>%&: [ 555.395659][T12889] [U] Vr7' [ 555.623044][T12900] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1932'. [ 555.984066][T12906] syz.2.1941[12906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 555.984116][T12906] syz.2.1941[12906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.014158][T12906] syz.2.1941[12906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.119233][ T965] usb 4-1: USB disconnect, device number 68 [ 556.359175][T12913] binder: 12910:12913 ioctl c0046209 9999999999999999 returned -22 [ 557.004876][T12908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1942'. [ 557.512582][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1952'. [ 557.583765][ T965] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 557.617173][T12943] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1954'. [ 557.627788][T12943] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 557.726540][ T29] audit: type=1400 audit(1731903886.415:795): avc: denied { read } for pid=12942 comm="syz.1.1954" path="socket:[36890]" dev="sockfs" ino=36890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 557.754367][T12949] TCP: TCP_TX_DELAY enabled [ 557.762341][ T965] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 557.804461][T12949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=12949 comm=syz.1.1954 [ 557.817575][ T965] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 557.874023][ T1202] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 557.876376][ T965] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 557.963282][ T965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.053833][ T1202] usb 5-1: Using ep0 maxpacket: 16 [ 558.067808][ T1202] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.125585][ T5875] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 558.142926][T12927] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 558.154065][ T1202] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 558.192687][ T1202] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 558.196696][ T965] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 558.211554][ T1202] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.234127][ T1202] usb 5-1: Product: syz [ 558.238324][ T1202] usb 5-1: Manufacturer: syz [ 558.250945][ T1202] usb 5-1: SerialNumber: syz [ 558.270240][ T1202] usb 5-1: config 0 descriptor?? [ 558.297279][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 558.304573][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.345868][ T5875] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 558.368515][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.389653][ T5875] usb 2-1: config 0 descriptor?? [ 559.391217][ T5875] sony 0003:054C:024B.000D: item fetching failed at offset 6/7 [ 559.399291][ T5875] sony 0003:054C:024B.000D: parse failed [ 559.406926][ T5875] sony 0003:054C:024B.000D: probe with driver sony failed with error -22 [ 559.697355][T12968] binder: 12960:12968 ioctl c0046209 9999999999999999 returned -22 [ 560.926218][T12943] syz.1.1954 (12943) used greatest stack depth: 20240 bytes left [ 561.128875][ T1202] usb 4-1: USB disconnect, device number 69 [ 561.318093][ T5875] usb 2-1: USB disconnect, device number 67 [ 561.697752][ T29] audit: type=1400 audit(1731903890.365:796): avc: denied { getopt } for pid=12977 comm="syz.1.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 562.366020][T12987] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1961'. [ 562.534097][ T1202] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 562.614472][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.665378][ T25] usb 5-1: USB disconnect, device number 77 [ 562.685602][ T1202] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 562.764013][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 562.816288][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 255, setting to 64 [ 563.303975][ T1202] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 563.660070][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.683849][ T1202] usb 2-1: Product: syz [ 563.695068][ T1202] usb 2-1: Manufacturer: syz [ 563.773487][ T1202] usb 2-1: SerialNumber: syz [ 563.781874][ T1202] usb 2-1: config 0 descriptor?? [ 563.788202][T12980] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 563.974117][ T1202] rc_core: IR keymap rc-streamzap not found [ 563.980052][ T1202] Registered IR keymap rc-empty [ 564.002300][ T1202] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 564.164324][T13008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.164432][ T1202] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 564.172894][T13008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.295352][T13011] ip6t_rpfilter: unknown options [ 564.803185][ T5875] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 564.995434][ T5875] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 565.036160][ T5875] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 565.066246][ T5875] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 565.078719][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.130794][T13007] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 565.146543][ T5875] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 565.429051][ T5872] usb 2-1: USB disconnect, device number 68 [ 565.673479][T13031] netlink: 'syz.0.1974': attribute type 1 has an invalid length. [ 566.366228][T13031] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1974'. [ 566.426863][T13027] bridge4: entered promiscuous mode [ 567.499087][T13041] No control pipe specified [ 567.556825][ T5872] usb 4-1: USB disconnect, device number 70 [ 567.712783][ T29] audit: type=1400 audit(1731903896.395:797): avc: denied { audit_write } for pid=13045 comm="syz.1.1978" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 567.817517][ T29] audit: type=1400 audit(1731903896.425:798): avc: denied { shutdown } for pid=13042 comm="syz.3.1977" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 567.981146][T13051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 568.559885][T13055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1981'. [ 569.095738][T13067] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1986'. [ 570.243894][ T965] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 570.383844][ T965] usb 4-1: device descriptor read/64, error -71 [ 570.399412][T13084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1992'. [ 570.978575][ T965] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 571.020090][T13099] ALSA: mixer_oss: invalid index 100000 [ 571.257648][ T965] usb 4-1: device descriptor read/64, error -71 [ 571.378152][ T965] usb usb4-port1: attempt power cycle [ 572.094487][ T965] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 572.566922][ T965] usb 4-1: device descriptor read/8, error -71 [ 572.887286][T13128] binder: 13120:13128 ioctl c0046209 9999999999999999 returned -22 [ 572.895372][ T965] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 572.935591][ T965] usb 4-1: device descriptor read/8, error -71 [ 573.044268][ T965] usb usb4-port1: unable to enumerate USB device [ 573.765466][T13147] FAULT_INJECTION: forcing a failure. [ 573.765466][T13147] name failslab, interval 1, probability 0, space 0, times 0 [ 573.823414][T13147] CPU: 0 UID: 0 PID: 13147 Comm: syz.4.2011 Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 573.834219][T13147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 573.844284][T13147] Call Trace: [ 573.847567][T13147] [ 573.850503][T13147] dump_stack_lvl+0x16c/0x1f0 [ 573.855192][T13147] should_fail_ex+0x497/0x5b0 [ 573.859879][T13147] ? fs_reclaim_acquire+0xae/0x150 [ 573.865002][T13147] should_failslab+0xc2/0x120 [ 573.869693][T13147] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 573.875078][T13147] ? security_file_alloc+0x34/0x2b0 [ 573.880290][T13147] security_file_alloc+0x34/0x2b0 [ 573.885329][T13147] init_file+0x93/0x230 [ 573.889495][T13147] alloc_empty_file+0x91/0x1e0 [ 573.894263][T13147] alloc_file_pseudo+0x147/0x210 [ 573.899206][T13147] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 573.904671][T13147] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 573.910675][T13147] create_pipe_files+0x364/0x850 [ 573.915639][T13147] do_pipe2+0xb0/0x1d0 [ 573.919719][T13147] ? __pfx_do_pipe2+0x10/0x10 [ 573.924411][T13147] ? __pfx_ksys_write+0x10/0x10 [ 573.929276][T13147] __x64_sys_pipe+0x33/0x50 [ 573.933787][T13147] do_syscall_64+0xcd/0x250 [ 573.938298][T13147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.944208][T13147] RIP: 0033:0x7f222dd7e719 [ 573.948627][T13147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.968248][T13147] RSP: 002b:00007f222eab5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 573.976680][T13147] RAX: ffffffffffffffda RBX: 00007f222df35f80 RCX: 00007f222dd7e719 [ 573.984669][T13147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000280 [ 573.992665][T13147] RBP: 00007f222eab5090 R08: 0000000000000000 R09: 0000000000000000 [ 574.000653][T13147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.008636][T13147] R13: 0000000000000000 R14: 00007f222df35f80 R15: 00007ffe766e15c8 [ 574.016612][T13147] [ 574.019740][ T1202] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 574.062297][ T29] audit: type=1400 audit(1731903902.745:799): avc: denied { setopt } for pid=13165 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 574.193834][ T1202] usb 2-1: Using ep0 maxpacket: 16 [ 574.511354][ T1202] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.533731][ T1202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 574.562471][ T1202] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 575.007714][ T29] audit: type=1400 audit(1731903903.375:800): avc: denied { read } for pid=13165 comm="syz.0.2015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 575.281033][ T1202] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 575.291439][ T1202] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 575.300684][ T1202] usb 2-1: Product: syz [ 575.381344][ T1202] usb 2-1: Manufacturer: syz [ 575.386422][ T1202] usb 2-1: SerialNumber: syz [ 575.408480][ T30] INFO: task kworker/0:5:5874 blocked for more than 143 seconds. [ 575.416676][ T30] Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 575.424471][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.433137][ T30] task:kworker/0:5 state:D stack:21792 pid:5874 tgid:5874 ppid:2 flags:0x00004000 [ 575.443412][ T30] Workqueue: usb_hub_wq hub_event [ 575.448861][ T30] Call Trace: [ 575.452212][ T30] [ 575.455229][ T30] __schedule+0xe55/0x5740 [ 575.459842][ T30] ? __pfx_mark_lock+0x10/0x10 [ 575.464687][ T30] ? add_lock_to_list+0x17d/0x390 [ 575.469870][ T30] ? lock_acquire.part.0+0x11b/0x380 [ 575.475407][ T30] ? find_held_lock+0x2d/0x110 [ 575.480395][ T30] ? __pfx___schedule+0x10/0x10 [ 575.485624][ T30] ? schedule+0x298/0x350 [ 575.490064][ T30] ? __pfx_lock_release+0x10/0x10 [ 575.495814][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.503887][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.509144][ T30] schedule+0xe7/0x350 [ 575.513769][ T30] schedule_timeout+0x258/0x2a0 [ 575.519243][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 575.529501][ T30] ? mark_held_locks+0x9f/0xe0 [ 575.534765][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.543715][ T30] __wait_for_common+0x3e1/0x600 [ 575.548715][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 575.558922][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 575.569575][ T30] ? lockdep_init_map_type+0x16d/0x7d0 [ 575.579683][ T30] ? kobject_put+0xab/0x5a0 [ 575.589831][ T30] snd_card_free+0x128/0x190 [ 575.599959][ T30] ? __pfx_snd_card_free+0x10/0x10 [ 575.610105][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 575.620199][ T30] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 575.630325][ T30] ? __wake_up+0x3f/0x60 [ 575.644726][ T30] snd_usx2y_disconnect+0x194/0x1f0 [ 575.655946][ T30] usb_unbind_interface+0x1e8/0x970 [ 575.661200][ T30] ? kernfs_find_ns+0x2ee/0x3f0 [ 575.671331][ T30] ? __pfx_usb_unbind_interface+0x10/0x10 [ 575.687349][ T30] device_remove+0x122/0x170 [ 575.691993][ T30] device_release_driver_internal+0x44a/0x610 [ 575.698139][ T30] bus_remove_device+0x22f/0x420 [ 575.707066][ T30] device_del+0x396/0x9f0 [ 575.716695][ T30] ? usb_disconnect+0x10a/0x920 [ 575.727242][ T30] ? __pfx_device_del+0x10/0x10 [ 575.737305][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 575.742584][ T30] usb_disable_device+0x36c/0x7f0 [ 575.752736][ T30] usb_disconnect+0x2e1/0x920 [ 575.767576][ T30] hub_event+0x1da5/0x4e10 [ 575.777620][ T30] ? lock_acquire+0x2f/0xb0 [ 575.783046][ T30] ? __pfx_hub_event+0x10/0x10 [ 575.793147][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 575.803245][ T30] ? rcu_is_watching+0x12/0xc0 [ 575.818162][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 575.828735][ T30] ? process_one_work+0x921/0x1ba0 [ 575.834060][ T30] ? lock_acquire+0x2f/0xb0 [ 575.843704][ T30] ? process_one_work+0x921/0x1ba0 [ 575.848876][ T30] process_one_work+0x9c5/0x1ba0 [ 575.859020][ T30] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 575.869478][ T30] ? __pfx_process_one_work+0x10/0x10 [ 575.879602][ T30] ? assign_work+0x1a0/0x250 [ 575.889704][ T30] worker_thread+0x6c8/0xf00 [ 575.899896][ T30] ? __kthread_parkme+0x148/0x220 [ 575.910013][ T30] ? __pfx_worker_thread+0x10/0x10 [ 575.925397][ T30] kthread+0x2c1/0x3a0 [ 575.934306][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.940311][ T30] ? __pfx_kthread+0x10/0x10 [ 575.950456][ T30] ret_from_fork+0x45/0x80 [ 575.960550][ T30] ? __pfx_kthread+0x10/0x10 [ 575.975332][ T30] ret_from_fork_asm+0x1a/0x30 [ 575.985853][ T30] [ 575.991085][ T30] [ 575.991085][ T30] Showing all locks held in the system: [ 575.998873][ T30] 1 lock held by khungtaskd/30: [ 576.003790][ T30] #0: ffffffff8e1b83c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 576.014119][ T30] 3 locks held by kworker/1:2/1202: [ 576.023887][ T30] 2 locks held by getty/5577: [ 576.028613][ T30] #0: ffff888036f720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 576.038667][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 576.049176][ T30] 5 locks held by kworker/0:5/5874: [ 576.054449][ T30] #0: ffff888144684548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 576.065518][ T30] #1: ffffc900033cfd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 576.077166][ T30] #2: ffff888145780190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4e10 [ 576.086339][ T30] #3: ffff88807c1cf190 (&dev->mutex){....}-{3:3}, at: usb_disconnect+0x10a/0x920 [ 576.095839][ T30] #4: ffff888031fd2160 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa4/0x610 [ 576.106777][ T30] 3 locks held by syz.0.2015/13165: [ 576.112012][ T30] 1 lock held by syz.3.2019/13185: [ 576.117181][ T30] 4 locks held by syz.3.2019/13188: [ 576.122460][ T30] [ 576.124891][ T30] ============================================= [ 576.124891][ T30] [ 576.133305][ T30] NMI backtrace for cpu 1 [ 576.137621][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 576.148097][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 576.158134][ T30] Call Trace: [ 576.161394][ T30] [ 576.164306][ T30] dump_stack_lvl+0x116/0x1f0 [ 576.168966][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 576.173884][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.179847][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 576.185808][ T30] watchdog+0xf0c/0x1240 [ 576.190029][ T30] ? __pfx_watchdog+0x10/0x10 [ 576.194695][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 576.199889][ T30] ? __kthread_parkme+0x148/0x220 [ 576.204894][ T30] ? __pfx_watchdog+0x10/0x10 [ 576.209545][ T30] kthread+0x2c1/0x3a0 [ 576.213589][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.218764][ T30] ? __pfx_kthread+0x10/0x10 [ 576.223332][ T30] ret_from_fork+0x45/0x80 [ 576.227723][ T30] ? __pfx_kthread+0x10/0x10 [ 576.232288][ T30] ret_from_fork_asm+0x1a/0x30 [ 576.237043][ T30] [ 576.240340][ T30] Sending NMI from CPU 1 to CPUs 0: [ 576.245576][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 576.246603][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 576.261571][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc7-syzkaller-00216-gf66d6acccbc0 #0 [ 576.272062][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 576.282104][ T30] Call Trace: [ 576.285360][ T30] [ 576.288266][ T30] dump_stack_lvl+0x3d/0x1f0 [ 576.292833][ T30] panic+0x71d/0x800 [ 576.296707][ T30] ? __pfx_panic+0x10/0x10 [ 576.301099][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 576.306448][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 576.312405][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 576.317756][ T30] ? watchdog+0xd76/0x1240 [ 576.322144][ T30] ? watchdog+0xd69/0x1240 [ 576.326533][ T30] watchdog+0xd87/0x1240 [ 576.330762][ T30] ? __pfx_watchdog+0x10/0x10 [ 576.335410][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 576.340601][ T30] ? __kthread_parkme+0x148/0x220 [ 576.345616][ T30] ? __pfx_watchdog+0x10/0x10 [ 576.350273][ T30] kthread+0x2c1/0x3a0 [ 576.354321][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.359503][ T30] ? __pfx_kthread+0x10/0x10 [ 576.364071][ T30] ret_from_fork+0x45/0x80 [ 576.368473][ T30] ? __pfx_kthread+0x10/0x10 [ 576.373047][ T30] ret_from_fork_asm+0x1a/0x30 [ 576.377795][ T30] [ 576.381008][ T30] Kernel Offset: disabled [ 576.385323][ T30] Rebooting in 86400 seconds..