last executing test programs: 2m51.660329873s ago: executing program 1 (id=368): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fcffffff850000002d"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2m51.52846139s ago: executing program 1 (id=371): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x100004, @local, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 2m51.372223622s ago: executing program 1 (id=375): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xc2, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @rand_addr=0x64010100, {[@cipso={0x86, 0x78, 0xffffffffffffffff, [{0x5, 0xe, "00020000da6ee06cb8dd9452"}, {0x5, 0x9, "02270e000042eb"}, {0x3, 0x12, '\x00'/16}, {0x0, 0x9, "00de6c83d50800"}, {0x7, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a8525dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x1, 0xe, '\x00'/12}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 2m51.328677703s ago: executing program 1 (id=377): r0 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x4}, &(0x7f0000000140)=0x8) 2m51.170165165s ago: executing program 1 (id=380): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 2m50.958591888s ago: executing program 1 (id=383): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b17, 0x0) 2m35.82763684s ago: executing program 32 (id=383): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b17, 0x0) 2m11.540137497s ago: executing program 2 (id=932): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 2m11.372283758s ago: executing program 2 (id=935): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r2, 0x5}) 2m11.011850662s ago: executing program 2 (id=938): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000002c0)=""/38, 0x26}], 0x2}, 0x1f00) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000008c0)=""/238, 0xee}, {0x0}], 0x2, &(0x7f0000000bc0)=""/23, 0x17}, 0x2000) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2m10.760177363s ago: executing program 2 (id=944): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 2m10.590476139s ago: executing program 2 (id=947): syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000140)={0xaa00072}, &(0x7f0000002200)={0x0, 0xc, 0x1, 0x1, 0x7fff, 0x534}) 2m10.30326002s ago: executing program 2 (id=951): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) 2m9.93024716s ago: executing program 33 (id=951): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002180), r0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f00000021c0)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000004) 1m22.619549859s ago: executing program 3 (id=1642): setns(0xc9, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) 1m22.353671066s ago: executing program 3 (id=1647): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x100, {{@in=@multicast2, @in=@broadcast, 0x3, 0x794, 0x4e23, 0x20, 0x2, 0x0, 0x20, 0x3c, 0x0, 0xee00}, {@in=@loopback, 0x4d3, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x80}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2c, 0x0, 0x2, 0x0, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x20000810) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x41}, 0x4d5, 0x6c}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x0, 0x0, 0x400000}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfd, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1m22.290593877s ago: executing program 3 (id=1649): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x2000400, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000140)='./file0\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 1m22.165770762s ago: executing program 3 (id=1651): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x185093, 0x0) 1m22.007566742s ago: executing program 3 (id=1655): syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) 1m21.755545678s ago: executing program 3 (id=1661): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) 1m21.59369694s ago: executing program 34 (id=1661): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) 4.342166936s ago: executing program 7 (id=2701): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0xc0184d03, &(0x7f0000000340)) 4.206610836s ago: executing program 7 (id=2703): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f0000000080)=""/73, 0x716c8482, 0x936) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000040)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.39459195s ago: executing program 4 (id=2721): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1", 0x7}], 0x1, 0x0, 0x0, 0x10}, 0x0) recvmmsg(r0, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}], 0x1, 0x20000020, 0x0) 3.220430992s ago: executing program 4 (id=2724): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='6', 0x32) fsopen(&(0x7f0000000180)='cgroup\x00', 0x1) 3.074236562s ago: executing program 4 (id=2725): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000012640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000040)={0x0, 0x0}) 2.888144865s ago: executing program 4 (id=2727): r0 = landlock_create_ruleset(&(0x7f00000001c0)={0x2, 0x1, 0x3}, 0x18, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) landlock_restrict_self(r0, 0x9) 2.732420979s ago: executing program 4 (id=2728): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept(r1, 0x0, 0x0) 2.726691371s ago: executing program 6 (id=2729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r0) 2.647814812s ago: executing program 4 (id=2730): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x4, "209c8c53"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000780)={0x0, 0x5, 0x4, "8cb251ca"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.637319826s ago: executing program 6 (id=2731): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2.520442143s ago: executing program 6 (id=2734): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) syz_usb_disconnect(r0) syz_open_dev$hidraw(0x0, 0x454c, 0x10002) 1.310515993s ago: executing program 5 (id=2749): r0 = socket(0x10, 0x3, 0x0) pipe2$9p(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616e001400028008000300030000000800010010"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 1.267496937s ago: executing program 5 (id=2750): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendmsg(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000002c0)="51bb", 0x2}], 0x1}, 0x20008045) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, '\x00', 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x2, 0xe15, 0x0, 0xfffffff6}}}}}}, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 1.193515067s ago: executing program 5 (id=2752): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = fanotify_init(0x4, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fanotify_mark(r0, 0x1, 0x800002b, r1, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) 1.138977879s ago: executing program 7 (id=2754): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x3ac) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(0x3) 1.084513407s ago: executing program 5 (id=2755): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/nullb\x00', 0x10000, 0x0) mkdirat(r0, &(0x7f0000000180)='nullb1\x00', 0x1ff) unlinkat(r0, &(0x7f0000000680)='nullb1\x00', 0x200) 1.072697241s ago: executing program 7 (id=2756): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x2}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) 957.067857ms ago: executing program 5 (id=2758): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x5, 0x16, 0xfffffffe}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) 938.888227ms ago: executing program 7 (id=2759): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x1ff, 0x4) syz_emit_ethernet(0x6a, &(0x7f00000001c0)={@local, @random="005c62509e00", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "f9d3421eee34e00300000800000000000000000000000073", "047f9067ec93e1781806009031066797feb6632a4ceac9254aafec3f00"}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10042, 0x0) 870.564755ms ago: executing program 5 (id=2760): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x3e, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0xc4) syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090264"], 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0xfffffff7, 0xfffffffc, 0x30314742, 0x2, 0x8, [{0x4, 0x4}, {0x752, 0x4}, {0x7f, 0x3}, {0x9, 0x9}, {0x4, 0x30000000}, {0x7, 0x38}, {0xe, 0x2}, {0xa, 0x12}], 0x3b, 0x6, 0x1, 0x0, 0x6}}) 851.157021ms ago: executing program 7 (id=2761): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000200), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r0, 0x20}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000002c0)=0x1) read$dsp(r0, &(0x7f0000000180)=""/67, 0x43) 817.554424ms ago: executing program 6 (id=2762): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000840)={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x3}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @generic={0x1, 0x6, '\b\x00', 0x0, 0x67, 0x1, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}}}}}, 0x0) 767.25014ms ago: executing program 6 (id=2763): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x4}], 0xfffffffffffffca2, 0x0, 0x0}) 694.066678ms ago: executing program 6 (id=2764): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="ad", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002200)="1039", 0x2}], 0x1}}], 0x2, 0x800) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f00000000c0)=0x7, 0x4) 155.983717ms ago: executing program 0 (id=2765): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x61, 0x40001002, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r2, &(0x7f0000001600)=[{&(0x7f0000000240)=""/41, 0x29}], 0x1, 0x0, 0x0) 88.395753ms ago: executing program 0 (id=2766): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000edffffffffffffff00000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) 88.181472ms ago: executing program 0 (id=2767): r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000001140)={r1, &(0x7f0000000200)=[{0x80000000}], &(0x7f00000010c0)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000500)={r3, 0x0, &(0x7f0000000540)=[{{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f000000a300)={{r2, r5, 0x2, [0x80000001, 0x8]}, {r4, r5, 0x6, [0x2, 0x3]}, 0x0, [0x7d, 0x8]}) 64.538699ms ago: executing program 0 (id=2768): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r1], 0x4000) 35.171742ms ago: executing program 0 (id=2769): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x882) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000440)="a12700829244411d55", 0x9}) 0s ago: executing program 0 (id=2770): setns(0xc9, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)="e9", 0x2f}, 0x1, 0x0, 0x0, 0x810}, 0x24004014) kernel console output (not intermixed with test programs): s received: -71 [ 215.119287][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 215.119476][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 215.119499][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 215.119689][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 215.119710][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 215.119904][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 215.119927][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 215.120109][ T5705] usb 7-1: USB disconnect, device number 9 [ 215.120125][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 215.120147][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 215.120168][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 215.262437][ T5586] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 215.421539][ T5586] usb 5-1: Using ep0 maxpacket: 16 [ 215.422129][ T5586] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 215.423137][ T5586] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.423167][ T5586] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.423194][ T5586] usb 5-1: config 0 interface 0 has no altsetting 0 [ 215.423223][ T5586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.425563][ T5586] usb 5-1: Device is not authorized for usage [ 215.721664][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.721726][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.721523][ T5725] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 216.893528][ T5725] usb 7-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 216.896027][ T5725] usb 7-1: config 1 has an invalid interface number: 3 but max is 0 [ 216.896054][ T5725] usb 7-1: config 1 has no interface number 0 [ 216.898739][ T5725] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.898769][ T5725] usb 7-1: Product: syz [ 216.898785][ T5725] usb 7-1: Manufacturer: syz [ 216.898800][ T5725] usb 7-1: SerialNumber: syz [ 216.940529][ T5586] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 216.961876][ T5725] usb 7-1: 3:0 : does not exist [ 216.961896][ T5725] usb 7-1: 3:0 : does not exist [ 217.102424][ T5586] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 217.103215][ T5586] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 217.103233][ T5586] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.103244][ T5586] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 217.103267][ T5586] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.104409][ T5586] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 217.104422][ T5586] usb 1-1: Product: syz [ 217.104431][ T5586] usb 1-1: Manufacturer: syz [ 217.108989][ T5586] cdc_wdm 1-1:1.0: skipping garbage [ 217.109006][ T5586] cdc_wdm 1-1:1.0: skipping garbage [ 217.171114][ T5705] usb 7-1: USB disconnect, device number 10 [ 217.195764][ T5586] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 217.195783][ T5586] cdc_wdm 1-1:1.0: Unknown control protocol [ 217.369432][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.369450][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.369634][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.369658][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.369862][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.369885][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 217.370085][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 217.418896][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 217.418933][ T5586] usb 1-1: USB disconnect, device number 23 [ 217.801671][ C1] net_ratelimit: 7 callbacks suppressed [ 217.801702][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.020225][ T189] usb 5-1: USB disconnect, device number 16 [ 218.100910][ T30] audit: type=1400 audit(1789570558.220:740): avc: denied { mounton } for pid=10872 comm="syz.0.2052" path="/436/gadget" dev="gadgetfs" ino=6853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 218.128188][ T5725] kernel write not supported for file /dummy_udc (pid: 5725 comm: kworker/0:5) [ 218.130811][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.177362][T10877] FAULT_INJECTION: forcing a failure. [ 218.177362][T10877] name failslab, interval 1, probability 0, space 0, times 0 [ 218.177396][T10877] CPU: 1 UID: 0 PID: 10877 Comm: syz.6.2051 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.177426][T10877] Tainted: [L]=SOFTLOCKUP [ 218.177435][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 218.177448][T10877] Call Trace: [ 218.177456][T10877] [ 218.177465][T10877] dump_stack_lvl+0x100/0x190 [ 218.177502][T10877] should_fail_ex.cold+0x5/0xa [ 218.177533][T10877] should_failslab+0xc2/0x120 [ 218.177560][T10877] kmem_cache_alloc_noprof+0x92/0x6a0 [ 218.177583][T10877] ? __sys_bpf+0x12a0/0x4a30 [ 218.177603][T10877] ? radix_tree_node_alloc.constprop.0+0x81/0x360 [ 218.177636][T10877] radix_tree_node_alloc.constprop.0+0x81/0x360 [ 218.177674][T10877] idr_get_free+0x52e/0xa00 [ 218.177713][T10877] idr_alloc_u32+0x1ac/0x320 [ 218.177746][T10877] ? __pfx_idr_alloc_u32+0x10/0x10 [ 218.177778][T10877] ? lock_acquire+0x1d1/0x380 [ 218.177801][T10877] ? __radix_tree_preload+0x7c/0x820 [ 218.177831][T10877] idr_alloc_cyclic+0x10b/0x230 [ 218.177862][T10877] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 218.177889][T10877] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 218.177926][T10877] map_create+0x1698/0x30d0 [ 218.177953][T10877] ? find_held_lock+0x2b/0x80 [ 218.177979][T10877] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 218.178009][T10877] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 218.178049][T10877] ? __pfx_map_create+0x10/0x10 [ 218.178080][T10877] ? avc_has_perm+0x135/0x1e0 [ 218.178110][T10877] ? __pfx_avc_has_perm+0x10/0x10 [ 218.178137][T10877] ? __might_fault+0xc5/0x140 [ 218.178169][T10877] ? __might_fault+0xc5/0x140 [ 218.178205][T10877] ? selinux_bpf+0xfb/0x150 [ 218.178238][T10877] __sys_bpf+0x12a0/0x4a30 [ 218.178259][T10877] ? plist_check_list+0x1b8/0x280 [ 218.178286][T10877] ? plist_check_list+0x190/0x280 [ 218.178308][T10877] ? __pfx___sys_bpf+0x10/0x10 [ 218.178327][T10877] ? find_held_lock+0x2b/0x80 [ 218.178354][T10877] ? futex_wake+0x4ea/0x5e0 [ 218.178387][T10877] ? futex_private_hash_put.part.0+0xdc/0x180 [ 218.178415][T10877] ? futex_private_hash_put+0x24/0x30 [ 218.178447][T10877] ? __pfx_futex_wake+0x10/0x10 [ 218.178483][T10877] ? rcu_read_lock_any_held+0x6a/0x90 [ 218.178512][T10877] ? find_held_lock+0x2b/0x80 [ 218.178540][T10877] ? ksys_write+0x190/0x250 [ 218.178561][T10877] ? ksys_write+0x190/0x250 [ 218.178601][T10877] ? __x64_sys_futex+0x34f/0x4d0 [ 218.178627][T10877] ? __x64_sys_futex+0x358/0x4d0 [ 218.178657][T10877] ? xfd_validate_state+0x129/0x190 [ 218.178692][T10877] ? __x64_sys_bpf+0xce/0x140 [ 218.178713][T10877] __x64_sys_bpf+0xce/0x140 [ 218.178737][T10877] ? do_syscall_64+0xae/0x790 [ 218.178766][T10877] do_syscall_64+0x123/0x790 [ 218.178796][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.178818][T10877] RIP: 0033:0x7f74c859e159 [ 218.178837][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.178856][T10877] RSP: 002b:00007f74c94a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.178877][T10877] RAX: ffffffffffffffda RBX: 00007f74c8825fa0 RCX: 00007f74c859e159 [ 218.178892][T10877] RDX: 0000000000000048 RSI: 0000200000000000 RDI: 0000000000000000 [ 218.178906][T10877] RBP: 00007f74c863506b R08: 0000000000000000 R09: 0000000000000000 [ 218.178919][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.178932][T10877] R13: 00007f74c8826038 R14: 00007f74c8825fa0 R15: 00007ffcfba5a868 [ 218.178962][T10877] [ 218.314088][ T5725] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 218.523281][ T5725] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 218.543309][ T5725] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 218.543354][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.543380][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.543403][ T5725] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 218.582636][ T5725] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 218.582661][ T5725] usb 6-1: Manufacturer: syz [ 218.620426][ T5725] usb 6-1: config 0 descriptor?? [ 218.843820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.074416][ T5725] appleir 0003:05AC:8243.0012: unknown main item tag 0x0 [ 219.136035][ T5725] appleir 0003:05AC:8243.0012: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 219.162945][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.191479][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 219.268320][ T30] audit: type=1400 audit(1789570815.383:741): avc: denied { watch watch_reads } for pid=10911 comm="syz.4.2068" path="/proc/891" dev="proc" ino=34369 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 219.350966][ T30] audit: type=1400 audit(1789570815.463:742): avc: denied { create } for pid=10917 comm="syz.4.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 219.376002][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 219.376940][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.376969][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.377004][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.399413][ T25] usb 6-1: USB disconnect, device number 16 [ 219.421598][ T9] usb 1-1: config 0 descriptor?? [ 219.435093][ T30] audit: type=1400 audit(1789570815.553:743): avc: denied { connect } for pid=10917 comm="syz.4.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 219.451586][ T30] audit: type=1400 audit(1789570815.563:744): avc: denied { bind } for pid=10917 comm="syz.4.2069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 219.745068][T10927] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10927 comm=syz.4.2072 [ 219.871860][ T9] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 219.871961][ T9] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 219.881672][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.884922][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.916999][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0013/input/input24 [ 219.959711][ T9] cm6533_jd 0003:0D8C:0022.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 220.068757][ T189] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 220.153611][ T25] usb 1-1: USB disconnect, device number 24 [ 220.155103][ T30] audit: type=1400 audit(1789570816.273:745): avc: denied { read write } for pid=10941 comm="syz.5.2079" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 220.155149][ T30] audit: type=1400 audit(1789570816.273:746): avc: denied { open } for pid=10941 comm="syz.5.2079" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 220.184131][T10940] netlink: 'syz.6.2075': attribute type 2 has an invalid length. [ 220.217060][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.235560][ T189] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 220.239544][ T189] usb 5-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 220.239568][ T189] usb 5-1: Product: syz [ 220.272344][ T9] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 220.280521][ T189] usb 5-1: Device is not authorized for usage [ 220.326273][ T9] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 220.600504][T10948] fido_id[10948]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 220.761782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.848669][ T30] audit: type=1326 audit(1789570816.963:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.7.2083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef019e159 code=0x7ffc0000 [ 220.851041][ T30] audit: type=1326 audit(1789570816.963:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.7.2083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faef019e159 code=0x7ffc0000 [ 220.851089][ T30] audit: type=1326 audit(1789570816.963:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10954 comm="syz.7.2083" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7faef019e159 code=0x7ffc0000 [ 220.921716][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.946599][ T3267] IPVS: starting estimator thread 0... [ 220.969529][T10965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.033625][T10966] IPVS: using max 47 ests per chain, 112800 per kthread [ 221.267273][T10978] type: 2282218472 invalid [ 221.485288][T10988] usb 5-1: USB disconnect, device number 17 [ 221.491610][ T5705] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 221.617593][T10995] FAULT_INJECTION: forcing a failure. [ 221.617593][T10995] name failslab, interval 1, probability 0, space 0, times 0 [ 221.617628][T10995] CPU: 0 UID: 0 PID: 10995 Comm: syz.6.2101 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.617658][T10995] Tainted: [L]=SOFTLOCKUP [ 221.617666][T10995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 221.617677][T10995] Call Trace: [ 221.617685][T10995] [ 221.617694][T10995] dump_stack_lvl+0x100/0x190 [ 221.617729][T10995] should_fail_ex.cold+0x5/0xa [ 221.617760][T10995] should_failslab+0xc2/0x120 [ 221.617789][T10995] kmem_cache_alloc_noprof+0x92/0x6a0 [ 221.617812][T10995] ? __ksm_enter+0x3c/0x630 [ 221.617836][T10995] __ksm_enter+0x3c/0x630 [ 221.617858][T10995] ? mas_prev_slot+0x768/0x11b0 [ 221.617881][T10995] ksm_madvise+0x24a/0x2c0 [ 221.617904][T10995] madvise_vma_behavior+0x261/0x2350 [ 221.617930][T10995] ? mas_prev+0xa4/0x100 [ 221.617948][T10995] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 221.617974][T10995] ? mas_walk+0x260/0x310 [ 221.617997][T10995] ? find_vma_prev+0xd8/0x150 [ 221.618021][T10995] ? __pfx_find_vma_prev+0x10/0x10 [ 221.618043][T10995] ? lock_acquire+0x1d1/0x380 [ 221.618080][T10995] madvise_walk_vmas+0x30e/0xc50 [ 221.618112][T10995] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 221.618136][T10995] ? __lock_acquire+0x5c0/0x1f40 [ 221.618160][T10995] ? __pfx_futex_wake_mark+0x10/0x10 [ 221.618202][T10995] madvise_do_behavior+0x1ea/0x510 [ 221.618231][T10995] ? __pfx___might_resched+0x10/0x10 [ 221.618252][T10995] ? __pfx_madvise_do_behavior+0x10/0x10 [ 221.618291][T10995] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.618326][T10995] do_madvise+0x238/0x290 [ 221.618355][T10995] ? __pfx_do_madvise+0x10/0x10 [ 221.618389][T10995] ? do_futex+0x190/0x440 [ 221.618423][T10995] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.618472][T10995] __x64_sys_madvise+0xa9/0x110 [ 221.618499][T10995] ? lockdep_hardirqs_on+0x7d/0x110 [ 221.618524][T10995] do_syscall_64+0x123/0x790 [ 221.618555][T10995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.618576][T10995] RIP: 0033:0x7f74c859e159 [ 221.618594][T10995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.618616][T10995] RSP: 002b:00007f74c94a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 221.618638][T10995] RAX: ffffffffffffffda RBX: 00007f74c8825fa0 RCX: 00007f74c859e159 [ 221.618653][T10995] RDX: 000000000000000c RSI: 0000000000002000 RDI: 0000200000ffc000 [ 221.618666][T10995] RBP: 00007f74c863506b R08: 0000000000000000 R09: 0000000000000000 [ 221.618679][T10995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.618692][T10995] R13: 00007f74c8826038 R14: 00007f74c8825fa0 R15: 00007ffcfba5a868 [ 221.618723][T10995] [ 221.644573][ T5705] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 221.647411][ T5705] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 221.647436][ T5705] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 221.650904][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.650927][ T5705] usb 1-1: Product: syz [ 221.650941][ T5705] usb 1-1: Manufacturer: syz [ 221.650956][ T5705] usb 1-1: SerialNumber: syz [ 221.776591][T10997] sd 0:0:1:0: PR command failed: 1026 [ 221.776631][T10997] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 221.776670][T10997] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 221.881812][ T5705] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 222.163989][ T4917] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 222.366165][ T5703] usb 1-1: USB disconnect, device number 25 [ 222.395401][ T5703] usblp0: removed [ 222.925485][ T5703] net_ratelimit: 4 callbacks suppressed [ 222.925502][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.001777][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.217821][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 223.217839][ T30] audit: type=1400 audit(1789570819.333:758): avc: denied { mounton } for pid=11032 comm="syz.6.2116" path="/235/file1" dev="tmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 223.322118][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.705451][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2123'. [ 223.961693][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.042854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.046368][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.062446][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 224.231544][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 224.233367][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 224.233407][ T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.233889][ T9] usb 7-1: config 0 has no interfaces? [ 224.235699][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.235724][ T9] usb 7-1: Product: syz [ 224.235740][ T9] usb 7-1: Manufacturer: syz [ 224.235757][ T9] usb 7-1: SerialNumber: syz [ 224.238298][ T9] usb 7-1: config 0 descriptor?? [ 224.362685][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.458522][T11059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.458993][T11059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.479012][ T5705] usb 7-1: USB disconnect, device number 11 [ 224.536748][T11078] netlink: 'syz.4.2136': attribute type 106 has an invalid length. [ 224.543088][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2136'. [ 224.745735][T11088] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.813948][T11090] FAULT_INJECTION: forcing a failure. [ 224.813948][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 224.813982][T11090] CPU: 0 UID: 0 PID: 11090 Comm: syz.4.2141 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.814013][T11090] Tainted: [L]=SOFTLOCKUP [ 224.814021][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 224.814033][T11090] Call Trace: [ 224.814041][T11090] [ 224.814049][T11090] dump_stack_lvl+0x100/0x190 [ 224.814085][T11090] should_fail_ex.cold+0x5/0xa [ 224.814114][T11090] should_failslab+0xc2/0x120 [ 224.814143][T11090] __kmalloc_cache_noprof+0x91/0x6d0 [ 224.814175][T11090] ? debugfs_init_fs_context+0x43/0x110 [ 224.814212][T11090] debugfs_init_fs_context+0x43/0x110 [ 224.814242][T11090] alloc_fs_context+0x60c/0xf40 [ 224.814278][T11090] __x64_sys_fsopen+0xed/0x220 [ 224.814301][T11090] do_syscall_64+0x123/0x790 [ 224.814333][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.814356][T11090] RIP: 0033:0x7f347e99e159 [ 224.814375][T11090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.814394][T11090] RSP: 002b:00007f347cbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 224.814414][T11090] RAX: ffffffffffffffda RBX: 00007f347ec25fa0 RCX: 00007f347e99e159 [ 224.814427][T11090] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 224.814439][T11090] RBP: 00007f347ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 224.814452][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.814464][T11090] R13: 00007f347ec26038 R14: 00007f347ec25fa0 R15: 00007ffe56d2af18 [ 224.814494][T11090] [ 224.952837][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 225.081669][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.142202][ T9] usb 7-1: New USB device found, idVendor=17ba, idProduct=55aa, bcdDevice= 1.00 [ 225.150422][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.150446][ T9] usb 7-1: Product: syz [ 225.150461][ T9] usb 7-1: Manufacturer: syz [ 225.150476][ T9] usb 7-1: SerialNumber: syz [ 225.158966][T11096] FAULT_INJECTION: forcing a failure. [ 225.158966][T11096] name failslab, interval 1, probability 0, space 0, times 0 [ 225.158998][T11096] CPU: 1 UID: 0 PID: 11096 Comm: syz.4.2144 Tainted: G L syzkaller #0 PREEMPT(full) [ 225.159028][T11096] Tainted: [L]=SOFTLOCKUP [ 225.159036][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 225.159048][T11096] Call Trace: [ 225.159056][T11096] [ 225.159064][T11096] dump_stack_lvl+0x100/0x190 [ 225.159101][T11096] should_fail_ex.cold+0x5/0xa [ 225.159130][T11096] should_failslab+0xc2/0x120 [ 225.159157][T11096] __kmalloc_cache_noprof+0x91/0x6d0 [ 225.159189][T11096] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 225.159220][T11096] ? nfs_alloc_fhandle+0x3b/0x90 [ 225.159252][T11096] nfs_alloc_fhandle+0x3b/0x90 [ 225.159277][T11096] nfs_init_fs_context+0x65/0x1510 [ 225.159311][T11096] alloc_fs_context+0x60c/0xf40 [ 225.159346][T11096] __x64_sys_fsopen+0xed/0x220 [ 225.159369][T11096] do_syscall_64+0x123/0x790 [ 225.159399][T11096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.159421][T11096] RIP: 0033:0x7f347e99e159 [ 225.159438][T11096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.159460][T11096] RSP: 002b:00007f347cbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 225.159481][T11096] RAX: ffffffffffffffda RBX: 00007f347ec25fa0 RCX: 00007f347e99e159 [ 225.159496][T11096] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 225.159510][T11096] RBP: 00007f347ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 225.159523][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.159536][T11096] R13: 00007f347ec26038 R14: 00007f347ec25fa0 R15: 00007ffe56d2af18 [ 225.159566][T11096] [ 225.402035][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.607377][ T9] usb 7-1: USB disconnect, device number 12 [ 225.963284][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.063107][ T30] audit: type=1400 audit(1789570822.183:759): avc: denied { watch_mount watch_reads } for pid=11114 comm="syz.4.2153" path="/429" dev="tmpfs" ino=2227 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 226.283155][ T30] audit: type=1400 audit(1789570822.403:760): avc: denied { create } for pid=11122 comm="syz.6.2158" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.313318][ T30] audit: type=1400 audit(1789570822.433:761): avc: denied { write } for pid=11122 comm="syz.6.2158" name="file0" dev="tmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.313583][ T30] audit: type=1400 audit(1789570822.433:762): avc: denied { open } for pid=11122 comm="syz.6.2158" path="/239/file0" dev="tmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.318740][ T30] audit: type=1400 audit(1789570822.433:763): avc: denied { ioctl } for pid=11122 comm="syz.6.2158" path="/239/file0" dev="tmpfs" ino=1292 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.409908][ T30] audit: type=1400 audit(1789570822.523:764): avc: denied { unlink } for pid=8154 comm="syz-executor" name="file0" dev="tmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 226.971094][T11145] netlink: 348 bytes leftover after parsing attributes in process `syz.7.2166'. [ 226.985111][T11143] FAULT_INJECTION: forcing a failure. [ 226.985111][T11143] name failslab, interval 1, probability 0, space 0, times 0 [ 226.985148][T11143] CPU: 0 UID: 0 PID: 11143 Comm: syz.5.2165 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.985178][T11143] Tainted: [L]=SOFTLOCKUP [ 226.985187][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 226.985200][T11143] Call Trace: [ 226.985207][T11143] [ 226.985216][T11143] dump_stack_lvl+0x100/0x190 [ 226.985252][T11143] should_fail_ex.cold+0x5/0xa [ 226.985282][T11143] should_failslab+0xc2/0x120 [ 226.985310][T11143] __kmalloc_noprof+0xfc/0x840 [ 226.985339][T11143] ? udpv6_init_sock+0x24e/0x450 [ 226.985375][T11143] udpv6_init_sock+0x24e/0x450 [ 226.985404][T11143] ? __pfx_udpv6_init_sock+0x10/0x10 [ 226.985434][T11143] inet6_create+0xb1a/0x12b0 [ 226.985464][T11143] ? inet6_create+0x7f/0x12b0 [ 226.985489][T11143] __sock_create+0x339/0x860 [ 226.985527][T11143] __sys_socket+0x14d/0x260 [ 226.985547][T11143] ? __pfx___sys_socket+0x10/0x10 [ 226.985575][T11143] __x64_sys_socket+0x72/0xb0 [ 226.985595][T11143] ? lockdep_hardirqs_on+0x7d/0x110 [ 226.985623][T11143] do_syscall_64+0x123/0x790 [ 226.985654][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.985675][T11143] RIP: 0033:0x7f1e0099e159 [ 226.985693][T11143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.985713][T11143] RSP: 002b:00007f1e0182e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 226.985734][T11143] RAX: ffffffffffffffda RBX: 00007f1e00c25fa0 RCX: 00007f1e0099e159 [ 226.985749][T11143] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 226.985761][T11143] RBP: 00007f1e00a3506b R08: 0000000000000000 R09: 0000000000000000 [ 226.985773][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.985784][T11143] R13: 00007f1e00c26038 R14: 00007f1e00c25fa0 R15: 00007fffe0f894a8 [ 226.985812][T11143] [ 227.719587][T11174] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2180'. [ 227.809032][ T30] audit: type=1400 audit(1789570823.923:765): avc: denied { relabelfrom } for pid=11177 comm="syz.4.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 227.809177][ T30] audit: type=1400 audit(1789570823.923:766): avc: denied { relabelto } for pid=11177 comm="syz.4.2182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 227.831721][ T5586] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 228.002676][ T5586] usb 7-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 228.004958][ T5586] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 228.004981][ T5586] usb 7-1: Product: syz [ 228.004997][ T5586] usb 7-1: SerialNumber: syz [ 228.009706][ T5586] usb 7-1: config 0 descriptor?? [ 228.050580][T11190] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input25 [ 228.117200][T11193] net_ratelimit: 4 callbacks suppressed [ 228.117217][T11193] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 228.151856][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 228.201704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.226601][ T5586] hso 7-1:0.0: Can't find BULK endpoints [ 228.304479][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 228.305421][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.310183][ T9] usb 6-1: config 0 descriptor?? [ 228.409105][T11204] input: syz0 as /devices/virtual/input/input26 [ 228.447294][ T5705] usb 7-1: USB disconnect, device number 13 [ 228.517226][ T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 228.536281][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.736531][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 228.736555][ T9] [drm] Initialized udl on minor 1 [ 229.004873][ T5705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.241675][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.571036][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.992778][ T189] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 229.994428][T11241] Invalid argument reading file caps for ./file0 [ 230.132766][T11245] jffs2: notice: (11245) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 230.165194][ T189] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.166785][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.166813][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.166856][ T189] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.166895][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.173365][ T189] usb 1-1: config 0 descriptor?? [ 230.281666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.307926][T11254] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 230.307944][T11254] device-mapper: raid: Choosing default region size of 4MiB [ 230.349129][T11254] device-mapper: table: 248:2: raid: RAID device lookup failure (-ENOENT) [ 230.349152][T11254] device-mapper: ioctl: error adding target to table [ 230.623884][ T189] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 230.626881][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.321618][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.650712][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.827085][ T25] usb 1-1: USB disconnect, device number 26 [ 232.011519][ T189] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 232.173524][ T189] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 232.174464][ T189] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.174509][ T189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.176356][ T189] usb 7-1: config 0 descriptor?? [ 232.183184][ T189] pwc: Askey VC010 type 2 USB webcam detected. [ 232.591746][ T189] pwc: recv_control_msg error -32 req 02 val 2b00 [ 232.592570][ T189] pwc: recv_control_msg error -32 req 02 val 2700 [ 232.795391][ T189] pwc: recv_control_msg error -71 req 04 val 1000 [ 232.795810][ T189] pwc: recv_control_msg error -71 req 04 val 1300 [ 232.796264][ T189] pwc: recv_control_msg error -71 req 04 val 1400 [ 232.796675][ T189] pwc: recv_control_msg error -71 req 02 val 2000 [ 232.797122][ T189] pwc: recv_control_msg error -71 req 02 val 2100 [ 232.797535][ T189] pwc: recv_control_msg error -71 req 04 val 1500 [ 232.798042][ T189] pwc: recv_control_msg error -71 req 02 val 2500 [ 232.798439][ T189] pwc: recv_control_msg error -71 req 02 val 2400 [ 232.798827][ T189] pwc: recv_control_msg error -71 req 02 val 2600 [ 232.799211][ T189] pwc: recv_control_msg error -71 req 02 val 2900 [ 232.799757][ T189] pwc: recv_control_msg error -71 req 02 val 2800 [ 232.800920][ T189] pwc: recv_control_msg error -71 req 04 val 1100 [ 232.801328][ T189] pwc: recv_control_msg error -71 req 04 val 1200 [ 232.832982][ T189] pwc: Registered as video103. [ 232.845546][ T189] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 232.862255][ T189] usb 7-1: USB disconnect, device number 14 [ 233.401704][ C1] net_ratelimit: 3 callbacks suppressed [ 233.401725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.547333][T11322] netlink: 'syz.6.2242': attribute type 4 has an invalid length. [ 233.549171][T11322] netlink: 'syz.6.2242': attribute type 4 has an invalid length. [ 233.623435][T11324] sctp: [Deprecated]: syz.6.2243 (pid 11324) Use of struct sctp_assoc_value in delayed_ack socket option. [ 233.623435][T11324] Use struct sctp_sack_info instead [ 233.650805][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.742898][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.805559][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 233.806009][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 233.813156][ T9] usb 6-1: USB disconnect, device number 17 [ 233.817590][ T189] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 233.817960][ T189] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 233.818119][ T189] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 234.245256][ T30] audit: type=1400 audit(1789570830.363:767): avc: denied { setopt } for pid=11353 comm="syz.0.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 234.245567][T11354] lapbether: lapb_data_request error - 4 [ 234.441727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.651629][ T5705] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 234.769059][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.780340][ T30] audit: type=1400 audit(1789570830.893:768): avc: denied { write } for pid=11366 comm="syz.0.2262" name="nullb" dev="configfs" ino=3516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 234.802851][T11369] FAULT_INJECTION: forcing a failure. [ 234.802851][T11369] name failslab, interval 1, probability 0, space 0, times 0 [ 234.802882][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.6.2263 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.802909][T11369] Tainted: [L]=SOFTLOCKUP [ 234.802917][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 234.802928][T11369] Call Trace: [ 234.802934][T11369] [ 234.802943][T11369] dump_stack_lvl+0x100/0x190 [ 234.802978][T11369] should_fail_ex.cold+0x5/0xa [ 234.803005][T11369] should_failslab+0xc2/0x120 [ 234.803032][T11369] __kmalloc_noprof+0xfc/0x840 [ 234.803055][T11369] ? lsm_blob_alloc+0x68/0x90 [ 234.803089][T11369] lsm_blob_alloc+0x68/0x90 [ 234.803118][T11369] security_key_alloc+0x34/0x310 [ 234.803142][T11369] key_alloc+0x876/0x1310 [ 234.803176][T11369] ? __pfx_key_alloc+0x10/0x10 [ 234.803202][T11369] ? lsm_blob_alloc+0x68/0x90 [ 234.803235][T11369] keyring_alloc+0x44/0xc0 [ 234.803265][T11369] install_thread_keyring_to_cred+0xc1/0x140 [ 234.803291][T11369] keyctl_set_reqkey_keyring+0xd3/0x1c0 [ 234.803334][T11369] __do_sys_keyctl+0x316/0x5a0 [ 234.803357][T11369] do_syscall_64+0x123/0x790 [ 234.803387][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.803410][T11369] RIP: 0033:0x7f74c859e159 [ 234.803428][T11369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.803446][T11369] RSP: 002b:00007f74c94a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 234.803466][T11369] RAX: ffffffffffffffda RBX: 00007f74c8825fa0 RCX: 00007f74c859e159 [ 234.803480][T11369] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000e [ 234.803492][T11369] RBP: 00007f74c863506b R08: 0000000000000000 R09: 0000000000000000 [ 234.803505][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.803518][T11369] R13: 00007f74c8826038 R14: 00007f74c8825fa0 R15: 00007ffcfba5a868 [ 234.803546][T11369] [ 234.827305][ T30] audit: type=1400 audit(1789570830.943:769): avc: denied { read write } for pid=11366 comm="syz.0.2262" name="memory_backed" dev="configfs" ino=36494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 234.827346][ T30] audit: type=1400 audit(1789570830.943:770): avc: denied { open } for pid=11366 comm="syz.0.2262" path="/482/config/nullb/nullb1/memory_backed" dev="configfs" ino=36494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 234.845719][ T5705] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 234.873654][ T5705] usb 6-1: config index 0 descriptor too short (expected 1572, got 36) [ 234.873680][ T5705] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.965001][ T5705] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.965026][ T5705] usb 6-1: Product: syz [ 234.965041][ T5705] usb 6-1: Manufacturer: syz [ 234.965056][ T5705] usb 6-1: SerialNumber: syz [ 235.098378][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.129716][ T5705] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input28 [ 235.335869][ T4952] bcm5974 6-1:1.0: could not read from device [ 235.348947][ T4952] bcm5974 6-1:1.0: could not read from device [ 235.361870][ T5705] bcm5974 6-1:1.0: could not read from device [ 235.381723][T11383] vcan0: tx address claim with broadcast sa [ 235.386824][ T5705] input: failed to attach handler mousedev to device input28, error: -5 [ 235.452171][ T5705] usb 6-1: USB disconnect, device number 18 [ 235.458735][ T4952] bcm5974 6-1:1.0: could not read from device [ 235.481567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.541254][ T5589] udevd[5589]: Error opening device "/dev/input/event5": No such file or directory [ 235.541347][ T5589] udevd[5589]: Unable to EVIOCGABS device "/dev/input/event5" [ 235.558535][ T5589] udevd[5589]: Unable to EVIOCGABS device "/dev/input/event5" [ 235.558622][ T5589] udevd[5589]: Unable to EVIOCGABS device "/dev/input/event5" [ 235.558707][ T5589] udevd[5589]: Unable to EVIOCGABS device "/dev/input/event5" [ 235.564686][T11393] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 235.660255][T11385] all (unregistering): Released all slaves [ 235.808456][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.009833][T11408] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes [ 236.427850][T11427] xt_hashlimit: size too large, truncated to 1048576 [ 236.521713][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.700747][T11422] Dynamic Preempt: lazy [ 236.848902][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 236.971013][T11447] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2296'. [ 237.074849][ T30] audit: type=1400 audit(1789570833.193:771): avc: denied { write } for pid=11450 comm="syz.6.2300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 237.164472][ T30] audit: type=1400 audit(1789570833.283:772): avc: denied { module_load } for pid=11453 comm="syz.4.2299" path="/proc/983/cmdline" dev="proc" ino=4026532036 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=system permissive=1 [ 237.164604][T11455] Invalid ELF header magic: != ELF [ 237.664163][ T30] audit: type=1400 audit(1789570833.783:773): avc: denied { map } for pid=11472 comm="syz.6.2307" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 238.031884][T11489] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.2315'. [ 238.282380][ T189] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 238.442798][ T189] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 238.445256][ T189] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.445298][ T189] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.495574][T11514] bond1: invalid NS target :: specified for addition [ 238.495597][T11514] bond1: option ns_ip6_target: invalid value (18446744073709551615) [ 238.497393][T11514] bond1 (unregistering): Released all slaves [ 238.601581][ C1] net_ratelimit: 3 callbacks suppressed [ 238.601601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.889371][ T189] wacom 0003:056A:033B.0016: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 238.893015][ T189] wacom 0003:056A:033B.0016: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 238.899600][ T189] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.0016/input/input29 [ 238.957860][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.268053][T11544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.400749][ T189] usb 6-1: USB disconnect, device number 19 [ 239.452422][T11549] qrtr: Invalid version 0 [ 239.620988][T11555] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2344'. [ 239.641584][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.697861][ T30] audit: type=1400 audit(1789570835.813:774): avc: denied { append } for pid=11560 comm="syz.4.2347" name="frontend0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 239.962144][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.028264][T11569] FAULT_INJECTION: forcing a failure. [ 240.028264][T11569] name failslab, interval 1, probability 0, space 0, times 0 [ 240.028314][T11569] CPU: 0 UID: 0 PID: 11569 Comm: syz.5.2351 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 240.028343][T11569] Tainted: [L]=SOFTLOCKUP [ 240.028352][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 240.028368][T11569] Call Trace: [ 240.028376][T11569] [ 240.028392][T11569] dump_stack_lvl+0x100/0x190 [ 240.028427][T11569] should_fail_ex.cold+0x5/0xa [ 240.028458][T11569] should_failslab+0xc2/0x120 [ 240.028484][T11569] __kvmalloc_node_noprof+0x113/0x9b0 [ 240.028515][T11569] ? newary+0x185/0xc30 [ 240.028550][T11569] newary+0x185/0xc30 [ 240.028580][T11569] ? ipcget+0x8aa/0xf50 [ 240.028602][T11569] ? ipcget+0x8aa/0xf50 [ 240.028629][T11569] ipcget+0x909/0xf50 [ 240.028662][T11569] ? __pfx_do_futex+0x10/0x10 [ 240.028692][T11569] ? __pfx_ipcget+0x10/0x10 [ 240.028718][T11569] ? __x64_sys_futex+0x34f/0x4d0 [ 240.028748][T11569] __x64_sys_semget+0x1cb/0x260 [ 240.028769][T11569] ? __pfx___x64_sys_semget+0x10/0x10 [ 240.028798][T11569] do_syscall_64+0x123/0x790 [ 240.028830][T11569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.028851][T11569] RIP: 0033:0x7f1e0099e159 [ 240.028870][T11569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.028889][T11569] RSP: 002b:00007f1e0182e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 240.028918][T11569] RAX: ffffffffffffffda RBX: 00007f1e00c25fa0 RCX: 00007f1e0099e159 [ 240.028933][T11569] RDX: 000000000000039c RSI: 0000000000000003 RDI: 00000000798e2649 [ 240.028947][T11569] RBP: 00007f1e00a3506b R08: 0000000000000000 R09: 0000000000000000 [ 240.028960][T11569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.028974][T11569] R13: 00007f1e00c26038 R14: 00007f1e00c25fa0 R15: 00007fffe0f894a8 [ 240.029004][T11569] [ 240.051671][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.314469][ T30] audit: type=1400 audit(1789570836.433:775): avc: denied { ioctl } for pid=11576 comm="syz.5.2355" path="socket:[37984]" dev="sockfs" ino=37984 ioctlcmd=0x7452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 240.611616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.681624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.702319][ T5705] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 240.852043][ T5705] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 240.852803][ T5705] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.854547][ T5705] usb 7-1: config 0 descriptor?? [ 240.858961][ T5705] cp210x 7-1:0.0: cp210x converter detected [ 240.931510][ T25] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 241.006677][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.083204][ T25] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 241.084099][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.084149][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.086068][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.086090][ T25] usb 6-1: Product: syz [ 241.086105][ T25] usb 6-1: Manufacturer: syz [ 241.086115][ T25] usb 6-1: SerialNumber: syz [ 241.100575][ T25] symbolserial 6-1:1.0: symbol converter detected [ 241.152213][ T25] usb 6-1: symbol converter now attached to ttyUSB0 [ 241.168899][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.261106][ T5705] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 241.304486][T11595] symbol ttyUSB0: symbol_open - failed resubmitting read urb, error -90 [ 241.307021][ T189] usb 6-1: USB disconnect, device number 20 [ 241.314230][ T189] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 241.314676][ T189] symbolserial 6-1:1.0: device disconnected [ 241.467740][ T5705] usb 7-1: cp210x converter now attached to ttyUSB0 [ 241.666223][ T5705] usb 7-1: USB disconnect, device number 15 [ 241.671180][ T5705] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 241.686003][ T5705] cp210x 7-1:0.0: device disconnected [ 241.721613][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.801770][ T5602] Bluetooth: hci6: command 0x1003 tx timeout [ 241.801852][ T4917] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 241.993507][T11602] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 242.364079][T11621] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2374'. [ 242.814202][ T5712] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 242.853893][T11644] syzkaller1: entered promiscuous mode [ 242.853906][T11644] syzkaller1: entered allmulticast mode [ 242.939949][ T30] audit: type=1400 audit(1789570839.053:776): avc: denied { accept } for pid=11646 comm="syz.7.2385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.961474][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 242.961965][ T5712] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.962861][ T5712] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 242.962889][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.965478][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.965501][ T5712] usb 1-1: Product: syz [ 242.965534][ T5712] usb 1-1: Manufacturer: syz [ 242.965551][ T5712] usb 1-1: SerialNumber: syz [ 242.968005][ T5712] usb 1-1: config 0 descriptor?? [ 242.975918][ T5712] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 242.975948][ T5712] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 243.001771][ T4917] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 243.001795][ T4917] CPU: 0 UID: 0 PID: 4917 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 243.001826][ T4917] Tainted: [L]=SOFTLOCKUP [ 243.001834][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 243.001853][ T4917] Workqueue: hci2 hci_rx_work [ 243.001879][ T4917] Call Trace: [ 243.001886][ T4917] [ 243.001894][ T4917] dump_stack_lvl+0x100/0x190 [ 243.001932][ T4917] sysfs_warn_dup.cold+0x1c/0x28 [ 243.001962][ T4917] sysfs_create_dir_ns+0x24b/0x2b0 [ 243.001989][ T4917] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 243.002014][ T4917] ? find_held_lock+0x2b/0x80 [ 243.002053][ T4917] ? kobject_add_internal+0x25f/0x930 [ 243.002081][ T4917] ? kobject_add_internal+0x25f/0x930 [ 243.002113][ T4917] ? do_raw_spin_unlock+0x145/0x1e0 [ 243.002154][ T4917] kobject_add_internal+0x2c8/0x930 [ 243.002189][ T4917] kobject_add+0x16a/0x1e0 [ 243.002217][ T4917] ? __pfx_kobject_add+0x10/0x10 [ 243.002245][ T4917] ? class_to_subsys+0x10f/0x150 [ 243.002292][ T4917] ? kobject_put+0xb9/0x640 [ 243.002316][ T4917] ? _raw_spin_unlock+0x28/0x50 [ 243.002360][ T4917] device_add+0x294/0x1970 [ 243.002401][ T4917] ? __pfx_dev_set_name+0x10/0x10 [ 243.002448][ T4917] ? __pfx_device_add+0x10/0x10 [ 243.002489][ T4917] ? mgmt_send_event_skb+0x2fb/0x460 [ 243.002536][ T4917] hci_conn_add_sysfs+0x1a3/0x260 [ 243.002577][ T4917] le_conn_complete_evt+0x122f/0x2130 [ 243.002613][ T4917] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 243.002639][ T4917] ? hci_event_packet+0x186/0xcd0 [ 243.002675][ T4917] hci_le_conn_complete_evt+0x23c/0x3a0 [ 243.002705][ T4917] ? skb_pull_data+0x15f/0x1e0 [ 243.002741][ T4917] hci_le_meta_evt+0x34a/0x5f0 [ 243.002771][ T4917] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 243.002800][ T4917] hci_event_packet+0x51c/0xcd0 [ 243.002826][ T4917] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 243.002854][ T4917] ? __pfx_hci_event_packet+0x10/0x10 [ 243.002884][ T4917] ? lockdep_hardirqs_on+0x7d/0x110 [ 243.002919][ T4917] hci_rx_work+0x451/0xfc0 [ 243.002950][ T4917] process_one_work+0xac7/0x1b10 [ 243.002995][ T4917] ? __pfx_process_one_work+0x10/0x10 [ 243.003030][ T4917] ? lock_acquire+0x1d1/0x380 [ 243.003063][ T4917] ? __pfx_hci_rx_work+0x10/0x10 [ 243.003090][ T4917] worker_thread+0x5ef/0xe50 [ 243.003132][ T4917] ? kthread+0x13a/0x450 [ 243.003158][ T4917] ? __pfx_worker_thread+0x10/0x10 [ 243.003188][ T4917] kthread+0x373/0x450 [ 243.003214][ T4917] ? __pfx_kthread+0x10/0x10 [ 243.003243][ T4917] ret_from_fork+0x730/0xd60 [ 243.003268][ T4917] ? __pfx_ret_from_fork+0x10/0x10 [ 243.003295][ T4917] ? __switch_to+0x800/0x10f0 [ 243.003320][ T4917] ? __pfx_kthread+0x10/0x10 [ 243.003346][ T4917] ret_from_fork_asm+0x1a/0x30 [ 243.003383][ T4917] [ 243.005942][ T4917] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 243.005981][ T4917] Bluetooth: hci2: failed to register connection device [ 243.531526][ T25] wiimote 0005:057E:0306.0017: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 243.549615][ T25] wiimote 0005:057E:0306.0017: New device registered [ 243.606392][ T5712] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 243.607233][ T5712] em28xx 1-1:0.0: Config register raw data: 0x94 [ 243.771556][ T5703] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 243.801821][ C1] net_ratelimit: 3 callbacks suppressed [ 243.801844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.828474][ T5712] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 243.828494][ T5712] em28xx 1-1:0.0: No AC97 audio processor [ 243.848915][T11664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2393'. [ 243.869312][ T5712] usb 1-1: USB disconnect, device number 27 [ 243.884841][ T5712] em28xx 1-1:0.0: Disconnecting em28xx [ 243.910246][T11666] loop5: detected capacity change from 0 to 7 [ 243.918085][T11666] Dev loop5: unable to read RDB block 7 [ 243.918127][T11666] loop5: unable to read partition table [ 243.918294][T11666] loop5: partition table beyond EOD, truncated [ 243.918312][T11666] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 243.955195][T11656] wiimote 0005:057E:0306.0017: Remote error 105 on req 100 [ 243.959851][ T5703] usb 6-1: unable to get BOS descriptor or descriptor too short [ 243.965009][ T5703] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.968521][ T5703] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 243.968551][ T5703] usb 6-1: can't read configurations, error -71 [ 243.998627][T11655] wiimote 0005:057E:0306.0017: Device removed [ 244.005512][ T5712] em28xx: Freeing device [ 244.202615][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.365770][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.411539][ T5725] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 244.572937][ T5725] usb 7-1: Using ep0 maxpacket: 16 [ 244.575941][ T5725] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 244.578306][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.578337][ T5725] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.578361][ T5725] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 244.578400][ T5725] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.582242][ T5725] usb 7-1: config 0 descriptor?? [ 244.602798][ T25] wiimote 0005:057E:0306.0017: detected device: Nintendo Wii Remote (Gen 1) [ 244.650234][ T25] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0017/input/input33 [ 244.667258][ T25] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0017/input/input34 [ 244.685237][ T25] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0017/input/input32 [ 244.841765][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.887072][ T30] audit: type=1400 audit(1789570841.003:777): avc: denied { view } for pid=11689 comm="syz.7.2403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 245.006539][T11677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.006989][T11677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.030756][T11677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.031233][T11677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.058564][ T5725] microsoft 0003:045E:07DA.0018: unknown main item tag 0x4 [ 245.075459][ T5725] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0018/input/input35 [ 245.108160][ T5725] microsoft 0003:045E:07DA.0018: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 245.212664][T11698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2406'. [ 245.293380][ T5703] usb 7-1: USB disconnect, device number 16 [ 245.407209][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.435106][T11702] ima: rule for LSM 'u' is undefined [ 245.436541][ T30] audit: type=1807 audit(1789570841.553:778): action=measure func=FILE_CHECK obj_type=u res=0 [ 245.436787][ T30] audit: type=1802 audit(1789570841.553:779): pid=11702 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.0.2408" res=0 errno=0 [ 245.437285][T11701] ima: policy update failed [ 245.437464][ T30] audit: type=1802 audit(1789570841.553:780): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.0.2408" res=0 errno=0 [ 245.881598][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.145980][ T30] audit: type=1400 audit(1789570842.263:781): avc: denied { mounton } for pid=11713 comm="syz.6.2413" path="/320/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 246.258207][ T30] audit: type=1400 audit(1789570842.373:782): avc: denied { unmount } for pid=8154 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 246.446632][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 246.572359][ T5703] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 246.732930][ T5703] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 246.734991][ T5703] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 246.735018][ T5703] usb 7-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 246.735043][ T5703] usb 7-1: config 1 interface 0 has no altsetting 0 [ 246.737309][ T5703] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.737331][ T5703] usb 7-1: Product: syz [ 246.737346][ T5703] usb 7-1: Manufacturer: syz [ 246.737361][ T5703] usb 7-1: SerialNumber: syz [ 246.744437][T11724] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 246.744552][T11724] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 246.905688][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2425'. [ 246.905724][T11739] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2425'. [ 246.921639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.243898][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.317302][T11745] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 247.318215][T11745] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 247.318383][T11745] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 247.420790][T11751] CIFS: Attempting to mount //127.0.0.1/share [ 247.487083][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.540296][T11754] 9pnet: p9_errstr2errno: server reported unknown error [ 247.774872][ T5703] (unnamed net_device) (uninitialized): Assigned a random MAC address: 82:df:b5:f8:8f:7a [ 247.813752][ T5703] rtl8150 7-1:1.0: eth9: rtl8150 is detected [ 247.828241][ T5703] usb 7-1: USB disconnect, device number 17 [ 248.182406][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2443'. [ 248.183042][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2443'. [ 248.249276][T11751] CIFS: VFS: cifs_mount failed w/return code = -112 [ 248.424438][ T30] audit: type=1400 audit(1789570844.543:783): avc: denied { watch watch_reads } for pid=11782 comm="syz.7.2447" path="pipe:[38931]" dev="pipefs" ino=38931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 248.765638][T11799] kvm: kvm [11798]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008d) = 0x40 [ 248.821349][ T30] audit: type=1400 audit(1789570844.933:784): avc: denied { setopt } for pid=11805 comm="syz.7.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 248.959041][ T30] audit: type=1400 audit(1789570845.073:785): avc: denied { shutdown } for pid=11814 comm="syz.0.2458" laddr=10.128.0.116 lport=255 faddr=172.20.20.170 fport=65533 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 249.002001][ C1] net_ratelimit: 2 callbacks suppressed [ 249.002024][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.156400][T11826] FAULT_INJECTION: forcing a failure. [ 249.156400][T11826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.156435][T11826] CPU: 0 UID: 0 PID: 11826 Comm: syz.4.2467 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 249.156465][T11826] Tainted: [L]=SOFTLOCKUP [ 249.156472][T11826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 249.156485][T11826] Call Trace: [ 249.156493][T11826] [ 249.156502][T11826] dump_stack_lvl+0x100/0x190 [ 249.156538][T11826] should_fail_ex.cold+0x5/0xa [ 249.156567][T11826] _copy_from_user+0x2e/0xd0 [ 249.156591][T11826] __x64_sys_signalfd4+0x125/0x1d0 [ 249.156615][T11826] ? ksys_write+0x1ac/0x250 [ 249.156636][T11826] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 249.156667][T11826] do_syscall_64+0x123/0x790 [ 249.156701][T11826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.156725][T11826] RIP: 0033:0x7f347e99e159 [ 249.156744][T11826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.156770][T11826] RSP: 002b:00007f347cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 249.156792][T11826] RAX: ffffffffffffffda RBX: 00007f347ec25fa0 RCX: 00007f347e99e159 [ 249.156808][T11826] RDX: 0000000000000008 RSI: 0000200000002140 RDI: ffffffffffffffff [ 249.156822][T11826] RBP: 00007f347ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 249.156835][T11826] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000000 [ 249.156848][T11826] R13: 00007f347ec26038 R14: 00007f347ec25fa0 R15: 00007ffe56d2af18 [ 249.156880][T11826] [ 249.163950][ T4917] Bluetooth: hci2: command 0x0406 tx timeout [ 249.267493][T11823] gadgetfs: bound to dummy_udc driver [ 249.493381][T11838] FAULT_INJECTION: forcing a failure. [ 249.493381][T11838] name failslab, interval 1, probability 0, space 0, times 0 [ 249.493416][T11838] CPU: 0 UID: 0 PID: 11838 Comm: syz.0.2473 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 249.493446][T11838] Tainted: [L]=SOFTLOCKUP [ 249.493453][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 249.493466][T11838] Call Trace: [ 249.493474][T11838] [ 249.493483][T11838] dump_stack_lvl+0x100/0x190 [ 249.493519][T11838] should_fail_ex.cold+0x5/0xa [ 249.493550][T11838] should_failslab+0xc2/0x120 [ 249.493578][T11838] kmem_cache_alloc_node_noprof+0x94/0x6e0 [ 249.493604][T11838] ? copy_process+0x6a2/0x8370 [ 249.493633][T11838] copy_process+0x6a2/0x8370 [ 249.493659][T11838] ? __pfx___futex_wait+0x10/0x10 [ 249.493676][T11838] ? __pfx_try_to_wake_up+0x10/0x10 [ 249.493698][T11838] ? futex_hash+0x311/0x400 [ 249.493731][T11838] ? __pfx_copy_process+0x10/0x10 [ 249.493754][T11838] ? futex_wake+0x4ea/0x5e0 [ 249.493794][T11838] kernel_clone+0x176/0x9d0 [ 249.493824][T11838] ? __pfx_kernel_clone+0x10/0x10 [ 249.493856][T11838] ? ksys_write+0x190/0x250 [ 249.493886][T11838] __do_sys_clone+0xd9/0x120 [ 249.493911][T11838] ? __pfx___do_sys_clone+0x10/0x10 [ 249.493933][T11838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 249.493983][T11838] do_syscall_64+0x123/0x790 [ 249.494014][T11838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.494036][T11838] RIP: 0033:0x7f904979e159 [ 249.494053][T11838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.494074][T11838] RSP: 002b:00007f904a671fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 249.494095][T11838] RAX: ffffffffffffffda RBX: 00007f9049a25fa0 RCX: 00007f904979e159 [ 249.494110][T11838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 249.494123][T11838] RBP: 00007f904983506b R08: 0000000000000000 R09: 0000000000000000 [ 249.494134][T11838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.494146][T11838] R13: 00007f9049a26038 R14: 00007f9049a25fa0 R15: 00007ffea21b7bd8 [ 249.494184][T11838] [ 249.566328][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.645222][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.842690][T11851] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 250.041596][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.147597][T11865] FAULT_INJECTION: forcing a failure. [ 250.147597][T11865] name failslab, interval 1, probability 0, space 0, times 0 [ 250.147637][T11865] CPU: 1 UID: 0 PID: 11865 Comm: syz.6.2484 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 250.147666][T11865] Tainted: [L]=SOFTLOCKUP [ 250.147674][T11865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 250.147687][T11865] Call Trace: [ 250.147694][T11865] [ 250.147703][T11865] dump_stack_lvl+0x100/0x190 [ 250.147739][T11865] should_fail_ex.cold+0x5/0xa [ 250.147771][T11865] should_failslab+0xc2/0x120 [ 250.147798][T11865] __kmalloc_cache_noprof+0x91/0x6d0 [ 250.147827][T11865] ? __kasan_kmalloc+0xaa/0xb0 [ 250.147850][T11865] ? ntfs_init_fs_context+0x31c/0x620 [ 250.147880][T11865] ntfs_init_fs_context+0x31c/0x620 [ 250.147902][T11865] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 250.147929][T11865] alloc_fs_context+0x60c/0xf40 [ 250.147965][T11865] __x64_sys_fsopen+0xed/0x220 [ 250.147988][T11865] do_syscall_64+0x123/0x790 [ 250.148019][T11865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.148041][T11865] RIP: 0033:0x7f74c859e159 [ 250.148058][T11865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.148078][T11865] RSP: 002b:00007f74c94a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 250.148098][T11865] RAX: ffffffffffffffda RBX: 00007f74c8825fa0 RCX: 00007f74c859e159 [ 250.148112][T11865] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 250.148125][T11865] RBP: 00007f74c863506b R08: 0000000000000000 R09: 0000000000000000 [ 250.148138][T11865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.148151][T11865] R13: 00007f74c8826038 R14: 00007f74c8825fa0 R15: 00007ffcfba5a868 [ 250.148180][T11865] [ 250.300223][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.300379][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.303578][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.305288][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 250.305336][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.606663][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.645341][T11878] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 250.713308][T11882] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 250.913568][ T25] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 250.916880][ T25] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz1] on syz0 [ 251.051493][ T189] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 251.081649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.203144][ T189] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 251.203910][ T189] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.205663][ T189] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 251.205686][ T189] usb 7-1: Product: syz [ 251.205701][ T189] usb 7-1: Manufacturer: syz [ 251.205717][ T189] usb 7-1: SerialNumber: syz [ 251.207416][ T189] usb 7-1: config 0 descriptor?? [ 251.210133][ T189] keyspan 7-1:0.0: Keyspan 4 port adapter converter detected [ 251.210395][ T189] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 251.210461][ T189] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 88 [ 251.211913][ T189] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 251.239479][ T189] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 251.298475][ T189] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 251.299839][ T189] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 251.317205][ T189] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 251.318200][ T189] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 251.319379][ T189] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 251.320417][ T189] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 251.521487][ T5703] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 251.543356][ T189] usb 7-1: USB disconnect, device number 18 [ 251.548301][ T189] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 251.550885][ T189] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 251.553497][ T189] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 251.556637][ T189] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 251.557334][ T189] keyspan 7-1:0.0: device disconnected [ 251.644776][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.671561][ T5703] usb 1-1: Using ep0 maxpacket: 32 [ 251.672137][ T5703] usb 1-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 251.673021][ T5703] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 251.673036][ T5703] usb 1-1: config 0 has no interface number 0 [ 251.673061][ T5703] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 251.673075][ T5703] usb 1-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 251.673088][ T5703] usb 1-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 251.673101][ T5703] usb 1-1: config 0 interface 196 has no altsetting 0 [ 251.674780][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.674793][ T5703] usb 1-1: Product: syz [ 251.674802][ T5703] usb 1-1: Manufacturer: syz [ 251.674811][ T5703] usb 1-1: SerialNumber: syz [ 251.676554][ T5703] usb 1-1: config 0 descriptor?? [ 251.677227][T11900] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 252.067239][ T30] audit: type=1400 audit(1789570848.183:786): avc: denied { create } for pid=11901 comm="syz.5.2501" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 252.274062][ T5712] kernel read not supported for file /video9 (pid: 5712 comm: kworker/1:6) [ 252.298047][ T5703] ipheth 1-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 252.312542][T11914] FAULT_INJECTION: forcing a failure. [ 252.312542][T11914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 252.312574][T11914] CPU: 0 UID: 0 PID: 11914 Comm: syz.6.2506 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 252.312603][T11914] Tainted: [L]=SOFTLOCKUP [ 252.312611][T11914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 252.312623][T11914] Call Trace: [ 252.312631][T11914] [ 252.312639][T11914] dump_stack_lvl+0x100/0x190 [ 252.312674][T11914] should_fail_ex.cold+0x5/0xa [ 252.312698][T11914] ? prepare_alloc_pages+0x16d/0x5b0 [ 252.312728][T11914] should_fail_alloc_page+0xeb/0x140 [ 252.312757][T11914] prepare_alloc_pages+0x1f0/0x5b0 [ 252.312789][T11914] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 252.312812][T11914] ? is_bpf_text_address+0x8a/0x1a0 [ 252.312838][T11914] ? lock_release+0x24d/0x310 [ 252.312859][T11914] ? bpf_ksym_find+0x128/0x1c0 [ 252.312892][T11914] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 252.312926][T11914] ? is_bpf_text_address+0x94/0x1a0 [ 252.312952][T11914] ? kernel_text_address+0x8d/0x100 [ 252.312982][T11914] ? __kernel_text_address+0xd/0x30 [ 252.313011][T11914] ? unwind_get_return_address+0x59/0xa0 [ 252.313038][T11914] ? arch_stack_walk+0xa6/0xf0 [ 252.313064][T11914] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 252.313096][T11914] ? stack_trace_save+0x8e/0xc0 [ 252.313115][T11914] ? __pfx_stack_trace_save+0x10/0x10 [ 252.313147][T11914] ? add_lock_to_list+0x9d/0x1d0 [ 252.313171][T11914] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 252.313197][T11914] ? policy_nodemask+0xed/0x4f0 [ 252.313226][T11914] alloc_pages_mpol+0x201/0x550 [ 252.313255][T11914] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 252.313287][T11914] alloc_pages_noprof+0x1a/0x160 [ 252.313315][T11914] get_free_pages_noprof+0x10/0xb0 [ 252.313338][T11914] __kasan_populate_vmalloc+0xa0/0x210 [ 252.313368][T11914] alloc_vmap_area+0x95d/0x2bb0 [ 252.313403][T11914] ? kasan_save_track+0x14/0x30 [ 252.313435][T11914] ? __kasan_kmalloc+0xaa/0xb0 [ 252.313460][T11914] ? __pfx_alloc_vmap_area+0x10/0x10 [ 252.313486][T11914] ? stack_trace_save+0x8e/0xc0 [ 252.313506][T11914] ? __get_vm_area_node+0x124/0x350 [ 252.313534][T11914] __get_vm_area_node+0x1ed/0x350 [ 252.313564][T11914] __vmalloc_node_range_noprof+0x268/0x1420 [ 252.313591][T11914] ? alloc_ldt_struct+0x14f/0x1b0 [ 252.313616][T11914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.313648][T11914] ? alloc_ldt_struct+0x14f/0x1b0 [ 252.313680][T11914] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 252.313718][T11914] ? alloc_ldt_struct+0x14f/0x1b0 [ 252.313741][T11914] __vmalloc_node_noprof+0xad/0xf0 [ 252.313766][T11914] ? alloc_ldt_struct+0x14f/0x1b0 [ 252.313794][T11914] __vmalloc_noprof+0xa3/0x120 [ 252.313820][T11914] ? __pfx___vmalloc_noprof+0x10/0x10 [ 252.313846][T11914] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 252.313875][T11914] ? down_write_killable+0x152/0x240 [ 252.313906][T11914] ? alloc_ldt_struct+0x5d/0x1b0 [ 252.313938][T11914] alloc_ldt_struct+0x14f/0x1b0 [ 252.313965][T11914] write_ldt+0x62b/0xd40 [ 252.313997][T11914] ? __pfx_write_ldt+0x10/0x10 [ 252.314025][T11914] ? xfd_validate_state+0x129/0x190 [ 252.314056][T11914] __x64_sys_modify_ldt+0xb1/0x170 [ 252.314084][T11914] do_syscall_64+0x123/0x790 [ 252.314114][T11914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.314136][T11914] RIP: 0033:0x7f74c859e159 [ 252.314153][T11914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.314173][T11914] RSP: 002b:00007f74c94a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 252.314195][T11914] RAX: ffffffffffffffda RBX: 00007f74c8825fa0 RCX: 00007f74c859e159 [ 252.314210][T11914] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 252.314223][T11914] RBP: 00007f74c863506b R08: 0000000000000000 R09: 0000000000000000 [ 252.314236][T11914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.314249][T11914] R13: 00007f74c8826038 R14: 00007f74c8825fa0 R15: 00007ffcfba5a868 [ 252.314280][T11914] [ 252.315173][T11914] syz.6.2506: vmalloc error: size 65536, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 252.315259][T11914] CPU: 0 UID: 0 PID: 11914 Comm: syz.6.2506 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 252.315289][T11914] Tainted: [L]=SOFTLOCKUP [ 252.315298][T11914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 252.315315][T11914] Call Trace: [ 252.315323][T11914] [ 252.315332][T11914] dump_stack_lvl+0x100/0x190 [ 252.315366][T11914] warn_alloc.cold+0x9e/0xb2 [ 252.315389][T11914] ? __pfx_warn_alloc+0x10/0x10 [ 252.315438][T11914] ? lockdep_hardirqs_on+0x7d/0x110 [ 252.315478][T11914] ? __get_vm_area_node+0x2f0/0x350 [ 252.315521][T11914] ? __get_vm_area_node+0x22b/0x350 [ 252.315562][T11914] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 252.315603][T11914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.315644][T11914] ? alloc_ldt_struct+0x14f/0x1b0 [ 252.315690][T11914] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 252.315743][T11914] ? alloc_ldt_struct+0x14f/0x1b0 [ 252.315778][T11914] __vmalloc_node_noprof+0xad/0xf0 [ 252.315815][T11914] ? alloc_ldt_struct+0x14f/0x1b0 [ 252.315856][T11914] __vmalloc_noprof+0xa3/0x120 [ 252.315897][T11914] ? __pfx___vmalloc_noprof+0x10/0x10 [ 252.315935][T11914] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 252.315982][T11914] ? down_write_killable+0x152/0x240 [ 252.316024][T11914] ? alloc_ldt_struct+0x5d/0x1b0 [ 252.316058][T11914] alloc_ldt_struct+0x14f/0x1b0 [ 252.316097][T11914] write_ldt+0x62b/0xd40 [ 252.316140][T11914] ? __pfx_write_ldt+0x10/0x10 [ 252.316178][T11914] ? xfd_validate_state+0x129/0x190 [ 252.316217][T11914] __x64_sys_modify_ldt+0xb1/0x170 [ 252.316256][T11914] do_syscall_64+0x123/0x790 [ 252.316300][T11914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.316331][T11914] RIP: 0033:0x7f74c859e159 [ 252.316354][T11914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.316385][T11914] RSP: 002b:00007f74c94a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 252.316419][T11914] RAX: ffffffffffffffda RBX: 00007f74c8825fa0 RCX: 00007f74c859e159 [ 252.316440][T11914] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000001 [ 252.316458][T11914] RBP: 00007f74c863506b R08: 0000000000000000 R09: 0000000000000000 [ 252.316477][T11914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.316496][T11914] R13: 00007f74c8826038 R14: 00007f74c8825fa0 R15: 00007ffcfba5a868 [ 252.316534][T11914] [ 252.318041][T11914] Mem-Info: [ 252.318056][T11914] active_anon:22600 inactive_anon:0 isolated_anon:0 [ 252.318056][T11914] active_file:1067 inactive_file:32734 isolated_file:0 [ 252.318056][T11914] unevictable:0 dirty:176 writeback:0 [ 252.318056][T11914] slab_reclaimable:11978 slab_unreclaimable:102801 [ 252.318056][T11914] mapped:30569 shmem:11289 pagetables:1857 [ 252.318056][T11914] sec_pagetables:0 bounce:0 [ 252.318056][T11914] kernel_misc_reclaimable:0 [ 252.318056][T11914] free:1306922 free_pcp:6550 free_cma:0 [ 252.320029][T11914] Node 0 active_anon:90400kB inactive_anon:0kB active_file:4268kB inactive_file:130652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122200kB dirty:704kB writeback:0kB shmem:45156kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13688kB pagetables:7268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 252.320108][T11914] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:284kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 252.320182][T11914] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.320262][T11914] lowmem_reserve[]: 0 2471 2471 2471 2471 [ 252.320311][T11914] Node 0 DMA32 free:1264804kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:90400kB inactive_anon:0kB active_file:4268kB inactive_file:130652kB unevictable:0kB writepending:704kB zspages:472kB present:3129332kB managed:2530528kB mlocked:0kB bounce:0kB free_pcp:26200kB local_pcp:19212kB free_cma:0kB [ 252.320397][T11914] lowmem_reserve[]: 0 0 0 0 0 [ 252.320454][T11914] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.320523][T11914] lowmem_reserve[]: 0 0 0 0 0 [ 252.320558][T11914] Node 1 Normal free:3947556kB boost:0kB min:55908kB low:69884kB high:83860kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:284kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.320617][T11914] lowmem_reserve[]: 0 0 0 0 0 [ 252.320714][T11914] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 252.320867][T11914] Node 0 DMA32: 739*4kB (UM) 545*8kB (UME) 375*16kB (UME) 329*32kB (UME) 92*64kB (UME) 65*128kB (UME) 34*256kB (UM) 27*512kB (UM) 24*1024kB (UME) 10*2048kB (ME) 283*4096kB (UM) = 1264804kB [ 252.321061][T11914] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 252.321160][T11914] Node 1 Normal: 1*4kB (M) 2*8kB (U) 5*16kB (UM) 6*32kB (UM) 6*64kB (U) 1*128kB (M) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 962*4096kB (UM) = 3947556kB [ 252.321316][T11914] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.321332][T11914] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.321348][T11914] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.321364][T11914] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 252.321380][T11914] 45108 total pagecache pages [ 252.321388][T11914] 25 pages in swap cache [ 252.331668][T11914] Free swap = 124532kB [ 252.331678][T11914] Total swap = 124996kB [ 252.331687][T11914] 2097051 pages RAM [ 252.331695][T11914] 0 pages HighMem/MovableOnly [ 252.331702][T11914] 432785 pages reserved [ 252.331708][T11914] 0 pages cma reserved [ 252.772745][ T5703] ipheth 1-1:0.196: Apple iPhone USB Ethernet device attached [ 252.777505][ T5703] usb 1-1: USB disconnect, device number 28 [ 252.873017][ T5703] ipheth 1-1:0.196: Apple iPhone USB Ethernet now disconnected [ 253.413117][ T5703] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 253.432470][ T5712] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 253.468354][T11935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.562296][ T5703] usb 1-1: Using ep0 maxpacket: 8 [ 253.563675][ T5703] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 253.566409][ T5703] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 253.566435][ T5703] usb 1-1: config 0 has no interface number 0 [ 253.566471][ T5703] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 253.566494][ T5703] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 253.566519][ T5703] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.566544][ T5703] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 253.566582][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.570602][ T5703] usb 1-1: config 0 descriptor?? [ 253.583098][ T5712] usb 6-1: Using ep0 maxpacket: 16 [ 253.583962][ T5712] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 253.585228][ T5712] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.585256][ T5712] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 253.585281][ T5712] usb 6-1: config 0 interface 0 has no altsetting 0 [ 253.585309][ T5712] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.623606][ T5712] usb 6-1: config 0 descriptor?? [ 253.624127][ T5703] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 253.917534][ T5703] usb 1-1: USB disconnect, device number 29 [ 253.917636][ C1] ldusb 1-1:0.55: usb_submit_urb failed (-19) [ 253.919142][T11932] ldusb 1-1:0.55: Couldn't submit interrupt_out_urb -19 [ 253.920248][T11950] device-mapper: ioctl: Invalid ioctl structure: name m, dev f803 [ 253.969299][ T5703] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 254.019966][ T30] audit: type=1400 audit(1789570850.133:787): avc: denied { ioctl } for pid=11955 comm="syz.4.2523" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 254.101106][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2524'. [ 254.164710][ T5712] hid-multitouch 0003:0EEF:72C4.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 254.201672][ C1] net_ratelimit: 5 callbacks suppressed [ 254.201694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.308645][ T5712] usb 6-1: USB disconnect, device number 23 [ 254.564219][T11978] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 254.564244][T11978] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 254.565514][T11978] vhci_hcd vhci_hcd.0: Device attached [ 254.569366][T11981] FAULT_INJECTION: forcing a failure. [ 254.569366][T11981] name failslab, interval 1, probability 0, space 0, times 0 [ 254.569394][T11981] CPU: 0 UID: 0 PID: 11981 Comm: syz.7.2533 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 254.569423][T11981] Tainted: [L]=SOFTLOCKUP [ 254.569431][T11981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 254.569445][T11981] Call Trace: [ 254.569452][T11981] [ 254.569461][T11981] dump_stack_lvl+0x100/0x190 [ 254.569499][T11981] should_fail_ex.cold+0x5/0xa [ 254.569531][T11981] should_failslab+0xc2/0x120 [ 254.569558][T11981] __kmalloc_cache_noprof+0x91/0x6d0 [ 254.569590][T11981] ? sctp_endpoint_new+0xfc/0xb20 [ 254.569627][T11981] sctp_endpoint_new+0xfc/0xb20 [ 254.569661][T11981] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 254.569692][T11981] ? lockdep_init_map_type+0x5c/0x250 [ 254.569719][T11981] ? lockdep_init_map_type+0x5c/0x250 [ 254.569747][T11981] sctp_init_sock+0xe2b/0x1300 [ 254.569776][T11981] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 254.569807][T11981] sctp_v6_init_sock+0x16/0x70 [ 254.569836][T11981] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 254.569865][T11981] inet6_create+0xb1a/0x12b0 [ 254.569888][T11981] ? inet6_create+0x7f/0x12b0 [ 254.569911][T11981] __sock_create+0x339/0x860 [ 254.569948][T11981] __sys_socket+0x14d/0x260 [ 254.569968][T11981] ? __pfx___sys_socket+0x10/0x10 [ 254.569996][T11981] __x64_sys_socket+0x72/0xb0 [ 254.570015][T11981] ? lockdep_hardirqs_on+0x7d/0x110 [ 254.570042][T11981] do_syscall_64+0x123/0x790 [ 254.570072][T11981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.570094][T11981] RIP: 0033:0x7faef019e159 [ 254.570112][T11981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.570131][T11981] RSP: 002b:00007faef1104028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 254.570153][T11981] RAX: ffffffffffffffda RBX: 00007faef0425fa0 RCX: 00007faef019e159 [ 254.570167][T11981] RDX: 0000000000000084 RSI: 0000000000000005 RDI: 000000000000000a [ 254.570179][T11981] RBP: 00007faef023506b R08: 0000000000000000 R09: 0000000000000000 [ 254.570192][T11981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.570204][T11981] R13: 00007faef0426038 R14: 00007faef0425fa0 R15: 00007ffdb3c2c3b8 [ 254.570235][T11981] [ 254.720276][T11989] loop3: detected capacity change from 0 to 7 [ 254.727100][T11989] Dev loop3: unable to read RDB block 7 [ 254.727135][T11989] loop3: unable to read partition table [ 254.727291][T11989] loop3: partition table beyond EOD, truncated [ 254.727317][T11989] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 254.842248][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 254.853945][ T189] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 255.133107][T11980] vhci_hcd: connection reset by peer [ 255.135302][ T271] vhci_hcd vhci_hcd.4: stop threads [ 255.135328][ T271] vhci_hcd vhci_hcd.4: release socket [ 255.137415][ T271] vhci_hcd vhci_hcd.4: disconnect device [ 255.241711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.301731][ T986] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 255.309603][T12012] FAULT_INJECTION: forcing a failure. [ 255.309603][T12012] name failslab, interval 1, probability 0, space 0, times 0 [ 255.309631][T12012] CPU: 1 UID: 0 PID: 12012 Comm: syz.4.2547 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 255.309648][T12012] Tainted: [L]=SOFTLOCKUP [ 255.309652][T12012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 255.309659][T12012] Call Trace: [ 255.309664][T12012] [ 255.309669][T12012] dump_stack_lvl+0x100/0x190 [ 255.309696][T12012] should_fail_ex.cold+0x5/0xa [ 255.309714][T12012] should_failslab+0xc2/0x120 [ 255.309731][T12012] __kmalloc_cache_noprof+0x91/0x6d0 [ 255.309749][T12012] ? resv_map_alloc+0x46/0x400 [ 255.309766][T12012] resv_map_alloc+0x46/0x400 [ 255.309780][T12012] hugetlbfs_get_inode+0x385/0x700 [ 255.309797][T12012] hugetlb_file_setup+0x15b/0x5b0 [ 255.309812][T12012] ksys_mmap_pgoff+0x242/0x610 [ 255.309829][T12012] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 255.309841][T12012] ? fput+0x7c/0x100 [ 255.309855][T12012] ? __pfx___x64_sys_futex+0x10/0x10 [ 255.309870][T12012] ? ksys_write+0x1ac/0x250 [ 255.309881][T12012] ? __pfx_ksys_write+0x10/0x10 [ 255.309895][T12012] __x64_sys_mmap+0x125/0x190 [ 255.309910][T12012] do_syscall_64+0x123/0x790 [ 255.309928][T12012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.309939][T12012] RIP: 0033:0x7f347e99e159 [ 255.309951][T12012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.309962][T12012] RSP: 002b:00007f347cbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 255.309975][T12012] RAX: ffffffffffffffda RBX: 00007f347ec25fa0 RCX: 00007f347e99e159 [ 255.309982][T12012] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 255.309990][T12012] RBP: 00007f347ea3506b R08: ffffffffffffffff R09: 0000000000000000 [ 255.309997][T12012] R10: 0000000000042031 R11: 0000000000000246 R12: 0000000000000000 [ 255.310004][T12012] R13: 00007f347ec26038 R14: 00007f347ec25fa0 R15: 00007ffe56d2af18 [ 255.310019][T12012] [ 255.455898][ T986] usb 1-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 255.459399][ T986] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.459425][ T986] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 255.459459][ T986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.466160][ T986] opticon 1-1:1.0: opticon converter detected [ 255.507961][ T986] usb 1-1: opticon converter now attached to ttyUSB0 [ 255.682322][T12021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2551'. [ 255.724591][T12023] netlink: 'syz.4.2552': attribute type 32 has an invalid length. [ 255.765626][T11999] opticon ttyUSB0: usb_serial_generic_submit_read_urb - usb_submit_urb failed: -90 [ 255.882484][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.967790][ T5703] usb 1-1: USB disconnect, device number 30 [ 255.984091][ T5703] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 255.984615][ T5703] opticon 1-1:1.0: device disconnected [ 256.007254][ T30] audit: type=1400 audit(1789570852.123:788): avc: denied { connect } for pid=12035 comm="syz.5.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.119815][ T30] audit: type=1400 audit(1789570852.233:789): avc: denied { mount } for pid=12039 comm="syz.4.2559" name="/" dev="autofs" ino=39549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 256.144471][ T30] audit: type=1400 audit(1789570852.243:790): avc: denied { write } for pid=12035 comm="syz.5.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.161485][ T30] audit: type=1400 audit(1789570852.263:791): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 256.281771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.363146][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.522885][ T4917] Bluetooth: hci3: command 0x1003 tx timeout [ 256.524646][ T5602] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 256.657700][ T986] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 256.673310][ T986] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 256.921874][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.157784][ T30] audit: type=1400 audit(1789570853.273:792): avc: denied { execute } for pid=12053 comm="syz.5.2565" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 257.263360][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2567'. [ 257.322457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.379231][T12066] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2570'. [ 257.379526][T12066] 8021q: VLANs not supported on lo [ 257.427456][ T30] audit: type=1400 audit(1789570853.543:793): avc: denied { write } for pid=12069 comm="syz.6.2572" name="target" dev="configfs" ino=3528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 257.427500][ T30] audit: type=1400 audit(1789570853.543:794): avc: denied { write } for pid=12069 comm="syz.6.2572" name="target" dev="configfs" ino=3528 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 257.584974][ T30] audit: type=1400 audit(1789570853.703:795): avc: denied { remount } for pid=12077 comm="syz.6.2576" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 257.791646][ T5725] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 257.880420][ T30] audit: type=1400 audit(1789570853.993:796): avc: denied { write } for pid=12090 comm="syz.6.2582" path="socket:[39659]" dev="sockfs" ino=39659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 257.953338][ T5725] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 257.954953][ T5725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.957885][ T5725] usb 1-1: config 0 descriptor?? [ 257.973763][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.193635][ T5725] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 258.361638][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.422958][ T5725] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 258.422983][ T5725] [drm] Initialized udl on minor 1 [ 258.488085][ T30] audit: type=1400 audit(1789570854.603:797): avc: denied { read } for pid=12114 comm="syz.4.2593" name="kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 258.488152][ T30] audit: type=1400 audit(1789570854.603:798): avc: denied { open } for pid=12114 comm="syz.4.2593" path="/520/proc_mnt/kcore" dev="proc" ino=4026532046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 258.873138][T12132] input: syz0 as /devices/virtual/input/input37 [ 258.879959][ T30] audit: type=1400 audit(1789570854.993:799): avc: denied { append } for pid=12130 comm="syz.5.2600" name="event3" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 259.105321][ T30] audit: type=1400 audit(1789570855.223:800): avc: denied { mounton } for pid=12142 comm="syz.7.2606" path="/169/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 259.105845][T12143] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.111171][T12143] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.225507][T12146] net_ratelimit: 1 callbacks suppressed [ 259.225551][T12146] openvswitch: netlink: Message has 4 unknown bytes. [ 259.401688][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.403631][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.778763][ T30] audit: type=1400 audit(1789570855.893:801): avc: denied { setopt } for pid=12169 comm="syz.7.2619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 259.883028][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.951537][ T189] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 260.041872][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.142135][T12182] hpfs: Bad magic ... probably not HPFS [ 260.441632][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.528004][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.820068][T12189] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2628'. [ 261.082852][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.352818][T12212] FAULT_INJECTION: forcing a failure. [ 261.352818][T12212] name failslab, interval 1, probability 0, space 0, times 0 [ 261.352854][T12212] CPU: 1 UID: 0 PID: 12212 Comm: syz.6.2637 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 261.352884][T12212] Tainted: [L]=SOFTLOCKUP [ 261.352892][T12212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 261.352905][T12212] Call Trace: [ 261.352913][T12212] [ 261.352922][T12212] dump_stack_lvl+0x100/0x190 [ 261.352960][T12212] should_fail_ex.cold+0x5/0xa [ 261.352990][T12212] should_failslab+0xc2/0x120 [ 261.353019][T12212] kmem_cache_alloc_noprof+0x92/0x6a0 [ 261.353044][T12212] ? mas_preallocate+0xc22/0xee0 [ 261.353079][T12212] mas_preallocate+0xc22/0xee0 [ 261.353111][T12212] ? __pfx_mas_preallocate+0x10/0x10 [ 261.353150][T12212] ? anon_vma_name+0x5a/0x250 [ 261.353182][T12212] __split_vma+0x2f8/0x1de0 [ 261.353218][T12212] ? __pfx___split_vma+0x10/0x10 [ 261.353247][T12212] ? __lock_acquire+0x5c0/0x1f40 [ 261.353285][T12212] vma_modify+0x1ef4/0x29b0 [ 261.353327][T12212] ? __pfx_vma_modify+0x10/0x10 [ 261.353375][T12212] vma_modify_name+0x29c/0x380 [ 261.353407][T12212] ? __pfx_vma_modify_name+0x10/0x10 [ 261.353463][T12212] madvise_update_vma+0x572/0xd30 [ 261.353493][T12212] ? __pfx_madvise_update_vma+0x10/0x10 [ 261.353531][T12212] ? mas_prev_slot+0x768/0x11b0 [ 261.353560][T12212] madvise_vma_behavior+0x2d5/0x2350 [ 261.353590][T12212] ? mas_prev+0xa4/0x100 [ 261.353610][T12212] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 261.353641][T12212] ? mas_walk+0x260/0x310 [ 261.353668][T12212] ? find_vma_prev+0xd8/0x150 [ 261.353699][T12212] ? __pfx_find_vma_prev+0x10/0x10 [ 261.353744][T12212] madvise_walk_vmas+0x30e/0xc50 [ 261.353780][T12212] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 261.353812][T12212] ? down_write_killable+0x152/0x240 [ 261.353842][T12212] ? __pfx_down_write_killable+0x10/0x10 [ 261.353872][T12212] ? set_anon_vma_name+0x1e0/0x4c0 [ 261.353900][T12212] ? set_anon_vma_name+0x21f/0x4c0 [ 261.353926][T12212] ? kfree+0x22b/0x6d0 [ 261.353953][T12212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.353982][T12212] set_anon_vma_name+0x333/0x4c0 [ 261.354013][T12212] ? __pfx_set_anon_vma_name+0x10/0x10 [ 261.354042][T12212] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 261.354072][T12212] ? static_key_count+0x5a/0x70 [ 261.354101][T12212] ? security_task_prctl+0x11c/0x160 [ 261.354135][T12212] __do_sys_prctl+0xb41/0x2270 [ 261.354166][T12212] ? __pfx___do_sys_prctl+0x10/0x10 [ 261.354208][T12212] do_syscall_64+0x123/0x790 [ 261.354240][T12212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.354262][T12212] RIP: 0033:0x7f74c859e159 [ 261.354280][T12212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.354300][T12212] RSP: 002b:00007f74c94a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 261.354321][T12212] RAX: ffffffffffffffda RBX: 00007f74c8825fa0 RCX: 00007f74c859e159 [ 261.354335][T12212] RDX: 0000200000ffc000 RSI: 0000000000000000 RDI: 0000000053564d41 [ 261.354348][T12212] RBP: 00007f74c863506b R08: 0000200000000b40 R09: 0000000000000000 [ 261.354361][T12212] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 261.354373][T12212] R13: 00007f74c8826038 R14: 00007f74c8825fa0 R15: 00007ffcfba5a868 [ 261.354404][T12212] [ 261.483586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.941622][ T189] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 261.960509][ T986] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 262.104806][ T189] usb 7-1: Using ep0 maxpacket: 32 [ 262.105497][ T189] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 262.106990][ T189] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 262.107015][ T189] usb 7-1: config 0 has no interface number 0 [ 262.107055][ T189] usb 7-1: config 0 interface 184 has no altsetting 0 [ 262.109279][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.109302][ T189] usb 7-1: Product: syz [ 262.109318][ T189] usb 7-1: Manufacturer: syz [ 262.109334][ T189] usb 7-1: SerialNumber: syz [ 262.113555][ T189] usb 7-1: config 0 descriptor?? [ 262.135875][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.161659][ T986] usb 6-1: Using ep0 maxpacket: 16 [ 262.176073][ T986] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 262.271213][ T986] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 262.271239][ T986] usb 6-1: config 0 has no interface number 0 [ 262.271267][ T986] usb 6-1: too many endpoints for config 0 interface 1 altsetting 3: 254, using maximum allowed: 30 [ 262.271303][ T986] usb 6-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 262.271329][ T986] usb 6-1: config 0 interface 1 has no altsetting 0 [ 262.271359][ T986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.346578][ T986] usb 6-1: config 0 descriptor?? [ 262.401274][T12228] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.773067][ T189] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 262.773100][ T189] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 262.962616][ T986] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.001C/input/input38 [ 262.981296][ T189] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 262.981335][ T189] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 262.981364][ T189] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 262.981637][ T189] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 262.995624][ T189] usb 7-1: USB disconnect, device number 19 [ 263.047740][ T986] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0071.001C/input/input39 [ 263.129658][ T986] uclogic 0003:28BD:0071.001C: input,hidraw0: USB HID v0.01 Keypad [HID 28bd:0071] on usb-dummy_hcd.5-1/input1 [ 263.139821][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 263.139837][ T30] audit: type=1400 audit(1789570859.253:803): avc: denied { nosuid_transition } for pid=12242 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 263.139878][ T30] audit: type=1400 audit(1789570859.253:804): avc: denied { transition } for pid=12242 comm="syz.4.2652" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 263.139941][ T30] audit: type=1400 audit(1789570859.253:805): avc: denied { entrypoint } for pid=12242 comm="syz.4.2652" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=81 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 263.139984][ T30] audit: type=1400 audit(1789570859.253:806): avc: denied { share } for pid=12242 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 263.142047][ T30] audit: type=1400 audit(1789570859.253:807): avc: denied { noatsecure } for pid=12242 comm="syz.4.2652" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 263.330804][ T986] usb 6-1: USB disconnect, device number 24 [ 263.431034][T12247] fido_id[12247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 263.486075][ T5725] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 263.486436][ T5725] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 263.497371][ T189] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 263.502584][ T189] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 263.502753][ T189] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 263.522628][ T5725] usb 1-1: USB disconnect, device number 31 [ 264.027745][T12260] xt_hashlimit: size too large, truncated to 1048576 [ 264.283421][ T5725] net_ratelimit: 5 callbacks suppressed [ 264.283439][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.412998][ T5703] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 264.571236][ T5703] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.583371][ T5703] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 264.583402][ T5703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 264.583428][ T5703] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 264.583452][ T5703] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.583499][ T5703] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.588705][ T5703] usb 7-1: config 0 descriptor?? [ 264.603119][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.760879][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2668'. [ 264.796290][ T30] audit: type=1400 audit(1789570860.913:808): avc: denied { getopt } for pid=12273 comm="syz.5.2664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 265.035539][ T5703] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 265.035572][ T5703] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 265.035597][ T5703] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 265.035622][ T5703] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 265.035648][ T5703] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 265.035672][ T5703] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 265.035696][ T5703] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 265.035720][ T5703] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 265.037469][ T5703] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 265.037498][ T5703] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 265.127020][ T5703] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 265.326730][ T5712] usb 7-1: USB disconnect, device number 20 [ 265.333592][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.482469][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.543551][T12313] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 265.642647][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.834277][ T5712] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 265.947253][ T30] audit: type=1400 audit(1789570862.063:809): avc: denied { read } for pid=12323 comm="syz.5.2687" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 265.947550][ T30] audit: type=1400 audit(1789570862.063:810): avc: denied { open } for pid=12323 comm="syz.5.2687" path="/366/proc/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 266.011891][ T5712] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 266.012630][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.012658][ T5712] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 266.012673][ T5712] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 266.012695][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.361987][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.647475][ T5712] cxacru 1-1:1.0: send of cm 0x84 failed (-71) [ 266.647523][ T5712] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 266.650556][ T5712] cxacru 1-1:1.0: send of cm 0x88 failed (-71) [ 266.651335][ T5712] ATM dev 0: poll status: error -71 [ 266.651376][ T5712] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 266.687470][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.702550][ T5712] usb 1-1: USB disconnect, device number 32 [ 266.790753][T12339] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 266.790914][T12339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.790992][T12339] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 266.813562][T12339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.813862][T12339] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.815050][T12339] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.819805][T12339] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.402920][ T8065] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.403727][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.404235][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.530473][T12377] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 267.912422][ T986] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 268.064830][ T986] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 268.071263][ T986] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 268.071287][ T986] usb 6-1: config 1 has no interface number 0 [ 268.102838][ T986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.102863][ T986] usb 6-1: Product: syz [ 268.102879][ T986] usb 6-1: Manufacturer: syz [ 268.102894][ T986] usb 6-1: SerialNumber: syz [ 268.136528][ T986] usb 6-1: 3:1 : does not exist [ 268.136550][ T986] usb 6-1: 3:2 : does not exist [ 268.177263][T12408] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2718'. [ 268.337424][T12416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2722'. [ 268.338577][T12416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2722'. [ 268.341081][T12416] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2722'. [ 268.444089][T12385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.444481][T12385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.468114][ T189] usb 6-1: USB disconnect, device number 25 [ 268.513677][T12423] FAULT_INJECTION: forcing a failure. [ 268.513677][T12423] name failslab, interval 1, probability 0, space 0, times 0 [ 268.513709][T12423] CPU: 0 UID: 0 PID: 12423 Comm: syz.4.2724 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 268.513738][T12423] Tainted: [L]=SOFTLOCKUP [ 268.513747][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 268.513759][T12423] Call Trace: [ 268.513767][T12423] [ 268.513775][T12423] dump_stack_lvl+0x100/0x190 [ 268.513810][T12423] should_fail_ex.cold+0x5/0xa [ 268.513841][T12423] should_failslab+0xc2/0x120 [ 268.513868][T12423] __kmalloc_cache_noprof+0x91/0x6d0 [ 268.513897][T12423] ? kasan_save_track+0x14/0x30 [ 268.513920][T12423] ? cgroup_init_fs_context+0x4f/0x9c0 [ 268.513951][T12423] cgroup_init_fs_context+0x4f/0x9c0 [ 268.513980][T12423] alloc_fs_context+0x60c/0xf40 [ 268.514014][T12423] __x64_sys_fsopen+0xed/0x220 [ 268.514037][T12423] do_syscall_64+0x123/0x790 [ 268.514068][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.514090][T12423] RIP: 0033:0x7f347e99e159 [ 268.514109][T12423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.514130][T12423] RSP: 002b:00007f347cbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 268.514159][T12423] RAX: ffffffffffffffda RBX: 00007f347ec25fa0 RCX: 00007f347e99e159 [ 268.514174][T12423] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 268.514188][T12423] RBP: 00007f347ea3506b R08: 0000000000000000 R09: 0000000000000000 [ 268.514202][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.514216][T12423] R13: 00007f347ec26038 R14: 00007f347ec25fa0 R15: 00007ffe56d2af18 [ 268.514247][T12423] [ 268.780809][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 268.780828][ T30] audit: type=1400 audit(1789570864.893:813): avc: denied { create } for pid=12429 comm="syz.4.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.781207][ T30] audit: type=1400 audit(1789570864.893:814): avc: denied { read } for pid=12429 comm="syz.4.2727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 268.842165][ T4917] Bluetooth: hci2: command 0x0406 tx timeout [ 268.842210][ T4917] Bluetooth: hci0: command 0x0c1a tx timeout [ 268.857473][ T5602] Bluetooth: hci5: command 0x0c1a tx timeout [ 269.421817][ T189] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 269.482522][ T9] net_ratelimit: 8 callbacks suppressed [ 269.482537][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.603650][ T189] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 269.605806][ T189] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 269.605831][ T189] usb 7-1: config 0 has no interface number 0 [ 269.605867][ T189] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 269.611495][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.611518][ T189] usb 7-1: Product: syz [ 269.611533][ T189] usb 7-1: Manufacturer: syz [ 269.611548][ T189] usb 7-1: SerialNumber: syz [ 269.613908][ T189] usb 7-1: config 0 descriptor?? [ 269.651200][ T189] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 269.763401][T12465] FAULT_INJECTION: forcing a failure. [ 269.763401][T12465] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 269.763439][T12465] CPU: 0 UID: 0 PID: 12465 Comm: syz.5.2742 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 269.763466][T12465] Tainted: [L]=SOFTLOCKUP [ 269.763474][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 269.763485][T12465] Call Trace: [ 269.763492][T12465] [ 269.763502][T12465] dump_stack_lvl+0x100/0x190 [ 269.763539][T12465] should_fail_ex.cold+0x5/0xa [ 269.763556][T12465] ? prepare_alloc_pages+0x16d/0x5b0 [ 269.763585][T12465] should_fail_alloc_page+0xeb/0x140 [ 269.763610][T12465] prepare_alloc_pages+0x1f0/0x5b0 [ 269.763626][T12465] ? is_bpf_text_address+0x25/0x1a0 [ 269.763643][T12465] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 269.763657][T12465] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 269.763678][T12465] ? is_bpf_text_address+0x94/0x1a0 [ 269.763693][T12465] ? kernel_text_address+0x8d/0x100 [ 269.763711][T12465] ? __kernel_text_address+0xd/0x30 [ 269.763727][T12465] ? unwind_get_return_address+0x59/0xa0 [ 269.763746][T12465] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 269.763761][T12465] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 269.763776][T12465] ? look_up_lock_class+0x64/0x120 [ 269.763792][T12465] ? register_lock_class+0x3f/0x7b0 [ 269.763806][T12465] ? find_held_lock+0x2b/0x80 [ 269.763822][T12465] ? ima_match_policy+0x8b8/0x23e0 [ 269.763841][T12465] ? __lock_acquire+0x5c0/0x1f40 [ 269.763855][T12465] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 269.763871][T12465] ? policy_nodemask+0xed/0x4f0 [ 269.763887][T12465] alloc_pages_mpol+0x201/0x550 [ 269.763903][T12465] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 269.763919][T12465] ? find_held_lock+0x2b/0x80 [ 269.763936][T12465] alloc_pages_noprof+0x1a/0x160 [ 269.763953][T12465] pte_alloc_one+0x1c/0x3d0 [ 269.763969][T12465] __pte_alloc+0x6d/0x380 [ 269.763982][T12465] ? __pfx___pte_alloc+0x10/0x10 [ 269.763994][T12465] ? __lock_acquire+0x5c0/0x1f40 [ 269.764009][T12465] do_anonymous_page+0x1307/0x2050 [ 269.764026][T12465] ? rcu_is_watching+0x13/0xc0 [ 269.764041][T12465] ? trace_hrtimer_start+0x77/0x220 [ 269.764065][T12465] ? __pfx_do_anonymous_page+0x10/0x10 [ 269.764082][T12465] ? pgd_none+0x9f/0xe0 [ 269.764098][T12465] ? __pfx_pgd_none+0x10/0x10 [ 269.764118][T12465] __handle_mm_fault+0x1ff3/0x2f60 [ 269.764137][T12465] ? mtree_load+0xdc/0xb50 [ 269.764153][T12465] ? __pfx___handle_mm_fault+0x10/0x10 [ 269.764167][T12465] ? find_held_lock+0x2b/0x80 [ 269.764182][T12465] ? mtree_load+0x388/0xb50 [ 269.764197][T12465] ? mtree_load+0x388/0xb50 [ 269.764223][T12465] handle_mm_fault+0x363/0xa20 [ 269.764243][T12465] __get_user_pages+0x8ae/0x2c30 [ 269.764263][T12465] ? __pfx___get_user_pages+0x10/0x10 [ 269.764282][T12465] faultin_page_range+0x1f1/0x9e0 [ 269.764297][T12465] ? lock_acquire+0x1d1/0x380 [ 269.764310][T12465] madvise_do_behavior+0x354/0x510 [ 269.764328][T12465] ? __pfx_madvise_do_behavior+0x10/0x10 [ 269.764344][T12465] ? down_read+0x13b/0x4c0 [ 269.764368][T12465] do_madvise+0x238/0x290 [ 269.764383][T12465] ? __pfx_do_madvise+0x10/0x10 [ 269.764397][T12465] ? do_futex+0x190/0x440 [ 269.764415][T12465] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.764443][T12465] __x64_sys_madvise+0xa9/0x110 [ 269.764458][T12465] ? lockdep_hardirqs_on+0x7d/0x110 [ 269.764472][T12465] do_syscall_64+0x123/0x790 [ 269.764489][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.764502][T12465] RIP: 0033:0x7f1e0099e159 [ 269.764515][T12465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.764538][T12465] RSP: 002b:00007f1e0182e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 269.764559][T12465] RAX: ffffffffffffffda RBX: 00007f1e00c25fa0 RCX: 00007f1e0099e159 [ 269.764571][T12465] RDX: 0000000000000016 RSI: 0000000000001000 RDI: 0000200000fff000 [ 269.764583][T12465] RBP: 00007f1e00a3506b R08: 0000000000000000 R09: 0000000000000000 [ 269.764594][T12465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.764607][T12465] R13: 00007f1e00c26038 R14: 00007f1e00c25fa0 R15: 00007fffe0f894a8 [ 269.764635][T12465] [ 269.803258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.002220][ C0] usb 7-1: yurex_control_callback - control failed: -71 [ 270.002626][ T5703] usb 7-1: USB disconnect, device number 21 [ 270.135153][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.136847][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.172127][ T5703] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 270.174191][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.331267][T12478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2748'. [ 270.523044][ T5586] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.629901][ T30] audit: type=1400 audit(1789570866.743:815): avc: denied { write } for pid=12492 comm="syz.5.2755" name="nullb" dev="configfs" ino=3516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 270.660950][ T30] audit: type=1400 audit(1789570866.783:816): avc: denied { bind } for pid=12494 comm="syz.7.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 270.683273][T12496] tipc: Started in network mode [ 270.683289][T12496] tipc: Node identity 4, cluster identity 4711 [ 270.683301][T12496] tipc: Node number set to 4 [ 270.765225][ T5712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.841627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.921854][ T5602] Bluetooth: hci0: command 0x0c1a tx timeout [ 270.921887][ T5602] Bluetooth: hci2: command 0x0406 tx timeout [ 270.935153][ T30] audit: type=1400 audit(1789570867.043:817): avc: denied { ioctl } for pid=12510 comm="syz.6.2763" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 271.051498][ T189] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 271.211975][ T189] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.212840][ T189] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.212862][ T189] usb 6-1: config 0 has no interfaces? [ 271.214661][ T189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.214684][ T189] usb 6-1: Product: syz [ 271.214699][ T189] usb 6-1: Manufacturer: syz [ 271.214714][ T189] usb 6-1: SerialNumber: syz [ 271.216627][ T189] usb 6-1: config 0 descriptor?? [ 271.421848][ T5712] usb 6-1: USB disconnect, device number 26 [ 271.575636][ T189] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 271.691326][T12526] ------------[ cut here ]------------ [ 271.691339][T12526] current_phy->suspended [ 271.691354][T12526] WARNING: drivers/net/ieee802154/mac802154_hwsim.c:266 at hwsim_hw_xmit+0xcbf/0x1540, CPU#1: syz.0.2770/12526 [ 271.714279][T12526] Modules linked in: [ 271.718176][T12526] CPU: 1 UID: 0 PID: 12526 Comm: syz.0.2770 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 271.729174][T12526] Tainted: [L]=SOFTLOCKUP [ 271.733527][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 271.743620][T12526] RIP: 0010:hwsim_hw_xmit+0xcbf/0x1540 [ 271.749085][T12526] Code: 48 c7 c2 40 3f c0 8c be 52 03 00 00 48 c7 c7 a0 3f c0 8c c6 05 0f 22 c6 09 01 e8 bc 1b 80 fa e9 c6 f8 ff ff e8 32 5a a5 fa 90 <0f> 0b 90 e9 11 f4 ff ff e8 24 5a a5 fa e8 5f 0a 89 fa 31 ff 89 c5 [ 271.768733][T12526] RSP: 0018:ffffc900067af530 EFLAGS: 00010287 [ 271.774837][T12526] RAX: 0000000000000309 RBX: ffff88802a592d20 RCX: ffffc9000e4e1000 [ 271.782850][T12526] RDX: 0000000000080000 RSI: ffffffff8766c51e RDI: ffff88807f1fa580 [ 271.790823][T12526] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 271.798848][T12526] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8766b860 [ 271.806848][T12526] R13: 1ffff92000cf5eb0 R14: ffff88802a592720 R15: 0000000000000031 [ 271.814864][T12526] FS: 00007f904a6726c0(0000) GS:ffff888123c59000(0000) knlGS:0000000000000000 [ 271.823841][T12526] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.830433][T12526] CR2: 0000200000000040 CR3: 00000000568f9000 CR4: 00000000003526f0 [ 271.838455][T12526] Call Trace: [ 271.841754][T12526] [ 271.844684][T12526] ? lock_acquire+0x1d1/0x380 [ 271.849365][T12526] ? ieee802154_hold_queue+0x100/0x450 [ 271.854883][T12526] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 271.859998][T12526] ? ieee802154_hold_queue+0x2a4/0x450 [ 271.865516][T12526] ? find_held_lock+0x2b/0x80 [ 271.870208][T12526] ? mark_held_locks+0x40/0x70 [ 271.875019][T12526] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 271.880829][T12526] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 271.885954][T12526] ieee802154_tx.isra.0+0x29f/0x570 [ 271.891150][T12526] ieee802154_subif_start_xmit+0xc8/0xf0 [ 271.896817][T12526] dev_hard_start_xmit+0x121/0x760 [ 271.901948][T12526] sch_direct_xmit+0x1b2/0xc70 [ 271.906696][T12526] ? lock_acquire+0x1d1/0x380 [ 271.911349][T12526] ? __pfx_sch_direct_xmit+0x10/0x10 [ 271.916671][T12526] ? do_raw_spin_lock+0x230/0x260 [ 271.921741][T12526] __dev_queue_xmit+0x27ac/0x4970 [ 271.926765][T12526] ? lock_acquire+0x1d1/0x380 [ 271.931459][T12526] ? __pfx___dev_queue_xmit+0x10/0x10 [ 271.936826][T12526] ? __might_fault+0xc5/0x140 [ 271.941539][T12526] ? __might_fault+0xc5/0x140 [ 271.946220][T12526] ? _copy_from_iter+0x270/0x1690 [ 271.951231][T12526] ? raw_sendmsg+0x14c/0x880 [ 271.955838][T12526] ? __local_bh_enable_ip+0xa5/0x120 [ 271.961126][T12526] raw_sendmsg+0x5b6/0x880 [ 271.965578][T12526] ? __pfx_raw_sendmsg+0x10/0x10 [ 271.970525][T12526] ? selinux_socket_sendmsg+0x198/0x2f0 [ 271.976110][T12526] ____sys_sendmsg+0xa4d/0xbe0 [ 271.980883][T12526] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 271.986916][T12526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.992260][T12526] ___sys_sendmsg+0x190/0x1e0 [ 271.996950][T12526] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.002202][T12526] ? futex_wait+0x11e/0x370 [ 272.006723][T12526] ? find_held_lock+0x2b/0x80 [ 272.011469][T12526] __sys_sendmsg+0x160/0x210 [ 272.016066][T12526] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.021207][T12526] do_syscall_64+0x123/0x790 [ 272.025853][T12526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.031779][T12526] RIP: 0033:0x7f904979e159 [ 272.036196][T12526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.055847][T12526] RSP: 002b:00007f904a672028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.064299][T12526] RAX: ffffffffffffffda RBX: 00007f9049a25fa0 RCX: 00007f904979e159 [ 272.072298][T12526] RDX: 0000000024004014 RSI: 0000200000000080 RDI: 0000000000000005 [ 272.080282][T12526] RBP: 00007f904983506b R08: 0000000000000000 R09: 0000000000000000 [ 272.088289][T12526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.096288][T12526] R13: 00007f9049a26038 R14: 00007f9049a25fa0 R15: 00007ffea21b7bd8 [ 272.104313][T12526] [ 272.107325][T12526] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 272.114581][T12526] CPU: 1 UID: 0 PID: 12526 Comm: syz.0.2770 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 272.125489][T12526] Tainted: [L]=SOFTLOCKUP [ 272.129795][T12526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 272.139830][T12526] Call Trace: [ 272.143097][T12526] [ 272.146010][T12526] dump_stack_lvl+0x100/0x190 [ 272.150682][T12526] vpanic+0x553/0x970 [ 272.154645][T12526] ? __pfx_vpanic+0x10/0x10 [ 272.159138][T12526] panic+0xd1/0xe0 [ 272.162843][T12526] ? __pfx_panic+0x10/0x10 [ 272.167259][T12526] check_panic_on_warn.cold+0x19/0x34 [ 272.172616][T12526] ? hwsim_hw_xmit+0xcbf/0x1540 [ 272.177455][T12526] __warn.cold+0x191/0x318 [ 272.181859][T12526] __report_bug+0x30f/0x440 [ 272.186352][T12526] ? hwsim_hw_xmit+0xcbf/0x1540 [ 272.191192][T12526] ? __pfx___report_bug+0x10/0x10 [ 272.196215][T12526] ? kfree_skbmem+0x19a/0x210 [ 272.200888][T12526] ? mark_held_locks+0x40/0x70 [ 272.205638][T12526] ? hwsim_hw_xmit+0xcbf/0x1540 [ 272.210474][T12526] report_bug+0xb3/0x220 [ 272.214706][T12526] ? hwsim_hw_xmit+0xcbf/0x1540 [ 272.219542][T12526] handle_bug+0x16a/0x2a0 [ 272.223865][T12526] exc_invalid_op+0x17/0x50 [ 272.228361][T12526] asm_exc_invalid_op+0x1a/0x20 [ 272.233196][T12526] RIP: 0010:hwsim_hw_xmit+0xcbf/0x1540 [ 272.238638][T12526] Code: 48 c7 c2 40 3f c0 8c be 52 03 00 00 48 c7 c7 a0 3f c0 8c c6 05 0f 22 c6 09 01 e8 bc 1b 80 fa e9 c6 f8 ff ff e8 32 5a a5 fa 90 <0f> 0b 90 e9 11 f4 ff ff e8 24 5a a5 fa e8 5f 0a 89 fa 31 ff 89 c5 [ 272.258224][T12526] RSP: 0018:ffffc900067af530 EFLAGS: 00010287 [ 272.264273][T12526] RAX: 0000000000000309 RBX: ffff88802a592d20 RCX: ffffc9000e4e1000 [ 272.272229][T12526] RDX: 0000000000080000 RSI: ffffffff8766c51e RDI: ffff88807f1fa580 [ 272.280180][T12526] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 272.288131][T12526] R10: 0000000000000001 R11: 0000000000000001 R12: ffffffff8766b860 [ 272.296084][T12526] R13: 1ffff92000cf5eb0 R14: ffff88802a592720 R15: 0000000000000031 [ 272.304043][T12526] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 272.309148][T12526] ? hwsim_hw_xmit+0xcbe/0x1540 [ 272.313993][T12526] ? lock_acquire+0x1d1/0x380 [ 272.318654][T12526] ? ieee802154_hold_queue+0x100/0x450 [ 272.324104][T12526] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 272.329201][T12526] ? ieee802154_hold_queue+0x2a4/0x450 [ 272.334649][T12526] ? find_held_lock+0x2b/0x80 [ 272.339319][T12526] ? mark_held_locks+0x40/0x70 [ 272.344066][T12526] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 272.349858][T12526] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 272.354956][T12526] ieee802154_tx.isra.0+0x29f/0x570 [ 272.360144][T12526] ieee802154_subif_start_xmit+0xc8/0xf0 [ 272.365760][T12526] dev_hard_start_xmit+0x121/0x760 [ 272.370863][T12526] sch_direct_xmit+0x1b2/0xc70 [ 272.375620][T12526] ? lock_acquire+0x1d1/0x380 [ 272.380284][T12526] ? __pfx_sch_direct_xmit+0x10/0x10 [ 272.385558][T12526] ? do_raw_spin_lock+0x230/0x260 [ 272.390577][T12526] __dev_queue_xmit+0x27ac/0x4970 [ 272.395589][T12526] ? lock_acquire+0x1d1/0x380 [ 272.400258][T12526] ? __pfx___dev_queue_xmit+0x10/0x10 [ 272.405614][T12526] ? __might_fault+0xc5/0x140 [ 272.410283][T12526] ? __might_fault+0xc5/0x140 [ 272.414957][T12526] ? _copy_from_iter+0x270/0x1690 [ 272.419981][T12526] ? raw_sendmsg+0x14c/0x880 [ 272.424566][T12526] ? __local_bh_enable_ip+0xa5/0x120 [ 272.429845][T12526] raw_sendmsg+0x5b6/0x880 [ 272.434250][T12526] ? __pfx_raw_sendmsg+0x10/0x10 [ 272.439179][T12526] ? selinux_socket_sendmsg+0x198/0x2f0 [ 272.444711][T12526] ____sys_sendmsg+0xa4d/0xbe0 [ 272.449468][T12526] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 272.455438][T12526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.460725][T12526] ___sys_sendmsg+0x190/0x1e0 [ 272.465397][T12526] ? __pfx____sys_sendmsg+0x10/0x10 [ 272.470587][T12526] ? futex_wait+0x11e/0x370 [ 272.475083][T12526] ? find_held_lock+0x2b/0x80 [ 272.480896][T12526] __sys_sendmsg+0x160/0x210 [ 272.485476][T12526] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.490590][T12526] do_syscall_64+0x123/0x790 [ 272.495172][T12526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.501050][T12526] RIP: 0033:0x7f904979e159 [ 272.505447][T12526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.525036][T12526] RSP: 002b:00007f904a672028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.533431][T12526] RAX: ffffffffffffffda RBX: 00007f9049a25fa0 RCX: 00007f904979e159 [ 272.541383][T12526] RDX: 0000000024004014 RSI: 0000200000000080 RDI: 0000000000000005 [ 272.549342][T12526] RBP: 00007f904983506b R08: 0000000000000000 R09: 0000000000000000 [ 272.557292][T12526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.565244][T12526] R13: 00007f9049a26038 R14: 00007f9049a25fa0 R15: 00007ffea21b7bd8 [ 272.573211][T12526] [ 272.576436][T12526] Kernel Offset: disabled [ 272.580735][T12526] Rebooting in 86400 seconds..