last executing test programs: 11.987763457s ago: executing program 2 (id=670): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x2, 0x0, 0x0, r2}) 11.666313208s ago: executing program 2 (id=672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000400900020073797a310000000005000100070000003800078006000440"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 11.154482963s ago: executing program 2 (id=674): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$incfs(0xffffffffffffffff, 0x0, 0x100, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a15aa2bfe", 0x14}], 0x1}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 10.097742204s ago: executing program 2 (id=676): socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x10000000005, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r4, 0x8b1a, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={r2, r3, 0x25, 0x5, @val=@iter={&(0x7f00000002c0)=@map_fd=r0, 0x10}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000240)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x18, 0x2e, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4002805}, 0xc0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x61, 0x71, 0xb6, 0x10, 0x424, 0xcf30, 0x3527, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x8, 0x0, 0xf, "", [{{0x9, 0x4, 0xf6, 0xff, 0x1, 0x52, 0xe1, 0xef, 0xb, [], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xc, 0x7}}]}}]}}]}}, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010027bd7000fddbdf250900020073797a3000000000080041007278650014003300626f6e4c5f736c6176655f3100000000"], 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014) connect$x25(r5, &(0x7f0000000040), 0x12) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) 7.995540815s ago: executing program 0 (id=688): keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0) r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet(0x2, 0x1, 0xfffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=',\x00', 0xfffffffffffffffa) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r3, 0x1) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb0000ffff"}}}}}, 0x0) (async) add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) (async) socket$inet(0x2, 0x1, 0xfffffffb) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r1}) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) (async) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=',\x00', 0xfffffffffffffffa) (async) keyctl$KEYCTL_MOVE(0x1e, r0, r2, r3, 0x1) (async) 7.424033374s ago: executing program 2 (id=689): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x40, 0xd, 0x6, "d35e4a2ec7d4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16, @ANYRESOCT=r0], 0x0) 7.365010192s ago: executing program 0 (id=690): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='security.selinux\x00') openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_fd(0x0, 0x0, 0x0, 0x200c01, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000a40)=[@reply_sg={0x40486312, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000980)={@flat=@weak_handle={0x77682a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x21}, @flat=@weak_handle={0x77682a85, 0x0, 0x1}}, 0x0}}], 0x0, 0x0, 0x0}) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') 6.400060966s ago: executing program 0 (id=692): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000500)="baf80c66b89481a88c66efbafc0ced660f9b1c2e0f8e1200baf80c66b8f430fd8766efbafc0ced0f20e16736660f7c4d40f3aa66b9b80a000066b8e300000066ba000000000f306766c7442400008000006766c7442402000000006766c744240600000000670f011c240f019b57f5", 0x6f}], 0x1, 0x4, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)=@req3={0xfff, 0x10, 0xfffffffe, 0x58, 0x444, 0xfffffffc, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)=""/234, 0xea}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2b2800, 0x0) r1 = fcntl$getown(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x1103f) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) setpriority(0x0, 0x1, 0xa7a8) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000880)="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", &(0x7f0000001880)="375b5d99"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 5.315450809s ago: executing program 4 (id=694): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = getpid() prlimit64(r1, 0x5, &(0x7f0000000140)={0x6, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) preadv2(r0, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) 5.311468728s ago: executing program 0 (id=695): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) syz_ublk_setup_io_uring(0x5ac4, &(0x7f0000000140)={0x0, 0xee71, 0x800, 0x3, 0x139, 0x0, r0}, &(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000010240)={0x0, 0x0, &(0x7f0000010200)={&(0x7f00000001c0)={0x10020, 0x3f7, 0x0, 0x0, 0x0, {0xffff, 0x7, './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', './file0'}}, 0x10020}}, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, 0x3000, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000002000/0x4000)=nil, 0x4000}) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000056c0)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000600)="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", 0xd72}], 0x1}], 0x1, 0x20000800) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 4.63531793s ago: executing program 1 (id=698): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x40}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 4.554849194s ago: executing program 4 (id=699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c00018008060140e0004000"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4.553702749s ago: executing program 1 (id=700): socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r0, 0x10000000005, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) ioctl(r4, 0x8b1a, &(0x7f0000000040)) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001540)={r2, r3, 0x25, 0x5, @val=@iter={&(0x7f00000002c0)=@map_fd=r0, 0x10}}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000200), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000240)=0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x18, 0x2e, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x4002805}, 0xc0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x61, 0x71, 0xb6, 0x10, 0x424, 0xcf30, 0x3527, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x8, 0x0, 0xf, "", [{{0x9, 0x4, 0xf6, 0xff, 0x1, 0x52, 0xe1, 0xef, 0xb, [], [{{0x9, 0x5, 0xb, 0x10, 0x3ff, 0xc, 0x7}}]}}]}}]}}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000314010027bd7000fddbdf250900020073797a3000000000080041007278650014003300626f6e4c5f736c6176655f3100000000"], 0x38}, 0x1, 0x0, 0x0, 0xd1}, 0x8014) connect$x25(r6, &(0x7f0000000040), 0x12) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) 4.361296914s ago: executing program 4 (id=702): set_mempolicy(0x8000, 0x0, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) mmap(&(0x7f0000980000/0x2000)=nil, 0x2000, 0xb, 0x28011, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x0, 0x0, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) clock_getres(0x4, &(0x7f0000000080)) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0, 0x0}) 4.002794622s ago: executing program 3 (id=703): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=000000000000000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 3.877967918s ago: executing program 3 (id=704): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r0, r0, &(0x7f0000000100)=0xfff, 0x28) openat$ppp(0xffffffffffffff9c, 0x0, 0x103000, 0x0) socket$kcm(0x10, 0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000440)=0xa) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000002060300000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000008fe1"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) close(0x3) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0) mremap(&(0x7f0000373000/0x2000)=nil, 0x2000, 0x10000, 0x3, &(0x7f00001e0000/0x10000)=nil) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 3.139190733s ago: executing program 4 (id=705): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f0000000340)=[@text16={0x10, &(0x7f0000000500)="baf80c66b89481a88c66efbafc0ced660f9b1c2e0f8e1200baf80c66b8f430fd8766efbafc0ced0f20e16736660f7c4d40f3aa66b9b80a000066b8e300000066ba000000000f306766c7442400008000006766c7442402000000006766c744240600000000670f011c240f019b57f5", 0x6f}], 0x1, 0x4, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)=@req3={0xfff, 0x10, 0xfffffffe, 0x58, 0x444, 0xfffffffc, 0x1}, 0x1c) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)=""/234, 0xea}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x2b2800, 0x0) r1 = fcntl$getown(r0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x1103f) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) execve(&(0x7f0000000140)='./file2\x00', 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000180)='devtmpfs\x00', 0x2200892, 0x0) setpriority(0x0, 0x1, 0xa7a8) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000880)="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", &(0x7f0000001880)="375b5d99"}}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0xfffffffe, 0x0, 0x0, 0xfffffffc) 2.933043757s ago: executing program 2 (id=706): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="0fc7284625c87dc07148b8b9000000000000000f23d00f21f835100000070f23f848b8bcc585fc2fd3c5080f63d00f21f80f23f8660fc7b374000000450fc7720ec48189c6168bc744240060000000c744240200380000ff2c2466baf80cb808122188ef66bafc0ced66ba610066ed", 0x6f}], 0x1, 0xb, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4cb, 0x2, 0x9dff, 0xe, "3d52e3ff00"}) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x1a) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) unshare(0x6020400) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x7, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000004600)=""/102400, 0x19000) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc800) fsopen(0x0, 0x0) 2.304103007s ago: executing program 1 (id=707): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="e6fc18237af3c687066a3f7d811c5bec0a224c35d65c26b1dafee80a1840241b704deecfa2b4436a28cbf00dae8ff63a4e13fd544096e6a65fd0b4c6cc8f7f0ca52468ff3dfafa712d779fcbee691dc1f9ce8c1c9f72f7cb07e21491178c090de58e520385959e58da9ad6ddb82d76334de2845057d7cca5a40f9a1316347b650e173693d3cd6f6e270679ef3dd41b861950b957fc50a780f9d765666f1eeb68ca614e6e5d00ea4ed35c04c5e894533720a56e2446bbab8add35494bf34d7e35f3ff3d95e926ddc29049c8e8b48b9c9fb25b44059799cbac28528e9955b25e06ec79cda0ce064e844d38fad9309053b664222d60", 0xf4}, {0x0}, {&(0x7f0000000680)="2937d172348dd1c81af29b16266dfdcc34510294247f26d6f60207acdba9f3b18e7fb4310b3e0aa72ee87690653ba9b5e0b099c607de548969f2ca4b3ca51fc207ce9a00780dbf4531dc695fc98be4f7cbdbb5a1fdeba086c932a70ac0c62f3c2d1e9c3e7a187dbc7532e0a1103c", 0x6e}, {&(0x7f0000000700)="bd46e70fc34f9dc0e9697ba33338ba8d268b3526369a4e8b", 0x18}], 0x7, 0x0, 0x0, 0x4000}}], 0x1, 0x20004800) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000180)="6aeb2e944fed358609596fe6d41d658a1a7e8c3950679fbcdf0a593c620964e0a2e9a2d8a8627fb6e0bbb009cf7de8a46475cca883b195d48dc7d395ec22cc84", 0x40, 0xd}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc5969269606", 0x7f}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d1", 0x40}, {&(0x7f0000000880)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f5631012fa0788c5b17f98cc34720b0", 0xf3}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2", 0xbd}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1", 0xce}, {&(0x7f0000000800)}, {&(0x7f0000001200)}], 0x7, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.182992209s ago: executing program 0 (id=708): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x2, 0x0, 0x0, r4}) 2.142252911s ago: executing program 4 (id=709): socket$inet(0x2, 0x1, 0x6) setresuid(0x0, 0xee00, 0xee01) r0 = creat(0x0, 0x70) fcntl$setlease(r0, 0x400, 0x1) acct(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_buf(r1, 0x29, 0x4d, 0x0, &(0x7f0000000080)) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x4, 0xe7) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000b40)=""/119, 0x77}, {&(0x7f0000000300)=""/207, 0xcf}], 0x2, 0x4000ffe, 0x0) 1.065094893s ago: executing program 0 (id=710): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = socket$phonet(0x23, 0x2, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRES32=r6], 0xa4}, 0x1, 0x0, 0x0, 0x4000}, 0x4048801) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000000)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[], [{@seclabel}]}}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x4) ioctl$SIOCPNDELRESOURCE(r4, 0x89e0, 0x0) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 796.150608ms ago: executing program 4 (id=711): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcf"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) syz_usb_disconnect(r0) write$char_usb(r1, 0x0, 0x0) 716.668656ms ago: executing program 3 (id=712): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000011740)=[{{0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="e6fc18237af3c687066a3f7d811c5bec0a224c35d65c26b1dafee80a1840241b704deecfa2b4436a28cbf00dae8ff63a4e13fd544096e6a65fd0b4c6cc8f7f0ca52468ff3dfafa712d779fcbee691dc1f9ce8c1c9f72f7cb07e21491178c090de58e520385959e58da9ad6ddb82d76334de2845057d7cca5a40f9a1316347b650e173693d3cd6f6e270679ef3dd41b861950b957fc50a780f9d765666f1eeb68ca614e6e5d00ea4ed35c04c5e894533720a56e2446bbab8add35494bf34d7e35f3ff3d95e926ddc29049c8e8b48b9c9fb25b44059799cbac28528e9955b25e06ec79cda0ce064e844d38fad9309053b664222d60", 0xf4}, {0x0}, {&(0x7f0000000680)="2937d172348dd1c81af29b16266dfdcc34510294247f26d6f60207acdba9f3b18e7fb4310b3e0aa72ee87690653ba9b5e0b099c607de548969f2ca4b3ca51fc207ce9a00780dbf4531dc695fc98be4f7cbdbb5a1fdeba086c932a70ac0c62f3c2d1e9c3e7a187dbc7532e0a1103c", 0x6e}, {&(0x7f0000000700)="bd46e70fc34f9dc0e9697ba33338ba8d268b3526369a4e8b", 0x18}], 0x7, 0x0, 0x0, 0x4000}}], 0x1, 0x20004800) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000002c0)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000180)="6aeb2e944fed358609596fe6d41d658a1a7e8c3950679fbcdf0a593c620964e0a2e9a2d8a8627fb6e0bbb009cf7de8a46475cca883b195d48dc7d395ec22cc84", 0x40, 0xd}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2ad735d9ec409711851badf7e170fc50", 0xfc}, {&(0x7f0000000780)="92bdcafd7ac9e21583ea71b9eb5feeb69b7eeb919260393d59069611e6d460fd38481da64e5ad543477ed7b768b1a06c0a5d60edf6c5610c123e3572a7c3bd74b7bd876c6f1c54709ef06cb9187fa5ddecc04cdc8fd3e74782c0aa0579531662e6d5fcdddc53becdd0b8a59c3a97fe428e75e7707525647bd822", 0x7a}, {&(0x7f0000000580)}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x48}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb5700", 0x39}, {&(0x7f0000000880)="dc6e94ac2db166801ffce85f6f44f2cb071c6b5113bc6bbf2f503d468253693a01102fcb8157c6e8a2b5620efa5d22400147cce896821150f95c0c69fa587a1f99fcb28cfeb09f45cb836f0ff891be10bb209dc04adc202ef866f27b74faa5ad3a2e5d40ebd6785c4e4a97ac13238c746d1109d12af5446c4e84591f121a494251e43bed18f6269bdd2e56f9c211dd7145f664286911b8bb3acf76a1b5ece94183a6c8cc47f2e1dd4e91dc10be8732e92e8620fa060fb15016c2dc9b6da18325e778660d499aec6215b0f9f679fa76d22cdd4ae3776203e2054240594f1c9b77ad77cf3f", 0xe4}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2", 0xbd}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1", 0xce}, {&(0x7f0000000800)="b56380b7487ff3b0cd079ed795bdeeb3ad75fe878a", 0x15}, {&(0x7f0000001200)="43979d4537ac96f6e22b12acd1fdd3ffc7ef440e65e2e70d511a408f743d4ce7516f4364a00a041dc7b1ffe56ebc713b158ea1aab13ce3db53ab8af3f76ffaa86df636018175c4a8ea922a193ad08ca30d5031b27a4a87bff93dc12a98b6e4f25b5550d98a5bf3e040a8902083eea93bdbde6da91df3a730dd2b8215e9840f04dd0ab667500fe952fa1b8845c2cee50f8322175049c4", 0x96}, {&(0x7f0000001300)="ceff7472ad7240514c6f826361e8daefdb50fe704622e5641d1b096ad682a5682aa51b6eea91858d93228379d70f8489a6de471b8361073ce93c3bf35183529235eed04037cb6851e51dec4562fe30f99bd5de546427fecd0aa008bcbb2983ce2cfff078d49f7ecf297f85da5c094c0e7f07b12ec543a068bd2d654348f0e303f208c9190f58b7a9e0e1d2ba846bc248a3ec1530f702a9bd45a1d7bec2b2ccf08c24fec06bd18667119d193444ed6c60c641f54a38265241", 0xb8}], 0x8, &(0x7f00000014c0)}}], 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 662.71528ms ago: executing program 1 (id=713): sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[], 0x40}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100657273"], 0x44}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}}, 0x4000000) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 494.250895ms ago: executing program 1 (id=714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x20, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x800) fchdir(r1) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf25020000040900010073797a3200000000140002007465616d3000000000000000f20000000500040001000000c3ec0548232df40a02094139368a539dfcf7f20f500e0cb36dd50361c5119d3b11da64d0821ff5fd5630f24c3236ca8acb9c0be9dc00274a4deb896230dfe6f3554b27fd01adf50a5d6b1fc8aa45d8853c19de0f2334c66b851a"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002400)={&(0x7f0000001340)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000002380)=[{&(0x7f0000000c80)='j', 0x1}], 0x1, &(0x7f00000023c0)=ANY=[@ANYBLOB="200000000000000084000000020000000800410009000000c0000000", @ANYRES32=0x0, @ANYBLOB="18"], 0x38, 0x20000000}, 0x400c040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x800448f0, &(0x7f0000000240)={0x0, 0x6, "df8af5", 0xc, 0x4}) 427.441565ms ago: executing program 3 (id=715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}, 0x18020000}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x2, 0x10) 347.960741ms ago: executing program 3 (id=716): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=000000000000000', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 7.832995ms ago: executing program 3 (id=717): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r2 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0xfff2}, {0xfff3, 0x2}, {0xfff3, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x1d) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[], [{@seclabel}]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102400, 0x19000) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) 0s ago: executing program 1 (id=718): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x34b4, &(0x7f0000000280)={0x0, 0x69f0, 0xc00, 0x5, 0x50}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', 0x0, 0x6000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1b, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2d1}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x40800, 0x0) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f0000000340)={0x7, 0x1, &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 9162][ T6671] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 136.779190][ T6671] ? find_held_lock+0x2b/0x80 [ 136.779200][ T6671] ? __fget_files+0x215/0x3d0 [ 136.779214][ T6671] ? hook_file_ioctl_common+0x149/0x410 [ 136.779225][ T6671] ? __fget_files+0x215/0x3d0 [ 136.779241][ T6671] ? __fget_files+0x21f/0x3d0 [ 136.779257][ T6671] security_file_ioctl+0xd3/0x230 [ 136.779274][ T6671] __x64_sys_ioctl+0xb7/0x210 [ 136.779294][ T6671] do_syscall_64+0x115/0x870 [ 136.779316][ T6671] ? clear_bhb_loop+0x40/0x90 [ 136.779336][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.779352][ T6671] RIP: 0033:0x7f24f659ce59 [ 136.779367][ T6671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.779381][ T6671] RSP: 002b:00007f24f47f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.779397][ T6671] RAX: ffffffffffffffda RBX: 00007f24f6815fa0 RCX: 00007f24f659ce59 [ 136.779407][ T6671] RDX: 0000200000000180 RSI: 00000000c03064b7 RDI: 0000000000000003 [ 136.779417][ T6671] RBP: 00007f24f47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 136.779425][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.779434][ T6671] R13: 00007f24f6816038 R14: 00007f24f6815fa0 R15: 00007fff6345dc98 [ 136.779456][ T6671] [ 136.779721][ T6671] ERROR: Out of memory at tomoyo_realpath_from_path. [ 137.081479][ T29] audit: type=1400 audit(1781018855.706:361): avc: denied { ioctl } for pid=6673 comm="syz.1.227" path="socket:[13697]" dev="sockfs" ino=13697 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 137.294053][ T29] audit: type=1400 audit(1781018855.766:362): avc: denied { name_bind } for pid=6673 comm="syz.1.227" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 137.345797][ T29] audit: type=1400 audit(1781018855.856:363): avc: denied { mounton } for pid=6673 comm="syz.1.227" path=2F34332FE91F7189591E9233614B dev="tmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 137.370688][ T29] audit: type=1400 audit(1781018855.966:364): avc: denied { write } for pid=6676 comm="syz.3.228" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 138.024277][ T29] audit: type=1400 audit(1781018856.656:365): avc: denied { execute } for pid=6687 comm="syz.2.232" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 139.631002][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 139.642400][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.235'. [ 139.655013][ T6715] netlink: 'syz.3.235': attribute type 13 has an invalid length. [ 139.662914][ T6715] netlink: 'syz.3.235': attribute type 12 has an invalid length. [ 139.698302][ T5726] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 140.003371][ T5726] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.164671][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 140.194991][ T5726] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 140.227182][ T5726] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.458277][ T5726] usb 1-1: config 0 descriptor?? [ 140.559816][ T5726] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 140.575410][ T5726] dvb-usb: bulk message failed: -22 (3/0) [ 140.628138][ T5726] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 140.673855][ T5726] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 140.706448][ T5726] usb 1-1: media controller created [ 140.737426][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.833470][ T5726] dvb-usb: bulk message failed: -22 (6/0) [ 140.876725][ T5726] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 140.907341][ T5726] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 140.945243][ T6731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=6731 comm=syz.4.241 [ 140.985788][ T5726] dvb-usb: schedule remote query interval to 150 msecs. [ 141.006366][ T5726] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 141.162321][ T5726] dvb-usb: bulk message failed: -22 (1/0) [ 141.171410][ T5726] dvb-usb: error while querying for an remote control event. [ 141.362545][ T5726] dvb-usb: bulk message failed: -22 (1/0) [ 141.368433][ T5726] dvb-usb: error while querying for an remote control event. [ 141.543173][ T5726] dvb-usb: bulk message failed: -22 (1/0) [ 141.550078][ T5726] dvb-usb: error while querying for an remote control event. [ 141.567604][ T6739] netlink: 48 bytes leftover after parsing attributes in process `syz.3.244'. [ 141.722321][ T5726] dvb-usb: bulk message failed: -22 (1/0) [ 141.728108][ T5726] dvb-usb: error while querying for an remote control event. [ 141.892376][ T5726] dvb-usb: bulk message failed: -22 (1/0) [ 141.937126][ T5726] dvb-usb: error while querying for an remote control event. [ 141.972689][ T5868] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.145040][ T5726] dvb-usb: bulk message failed: -22 (1/0) [ 142.155709][ T5726] dvb-usb: error while querying for an remote control event. [ 142.170947][ T6748] netlink: 'syz.2.246': attribute type 39 has an invalid length. [ 142.188243][ T5727] usb 1-1: USB disconnect, device number 7 [ 142.211490][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.247'. [ 142.220346][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 142.229160][ T6747] netlink: 'syz.1.247': attribute type 13 has an invalid length. [ 142.236884][ T6747] netlink: 'syz.1.247': attribute type 12 has an invalid length. [ 142.263853][ T5868] usb 4-1: Using ep0 maxpacket: 32 [ 142.285809][ T5868] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 142.393780][ T5868] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 142.473780][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 142.548923][ T5868] usb 4-1: Product: syz [ 142.578687][ T5868] usb 4-1: Manufacturer: syz [ 142.612021][ T5868] usb 4-1: SerialNumber: syz [ 142.706972][ T6744] SELinux: failed to load policy [ 142.827541][ T5868] usb 4-1: config 0 descriptor?? [ 142.934534][ T6739] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 143.616033][ T29] audit: type=1400 audit(1781018862.216:366): avc: denied { read write } for pid=6759 comm="syz.0.250" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.650510][ T5727] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 143.664344][ T5868] hub 4-1:0.0: bad descriptor, ignoring hub [ 143.708509][ T5868] hub 4-1:0.0: probe with driver hub failed with error -5 [ 143.749392][ T29] audit: type=1400 audit(1781018862.216:367): avc: denied { open } for pid=6759 comm="syz.0.250" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 143.790458][ T6757] Process accounting resumed [ 143.828893][ T5868] usb 4-1: USB disconnect, device number 11 [ 145.145126][ T6793] netlink: 'syz.2.259': attribute type 39 has an invalid length. [ 145.604408][ T6785] SELinux: failed to load policy [ 146.567720][ T6812] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 146.611862][ T6812] SELinux: failed to load policy [ 146.764913][ T6810] netlink: 'syz.2.264': attribute type 39 has an invalid length. [ 149.366331][ T6836] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 149.588748][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 149.597642][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.273'. [ 149.606565][ T6841] netlink: 'syz.0.273': attribute type 13 has an invalid length. [ 149.614339][ T6841] netlink: 'syz.0.273': attribute type 12 has an invalid length. [ 149.885934][ T6843] netlink: 84 bytes leftover after parsing attributes in process `syz.4.274'. [ 150.182328][ T5870] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 150.208749][ T6852] overlayfs: missing 'lowerdir' [ 150.382349][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 150.405847][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 150.419675][ T5870] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 150.511514][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.606242][ T5870] usb 3-1: config 0 descriptor?? [ 150.867100][ T5870] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 150.933403][ T6863] FAULT_INJECTION: forcing a failure. [ 150.933403][ T6863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.961470][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.3.281 Not tainted syzkaller #0 PREEMPT(full) [ 150.961495][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 150.961505][ T6863] Call Trace: [ 150.961511][ T6863] [ 150.961518][ T6863] dump_stack_lvl+0x100/0x190 [ 150.961545][ T6863] should_fail_ex.cold+0x5/0xa [ 150.961568][ T6863] _copy_to_iter+0x5a4/0x1720 [ 150.961593][ T6863] ? __pfx__copy_to_iter+0x10/0x10 [ 150.961613][ T6863] ? __lock_acquire+0x4a5/0x2630 [ 150.961647][ T6863] ? __lock_acquire+0x4a5/0x2630 [ 150.961669][ T6863] simple_copy_to_iter+0x46/0x90 [ 150.961691][ T6863] __skb_datagram_iter+0x129/0x900 [ 150.961711][ T6863] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 150.961732][ T6863] ? _raw_spin_lock_irqsave+0x52/0x60 [ 150.961752][ T6863] ? find_held_lock+0x2b/0x80 [ 150.961770][ T6863] skb_copy_datagram_iter+0xa5/0x270 [ 150.961794][ T6863] tun_do_read+0x56a/0x1b60 [ 150.961824][ T6863] ? __lock_acquire+0x4a5/0x2630 [ 150.961850][ T6863] ? __pfx_tun_do_read+0x10/0x10 [ 150.961873][ T6863] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 150.961905][ T6863] ? __pfx_default_wake_function+0x10/0x10 [ 150.961940][ T6863] tun_chr_read_iter+0x101/0x290 [ 150.961966][ T6863] do_iter_readv_writev+0x60d/0x920 [ 150.961987][ T6863] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 150.962003][ T6863] ? avc_policy_seqno+0x9/0x20 [ 150.962020][ T6863] ? selinux_file_permission+0x8f/0x6d0 [ 150.962049][ T6863] ? bpf_lsm_file_permission+0x9/0x10 [ 150.962076][ T6863] ? security_file_permission+0x76/0x210 [ 150.962103][ T6863] ? rw_verify_area+0xce/0x6d0 [ 150.962121][ T6863] vfs_readv+0x4d3/0x8d0 [ 150.962144][ T6863] ? __pfx_vfs_readv+0x10/0x10 [ 150.962162][ T6863] ? find_held_lock+0x2b/0x80 [ 150.962175][ T6863] ? ksys_write+0x190/0x250 [ 150.962207][ T6863] ? __fget_files+0x21f/0x3d0 [ 150.962233][ T6863] ? do_readv+0x13e/0x340 [ 150.962249][ T6863] do_readv+0x13e/0x340 [ 150.962264][ T6863] ? __pfx_do_readv+0x10/0x10 [ 150.962282][ T6863] ? rcu_is_watching+0x12/0xc0 [ 150.962308][ T6863] do_syscall_64+0x115/0x870 [ 150.962329][ T6863] ? clear_bhb_loop+0x40/0x90 [ 150.962349][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.962367][ T6863] RIP: 0033:0x7fced099ce59 [ 150.962380][ T6863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.962395][ T6863] RSP: 002b:00007fced18be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 150.962411][ T6863] RAX: ffffffffffffffda RBX: 00007fced0c15fa0 RCX: 00007fced099ce59 [ 150.962421][ T6863] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 150.962431][ T6863] RBP: 00007fced18be090 R08: 0000000000000000 R09: 0000000000000000 [ 150.962441][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.962451][ T6863] R13: 00007fced0c16038 R14: 00007fced0c15fa0 R15: 00007ffff69ad348 [ 150.962470][ T6863] [ 151.267135][ T4936] Bluetooth: hci0: command 0x0401 tx timeout [ 151.376411][ T6847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.407386][ T6847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.514696][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 151.523591][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 151.532609][ T6874] netlink: 'syz.1.284': attribute type 13 has an invalid length. [ 151.540330][ T6874] netlink: 'syz.1.284': attribute type 12 has an invalid length. [ 151.727362][ T6880] smc: net device team0 applied user defined pnetid SYZ2 [ 151.752289][ T6883] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:24:8c:84:1d:2f [ 151.770080][ T6883] netlink: 84 bytes leftover after parsing attributes in process `syz.3.288'. [ 151.863796][ T5727] usb 3-1: USB disconnect, device number 7 [ 151.872933][ T5726] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 151.950949][ T6880] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 152.054456][ T5726] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.073576][ T5726] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 152.185771][ T5726] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 152.207127][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.352803][ T5726] usb 5-1: config 0 descriptor?? [ 152.366605][ T5726] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 152.373551][ T5726] dvb-usb: bulk message failed: -22 (3/0) [ 152.386949][ T5726] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 152.397252][ T5726] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 152.405287][ T5726] usb 5-1: media controller created [ 152.415145][ T5726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.451769][ T5726] dvb-usb: bulk message failed: -22 (6/0) [ 152.464357][ T5726] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 152.498333][ T5726] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 152.517372][ T6896] netlink: 'syz.3.292': attribute type 39 has an invalid length. [ 152.748124][ T5726] dvb-usb: schedule remote query interval to 150 msecs. [ 153.617474][ T6894] SELinux: failed to load policy [ 153.860796][ T4936] Bluetooth: hci0: command 0x0401 tx timeout [ 154.095264][ T5726] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 154.197280][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 154.206151][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 154.214932][ T6916] netlink: 'syz.2.297': attribute type 13 has an invalid length. [ 154.222665][ T6916] netlink: 'syz.2.297': attribute type 12 has an invalid length. [ 154.348666][ T5829] dvb-usb: bulk message failed: -22 (1/0) [ 154.425291][ T5829] dvb-usb: error while querying for an remote control event. [ 154.621357][ T5726] dvb-usb: bulk message failed: -22 (1/0) [ 154.638394][ T5726] dvb-usb: error while querying for an remote control event. [ 154.646235][ T5829] usb 5-1: USB disconnect, device number 5 [ 154.751299][ T5829] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 154.779090][ T4936] Bluetooth: unknown link type 128 [ 155.277884][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'. [ 155.545144][ T5870] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 155.704374][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.813795][ T5870] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.824656][ T5870] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 155.834745][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.859698][ T5870] usb 5-1: config 0 descriptor?? [ 155.864779][ T5868] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 156.172358][ T5868] usb 4-1: Using ep0 maxpacket: 16 [ 156.185673][ T5868] usb 4-1: config 0 has an invalid interface number: 246 but max is 0 [ 156.199410][ T5868] usb 4-1: config 0 has no interface number 0 [ 156.215715][ T5868] usb 4-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 156.248934][ T5868] usb 4-1: config 0 interface 246 has no altsetting 0 [ 156.267639][ T5868] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 156.291425][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.311000][ T5868] usb 4-1: Product: syz [ 156.321786][ T5868] usb 4-1: Manufacturer: syz [ 156.336296][ T5868] usb 4-1: SerialNumber: syz [ 156.369611][ T5868] usb 4-1: config 0 descriptor?? [ 156.385215][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.403401][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.450851][ T6935] netlink: 830 bytes leftover after parsing attributes in process `syz.4.302'. [ 156.669202][ T5868] usb 4-1: USB disconnect, device number 12 [ 156.802802][ T5623] Bluetooth: hci1: command tx timeout [ 156.960254][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.307'. [ 157.102690][ T5870] usbhid 5-1:0.0: can't add hid device: -71 [ 157.123899][ T5870] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 157.144473][ T5870] usb 5-1: USB disconnect, device number 6 [ 157.292749][ T5829] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 157.452699][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 157.464656][ T5829] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 157.478398][ T5829] usb 3-1: config 0 has no interface number 0 [ 157.496229][ T5829] usb 3-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 157.817126][ T5829] usb 3-1: config 0 interface 246 has no altsetting 0 [ 157.847215][ T5829] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 157.870885][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.892399][ T5829] usb 3-1: Product: syz [ 157.896611][ T5829] usb 3-1: Manufacturer: syz [ 157.901262][ T5829] usb 3-1: SerialNumber: syz [ 157.911909][ T5829] usb 3-1: config 0 descriptor?? [ 158.157972][ T5829] usb 3-1: USB disconnect, device number 8 [ 159.032228][ T6991] Process accounting resumed [ 159.073414][ T5870] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 159.223659][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.239894][ T5870] usb 2-1: config 0 has no interfaces? [ 159.254129][ T5870] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.448988][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.568152][ T5870] usb 2-1: config 0 descriptor?? [ 159.607260][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.316'. [ 159.618641][ T6999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 159.633312][ T6999] netlink: 'syz.3.316': attribute type 13 has an invalid length. [ 159.652364][ T6999] netlink: 'syz.3.316': attribute type 12 has an invalid length. [ 159.824739][ T5870] usb 2-1: USB disconnect, device number 8 [ 159.978977][ T7013] overlayfs: missing 'lowerdir' [ 160.812367][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 161.243275][ T5870] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 161.497701][ T5870] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 161.608113][ T5870] usb 2-1: config 0 has no interfaces? [ 161.629769][ T5870] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 161.666546][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.711741][ T5870] usb 2-1: config 0 descriptor?? [ 162.045897][ T5829] usb 2-1: USB disconnect, device number 9 [ 162.476484][ T7030] Process accounting resumed [ 164.522911][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 165.057017][ T7075] netlink: 'syz.3.338': attribute type 39 has an invalid length. [ 165.120367][ T7070] SELinux: failed to load policy [ 165.122347][ T5829] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 165.144557][ T5618] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.242334][ T5748] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.342585][ T5618] usb 2-1: Using ep0 maxpacket: 16 [ 165.354866][ T5618] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 165.387685][ T5618] usb 2-1: config 0 has no interface number 0 [ 165.426915][ T5618] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 165.467600][ T5618] usb 2-1: config 0 interface 246 has no altsetting 0 [ 165.510391][ T5618] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 165.521001][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.539734][ T5618] usb 2-1: Product: syz [ 165.545769][ T5618] usb 2-1: Manufacturer: syz [ 165.550479][ T5618] usb 2-1: SerialNumber: syz [ 165.581148][ T5618] usb 2-1: config 0 descriptor?? [ 165.615837][ T5623] Bluetooth: hci4: command 0x0405 tx timeout [ 166.140507][ T5618] usb 2-1: USB disconnect, device number 10 [ 166.264947][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.277375][ T5748] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.292404][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.302413][ T5748] usb 1-1: config 0 has no interfaces? [ 166.312527][ T5748] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 166.321614][ T5829] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 166.332277][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.340316][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.349962][ T5748] usb 1-1: config 0 descriptor?? [ 166.356455][ T5829] usb 3-1: config 0 descriptor?? [ 166.452319][ T5741] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 166.587532][ T7084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.342'. [ 166.596428][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.342'. [ 166.605272][ T7084] netlink: 'syz.3.342': attribute type 13 has an invalid length. [ 166.613015][ T7084] netlink: 'syz.3.342': attribute type 12 has an invalid length. [ 166.693835][ T5618] usb 1-1: USB disconnect, device number 8 [ 166.774294][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.785342][ T5741] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.797318][ T5741] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 166.807339][ T5741] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.819841][ T5741] usb 5-1: config 0 descriptor?? [ 166.893828][ T7071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.902928][ T7071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.122452][ T5748] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 167.152387][ T5618] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 167.171650][ T5829] usbhid 3-1:0.0: can't add hid device: -71 [ 167.186587][ T5829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 167.203283][ T5829] usb 3-1: USB disconnect, device number 9 [ 167.249630][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.267783][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.269976][ T7089] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:24:8c:84:1d:2f [ 167.301376][ T7089] netlink: 84 bytes leftover after parsing attributes in process `syz.3.344'. [ 167.313866][ T5618] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.322765][ T5748] usb 2-1: Using ep0 maxpacket: 8 [ 167.332455][ T5748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.343450][ T5618] usb 1-1: config 0 has no interfaces? [ 167.343486][ T5618] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.353266][ T5748] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 167.370241][ T5748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.378906][ T5618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.397222][ T5618] usb 1-1: config 0 descriptor?? [ 167.421549][ T5748] usb 2-1: config 0 descriptor?? [ 167.816943][ T5748] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 168.025102][ T5741] usbhid 5-1:0.0: can't add hid device: -71 [ 168.039005][ T5741] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 168.076814][ T5741] usb 5-1: USB disconnect, device number 7 [ 168.186804][ T5748] usb 2-1: USB disconnect, device number 11 [ 168.852672][ T5618] usb 1-1: USB disconnect, device number 9 [ 168.997853][ T7106] netlink: 84 bytes leftover after parsing attributes in process `syz.0.348'. [ 169.141830][ T7106] batman_adv: batadv0: Adding interface: dummy0 [ 169.162412][ T7106] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.192344][ T7106] batman_adv: batadv0: Interface activated: dummy0 [ 169.726668][ T7111] batadv0: mtu less than device minimum [ 169.816443][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.827944][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.838759][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.849557][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.860651][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.871443][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.882272][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 169.893082][ T7111] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 170.071391][ T7117] SELinux: failed to load policy [ 170.076660][ T7118] netlink: 'syz.1.351': attribute type 39 has an invalid length. [ 171.039352][ T7124] overlayfs: missing 'lowerdir' [ 171.601081][ T7139] FAULT_INJECTION: forcing a failure. [ 171.601081][ T7139] name failslab, interval 1, probability 0, space 0, times 0 [ 171.638118][ T7139] CPU: 1 UID: 0 PID: 7139 Comm: syz.1.356 Not tainted syzkaller #0 PREEMPT(full) [ 171.638143][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.638152][ T7139] Call Trace: [ 171.638158][ T7139] [ 171.638164][ T7139] dump_stack_lvl+0x100/0x190 [ 171.638188][ T7139] should_fail_ex.cold+0x5/0xa [ 171.638211][ T7139] should_failslab+0xc2/0x120 [ 171.638231][ T7139] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 171.638255][ T7139] ? __alloc_skb+0x140/0x710 [ 171.638276][ T7139] ? __alloc_skb+0x5b7/0x710 [ 171.638302][ T7139] __alloc_skb+0x140/0x710 [ 171.638325][ T7139] ? __alloc_skb+0x5b7/0x710 [ 171.638347][ T7139] ? __pfx___alloc_skb+0x10/0x10 [ 171.638373][ T7139] ? find_held_lock+0x2b/0x80 [ 171.638391][ T7139] alloc_skb_with_frags+0xdd/0x760 [ 171.638406][ T7139] ? do_raw_spin_lock+0x128/0x260 [ 171.638433][ T7139] sock_alloc_send_pskb+0x801/0x980 [ 171.638458][ T7139] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 171.638479][ T7139] ? debug_object_assert_init+0x1c4/0x300 [ 171.638500][ T7139] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 171.638523][ T7139] ? _parse_integer_limit+0x17f/0x1d0 [ 171.638551][ T7139] ? _kstrtoull+0x13c/0x1f0 [ 171.638574][ T7139] ? __pfx__kstrtoull+0x10/0x10 [ 171.638601][ T7139] tun_get_user+0x904/0x3c20 [ 171.638637][ T7139] ? __pfx_tun_get_user+0x10/0x10 [ 171.638664][ T7139] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 171.638702][ T7139] ? find_held_lock+0x2b/0x80 [ 171.638718][ T7139] ? tun_get+0x191/0x370 [ 171.638740][ T7139] ? tun_get+0x191/0x370 [ 171.638769][ T7139] tun_chr_write_iter+0xdc/0x200 [ 171.638797][ T7139] vfs_write+0x6ac/0x1070 [ 171.638816][ T7139] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 171.638844][ T7139] ? __pfx_vfs_write+0x10/0x10 [ 171.638860][ T7139] ? find_held_lock+0x2b/0x80 [ 171.638888][ T7139] ksys_write+0x12a/0x250 [ 171.638906][ T7139] ? __pfx_ksys_write+0x10/0x10 [ 171.638926][ T7139] ? rcu_is_watching+0x12/0xc0 [ 171.638954][ T7139] do_syscall_64+0x115/0x870 [ 171.638974][ T7139] ? clear_bhb_loop+0x40/0x90 [ 171.638995][ T7139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.639011][ T7139] RIP: 0033:0x7f907835d68e [ 171.639025][ T7139] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.639038][ T7139] RSP: 002b:00007f907927bfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.639049][ T7139] RAX: ffffffffffffffda RBX: 00007f907927c6c0 RCX: 00007f907835d68e [ 171.639056][ T7139] RDX: 0000000000000d83 RSI: 0000200000000500 RDI: 00000000000000c8 [ 171.639062][ T7139] RBP: 00007f907927c090 R08: 0000000000000000 R09: 0000000000000000 [ 171.639069][ T7139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.639075][ T7139] R13: 00007f9078616038 R14: 00007f9078615fa0 R15: 00007ffc3f08e1f8 [ 171.639089][ T7139] [ 171.965055][ T7143] smc: net device team0 applied user defined pnetid SYZ2 [ 172.065809][ T29] audit: type=1400 audit(1781018890.686:368): avc: denied { read write } for pid=7149 comm="syz.1.358" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 172.203298][ T7143] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 172.214388][ T29] audit: type=1400 audit(1781018890.686:369): avc: denied { open } for pid=7149 comm="syz.1.358" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 172.283227][ T29] audit: type=1400 audit(1781018890.726:370): avc: denied { write } for pid=7149 comm="syz.1.358" name="ptp0" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.347652][ T29] audit: type=1400 audit(1781018890.726:371): avc: denied { ioctl } for pid=7149 comm="syz.1.358" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d04 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 172.372622][ T5741] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 172.529253][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 172.552310][ T5741] usb 2-1: Using ep0 maxpacket: 8 [ 172.558849][ T5741] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 172.568234][ T5741] usb 2-1: config 179 has no interface number 0 [ 172.570127][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.352'. [ 172.647362][ T7141] netlink: 'syz.2.352': attribute type 13 has an invalid length. [ 172.655959][ T5741] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 172.671060][ T5741] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 172.689784][ T5741] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 172.709571][ T7141] netlink: 'syz.2.352': attribute type 12 has an invalid length. [ 172.774484][ T5741] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 172.831905][ T5741] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 172.873067][ T5741] usb 2-1: config 179 interface 65 has no altsetting 0 [ 172.890242][ T5741] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 172.900594][ T29] audit: type=1400 audit(1781018891.526:372): avc: denied { append } for pid=7165 comm="syz.3.365" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 172.923651][ T7166] faux_driver vkms: [drm] Unknown color mode 3; guessing buffer size. [ 172.942388][ T5741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.996227][ T5741] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input10 [ 173.092630][ T4971] input input10: unable to receive magic message: -110 [ 173.116728][ T4971] input input10: unable to receive magic message: -32 [ 173.164525][ T4971] input input10: unable to receive magic message: -32 [ 173.247253][ T4971] input input10: unable to receive magic message: -32 [ 173.293992][ T5853] input input10: unable to receive magic message: -32 [ 173.353954][ T4971] input input10: unable to receive magic message: -32 [ 173.416725][ T7170] netlink: 'syz.3.366': attribute type 39 has an invalid length. [ 173.437340][ T4971] input input10: unable to receive magic message: -32 [ 174.001787][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.102201][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.132098][ T5748] usb 2-1: USB disconnect, device number 12 [ 174.138190][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 174.172903][ T4936] Bluetooth: hci0: command 0x0401 tx timeout [ 174.381313][ T7169] SELinux: failed to load policy [ 174.640020][ T7181] binder: 7179:7181 ioctl 4018620d 0 returned -22 [ 176.655141][ T7194] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 176.922417][ T7209] x_tables: ip6_tables: CT target: only valid in raw table, not  [ 177.740250][ T7221] netlink: 'syz.2.378': attribute type 39 has an invalid length. [ 178.002323][ T4936] Bluetooth: hci0: command 0x0401 tx timeout [ 178.286671][ T7215] SELinux: failed to load policy [ 178.923932][ T5741] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 179.133930][ T5741] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.166929][ T5741] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 179.208521][ T5741] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 179.236498][ T5741] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.262837][ T5741] usb 1-1: config 0 descriptor?? [ 179.299437][ T5741] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 179.314406][ T5741] dvb-usb: bulk message failed: -22 (3/0) [ 179.359385][ T5741] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 179.404039][ T5741] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 179.418717][ T5741] usb 1-1: media controller created [ 179.433725][ T5741] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.543966][ T5741] dvb-usb: bulk message failed: -22 (6/0) [ 179.662635][ T5741] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 179.785482][ T5741] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 179.857915][ T5741] dvb-usb: schedule remote query interval to 150 msecs. [ 179.884453][ T5741] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 179.886041][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.385'. [ 179.937339][ T5741] usb 1-1: USB disconnect, device number 10 [ 180.001472][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 180.060126][ T7240] netlink: 'syz.2.385': attribute type 13 has an invalid length. [ 180.068113][ T7240] netlink: 'syz.2.385': attribute type 12 has an invalid length. [ 180.138388][ T5741] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 180.862776][ T5829] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 181.056078][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.105707][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.406341][ T5829] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 181.444689][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.509042][ T5829] usb 2-1: config 0 descriptor?? [ 181.880910][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.397'. [ 181.962951][ T7252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.029106][ T7252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.342319][ T5870] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 182.361989][ T5829] usbhid 2-1:0.0: can't add hid device: -71 [ 182.379382][ T5829] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 182.421354][ T5829] usb 2-1: USB disconnect, device number 13 [ 182.502979][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 182.519260][ T5870] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 182.549616][ T5870] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 182.571321][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 182.590417][ T5870] usb 4-1: Product: syz [ 182.599302][ T5870] usb 4-1: Manufacturer: syz [ 182.614107][ T5870] usb 4-1: SerialNumber: syz [ 182.635572][ T5870] usb 4-1: config 0 descriptor?? [ 182.649246][ T7278] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 182.668798][ T5870] hub 4-1:0.0: bad descriptor, ignoring hub [ 182.685480][ T5870] hub 4-1:0.0: probe with driver hub failed with error -5 [ 183.435787][ T5741] usb 4-1: USB disconnect, device number 13 [ 183.492337][ T5829] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 184.092326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 184.382270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 184.638369][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.735741][ T5829] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 184.846126][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.062183][ T5829] usb 5-1: config 0 descriptor?? [ 185.288474][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 185.598274][ T5829] pwc: send_video_command error -71 [ 185.629230][ T5829] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 185.653108][ T5829] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 185.777647][ T5829] usb 5-1: USB disconnect, device number 8 [ 185.853942][ T7319] FAULT_INJECTION: forcing a failure. [ 185.853942][ T7319] name failslab, interval 1, probability 0, space 0, times 0 [ 185.866766][ T7319] CPU: 1 UID: 0 PID: 7319 Comm: syz.2.410 Not tainted syzkaller #0 PREEMPT(full) [ 185.866792][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.866803][ T7319] Call Trace: [ 185.866813][ T7319] [ 185.866820][ T7319] dump_stack_lvl+0x100/0x190 [ 185.866847][ T7319] should_fail_ex.cold+0x5/0xa [ 185.866872][ T7319] should_failslab+0xc2/0x120 [ 185.866892][ T7319] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 185.866917][ T7319] ? do_getname+0x35/0x390 [ 185.866953][ T7319] do_getname+0x35/0x390 [ 185.866981][ T7319] do_sys_openat2+0xc5/0x1e0 [ 185.867007][ T7319] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.867034][ T7319] ? irqentry_exit+0x24d/0x970 [ 185.867057][ T7319] ? lockdep_hardirqs_on+0x78/0x100 [ 185.867082][ T7319] __x64_sys_openat+0x12d/0x210 [ 185.867108][ T7319] ? __pfx___x64_sys_openat+0x10/0x10 [ 185.867143][ T7319] do_syscall_64+0x115/0x870 [ 185.867165][ T7319] ? clear_bhb_loop+0x40/0x90 [ 185.867187][ T7319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.867205][ T7319] RIP: 0033:0x7f24f655d68e [ 185.867221][ T7319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 185.867238][ T7319] RSP: 002b:00007f24f47b3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.867256][ T7319] RAX: ffffffffffffffda RBX: 00007f24f47b46c0 RCX: 00007f24f655d68e [ 185.867267][ T7319] RDX: 0000000000000002 RSI: 00007f24f47b3c00 RDI: ffffffffffffff9c [ 185.867277][ T7319] RBP: 00007f24f47b4090 R08: 0000000000000000 R09: 0000000000000000 [ 185.867288][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.867298][ T7319] R13: 00007f24f6816218 R14: 00007f24f6816180 R15: 00007fff6345dc98 [ 185.867321][ T7319] [ 187.162452][ T5829] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 187.252460][ T5870] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 187.323168][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 187.336147][ T5829] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 148, changing to 11 [ 187.388398][ T5829] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 1024 [ 187.422341][ T5829] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.423022][ T5870] usb 3-1: Using ep0 maxpacket: 8 [ 187.455572][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0 [ 187.468500][ T5829] usb 4-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 187.588784][ T5870] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.608317][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.620409][ T5870] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 188.117321][ T29] audit: type=1400 audit(1781018906.326:373): avc: denied { write } for pid=7336 comm="syz.4.416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 188.149850][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.160045][ T5829] usb 4-1: config 0 descriptor?? [ 188.168277][ T5870] usb 3-1: config 0 descriptor?? [ 188.187044][ T7325] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 188.418112][ T5870] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 188.824409][ T5829] usbhid 4-1:0.0: can't add hid device: -71 [ 188.838175][ T5829] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 188.862203][ T5829] usb 4-1: USB disconnect, device number 14 [ 189.005109][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 189.008044][ T5870] usb 3-1: USB disconnect, device number 10 [ 189.302368][ T5748] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 189.982330][ T5748] usb 5-1: Using ep0 maxpacket: 32 [ 190.933423][ T5633] Bluetooth: hci3: command 0x0406 tx timeout [ 190.937152][ T4936] Bluetooth: hci2: command 0x0406 tx timeout [ 190.939543][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 190.950880][ T5621] Bluetooth: hci0: command 0x0401 tx timeout [ 190.960972][ T5630] Bluetooth: hci4: command 0x0405 tx timeout [ 191.124479][ T5748] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 191.151305][ T5748] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 191.171965][ T5748] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 191.182336][ T5748] usb 5-1: Product: syz [ 191.202303][ T5748] usb 5-1: Manufacturer: syz [ 191.206992][ T5748] usb 5-1: SerialNumber: syz [ 191.218609][ T5748] usb 5-1: config 0 descriptor?? [ 191.242970][ T7350] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 191.253451][ T5748] hub 5-1:0.0: bad descriptor, ignoring hub [ 191.315454][ T5748] hub 5-1:0.0: probe with driver hub failed with error -5 [ 191.473973][ T5748] usb 5-1: USB disconnect, device number 9 [ 191.511295][ T29] audit: type=1400 audit(1781018910.136:374): avc: denied { append } for pid=7372 comm="syz.3.425" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 191.635288][ T29] audit: type=1400 audit(1781018910.266:375): avc: denied { write } for pid=7372 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 192.439314][ T7376] overlayfs: missing 'lowerdir' [ 193.955241][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.961555][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.412330][ T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 194.568562][ T7409] overlayfs: missing 'lowerdir' [ 194.572361][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 194.579955][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.580006][ T30] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 194.580028][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.587517][ T30] usb 5-1: config 0 descriptor?? [ 194.789276][ T29] audit: type=1800 audit(1781018913.416:376): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.436" name="bus" dev="overlay" ino=471 res=0 errno=0 [ 194.819756][ T7412] 9pnet_fd: Insufficient options for proto=fd [ 194.857172][ T29] audit: type=1400 audit(1781018913.466:377): avc: denied { append } for pid=7411 comm="syz.1.436" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 194.891233][ T30] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 195.304061][ T9] usb 5-1: USB disconnect, device number 10 [ 195.830227][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 196.085800][ T30] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 196.144474][ T7433] fuse: Bad value for 'group_id' [ 196.152069][ T7433] fuse: Bad value for 'group_id' [ 196.262959][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 196.275742][ T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 196.302519][ T30] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 196.321347][ T30] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 196.344590][ T30] usb 1-1: Product: syz [ 196.349739][ T30] usb 1-1: Manufacturer: syz [ 196.355307][ T30] usb 1-1: SerialNumber: syz [ 196.360427][ T7442] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 196.373385][ T30] usb 1-1: config 0 descriptor?? [ 196.384159][ T7445] netlink: 'syz.2.442': attribute type 39 has an invalid length. [ 196.395329][ T7425] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 196.414121][ T30] hub 1-1:0.0: bad descriptor, ignoring hub [ 196.428833][ T30] hub 1-1:0.0: probe with driver hub failed with error -5 [ 196.617899][ T30] usb 1-1: USB disconnect, device number 11 [ 196.833666][ T7439] SELinux: failed to load policy [ 197.067266][ T7454] netlink: 'syz.4.445': attribute type 39 has an invalid length. [ 197.353677][ T7452] SELinux: failed to load policy [ 197.378960][ T29] audit: type=1326 audit(1781018915.926:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7432 comm="syz.1.441" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f907839ce59 code=0x0 [ 197.442452][ T7447] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20000 [ 197.700150][ T29] audit: type=1400 audit(1781018916.236:379): avc: denied { setopt } for pid=7432 comm="syz.1.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 198.019112][ T7459] net_ratelimit: 11 callbacks suppressed [ 198.019124][ T7459] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:24:8c:84:1d:2f [ 198.095310][ T7459] netlink: 84 bytes leftover after parsing attributes in process `syz.0.447'. [ 199.784168][ T5868] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 199.952299][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 199.967070][ T5868] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 199.985055][ T5868] usb 3-1: config 179 has no interface number 0 [ 199.997551][ T5868] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 200.027501][ T5868] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 200.064115][ T5868] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 200.089250][ T5868] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 200.117269][ T5868] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 200.153343][ T5868] usb 3-1: config 179 interface 65 has no altsetting 0 [ 200.174791][ T5868] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 200.192341][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.290769][ T5868] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input12 [ 200.403317][ T4971] input input12: unable to receive magic message: -110 [ 200.414456][ T4971] input input12: unable to receive magic message: -32 [ 200.428942][ T4971] input input12: unable to receive magic message: -32 [ 200.498005][ T4971] input input12: unable to receive magic message: -32 [ 200.506963][ T7497] overlayfs: missing 'lowerdir' [ 200.532504][ T5853] input input12: unable to receive magic message: -32 [ 200.910231][ T4971] input input12: unable to receive magic message: -32 [ 201.001869][ T4971] input input12: unable to receive magic message: -32 [ 201.108394][ T5741] usb 3-1: USB disconnect, device number 11 [ 201.108445][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 201.141352][ T7502] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:24:8c:84:1d:2f [ 201.158940][ T7502] netlink: 84 bytes leftover after parsing attributes in process `syz.1.459'. [ 201.332336][ T5618] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 201.419438][ T7506] batman_adv: batadv0: Local translation table size (108) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:24:8c:84:1d:2f [ 201.435551][ T7506] netlink: 84 bytes leftover after parsing attributes in process `syz.1.461'. [ 201.935298][ T5618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.963980][ T5618] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 201.974211][ T5618] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 201.990476][ T5618] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.012899][ T5618] usb 1-1: config 0 descriptor?? [ 202.290070][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 202.299168][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 202.308083][ T7516] netlink: 'syz.2.462': attribute type 13 has an invalid length. [ 202.315867][ T7516] netlink: 'syz.2.462': attribute type 12 has an invalid length. [ 202.656271][ T29] audit: type=1400 audit(1781018921.286:380): avc: denied { block_suspend } for pid=7517 comm="syz.4.464" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 202.766109][ T7520] netlink: 'syz.1.463': attribute type 39 has an invalid length. [ 203.180278][ T5741] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 203.189364][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.201832][ T7523] vivid-000: disconnect [ 203.217781][ T29] audit: type=1400 audit(1781018921.836:381): avc: denied { getopt } for pid=7522 comm="syz.2.465" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 203.243800][ T7522] vivid-000: reconnect [ 203.260673][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.332358][ T5741] usb 5-1: Invalid ep0 maxpacket: 16 [ 203.358862][ T7515] SELinux: failed to load policy [ 203.472308][ T5741] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 203.533838][ T7531] overlayfs: missing 'lowerdir' [ 203.608413][ T5618] usbhid 1-1:0.0: can't add hid device: -71 [ 203.615032][ T5618] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 203.631563][ T5618] usb 1-1: USB disconnect, device number 12 [ 203.632572][ T5741] usb 5-1: Invalid ep0 maxpacket: 16 [ 203.728167][ T5741] usb usb5-port1: attempt power cycle [ 204.292876][ T5741] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 204.335139][ T5741] usb 5-1: Invalid ep0 maxpacket: 16 [ 204.534773][ T5741] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 204.943731][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'. [ 204.952609][ T7547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 204.961494][ T7547] netlink: 'syz.3.470': attribute type 13 has an invalid length. [ 204.969383][ T7547] netlink: 'syz.3.470': attribute type 12 has an invalid length. [ 205.029456][ T5741] usb 5-1: Invalid ep0 maxpacket: 16 [ 205.041222][ T5741] usb usb5-port1: unable to enumerate USB device [ 205.219593][ T29] audit: type=1400 audit(1781018923.846:382): avc: denied { read } for pid=7552 comm="syz.0.473" name="usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.355125][ T29] audit: type=1400 audit(1781018923.846:383): avc: denied { open } for pid=7552 comm="syz.0.473" path="/dev/usbmon0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 205.462437][ T5748] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 205.632326][ T5748] usb 1-1: Using ep0 maxpacket: 8 [ 205.645065][ T5748] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 205.657099][ T5748] usb 1-1: config 179 has no interface number 0 [ 205.669818][ T5748] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 205.719411][ T5748] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 205.765113][ T5748] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 205.826127][ T5748] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 205.839009][ T5748] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 205.853824][ T5748] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 205.869661][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.910838][ T7553] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 206.462278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 206.722315][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 206.752489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 207.490077][ T5868] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 208.476879][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 208.542356][ T5868] usb 4-1: Using ep0 maxpacket: 8 [ 208.555079][ T5868] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 208.555107][ T5868] usb 4-1: config 179 has no interface number 0 [ 208.555145][ T5868] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 208.555171][ T5868] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 208.555196][ T5868] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 208.555218][ T5868] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 208.555241][ T5868] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 208.555275][ T5868] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 208.555295][ T5868] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.558901][ T7577] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 209.437151][ T7597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 209.514262][ T7588] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 209.648247][ T29] audit: type=1400 audit(1781018928.276:384): avc: denied { ioctl } for pid=7552 comm="syz.0.473" path="/dev/usbmon0" dev="devtmpfs" ino=717 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 209.702403][ T5829] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 209.802182][ T7577] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 209.853322][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 209.869067][ T5829] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 209.888597][ T5829] usb 2-1: config 0 has no interface number 0 [ 209.906929][ T5829] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 209.931566][ T5829] usb 2-1: config 0 interface 246 has no altsetting 0 [ 209.941672][ T5829] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 209.961263][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.974055][ T5829] usb 2-1: Product: syz [ 209.978631][ T5829] usb 2-1: Manufacturer: syz [ 209.983416][ T5829] usb 2-1: SerialNumber: syz [ 210.000786][ T5829] usb 2-1: config 0 descriptor?? [ 210.279460][ T5829] usb 2-1: USB disconnect, device number 14 [ 210.388675][ T5868] usb 1-1: USB disconnect, device number 13 [ 210.388696][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 210.403207][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 210.524625][ T29] audit: type=1400 audit(1781018929.156:385): avc: denied { read write } for pid=7616 comm="syz.0.489" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 211.086820][ T5829] usb 4-1: USB disconnect, device number 15 [ 211.086832][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 211.086962][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 213.172319][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 213.374703][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.400651][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 213.421656][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.440120][ T9] usb 5-1: config 0 descriptor?? [ 213.453095][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 213.462277][ T5868] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 213.492097][ T7665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.505'. [ 213.564541][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 213.632310][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 213.639971][ T5868] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 213.651390][ T9] pwc: send_video_command error -71 [ 213.656995][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 213.658173][ T5868] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 213.666523][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 213.674498][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 213.691781][ T5868] usb 3-1: Product: syz [ 213.696640][ T5868] usb 3-1: Manufacturer: syz [ 213.701264][ T5868] usb 3-1: SerialNumber: syz [ 213.706708][ T9] usb 5-1: USB disconnect, device number 15 [ 213.715705][ T5868] usb 3-1: config 0 descriptor?? [ 213.731568][ T7656] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 213.741693][ T5868] hub 3-1:0.0: bad descriptor, ignoring hub [ 213.749023][ T5868] hub 3-1:0.0: probe with driver hub failed with error -5 [ 213.762417][ T5748] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 213.832390][ T5618] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 213.925211][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.938574][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.950060][ T5748] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 213.959493][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.011338][ T5748] usb 4-1: config 0 descriptor?? [ 214.142491][ T5829] usb 3-1: USB disconnect, device number 12 [ 214.162503][ T5618] usb 2-1: Using ep0 maxpacket: 16 [ 214.174096][ T5618] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 214.182840][ T5618] usb 2-1: config 0 has no interface number 0 [ 214.189056][ T5618] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 214.192605][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 214.201122][ T5618] usb 2-1: config 0 interface 246 has no altsetting 0 [ 214.217693][ T5618] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 214.226912][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.235028][ T5618] usb 2-1: Product: syz [ 214.239268][ T5618] usb 2-1: Manufacturer: syz [ 214.244305][ T5618] usb 2-1: SerialNumber: syz [ 214.251535][ T5618] usb 2-1: config 0 descriptor?? [ 214.353817][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.364157][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 214.374038][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.387567][ T9] usb 5-1: config 0 descriptor?? [ 214.396362][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 214.435140][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.443931][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.489733][ T5618] usb 2-1: USB disconnect, device number 15 [ 214.703596][ T5748] usbhid 4-1:0.0: can't add hid device: -71 [ 214.722942][ T5748] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 214.742027][ T5748] usb 4-1: USB disconnect, device number 16 [ 214.799563][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 214.866779][ T7686] FAULT_INJECTION: forcing a failure. [ 214.866779][ T7686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.880269][ T7686] CPU: 1 UID: 0 PID: 7686 Comm: syz.0.512 Not tainted syzkaller #0 PREEMPT(full) [ 214.880293][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.880303][ T7686] Call Trace: [ 214.880309][ T7686] [ 214.880315][ T7686] dump_stack_lvl+0x100/0x190 [ 214.880340][ T7686] should_fail_ex.cold+0x5/0xa [ 214.880364][ T7686] _copy_from_user+0x2e/0xd0 [ 214.880385][ T7686] copy_msghdr_from_user+0x9f/0x4f0 [ 214.880407][ T7686] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 214.880438][ T7686] ___sys_sendmsg+0x106/0x1e0 [ 214.880460][ T7686] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.880506][ T7686] __sys_sendmsg+0x170/0x220 [ 214.880532][ T7686] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.880566][ T7686] ? rcu_is_watching+0x12/0xc0 [ 214.880594][ T7686] do_syscall_64+0x115/0x870 [ 214.880614][ T7686] ? clear_bhb_loop+0x40/0x90 [ 214.880633][ T7686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.880651][ T7686] RIP: 0033:0x7f0e9db9ce59 [ 214.880664][ T7686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.880679][ T7686] RSP: 002b:00007f0e9eacb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.880695][ T7686] RAX: ffffffffffffffda RBX: 00007f0e9de15fa0 RCX: 00007f0e9db9ce59 [ 214.880706][ T7686] RDX: 9cdc2384056f0939 RSI: 0000200000000080 RDI: 0000000000000003 [ 214.880716][ T7686] RBP: 00007f0e9eacb090 R08: 0000000000000000 R09: 0000000000000000 [ 214.880725][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.880735][ T7686] R13: 00007f0e9de16038 R14: 00007f0e9de15fa0 R15: 00007ffc53e7fa88 [ 214.880756][ T7686] [ 215.047335][ T5618] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 215.059580][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 215.070963][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 215.078928][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 215.086057][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 215.094323][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 215.103412][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 215.111139][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 215.118277][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 215.128092][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 215.135159][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 215.143525][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 215.150374][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 215.161208][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 215.168780][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 215.198163][ T9] pwc: Registered as video103. [ 215.218003][ T5618] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 215.227739][ T5618] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.246228][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 215.246625][ T5618] usb 3-1: config 0 descriptor?? [ 215.269175][ T5618] cp210x 3-1:0.0: cp210x converter detected [ 215.311722][ T9] usb 5-1: USB disconnect, device number 16 [ 215.740136][ T5618] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 216.230220][ T7699] capability: warning: `syz.3.515' uses deprecated v2 capabilities in a way that may be insecure [ 216.243157][ T7699] ======================================================= [ 216.243157][ T7699] WARNING: The mand mount option has been deprecated and [ 216.243157][ T7699] and is ignored by this kernel. Remove the mand [ 216.243157][ T7699] option from the mount to silence this warning. [ 216.243157][ T7699] ======================================================= [ 216.287730][ T7699] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 216.386731][ T29] audit: type=1400 audit(1781018934.916:386): avc: denied { mount } for pid=7694 comm="syz.3.515" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 216.545732][ T5618] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 216.554040][ T5618] cp210x 3-1:0.0: GPIO initialisation failed: -32 [ 216.566712][ T5618] usb 3-1: cp210x converter now attached to ttyUSB0 [ 216.612310][ T29] audit: type=1400 audit(1781018934.916:387): avc: denied { mounton } for pid=7694 comm="syz.3.515" path="/101/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 216.694848][ T29] audit: type=1400 audit(1781018934.916:388): avc: denied { read } for pid=7694 comm="syz.3.515" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 216.718159][ T29] audit: type=1400 audit(1781018934.926:389): avc: denied { read } for pid=7694 comm="syz.3.515" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 216.743677][ T29] audit: type=1400 audit(1781018934.926:390): avc: denied { read } for pid=7694 comm="syz.3.515" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 216.778221][ T29] audit: type=1400 audit(1781018934.926:391): avc: denied { read } for pid=7694 comm="syz.3.515" name="/" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 216.808171][ T29] audit: type=1400 audit(1781018934.926:392): avc: denied { open } for pid=7694 comm="syz.3.515" path="/101/file0" dev="overlay" ino=4611686018427387906 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 216.841225][ T29] audit: type=1400 audit(1781018934.926:393): avc: denied { read } for pid=7694 comm="syz.3.515" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 216.961714][ T29] audit: type=1400 audit(1781018934.926:394): avc: denied { read } for pid=7694 comm="syz.3.515" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 217.042938][ T5618] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 217.142656][ T29] audit: type=1400 audit(1781018934.926:395): avc: denied { read } for pid=7694 comm="syz.3.515" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 217.220530][ T5618] usb 5-1: Using ep0 maxpacket: 8 [ 217.240323][ T5618] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 217.253205][ T5618] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 217.262453][ T5618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.276066][ T5618] usb 5-1: config 0 descriptor?? [ 217.410609][ T7716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 217.487032][ T5618] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 217.572317][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.752295][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 217.767650][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 217.772329][ T5618] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 217.794071][ T9] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 217.812287][ T9] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 217.822284][ T9] usb 4-1: Product: syz [ 217.832298][ T9] usb 4-1: Manufacturer: syz [ 217.842295][ T9] usb 4-1: SerialNumber: syz [ 217.852795][ T9] usb 4-1: config 0 descriptor?? [ 217.862950][ T7713] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 217.871294][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 217.892091][ T5870] usb 5-1: USB disconnect, device number 17 [ 217.892293][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 217.932321][ T5618] usb 2-1: Using ep0 maxpacket: 8 [ 217.942677][ T5618] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 217.959414][ T5618] usb 2-1: config 179 has no interface number 0 [ 217.968538][ T5618] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 217.980350][ T5618] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 217.994652][ T5618] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 218.006222][ T5618] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 218.017861][ T5618] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 218.035671][ T5618] usb 2-1: config 179 interface 65 has no altsetting 0 [ 218.037108][ T9] usb 3-1: USB disconnect, device number 13 [ 218.042807][ T5618] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 218.093107][ T5618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.097289][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.130554][ T9] cp210x 3-1:0.0: device disconnected [ 218.192558][ T5748] usb 4-1: USB disconnect, device number 17 [ 218.297073][ T5618] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14 [ 218.479548][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.523'. [ 218.488511][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.523'. [ 218.497568][ T7723] netlink: 'syz.2.523': attribute type 13 has an invalid length. [ 218.505638][ T7723] netlink: 'syz.2.523': attribute type 12 has an invalid length. [ 218.529611][ T4971] input input14: unable to receive magic message: -110 [ 218.720435][ T4971] input input14: unable to receive magic message: -71 [ 218.760453][ T5618] usb 2-1: USB disconnect, device number 16 [ 218.760503][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 220.525114][ T7753] overlayfs: missing 'lowerdir' [ 220.605436][ T7756] smc: net device team0 applied user defined pnetid SYZ2 [ 221.081971][ T7756] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 221.373121][ T5618] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 222.417581][ T5618] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.667934][ T5618] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 222.678626][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.698024][ T5618] usb 4-1: config 0 descriptor?? [ 222.883021][ T5623] Bluetooth: hci0: command 0x0401 tx timeout [ 223.171618][ T5618] pwc: Askey VC010 type 2 USB webcam detected. [ 223.187614][ T5618] pwc: send_video_command error -71 [ 223.196279][ T5618] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 223.204190][ T5618] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 223.215603][ T5618] usb 4-1: USB disconnect, device number 18 [ 223.822339][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 224.014688][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.040737][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 224.079036][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.109097][ T9] usb 4-1: config 0 descriptor?? [ 224.128401][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 224.524685][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 224.541573][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 224.555651][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 224.569509][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 224.584061][ T5829] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 224.597755][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 224.625043][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 224.774526][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.808208][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.849859][ T5829] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 224.868301][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 224.979087][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.000750][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 225.022499][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 225.026753][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 225.026768][ T29] audit: type=1400 audit(1781018943.656:402): avc: denied { bind } for pid=7812 comm="syz.0.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 225.456870][ T5829] usb 3-1: config 0 descriptor?? [ 225.553550][ T29] audit: type=1400 audit(1781018943.686:403): avc: denied { name_bind } for pid=7812 comm="syz.0.550" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 225.557445][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 225.583011][ T29] audit: type=1400 audit(1781018943.686:404): avc: denied { node_bind } for pid=7812 comm="syz.0.550" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 226.018894][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 226.526062][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 226.531861][ T7804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.577528][ T7804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.596578][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 226.614348][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 226.624055][ T29] audit: type=1400 audit(1781018945.246:405): avc: denied { ioctl } for pid=7829 comm="syz.4.555" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 226.820524][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 226.865542][ T9] pwc: Registered as video103. [ 226.937145][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 226.978772][ T7804] netlink: 830 bytes leftover after parsing attributes in process `syz.2.547'. [ 227.040149][ T9] usb 4-1: USB disconnect, device number 19 [ 227.443586][ T7845] overlayfs: missing 'lowerdir' [ 227.912257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 228.027141][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.559'. [ 228.186687][ T5829] usbhid 3-1:0.0: can't add hid device: -71 [ 228.193019][ T5829] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 228.204893][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 228.219204][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.552'. [ 228.267652][ T5829] usb 3-1: USB disconnect, device number 14 [ 228.288783][ T7847] netlink: 'syz.0.552': attribute type 13 has an invalid length. [ 228.325934][ T7847] netlink: 'syz.0.552': attribute type 12 has an invalid length. [ 228.342549][ T5741] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 228.532582][ T5741] usb 5-1: Using ep0 maxpacket: 16 [ 228.556557][ T5741] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 228.592148][ T5741] usb 5-1: config 0 has no interface number 0 [ 228.617210][ T5741] usb 5-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 228.657218][ T5741] usb 5-1: config 0 interface 246 has no altsetting 0 [ 228.687115][ T5741] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 228.720477][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.857093][ T5741] usb 5-1: Product: syz [ 229.285208][ T5741] usb 5-1: Manufacturer: syz [ 229.300794][ T5741] usb 5-1: SerialNumber: syz [ 229.325324][ T5741] usb 5-1: config 0 descriptor?? [ 229.387700][ T7879] FAULT_INJECTION: forcing a failure. [ 229.387700][ T7879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.452358][ T7879] CPU: 1 UID: 0 PID: 7879 Comm: syz.2.565 Not tainted syzkaller #0 PREEMPT(full) [ 229.452384][ T7879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.452394][ T7879] Call Trace: [ 229.452399][ T7879] [ 229.452404][ T7879] dump_stack_lvl+0x100/0x190 [ 229.452430][ T7879] should_fail_ex.cold+0x5/0xa [ 229.452453][ T7879] _copy_from_user+0x2e/0xd0 [ 229.452474][ T7879] copy_msghdr_from_user+0x9f/0x4f0 [ 229.452497][ T7879] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 229.452529][ T7879] ___sys_sendmsg+0x106/0x1e0 [ 229.452551][ T7879] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.452596][ T7879] __sys_sendmsg+0x170/0x220 [ 229.452621][ T7879] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.452655][ T7879] ? rcu_is_watching+0x12/0xc0 [ 229.452681][ T7879] do_syscall_64+0x115/0x870 [ 229.452701][ T7879] ? clear_bhb_loop+0x40/0x90 [ 229.452722][ T7879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.452740][ T7879] RIP: 0033:0x7f24f659ce59 [ 229.452754][ T7879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.452770][ T7879] RSP: 002b:00007f24f47f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.452787][ T7879] RAX: ffffffffffffffda RBX: 00007f24f6815fa0 RCX: 00007f24f659ce59 [ 229.452796][ T7879] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 229.452806][ T7879] RBP: 00007f24f47f6090 R08: 0000000000000000 R09: 0000000000000000 [ 229.452815][ T7879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.452825][ T7879] R13: 00007f24f6816038 R14: 00007f24f6815fa0 R15: 00007fff6345dc98 [ 229.452851][ T7879] [ 229.707356][ T7881] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.566'. [ 229.722119][ T5741] usb 5-1: USB disconnect, device number 18 [ 230.560248][ T7896] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 230.569331][ T7896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 230.578333][ T7896] netlink: 'syz.2.569': attribute type 13 has an invalid length. [ 230.586377][ T7896] netlink: 'syz.2.569': attribute type 12 has an invalid length. [ 231.690959][ T29] audit: type=1400 audit(1781018950.316:406): avc: denied { mounton } for pid=7903 comm="syz.1.575" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 231.727666][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 231.746330][ T5618] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 231.821357][ T7911] 9p: Could not find request transport: virtie [ 231.962661][ T5618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.974765][ T5618] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.986031][ T5618] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 232.001339][ T5618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.026489][ T5618] usb 4-1: config 0 descriptor?? [ 232.070900][ T7920] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 232.142323][ T30] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 232.332288][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 232.341007][ T30] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 232.349822][ T30] usb 3-1: config 0 has no interface number 0 [ 232.547287][ T30] usb 3-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 232.776504][ T7932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.579'. [ 232.785446][ T7932] netlink: 4 bytes leftover after parsing attributes in process `syz.0.579'. [ 232.794385][ T7932] netlink: 'syz.0.579': attribute type 13 has an invalid length. [ 232.798121][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.803126][ T7932] netlink: 'syz.0.579': attribute type 12 has an invalid length. [ 232.849082][ T30] usb 3-1: config 0 interface 246 has no altsetting 0 [ 232.871396][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.871666][ T30] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 232.891192][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.900411][ T30] usb 3-1: Product: syz [ 232.910068][ T30] usb 3-1: Manufacturer: syz [ 232.916379][ T30] usb 3-1: SerialNumber: syz [ 232.928896][ T30] usb 3-1: config 0 descriptor?? [ 232.975825][ T7900] netlink: 830 bytes leftover after parsing attributes in process `syz.3.572'. [ 233.343919][ T5618] usbhid 4-1:0.0: can't add hid device: -71 [ 233.353300][ T5618] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 233.552402][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.583'. [ 233.561284][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 233.570220][ T7948] netlink: 'syz.0.583': attribute type 13 has an invalid length. [ 233.578029][ T7948] netlink: 'syz.0.583': attribute type 12 has an invalid length. [ 233.771846][ T5618] usb 4-1: USB disconnect, device number 20 [ 233.827655][ T30] usb 3-1: USB disconnect, device number 15 [ 234.002457][ T5623] Bluetooth: hci0: command 0x0401 tx timeout [ 235.434922][ T7977] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.591'. [ 235.561129][ T7981] sock: sock_timestamping_bind_phc: sock not bind to device [ 235.593538][ T29] audit: type=1400 audit(1781018954.226:407): avc: denied { append } for pid=7980 comm="syz.0.593" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 235.653570][ T7981] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 235.661608][ T7981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 235.665380][ T29] audit: type=1400 audit(1781018954.286:408): avc: denied { bind } for pid=7980 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 235.689904][ T7981] smc: removing net device team0 with user defined pnetid SYZ2 [ 235.704988][ T7981] team0 (unregistering): Port device team_slave_0 removed [ 235.707962][ T7988] overlayfs: missing 'lowerdir' [ 235.728317][ T7992] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 235.767197][ T7981] team0 (unregistering): Port device team_slave_1 removed [ 237.712349][ T5829] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 237.892169][ T5829] usb 4-1: Using ep0 maxpacket: 8 [ 237.917273][ T5829] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 237.926706][ T5829] usb 4-1: config 179 has no interface number 0 [ 237.933401][ T5829] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 237.945632][ T5829] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 237.959663][ T5829] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 237.986797][ T5829] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 238.002839][ T5829] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 238.016696][ T5829] usb 4-1: config 179 interface 65 has no altsetting 0 [ 238.023827][ T5829] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 238.068231][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.107212][ T5829] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input16 [ 238.177648][ T4971] input input16: unable to receive magic message: -110 [ 238.282441][ T5741] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 238.542566][ T4971] input input16: unable to receive magic message: -32 [ 238.642701][ T5741] usb 5-1: Using ep0 maxpacket: 32 [ 238.849560][ T4971] input input16: unable to receive magic message: -32 [ 238.854536][ T9] usb 4-1: USB disconnect, device number 21 [ 238.856368][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 238.856405][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 238.895405][ T5741] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 239.036234][ T5741] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 239.063922][ T5741] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 239.087425][ T5741] usb 5-1: Product: syz [ 239.116370][ T5741] usb 5-1: Manufacturer: syz [ 239.130449][ T5741] usb 5-1: SerialNumber: syz [ 239.166527][ T5741] usb 5-1: config 0 descriptor?? [ 239.222646][ T8034] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 239.254867][ T5741] hub 5-1:0.0: bad descriptor, ignoring hub [ 239.260880][ T5741] hub 5-1:0.0: probe with driver hub failed with error -5 [ 241.212485][ T5741] usb 5-1: USB disconnect, device number 19 [ 242.646811][ T29] audit: type=1400 audit(1781018961.276:409): avc: denied { create } for pid=8069 comm="syz.2.618" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 242.678413][ T8087] sock: sock_timestamping_bind_phc: sock not bind to device [ 242.731833][ T29] audit: type=1400 audit(1781018961.336:410): avc: denied { unlink } for pid=5616 comm="syz-executor" name="file0" dev="tmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 242.772178][ T8087] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.866803][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.622'. [ 243.079539][ T5741] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 243.805566][ T5741] usb 3-1: Using ep0 maxpacket: 8 [ 243.897119][ T5741] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 243.967432][ T5741] usb 3-1: config 179 has no interface number 0 [ 243.996530][ T5741] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 244.023374][ T5741] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 244.061967][ T5741] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 244.075838][ T8103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 244.094624][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 244.094656][ T8103] netlink: 'syz.1.617': attribute type 13 has an invalid length. [ 244.094670][ T8103] netlink: 'syz.1.617': attribute type 12 has an invalid length. [ 244.102617][ T5741] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8240, setting to 1024 [ 244.102652][ T5741] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 244.102680][ T5741] usb 3-1: config 179 interface 65 has no altsetting 0 [ 244.102711][ T5741] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 244.102731][ T5741] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.121105][ T5741] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input17 [ 244.166307][ T4971] input input17: unable to receive magic message: -110 [ 244.177695][ T4971] input input17: unable to receive magic message: -32 [ 244.191698][ T4971] input input17: unable to receive magic message: -32 [ 244.199414][ T4971] input input17: unable to receive magic message: -32 [ 244.232384][ T8108] overlayfs: missing 'lowerdir' [ 244.248584][ T4971] input input17: unable to receive magic message: -32 [ 244.305162][ T5853] input input17: unable to receive magic message: -32 [ 244.321053][ T4971] input input17: unable to receive magic message: -32 [ 244.328409][ T4971] input input17: unable to receive magic message: -32 [ 244.563565][ T5727] usb 3-1: USB disconnect, device number 16 [ 244.563664][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 245.185785][ T29] audit: type=1400 audit(1781018963.816:411): avc: denied { kexec_image_load } for pid=8123 comm="syz.3.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 245.336123][ T8128] FAULT_INJECTION: forcing a failure. [ 245.336123][ T8128] name failslab, interval 1, probability 0, space 0, times 0 [ 245.365540][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.3.631 Not tainted syzkaller #0 PREEMPT(full) [ 245.365566][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 245.365576][ T8128] Call Trace: [ 245.365582][ T8128] [ 245.365588][ T8128] dump_stack_lvl+0x100/0x190 [ 245.365614][ T8128] should_fail_ex.cold+0x5/0xa [ 245.365637][ T8128] ? tomoyo_realpath_from_path+0xb6/0x690 [ 245.365662][ T8128] should_failslab+0xc2/0x120 [ 245.365678][ T8128] __kmalloc_noprof+0xe0/0x850 [ 245.365699][ T8128] ? kfree+0x1dd/0x6c0 [ 245.365720][ T8128] tomoyo_realpath_from_path+0xb6/0x690 [ 245.365747][ T8128] tomoyo_path_number_perm+0x23c/0x580 [ 245.365766][ T8128] ? tomoyo_path_number_perm+0x22e/0x580 [ 245.365786][ T8128] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 245.365824][ T8128] ? find_held_lock+0x2b/0x80 [ 245.365837][ T8128] ? __fget_files+0x215/0x3d0 [ 245.365854][ T8128] ? hook_file_ioctl_common+0x149/0x410 [ 245.365868][ T8128] ? __fget_files+0x215/0x3d0 [ 245.365889][ T8128] ? __fget_files+0x21f/0x3d0 [ 245.365909][ T8128] security_file_ioctl+0xd3/0x230 [ 245.365931][ T8128] __x64_sys_ioctl+0xb7/0x210 [ 245.365948][ T8128] do_syscall_64+0x115/0x870 [ 245.365967][ T8128] ? clear_bhb_loop+0x40/0x90 [ 245.365984][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.365999][ T8128] RIP: 0033:0x7fced099ce59 [ 245.366011][ T8128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.366025][ T8128] RSP: 002b:00007fced189d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.366041][ T8128] RAX: ffffffffffffffda RBX: 00007fced0c16090 RCX: 00007fced099ce59 [ 245.366050][ T8128] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 245.366062][ T8128] RBP: 00007fced189d090 R08: 0000000000000000 R09: 0000000000000000 [ 245.366071][ T8128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.366079][ T8128] R13: 00007fced0c16128 R14: 00007fced0c16090 R15: 00007ffff69ad348 [ 245.366098][ T8128] [ 245.366109][ T8128] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.179660][ T8149] overlayfs: missing 'lowerdir' [ 248.122517][ T5727] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 248.177871][ T8164] binder: BINDER_SET_CONTEXT_MGR already set [ 248.184062][ T8164] binder: 8162:8164 ioctl 4018620d 200000004a80 returned -16 [ 248.448571][ T5727] usb 2-1: Using ep0 maxpacket: 8 [ 248.983879][ T5727] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 249.086188][ T5727] usb 2-1: config 179 has no interface number 0 [ 249.132805][ T5727] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 249.149339][ T5727] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 249.171086][ T5727] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.171118][ T5727] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 249.171142][ T5727] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 249.171179][ T5727] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 249.230173][ T8174] overlayfs: missing 'lowerdir' [ 249.245929][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.336310][ T8160] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 249.506357][ T8178] batman_adv: batadv0: Adding interface: dummy0 [ 249.526183][ T8178] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.589474][ T8178] batman_adv: batadv0: Interface activated: dummy0 [ 250.053839][ T8180] batadv0: mtu less than device minimum [ 250.081212][ T8180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.092580][ T8180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.103837][ T8180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.114845][ T8180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.125713][ T8180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.137012][ T8180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.147848][ T8180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.158849][ T8180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.169692][ T8180] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 250.520430][ T8191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.647'. [ 250.529391][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 250.538487][ T8191] netlink: 'syz.4.647': attribute type 13 has an invalid length. [ 250.546399][ T8191] netlink: 'syz.4.647': attribute type 12 has an invalid length. [ 252.102009][ T5829] usb 2-1: USB disconnect, device number 17 [ 252.102114][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 252.116193][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 252.635038][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 252.702540][ T5726] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 252.864991][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.882511][ T5726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.912322][ T5726] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 252.917551][ T5727] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 252.922518][ T5726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.943388][ T5726] usb 5-1: config 0 descriptor?? [ 252.999220][ T8230] sock: sock_timestamping_bind_phc: sock not bind to device [ 253.060185][ T8230] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 253.100516][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.660'. [ 253.113017][ T5727] usb 2-1: Using ep0 maxpacket: 16 [ 253.128262][ T5727] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 253.138768][ T5727] usb 2-1: config 0 has no interface number 0 [ 253.148485][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 253.158300][ T8235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 253.173220][ T8235] netlink: 'syz.0.657': attribute type 13 has an invalid length. [ 253.183865][ T8235] netlink: 'syz.0.657': attribute type 12 has an invalid length. [ 253.198724][ T8230] smc: removing net device team0 with user defined pnetid SYZ2 [ 253.213920][ T5727] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 253.233383][ T8230] team0 (unregistering): Port device team_slave_0 removed [ 253.251399][ T8230] team0 (unregistering): Port device team_slave_1 removed [ 253.266029][ T5727] usb 2-1: config 0 interface 246 has no altsetting 0 [ 253.275688][ T5727] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 253.284858][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.293349][ T5727] usb 2-1: Product: syz [ 253.297732][ T5727] usb 2-1: Manufacturer: syz [ 253.306239][ T5727] usb 2-1: SerialNumber: syz [ 253.325843][ T5727] usb 2-1: config 0 descriptor?? [ 253.411017][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.433066][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.468741][ T8201] netlink: 830 bytes leftover after parsing attributes in process `syz.4.650'. [ 253.589326][ T5727] usb 2-1: USB disconnect, device number 18 [ 253.877040][ T5726] usbhid 5-1:0.0: can't add hid device: -71 [ 253.883127][ T5726] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 253.906281][ T5726] usb 5-1: USB disconnect, device number 20 [ 253.912342][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 254.123814][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.148469][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.158652][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 254.173683][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.193643][ T9] usb 4-1: config 0 descriptor?? [ 254.365516][ T8255] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 254.403318][ T8255] netlink: 'syz.1.667': attribute type 27 has an invalid length. [ 254.412396][ T5726] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 254.479861][ T8255] bond0: (slave bond_slave_1): Releasing backup interface [ 254.576401][ T5726] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 254.609780][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.635393][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.641674][ T5726] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.678294][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.705205][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.719347][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.732692][ T8246] netlink: 830 bytes leftover after parsing attributes in process `syz.3.663'. [ 254.743180][ T5726] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.757978][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.787111][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.808689][ T5726] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.840807][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.849287][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.869639][ T5726] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.891151][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.902710][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 254.921898][ T5726] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 254.944651][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.980491][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.001940][ T5726] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.026074][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.040740][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.064684][ T5726] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.088491][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.136505][ T5726] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 255.151812][ T29] audit: type=1400 audit(1781018973.776:412): avc: denied { unmount } for pid=5615 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 255.162286][ T5726] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 255.184819][ T8276] netlink: 44 bytes leftover after parsing attributes in process `syz.2.672'. [ 255.273852][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 255.368366][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.374815][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.374832][ T5726] usb 1-1: config 0 interface 0 has no altsetting 0 [ 255.396165][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 255.555322][ T9] usb 4-1: USB disconnect, device number 22 [ 255.571756][ T5726] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 255.612071][ T5726] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 255.639755][ T5726] usb 1-1: Product: syz [ 255.649815][ T5726] usb 1-1: Manufacturer: syz [ 255.654880][ T5726] usb 1-1: SerialNumber: syz [ 255.677737][ T5726] usb 1-1: config 0 descriptor?? [ 255.700822][ T5726] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 255.893239][ T5868] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 256.286563][ T8289] FAULT_INJECTION: forcing a failure. [ 256.286563][ T8289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.301388][ T8289] CPU: 0 UID: 0 PID: 8289 Comm: syz.0.664 Not tainted syzkaller #0 PREEMPT(full) [ 256.301413][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.301423][ T8289] Call Trace: [ 256.301429][ T8289] [ 256.301435][ T8289] dump_stack_lvl+0x100/0x190 [ 256.301458][ T8289] should_fail_ex.cold+0x5/0xa [ 256.301480][ T8289] _copy_to_user+0x32/0xd0 [ 256.301505][ T8289] simple_read_from_buffer+0xcb/0x170 [ 256.301528][ T8289] proc_fail_nth_read+0x1af/0x230 [ 256.301548][ T8289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.301568][ T8289] ? rw_verify_area+0xce/0x6d0 [ 256.301584][ T8289] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.301601][ T8289] vfs_read+0x1e4/0xb30 [ 256.301623][ T8289] ? __pfx_vfs_read+0x10/0x10 [ 256.301642][ T8289] ? __fget_files+0x215/0x3d0 [ 256.301669][ T8289] ? __fget_files+0x21f/0x3d0 [ 256.301696][ T8289] ksys_read+0x12a/0x250 [ 256.301715][ T8289] ? __pfx_ksys_read+0x10/0x10 [ 256.301734][ T8289] ? rcu_is_watching+0x12/0xc0 [ 256.301762][ T8289] do_syscall_64+0x115/0x870 [ 256.301784][ T8289] ? clear_bhb_loop+0x40/0x90 [ 256.301806][ T8289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.301822][ T8289] RIP: 0033:0x7f0e9db5d68e [ 256.301838][ T8289] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 256.301853][ T8289] RSP: 002b:00007f0e9eaa9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.301870][ T8289] RAX: ffffffffffffffda RBX: 00007f0e9eaaa6c0 RCX: 00007f0e9db5d68e [ 256.301881][ T8289] RDX: 000000000000000f RSI: 00007f0e9eaaa0a0 RDI: 0000000000000005 [ 256.301891][ T8289] RBP: 00007f0e9eaaa090 R08: 0000000000000000 R09: 0000000000000000 [ 256.301901][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.301911][ T8289] R13: 00007f0e9de16128 R14: 00007f0e9de16090 R15: 00007ffc53e7fa88 [ 256.301935][ T8289] [ 256.651885][ T5727] usb 1-1: USB disconnect, device number 14 [ 256.675513][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.4.678'. [ 256.701979][ T5727] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 256.702064][ T8297] FAULT_INJECTION: forcing a failure. [ 256.702064][ T8297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.716961][ T29] audit: type=1400 audit(1781018975.326:413): avc: denied { bind } for pid=8296 comm="syz.0.675" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 256.726624][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.0.675 Not tainted syzkaller #0 PREEMPT(full) [ 256.726650][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.726659][ T8297] Call Trace: [ 256.726664][ T8297] [ 256.726670][ T8297] dump_stack_lvl+0x100/0x190 [ 256.726694][ T8297] should_fail_ex.cold+0x5/0xa [ 256.726716][ T8297] _copy_from_user+0x2e/0xd0 [ 256.726736][ T8297] copy_msghdr_from_user+0x9f/0x4f0 [ 256.726757][ T8297] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 256.726785][ T8297] ___sys_sendmsg+0x106/0x1e0 [ 256.726805][ T8297] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.726849][ T8297] __sys_sendmsg+0x170/0x220 [ 256.726873][ T8297] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.726904][ T8297] ? rcu_is_watching+0x12/0xc0 [ 256.726930][ T8297] do_syscall_64+0x115/0x870 [ 256.726950][ T8297] ? clear_bhb_loop+0x40/0x90 [ 256.726969][ T8297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.726985][ T8297] RIP: 0033:0x7f0e9db9ce59 [ 256.726999][ T8297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.727014][ T8297] RSP: 002b:00007f0e9eacb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.727030][ T8297] RAX: ffffffffffffffda RBX: 00007f0e9de15fa0 RCX: 00007f0e9db9ce59 [ 256.727040][ T8297] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 256.727048][ T8297] RBP: 00007f0e9eacb090 R08: 0000000000000000 R09: 0000000000000000 [ 256.727057][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.727066][ T8297] R13: 00007f0e9de16038 R14: 00007f0e9de15fa0 R15: 00007ffc53e7fa88 [ 256.727087][ T8297] [ 256.800390][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.677'. [ 256.851700][ T5868] usb 2-1: unable to get BOS descriptor or descriptor too short [ 256.937165][ T5868] usb 2-1: config 114 interface 0 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 64 [ 256.959030][ T5868] usb 2-1: config 114 interface 0 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 256.972415][ T8294] team0 (unregistering): Port device team_slave_0 removed [ 256.993334][ T5868] usb 2-1: config 114 interface 0 altsetting 232 endpoint 0x8A has invalid wMaxPacketSize 0 [ 257.006858][ T8294] team0 (unregistering): Port device team_slave_1 removed [ 257.023217][ T5868] usb 2-1: config 114 interface 0 has no altsetting 0 [ 257.031981][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 257.049967][ T5868] usb 2-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=7e.d7 [ 257.059888][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.068243][ T5868] usb 2-1: Product: syz [ 257.072682][ T5868] usb 2-1: Manufacturer: syz [ 257.078692][ T29] audit: type=1400 audit(1781018975.706:414): avc: denied { write } for pid=8279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.122867][ T5868] usb 2-1: SerialNumber: syz [ 257.141398][ T8281] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 257.474365][ T8316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.680'. [ 257.483288][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.680'. [ 257.492183][ T8316] netlink: 'syz.3.680': attribute type 13 has an invalid length. [ 257.500037][ T8316] netlink: 'syz.3.680': attribute type 12 has an invalid length. [ 257.752301][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 257.752337][ T29] audit: type=1400 audit(1781018976.376:415): avc: denied { write } for pid=8315 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 257.827382][ T5868] usb 2-1: USB disconnect, device number 19 [ 257.962676][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 257.972400][ T9] usb 3-1: config 0 has an invalid interface number: 246 but max is 0 [ 257.980855][ T9] usb 3-1: config 0 has no interface number 0 [ 257.987062][ T9] usb 3-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 258.069127][ T9] usb 3-1: config 0 interface 246 has no altsetting 0 [ 258.093855][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 258.116290][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.129386][ T8326] 9p: Could not find request transport: virtie [ 258.150581][ T8322] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 258.153919][ T9] usb 3-1: Product: syz [ 258.164033][ T9] usb 3-1: Manufacturer: syz [ 258.168700][ T9] usb 3-1: SerialNumber: syz [ 258.178377][ T9] usb 3-1: config 0 descriptor?? [ 258.427164][ T9] usb 3-1: USB disconnect, device number 17 [ 258.592813][ T5829] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 258.803815][ T29] audit: type=1400 audit(1781018977.426:416): avc: denied { write } for pid=8335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.862349][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 258.883271][ T5829] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 258.936973][ T5829] usb 5-1: config 0 has no interface number 0 [ 259.054629][ T5829] usb 5-1: config 0 interface 153 has no altsetting 0 [ 259.183962][ T5829] usb 5-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=6c.d5 [ 259.296556][ T5829] usb 5-1: New USB device strings: Mfr=208, Product=45, SerialNumber=3 [ 259.326885][ T5829] usb 5-1: Product: syz [ 259.351853][ T5829] usb 5-1: Manufacturer: syz [ 259.374127][ T5829] usb 5-1: SerialNumber: syz [ 259.402899][ T5829] usb 5-1: config 0 descriptor?? [ 259.414556][ T29] audit: type=1400 audit(1781018978.046:417): avc: denied { write } for pid=8357 comm="rm" name="hook-state" dev="tmpfs" ino=1777 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 259.666015][ T8363] binder: 8359:8363 ioctl c0306201 0 returned -14 [ 259.686729][ T5829] hub 5-1:0.153: bad descriptor, ignoring hub [ 259.693067][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 259.764402][ T5829] hub 5-1:0.153: probe with driver hub failed with error -5 [ 259.898752][ T5829] sierra 5-1:0.153: Sierra USB modem converter detected [ 259.963815][ T9] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 260.047782][ T9] usb 3-1: config 0 has no interface number 0 [ 260.063865][ T5829] usb 5-1: USB disconnect, device number 21 [ 260.138906][ T9] usb 3-1: config 0 interface 41 has no altsetting 0 [ 260.162542][ T5636] Bluetooth: hci0: command 0x0401 tx timeout [ 260.183516][ T5829] sierra 5-1:0.153: device disconnected [ 260.219107][ T9] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 260.352892][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.400958][ T29] audit: type=1400 audit(1781018978.216:418): avc: denied { call } for pid=8359 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 260.430351][ T9] usb 3-1: Product: syz [ 260.464925][ T9] usb 3-1: Manufacturer: syz [ 260.479942][ T29] audit: type=1400 audit(1781018978.216:419): avc: denied { transfer } for pid=8359 comm="syz.0.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 260.484038][ T9] usb 3-1: SerialNumber: syz [ 260.521088][ T8369] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 260.545938][ T8369] SELinux: failed to load policy [ 260.565859][ T8369] netlink: 'syz.0.692': attribute type 39 has an invalid length. [ 260.583508][ T9] usb 3-1: config 0 descriptor?? [ 261.920574][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 261.993919][ T5868] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 262.164872][ T5868] usb 1-1: Using ep0 maxpacket: 16 [ 262.181384][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.212066][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.236306][ T5868] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.260252][ T8394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.699'. [ 262.272977][ T5868] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 262.305793][ T5868] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 262.371942][ T8400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.700'. [ 262.378807][ T5868] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.419483][ T5868] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.526233][ T5868] usb 1-1: Manufacturer: syz [ 262.694441][ T5868] usb 1-1: config 0 descriptor?? [ 262.828618][ T5829] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 262.907364][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.932996][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.012500][ T5868] rc_core: IR keymap rc-hauppauge not found [ 263.020001][ T5868] Registered IR keymap rc-empty [ 263.021549][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 263.031411][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.034587][ T5829] usb 2-1: config 0 has an invalid interface number: 246 but max is 0 [ 263.050486][ T5829] usb 2-1: config 0 has no interface number 0 [ 263.052470][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.067131][ T5829] usb 2-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 263.083617][ T5868] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 263.092255][ T5829] usb 2-1: config 0 interface 246 has no altsetting 0 [ 263.105405][ T5868] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18 [ 263.120788][ T5829] usb 2-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 263.130703][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.133059][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.162392][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.173965][ T5829] usb 2-1: Product: syz [ 263.179624][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 263.190896][ T5829] usb 2-1: Manufacturer: syz [ 263.192432][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.198330][ T5829] usb 2-1: SerialNumber: syz [ 263.207886][ T9] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 263.232374][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.242467][ T5726] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 263.251674][ T5829] usb 2-1: config 0 descriptor?? [ 263.252402][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.257136][ T9] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 263.284116][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.289909][ T9] usb 3-1: USB disconnect, device number 18 [ 263.302409][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.322382][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.342595][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.362441][ T5868] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 263.397155][ T5868] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 263.425941][ T5868] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 263.474899][ T5726] usb 4-1: Using ep0 maxpacket: 32 [ 263.498793][ T5726] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 263.517764][ T5726] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 263.525673][ T5868] usb 1-1: USB disconnect, device number 15 [ 263.546801][ T5829] usb 2-1: USB disconnect, device number 20 [ 263.560721][ T5726] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 263.620929][ T5726] usb 4-1: Product: syz [ 263.639759][ T5726] usb 4-1: Manufacturer: syz [ 263.654426][ T5726] usb 4-1: SerialNumber: syz [ 263.679594][ T5726] usb 4-1: config 0 descriptor?? [ 263.687420][ T8411] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 263.690417][ T8414] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 263.696873][ T5726] hub 4-1:0.0: bad descriptor, ignoring hub [ 263.711395][ T5726] hub 4-1:0.0: probe with driver hub failed with error -5 [ 263.749938][ T8414] SELinux: failed to load policy [ 263.800082][ T8414] netlink: 'syz.4.705': attribute type 39 has an invalid length. [ 265.690414][ T5726] usb 4-1: USB disconnect, device number 23 [ 266.072326][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 266.245821][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 266.260412][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 266.272339][ T5868] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 266.279825][ T9] usb 1-1: config 0 has no interface number 0 [ 266.296629][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.329946][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 266.357762][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 266.377361][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 266.394010][ T9] usb 1-1: Product: syz [ 266.408167][ T9] usb 1-1: SerialNumber: syz [ 266.430592][ T9] usb 1-1: config 0 descriptor?? [ 266.443645][ T5868] usb 5-1: Using ep0 maxpacket: 16 [ 266.447180][ T9] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 266.469932][ T5868] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 266.480647][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input19 [ 266.531817][ T5868] usb 5-1: config 0 has no interface number 0 [ 266.564229][ T5868] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.582678][ T8448] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 266.613437][ T5868] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 266.655160][ T5868] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 266.700883][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 266.744842][ T5868] usb 5-1: Product: syz [ 266.755060][ T5868] usb 5-1: SerialNumber: syz [ 266.790652][ T5868] usb 5-1: config 0 descriptor?? [ 266.823016][ T5868] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 266.865416][ T5868] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input20 [ 266.911849][ T5868] ------------[ cut here ]------------ [ 266.911930][ T5868] URB ffff88802c55ef00 submitted while active [ 266.911944][ T5868] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#1: kworker/1:7/5868 [ 266.911986][ T5868] Modules linked in: [ 266.912020][ T5868] CPU: 1 UID: 0 PID: 5868 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 266.912061][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.912075][ T5868] Workqueue: usb_hub_wq hub_event [ 266.912096][ T5868] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 266.912122][ T5868] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 2d a6 b0 fa 48 8d 3d 26 f1 8b 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 266.912140][ T5868] RSP: 0018:ffffc90004ab6e50 EFLAGS: 00010287 [ 266.912156][ T5868] RAX: 0000000000053dd4 RBX: ffff88802c55ef00 RCX: ffffc9001baa9000 [ 266.912168][ T5868] RDX: 0000000000100000 RSI: ffff88802c55ef00 RDI: ffffffff90e3fc80 [ 266.912195][ T5868] RBP: ffff888026cf0660 R08: 0000000000000000 R09: fffffbfff21ae34a [ 266.912335][ T5868] R10: ffffc90004ab6ed8 R11: 0000000000000000 R12: ffff8880744b38a0 [ 266.912354][ T5868] R13: ffff8880744b3810 R14: ffff8880744b3850 R15: ffff888034f442e0 [ 266.912369][ T5868] FS: 0000000000000000(0000) GS:ffff888124487000(0000) knlGS:0000000000000000 [ 266.912387][ T5868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.912401][ T5868] CR2: 00007fced0a4f156 CR3: 0000000028777000 CR4: 00000000003526f0 [ 266.912414][ T5868] Call Trace: [ 266.912421][ T5868] [ 266.912428][ T5868] ? lockdep_hardirqs_on+0x78/0x100 [ 266.912454][ T5868] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 266.912477][ T5868] ? __pm_runtime_resume+0xc3/0x170 [ 266.912508][ T5868] cm109_input_open+0x273/0x420 [ 266.912534][ T5868] ? __pfx_cm109_input_open+0x10/0x10 [ 266.912557][ T5868] input_open_device+0x24c/0x3d0 [ 266.912580][ T5868] kbd_connect+0x124/0x180 [ 266.912600][ T5868] input_attach_handler.isra.0+0x177/0x1e0 [ 266.912626][ T5868] input_register_device.cold+0x139/0x375 [ 266.912654][ T5868] cm109_usb_probe+0x128d/0x17f0 [ 266.912686][ T5868] usb_probe_interface+0x303/0x8f0 [ 266.912709][ T5868] ? __pfx_usb_probe_interface+0x10/0x10 [ 266.912730][ T5868] really_probe+0x241/0xa60 [ 266.912757][ T5868] __driver_probe_device+0x22e/0x480 [ 266.912782][ T5868] driver_probe_device+0x4c/0x1b0 [ 266.912806][ T5868] __device_attach_driver+0x1df/0x340 [ 266.912861][ T5868] ? __pfx___device_attach_driver+0x10/0x10 [ 266.912886][ T5868] bus_for_each_drv+0x159/0x1e0 [ 266.912909][ T5868] ? __pfx_bus_for_each_drv+0x10/0x10 [ 266.912930][ T5868] ? lockdep_hardirqs_on+0x78/0x100 [ 266.912953][ T5868] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 266.912997][ T5868] __device_attach+0x1e4/0x4d0 [ 266.913025][ T5868] ? __pfx___device_attach+0x10/0x10 [ 266.913051][ T5868] ? do_raw_spin_unlock+0x145/0x1e0 [ 266.913083][ T5868] device_initial_probe+0xaf/0xd0 [ 266.913112][ T5868] bus_probe_device+0x64/0x160 [ 266.913180][ T5868] device_add+0x1210/0x1950 [ 266.913214][ T5868] ? __pfx_device_add+0x10/0x10 [ 266.913252][ T5868] usb_set_configuration+0xd97/0x1c60 [ 266.913320][ T5868] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 266.913357][ T5868] usb_generic_driver_probe+0xa1/0xe0 [ 266.913385][ T5868] usb_probe_device+0xef/0x400 [ 266.913405][ T5868] ? __pfx_usb_probe_device+0x10/0x10 [ 266.913425][ T5868] really_probe+0x241/0xa60 [ 266.913474][ T5868] __driver_probe_device+0x22e/0x480 [ 266.913499][ T5868] ? usb_driver_applicable+0x1c7/0x220 [ 266.913521][ T5868] driver_probe_device+0x4c/0x1b0 [ 266.913547][ T5868] __device_attach_driver+0x1df/0x340 [ 266.913574][ T5868] ? __pfx___device_attach_driver+0x10/0x10 [ 266.913616][ T5868] bus_for_each_drv+0x159/0x1e0 [ 266.913638][ T5868] ? __pfx_bus_for_each_drv+0x10/0x10 [ 266.913659][ T5868] ? lockdep_hardirqs_on+0x78/0x100 [ 266.913682][ T5868] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 266.913707][ T5868] __device_attach+0x1e4/0x4d0 [ 266.913732][ T5868] ? __pfx___device_attach+0x10/0x10 [ 266.913775][ T5868] ? do_raw_spin_unlock+0x145/0x1e0 [ 266.913808][ T5868] device_initial_probe+0xaf/0xd0 [ 266.913835][ T5868] bus_probe_device+0x64/0x160 [ 266.913860][ T5868] device_add+0x1210/0x1950 [ 266.913907][ T5868] ? __pfx_device_add+0x10/0x10 [ 266.913940][ T5868] ? usb_new_device.cold+0xdb4/0x115c [ 266.913968][ T5868] usb_new_device.cold+0x685/0x115c [ 266.913997][ T5868] ? do_raw_spin_lock+0x128/0x260 [ 266.914022][ T5868] ? __pfx_usb_new_device+0x10/0x10 [ 266.914069][ T5868] ? mark_held_locks+0x40/0x70 [ 266.914094][ T5868] hub_event+0x314d/0x4af0 [ 266.914138][ T5868] ? __pfx_hub_event+0x10/0x10 [ 266.914154][ T5868] ? assoc_array_insert+0xcb0/0x32c0 [ 266.914201][ T5868] ? rcu_is_watching+0x12/0xc0 [ 266.914232][ T5868] process_one_work+0xa0e/0x1980 [ 266.914269][ T5868] ? __pfx_process_one_work+0x10/0x10 [ 266.914300][ T5868] ? __pfx_hub_event+0x10/0x10 [ 266.914339][ T5868] worker_thread+0x5ef/0xe50 [ 266.914375][ T5868] ? __pfx_worker_thread+0x10/0x10 [ 266.914398][ T5868] ? kthread+0x13a/0x450 [ 266.914416][ T5868] ? __pfx_worker_thread+0x10/0x10 [ 266.914436][ T5868] kthread+0x370/0x450 [ 266.914455][ T5868] ? __pfx_kthread+0x10/0x10 [ 266.914497][ T5868] ret_from_fork+0x72b/0xd50 [ 266.914523][ T5868] ? __pfx_ret_from_fork+0x10/0x10 [ 266.914549][ T5868] ? __switch_to+0x800/0x1100 [ 266.914577][ T5868] ? __pfx_kthread+0x10/0x10 [ 266.914600][ T5868] ret_from_fork_asm+0x1a/0x30 [ 266.914656][ T5868] [ 266.914667][ T5868] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 266.914680][ T5868] CPU: 1 UID: 0 PID: 5868 Comm: kworker/1:7 Not tainted syzkaller #0 PREEMPT(full) [ 266.914701][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 266.914713][ T5868] Workqueue: usb_hub_wq hub_event [ 266.914732][ T5868] Call Trace: [ 266.914739][ T5868] [ 266.914746][ T5868] dump_stack_lvl+0x100/0x190 [ 266.914772][ T5868] vpanic+0x552/0x970 [ 266.914791][ T5868] ? __pfx_vpanic+0x10/0x10 [ 266.914816][ T5868] panic+0xd1/0xe0 [ 266.914832][ T5868] ? __pfx_panic+0x10/0x10 [ 266.914860][ T5868] check_panic_on_warn.cold+0x19/0x34 [ 266.914880][ T5868] ? usb_submit_urb+0x15fa/0x1910 [ 266.914902][ T5868] __warn.cold+0x191/0x328 [ 266.914922][ T5868] __report_bug+0x296/0x3d0 [ 266.914943][ T5868] ? usb_submit_urb+0x15fa/0x1910 [ 266.914968][ T5868] ? __pfx___report_bug+0x10/0x10 [ 266.914996][ T5868] ? preempt_schedule_common+0x42/0xc0 [ 266.915017][ T5868] ? preempt_schedule_thunk+0x16/0x30 [ 266.915048][ T5868] report_bug_entry+0xe1/0x290 [ 266.915071][ T5868] ? usb_submit_urb+0x15fd/0x1910 [ 266.915096][ T5868] handle_bug+0x1cd/0x2a0 [ 266.915122][ T5868] exc_invalid_op+0x17/0x50 [ 266.915147][ T5868] asm_exc_invalid_op+0x1a/0x20 [ 266.915163][ T5868] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 266.915187][ T5868] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 2d a6 b0 fa 48 8d 3d 26 f1 8b 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 266.915204][ T5868] RSP: 0018:ffffc90004ab6e50 EFLAGS: 00010287 [ 266.915219][ T5868] RAX: 0000000000053dd4 RBX: ffff88802c55ef00 RCX: ffffc9001baa9000 [ 266.915231][ T5868] RDX: 0000000000100000 RSI: ffff88802c55ef00 RDI: ffffffff90e3fc80 [ 266.915242][ T5868] RBP: ffff888026cf0660 R08: 0000000000000000 R09: fffffbfff21ae34a [ 266.915254][ T5868] R10: ffffc90004ab6ed8 R11: 0000000000000000 R12: ffff8880744b38a0 [ 266.915265][ T5868] R13: ffff8880744b3810 R14: ffff8880744b3850 R15: ffff888034f442e0 [ 266.915290][ T5868] ? lockdep_hardirqs_on+0x78/0x100 [ 266.915312][ T5868] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 266.915332][ T5868] ? __pm_runtime_resume+0xc3/0x170 [ 266.915369][ T5868] cm109_input_open+0x273/0x420 [ 266.915395][ T5868] ? __pfx_cm109_input_open+0x10/0x10 [ 266.915419][ T5868] input_open_device+0x24c/0x3d0 [ 266.915443][ T5868] kbd_connect+0x124/0x180 [ 266.915463][ T5868] input_attach_handler.isra.0+0x177/0x1e0 [ 266.915491][ T5868] input_register_device.cold+0x139/0x375 [ 266.915519][ T5868] cm109_usb_probe+0x128d/0x17f0 [ 266.915552][ T5868] usb_probe_interface+0x303/0x8f0 [ 266.915575][ T5868] ? __pfx_usb_probe_interface+0x10/0x10 [ 266.915597][ T5868] really_probe+0x241/0xa60 [ 266.915623][ T5868] __driver_probe_device+0x22e/0x480 [ 266.915650][ T5868] driver_probe_device+0x4c/0x1b0 [ 266.915675][ T5868] __device_attach_driver+0x1df/0x340 [ 266.915700][ T5868] ? __pfx___device_attach_driver+0x10/0x10 [ 266.915722][ T5868] bus_for_each_drv+0x159/0x1e0 [ 266.915743][ T5868] ? __pfx_bus_for_each_drv+0x10/0x10 [ 266.915763][ T5868] ? lockdep_hardirqs_on+0x78/0x100 [ 266.915785][ T5868] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 266.915809][ T5868] __device_attach+0x1e4/0x4d0 [ 266.915832][ T5868] ? __pfx___device_attach+0x10/0x10 [ 266.915937][ T5868] ? do_raw_spin_unlock+0x145/0x1e0 [ 266.915980][ T5868] device_initial_probe+0xaf/0xd0 [ 266.916008][ T5868] bus_probe_device+0x64/0x160 [ 266.916042][ T5868] device_add+0x1210/0x1950 [ 266.916075][ T5868] ? __pfx_device_add+0x10/0x10 [ 266.916111][ T5868] usb_set_configuration+0xd97/0x1c60 [ 266.916155][ T5868] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 266.916179][ T5868] usb_generic_driver_probe+0xa1/0xe0 [ 266.916205][ T5868] usb_probe_device+0xef/0x400 [ 266.916221][ T5868] ? __pfx_usb_probe_device+0x10/0x10 [ 266.916240][ T5868] really_probe+0x241/0xa60 [ 266.916267][ T5868] __driver_probe_device+0x22e/0x480 [ 266.916294][ T5868] ? usb_driver_applicable+0x1c7/0x220 [ 266.916315][ T5868] driver_probe_device+0x4c/0x1b0 [ 266.916341][ T5868] __device_attach_driver+0x1df/0x340 [ 266.916377][ T5868] ? __pfx___device_attach_driver+0x10/0x10 [ 266.916402][ T5868] bus_for_each_drv+0x159/0x1e0 [ 266.916425][ T5868] ? __pfx_bus_for_each_drv+0x10/0x10 [ 266.916449][ T5868] ? lockdep_hardirqs_on+0x78/0x100 [ 266.916472][ T5868] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 266.916498][ T5868] __device_attach+0x1e4/0x4d0 [ 266.916538][ T5868] ? __pfx___device_attach+0x10/0x10 [ 266.916563][ T5868] ? do_raw_spin_unlock+0x145/0x1e0 [ 266.916594][ T5868] device_initial_probe+0xaf/0xd0 [ 266.916622][ T5868] bus_probe_device+0x64/0x160 [ 266.916649][ T5868] device_add+0x1210/0x1950 [ 266.916679][ T5868] ? __pfx_device_add+0x10/0x10 [ 266.916711][ T5868] ? usb_new_device.cold+0xdb4/0x115c [ 266.916742][ T5868] usb_new_device.cold+0x685/0x115c [ 266.916771][ T5868] ? do_raw_spin_lock+0x128/0x260 [ 266.916795][ T5868] ? __pfx_usb_new_device+0x10/0x10 [ 266.916823][ T5868] ? mark_held_locks+0x40/0x70 [ 266.916849][ T5868] hub_event+0x314d/0x4af0 [ 266.916885][ T5868] ? __pfx_hub_event+0x10/0x10 [ 266.916901][ T5868] ? assoc_array_insert+0xcb0/0x32c0 [ 266.916931][ T5868] ? rcu_is_watching+0x12/0xc0 [ 266.916960][ T5868] process_one_work+0xa0e/0x1980 [ 266.916998][ T5868] ? __pfx_process_one_work+0x10/0x10 [ 266.917028][ T5868] ? __pfx_hub_event+0x10/0x10 [ 266.917047][ T5868] worker_thread+0x5ef/0xe50 [ 266.917076][ T5868] ? __pfx_worker_thread+0x10/0x10 [ 266.917099][ T5868] ? kthread+0x13a/0x450 [ 266.917116][ T5868] ? __pfx_worker_thread+0x10/0x10 [ 266.917136][ T5868] kthread+0x370/0x450 [ 266.917155][ T5868] ? __pfx_kthread+0x10/0x10 [ 266.917177][ T5868] ret_from_fork+0x72b/0xd50 [ 266.917200][ T5868] ? __pfx_ret_from_fork+0x10/0x10 [ 266.917223][ T5868] ? __switch_to+0x800/0x1100 [ 266.917248][ T5868] ? __pfx_kthread+0x10/0x10 [ 266.917270][ T5868] ret_from_fork_asm+0x1a/0x30 [ 266.917308][ T5868] [ 266.917561][ T5868] Kernel Offset: disabled