last executing test programs: 4m40.422056889s ago: executing program 3 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) setpriority(0x2, 0x0, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000040)='./file1\x00', 0x81242, 0x1e4) lsetxattr$security_capability(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000440)={0xa0, 0x0, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x203, 0x1, {0xffffffffffffffff, 0x9, 0x20ff, 0x5, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x400000}}, {0x0, 0x13}}}, 0xa0) 4m40.150201599s ago: executing program 3 (id=61): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904", @ANYBLOB], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000000)={0xb, 0x100000, 0x2000, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) modify_ldt$write(0x1, &(0x7f0000000300)={0xc0a7, 0x20001000, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x11, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) 4m37.044538968s ago: executing program 3 (id=73): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) setrlimit(0x1, &(0x7f0000000000)={0x0, 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1ff}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x204, 0x0) read$msr(r2, &(0x7f0000002240)=""/102400, 0x19000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) stat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) gettid() getpid() r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000002c0)=0x11) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 4m35.651307934s ago: executing program 3 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000500), 0x8, 0x282142) sendmsg$sock(r2, &(0x7f0000001e00)={&(0x7f0000000540)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e23, 0x2}}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000600)="5601fca896990bee44ba93d08ee78e6ca571f42320691ec18fe407be34d78e7b87141c5e83de1bc4531e6cb210651d82722fae29f63bcf82d6fd345d647fdfba7e646660440ddfed377cf063992946476729d6462a1c6450bd77cc374b216bd2a1b6e2454b7bc3df2cf304e2ecf8e00a9f35905be1fe27f9d0b4247a6477046d03e31ed2c5f7df7005d955d9b80d", 0x8e}, {&(0x7f00000006c0)="4bbdff4d9dcbc16461858cb68b3e57cce9ba3e8d30c9ab539abcd3201e2e45315d3a94aec1122a42eca4964e0e45861b540817494a9810b78abfe3af371c08686d768b878ef0ba0839d9f092878660fe6e7c959527533f1834a9229cc1794d4b0b5eeedc2b3d80f8076a0cc09c730e1e19084ecf9da129588a7d2df070154a", 0x7f}, {&(0x7f0000000740)="cc8dd8c3637bc93d94b83d593264a40a7e112393e549b0ce36c2b3f481c0d3f28015610f6af0d119fa83a26277", 0x2d}, {&(0x7f0000000780)="15cf3493e57288a758a72c279dfc8233370e6f84855d898ceee162844706e4d47bfcc0128ff085", 0x27}, {&(0x7f00000007c0)="86db203126db11b34a51115c40392865d59f990750f392bfb8404124cac12e889bede765160cedf63b97103e696a639c71a49cd4301b34e43a8c51ce03dff8b9c691d100db0eb6c707e3e07569e1a0d9ea996a6985a4d653691451f2288e00bb14a66bfba0ae72847f2a14044321a9b4274f00007a6466344850e18e318432eca3bc838ecbf00f074e2e9f7a7fa96dc81b887659b64efac4fda374b630ef20531eb257d8c6e5dd648c073d1df6d9bdb42f2d04b5cb6e8c9a2fb8787d3ad8d8b9de42746b2be9af8a55ef9776c73de25b626874e4afe726ca06f62494ab492e33", 0xe0}, {&(0x7f00000008c0)="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", 0x1000}, {&(0x7f00000018c0)="d0aad7313859021e7f8bd8946929b9cc6ec59309f02a522f6395c1e18648256bf9d77a404bc5a570202528979a3ba28ab574473e0da338b78349e5abe45dcb275fe0339bbef94e3d4e414db1a46c9ca4ef4cec56afefa937cd8a4742c1c083586e759dbd84111fc83901c80fb22314e5ca448d8568885421ba9553cab1a61d257976602a830d8a0e9778bd4f602fe317930b887e63b356380bc91e35d5ae8a3405eb4399c5642d64e538d5362b886fa0fa8646de5969eac5", 0xb8}, {&(0x7f0000001980)="f4d06694fa0a7fbd88affa8f263868a0c3875b4f37ff3d68f5562c0f8e45b2d200f5507d5004b44134ff9a19b45b32bec801f9eb009dd565d6d8e8cab08fd1a947769141d6781acabd73c9df36bdaf1924e3888edc40a819f275f049822de3e4e5004019198495bb76d3f1473d8d55c83e0a1bf805104423e1960e8cc610ab59a34f59839c6a1c9950454ffe7b68e03b677fba0ac3d241200ed720dc7e29233eddc5d992383136080e3429a8e9324f08569dee73677425446ca271bf33847ee0fdd7306bb4a289382066055619aa9ca899fa23829fceefe3af0501208dcb4748", 0xe0}, {&(0x7f0000001a80)="70cf8d6e1bd53ec2bd8bcc475c442c850e274325acec25522507ac75ac93c71676e09e18c6ba9e5d31456602c8e49666e12f7a58be931b1112f0a6d96ee2a3502d8506bdeb9b1e93194e86ef0b69ccee3abd7c25cfee1a15dfe103e7f7ecab6b838bd832e87b3c1c8fab7a2886d249a7d7bca3061653bb9faeaed5e4c3896cc4a2f090bc4de44d1db985bd8d444def7ebb37cfaba094c4a996a146b0ae274ba98aa69fe7d5877bc830389576aa8aa1121f9a703f65c296a2cd7ccf716b0b665d72db6ea9725968d93f5c0901b7a7067fa601fd", 0xd3}, {&(0x7f0000001b80)="3887580b7ff3318e9ec25a6c3eee668f3248e2e058ad157b3979bb2029eac745c49fbdd96290488cf7c64ae280018ba1a8543e6fce19f8ed4aa278601c79c5cac5e7f98a1513891e05afde7d9ce1e230fd441a5e0974845fb6dbfc40252b9e2f42f37eecdabacd798bb48c5ba6db8241a1a61faa686328cf128667c0918f3c4f4f74cc2518a525e01856233fa8c0bf9453477ac41ad81d23751a0b7e121e1042e527e2c8845a1c5739dda1e23c618ec64d4bc5e71776a74ae4bbfca22df8b1a3105dacff38908d399d6ccec0ec10e0a02fdd5ef2d30478b02036aa287b04bdad6f4678bf093fbe211be2e997b53bfcd98c76d88b2ce9954f", 0xf8}], 0xa, &(0x7f0000001d40)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x30}}, @timestamping={{0x14, 0x1, 0x25, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}], 0xa8}, 0x4001) r3 = pidfd_getfd(r1, r1, 0x0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0/../file0\x00', &(0x7f0000000440), 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="80"]) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001e80)={r2, r4, 0x3b, 0x0, @void}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r4, r5, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x8, &(0x7f0000000380)=[&(0x7f0000000140)='$&[/]!\'*\x00', &(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='tmpfs\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)=']:]@,\x05(){.\x00', &(0x7f0000000280)=',*%\x00', &(0x7f00000002c0)='#\x84^:-)\'{%{(\\/+&-%)\x00', &(0x7f0000000340)='tmpfs\x00'], 0x0, 0x1}}, 0x30) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x49) setns(r3, 0x66020000) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000a80)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f0000000240)=[{r8, 0x2482}], 0x1, 0x7) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_script(r9, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r9, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000080)=0x8) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000001440)=[@register_looper, @acquire], 0x0, 0x0, 0x0}) 4m34.768559804s ago: executing program 3 (id=79): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, 0x0, &(0x7f0000001080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, r3, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000140)={0x8, r0}) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r4, &(0x7f0000000180)=@random={'trusted.', 't\x00'}, &(0x7f0000000300)=""/131, 0x83) r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1000, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000a80)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x7, 0xff, 0x8, 0x6, 0x0, 0x0, 0x8, 0x1}}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x82}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r11, 0x1000) pwrite64(r10, &(0x7f0000000300)='}', 0x1, 0x4) ioctl$sock_x25_SIOCDELRT(r9, 0x890c, &(0x7f0000000640)={@null, 0x7, 'geneve1\x00'}) 4m34.524606843s ago: executing program 3 (id=82): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) dup2(r1, r0) landlock_restrict_self(r2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00001b1000/0xa000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f000007c000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000050000/0x3000)=nil, &(0x7f000005f000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0x10000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x8, 0x0, &(0x7f0000002140)) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 4m34.294797701s ago: executing program 32 (id=82): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) dup2(r1, r0) landlock_restrict_self(r2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000640)=@file={0x1}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00001b1000/0xa000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f000007c000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000050000/0x3000)=nil, &(0x7f000005f000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0x10000, 0x2, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x8, 0x0, &(0x7f0000002140)) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 13.850063036s ago: executing program 0 (id=990): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x5, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x4}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb7, 0x9, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0xfe, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x6}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xfa, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0x3}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0xe, 0x4, '\x00', 0xff}]}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xfffffffffffffffe, 0xffffffffffff242b, 0x0, 0x0, 0x0, 0x651, 0xffffffffffffffff, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x4, 0xb, 0x0, 0xcc6, 0xffffffffffffffff, 0x1, 0x80008, 0x0, 0x1000000, 0x3, 0x0, 0x0, 0x3, 0x7}) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000001c0)={0x0, 0x28, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) readahead(r1, 0xd, 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 11.576478361s ago: executing program 0 (id=1000): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, &(0x7f0000000000)=[0x8, 0x8, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1]) fanotify_mark(r1, 0x455, 0x8000003, r2, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r8, &(0x7f0000005200)={0x2020}, 0x2020) write$uinput_user_dev(r8, &(0x7f000001b000)={'syz1\x00', {0x0, 0x0, 0x4, 0x9}, 0x52, [0x8, 0x4, 0x1, 0x80, 0x4, 0x6, 0x10, 0xffff, 0x7, 0x2, 0x6, 0x7, 0x9, 0x0, 0x8, 0xf3, 0x9, 0x0, 0xd9, 0x2, 0x9, 0x7fff, 0x9, 0x0, 0x9, 0x0, 0x3, 0x0, 0x7, 0xa, 0x1, 0x7fff, 0xd, 0x6, 0x0, 0x0, 0x4, 0x9, 0x10, 0xd9a, 0x8000, 0xb19, 0x6, 0xf, 0x401, 0x3, 0x401, 0x18, 0x7f, 0x3, 0xd8, 0xc1, 0x751, 0x101, 0x5, 0x80, 0xb, 0x36, 0x66cf, 0x0, 0x0, 0xb, 0x2, 0x4456], [0x22, 0x6, 0x0, 0xe045, 0x2, 0xfffffff9, 0x9, 0xfffff800, 0x1, 0x3, 0x8000, 0x401, 0x3, 0x80010000, 0xa, 0xa, 0x7, 0x2, 0x9, 0x5, 0xfffffffc, 0x8000, 0x5, 0xe4, 0x4, 0x46e, 0x81, 0x8, 0xc548, 0xffffd04f, 0x1, 0x7, 0xe9a, 0xd, 0x8, 0x1, 0x5, 0x3, 0x10c2, 0x3, 0x2400, 0x3, 0x200, 0x3, 0xfffffffb, 0xf415, 0x2, 0x80000000, 0x503, 0x1, 0x7, 0x4, 0x9, 0x7fff, 0x80000000, 0x222, 0x7e0, 0x1, 0x5, 0x0, 0xffffffff, 0x4, 0x9, 0x6], [0x5, 0x81, 0x7f, 0xff, 0xf, 0x1, 0x3, 0x2, 0x8, 0x64, 0x7f, 0x0, 0x1, 0x5, 0xf4, 0xf97, 0x7, 0x4, 0x8, 0xb20f, 0x0, 0x8000, 0x1, 0x7, 0x1, 0xecec, 0x6, 0x3, 0xfffffffa, 0x3e97, 0x4, 0x3, 0x8, 0x4, 0x2, 0x6, 0x4, 0xf, 0x200, 0x1000, 0x4, 0x400, 0x1, 0x10, 0x1, 0x9, 0x4, 0x5, 0x6, 0x1, 0x0, 0x4, 0x0, 0x4, 0xfffffff8, 0x2, 0x2, 0x3, 0xd9, 0x0, 0x0, 0x5, 0x4, 0x7dc7], [0x9, 0x5, 0xb6a, 0x6c, 0x1, 0x2, 0x10000, 0xd, 0x3, 0xa5, 0xf7, 0x7f, 0x80000000, 0xa0d, 0x9, 0x6, 0x4, 0x5, 0x8, 0x0, 0xb, 0x1, 0x7fffffff, 0x5, 0x4, 0x7, 0x1, 0x0, 0x5, 0x9, 0xd9, 0xa, 0x6796, 0xd, 0x7, 0xc691, 0x4554, 0x6, 0x4, 0x7, 0x5, 0x3, 0x1, 0x2b, 0xa, 0x8, 0x80000001, 0xe8, 0x800, 0x3, 0x8, 0x29, 0x0, 0x3, 0x8, 0x6, 0x8, 0x9, 0x0, 0x9, 0x6, 0x178, 0x3, 0x4]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="9fe60000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c009bb1b90000000000000000000c0090000000"], 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r0, @ANYBLOB="200029bd7000fbdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x100}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 9.081708444s ago: executing program 0 (id=1004): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000500)={0x2, 0x0, @ioapic={0x10000, 0x1, 0x401, 0x7fffffff, 0x0, [{0x7, 0x10, 0xff, '\x00', 0x38}, {0x4, 0xfe, 0x7c, '\x00', 0x31}, {0x5, 0xb3, 0x1, '\x00', 0xd}, {0x5, 0x9, 0x10, '\x00', 0x4}, {0x5, 0x7f, 0x6, '\x00', 0x79}, {0x7, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0x1, '\x00', 0x45}, {0x52, 0x9, 0x3, '\x00', 0x9}, {0x40, 0x2, 0x73, '\x00', 0xff}, {0x1, 0xb7, 0x9, '\x00', 0x80}, {0x6, 0x8, 0xa0, '\x00', 0x1}, {0xfe, 0x1, 0x7, '\x00', 0x4}, {0x8, 0xc, 0x5, '\x00', 0x6}, {0xd, 0x10, 0x8c, '\x00', 0x4}, {0x0, 0xc0, 0x7, '\x00', 0x1}, {0x8, 0x2, 0xfa, '\x00', 0x2}, {0x7, 0x6, 0x8, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x1, 0x3, 0x6, '\x00', 0x6}, {0xf8, 0x8, 0xa, '\x00', 0xf8}, {0x8, 0x1, 0xcc, '\x00', 0xf7}, {0x6, 0x6, 0xfe, '\x00', 0x3}, {0xff, 0x0, 0x3, '\x00', 0x7}, {0x16, 0xe, 0x4, '\x00', 0xff}]}}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x7fffffff, 0xfffffffffffffffe, 0xffffffffffff242b, 0x0, 0x0, 0x0, 0x651, 0xffffffffffffffff, 0x1000000000000, 0x0, 0x7fffffff, 0x0, 0x4, 0xb, 0x0, 0xcc6, 0xffffffffffffffff, 0x1, 0x80008, 0x0, 0x1000000, 0x3, 0x0, 0x0, 0x3, 0x7}) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000080)={0xd, 0x18, 0x3, 0x0, 0x0, 0x1000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_getparam(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000001c0)={0x0, 0x28, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001200010003950000000100000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x18000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 9.071362333s ago: executing program 1 (id=1005): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="090000c23f36887b90366600eb60d9073fd205c9cf8144cc3c1e000000e1da5dcec7ab62b3d5640111a1947f23c6ff008c7b1ff8bc355008eefe336c8a6925af7a96b0bd0ca1b7626cdff3697c9a7e23ffc192e6e6475f378c2c847b06b83b1f5d2641ea", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000feffffff00"/28], 0x50) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x2, r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r4 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000680)={{0x4, 0x2, 0x6, 0xc3b, 'syz1\x00', 0x8}, 0x4, 0x100, 0x7f, r2, 0x4, 0x3, 'syz1\x00', &(0x7f0000000300)=['\x00', '\x00', 'system.posix_acl_access\x00', 'system.posix_acl_access\x00'], 0x32}) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet(0x2, 0x2, 0x1) r6 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000010625bd7000009bdf250a00001c0000000063080040b3fcee1999b945debb9805000000", @ANYRES32=0x0, @ANYBLOB="0800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0xb52b9c7732f7d2c0}, 0x24014844) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi0\x00', 0x208000, 0x0) ioctl$int_in(r8, 0x5452, &(0x7f0000000080)=0x7) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000004000000000000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[], 0x64, 0x2) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x16, &(0x7f0000000f40)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x13, 0x0, r3}, 0x94) syz_open_dev$video(&(0x7f0000000040), 0xa10, 0x80) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) socket$nl_route(0x10, 0x3, 0x0) 8.612195585s ago: executing program 4 (id=1008): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_dir_check_failed\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newsa={0x168, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e20, 0x7, 0x4e20, 0x400, 0x2, 0x80, 0x20, 0x2b}, {@in6=@local, 0x4d3, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x2, 0x7, 0xfd, 0x200, 0x2, 0x8, 0x5, 0x81}, {0xf8f1, 0x0, 0x4, 0xdf06}, {0x83a, 0x100, 0x7}, 0x70bd2b, 0x3503, 0xa, 0x1, 0x1, 0xc}, [@algo_auth={0x52, 0x1, {{'sha256-arm64-neon\x00'}, 0x50, "61814c8157223bcc975c"}}, @lifetime_val={0x24, 0x9, {0x2, 0x5, 0x7fffffffffffffff, 0xffff}}]}, 0x168}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r6 = memfd_create(0x0, 0x2) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r8 = gettid() r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r9, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) gettid() sched_setaffinity(0x0, 0x0, 0x0) 8.602806516s ago: executing program 1 (id=1009): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)=0x2749) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627", 0xc) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1}, 0x3}], 0x1, 0xc0032032, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x4004004) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/105, 0x69}, {&(0x7f00000007c0)=""/16, 0x10}, {&(0x7f0000000800)=""/4, 0x4}], 0x5}, 0x102) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x7fff, 0x0) io_uring_enter(r1, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 8.544710928s ago: executing program 2 (id=1010): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x10) read(r1, &(0x7f0000000080)=""/186, 0xba) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x58, &(0x7f0000000080)={0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r3, 0x0, 0x1}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x5c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x7ee}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r2, 0x0, 0x10}, 0xc) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b7020000380d0000bfa30000000000000703000000feffff720af0fff8ffff1989a4f0ff00000000b7060000080000001e640000000000004504040001000000170400000c000a00b7040000ff0100006a0af2fe00000000850000001a000000b70000003f00000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c4608800000000000000005cbb5a2600"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x5}, 0x10}, 0x94) 7.760357893s ago: executing program 2 (id=1011): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1f0000000000000000000000000004"], 0x48) io_setup(0x4005, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000480)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x7, r0, 0x0}]) socket$pptp(0x18, 0x1, 0x2) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000001dc0)={0x50, 0x0, r5, {0x7, 0x2b, 0x0, 0x28000440, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(r4, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x90, 0xfffffffffffffffe, 0x1, {0x8, 0x4, 0x1, 0xc, 0x8, 0x9, {0x0, 0x3, 0x6, 0x9, 0x2, 0x1000000000000003, 0x8, 0xab, 0x200006, 0x8000, 0x2, r6, r7, 0x2, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 7.760024598s ago: executing program 5 (id=1012): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xece0, 0x0, 0x2, 0xbfdfffdc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 7.683421226s ago: executing program 1 (id=1013): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x54) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xece0, 0x0, 0x2, 0xbfdfffdc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) renameat(r1, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r8 = msgget$private(0x0, 0x3d2) msgsnd(r8, &(0x7f0000000d80)=ANY=[@ANYBLOB="02"], 0xe1, 0x0) msgrcv(r8, 0xffffffffffffffff, 0x0, 0x0, 0x1800) ioctl$RTC_UIE_ON(r7, 0x7003) 7.511925551s ago: executing program 4 (id=1014): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, &(0x7f0000000000)=[0x8, 0x8, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1]) fanotify_mark(r1, 0x455, 0x8000003, r2, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r8, &(0x7f0000005200)={0x2020}, 0x2020) write$uinput_user_dev(r8, &(0x7f000001b000)={'syz1\x00', {0x0, 0x0, 0x4, 0x9}, 0x52, [0x8, 0x4, 0x1, 0x80, 0x4, 0x6, 0x10, 0xffff, 0x7, 0x2, 0x6, 0x7, 0x9, 0x0, 0x8, 0xf3, 0x9, 0x0, 0xd9, 0x2, 0x9, 0x7fff, 0x9, 0x0, 0x9, 0x0, 0x3, 0x0, 0x7, 0xa, 0x1, 0x7fff, 0xd, 0x6, 0x0, 0x0, 0x4, 0x9, 0x10, 0xd9a, 0x8000, 0xb19, 0x6, 0xf, 0x401, 0x3, 0x401, 0x18, 0x7f, 0x3, 0xd8, 0xc1, 0x751, 0x101, 0x5, 0x80, 0xb, 0x36, 0x66cf, 0x0, 0x0, 0xb, 0x2, 0x4456], [0x22, 0x6, 0x0, 0xe045, 0x2, 0xfffffff9, 0x9, 0xfffff800, 0x1, 0x3, 0x8000, 0x401, 0x3, 0x80010000, 0xa, 0xa, 0x7, 0x2, 0x9, 0x5, 0xfffffffc, 0x8000, 0x5, 0xe4, 0x4, 0x46e, 0x81, 0x8, 0xc548, 0xffffd04f, 0x1, 0x7, 0xe9a, 0xd, 0x8, 0x1, 0x5, 0x3, 0x10c2, 0x3, 0x2400, 0x3, 0x200, 0x3, 0xfffffffb, 0xf415, 0x2, 0x80000000, 0x503, 0x1, 0x7, 0x4, 0x9, 0x7fff, 0x80000000, 0x222, 0x7e0, 0x1, 0x5, 0x0, 0xffffffff, 0x4, 0x9, 0x6], [0x5, 0x81, 0x7f, 0xff, 0xf, 0x1, 0x3, 0x2, 0x8, 0x64, 0x7f, 0x0, 0x1, 0x5, 0xf4, 0xf97, 0x7, 0x4, 0x8, 0xb20f, 0x0, 0x8000, 0x1, 0x7, 0x1, 0xecec, 0x6, 0x3, 0xfffffffa, 0x3e97, 0x4, 0x3, 0x8, 0x4, 0x2, 0x6, 0x4, 0xf, 0x200, 0x1000, 0x4, 0x400, 0x1, 0x10, 0x1, 0x9, 0x4, 0x5, 0x6, 0x1, 0x0, 0x4, 0x0, 0x4, 0xfffffff8, 0x2, 0x2, 0x3, 0xd9, 0x0, 0x0, 0x5, 0x4, 0x7dc7], [0x9, 0x5, 0xb6a, 0x6c, 0x1, 0x2, 0x10000, 0xd, 0x3, 0xa5, 0xf7, 0x7f, 0x80000000, 0xa0d, 0x9, 0x6, 0x4, 0x5, 0x8, 0x0, 0xb, 0x1, 0x7fffffff, 0x5, 0x4, 0x7, 0x1, 0x0, 0x5, 0x9, 0xd9, 0xa, 0x6796, 0xd, 0x7, 0xc691, 0x4554, 0x6, 0x4, 0x7, 0x5, 0x3, 0x1, 0x2b, 0xa, 0x8, 0x80000001, 0xe8, 0x800, 0x3, 0x8, 0x29, 0x0, 0x3, 0x8, 0x6, 0x8, 0x9, 0x0, 0x9, 0x6, 0x178, 0x3, 0x4]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="9fe60000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c009bb1b90000000000000000000c00900000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r0, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 7.464549191s ago: executing program 5 (id=1015): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000140), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, r4) r5 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x1}, 0x0, 0x0, r3) r6 = add_key$keyring(&(0x7f0000000280), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r6) add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, r7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r8 = getpid() sched_setscheduler(r8, 0x0, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000600)=""/178, 0xb2}, {&(0x7f00000006c0)=""/234, 0xea}, {&(0x7f0000000300)=""/6, 0x6}, {&(0x7f00000056c0)=""/153, 0x99}], 0x4, &(0x7f0000000a00)=""/164, 0xa4}, 0x6}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000000940)=""/1, 0x1}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/249, 0xf9}, {&(0x7f0000001bc0)=""/90, 0x5a}, {&(0x7f0000000980)=""/9, 0x9}], 0x5}, 0xff}, {{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001cc0)=""/145, 0x91}, {&(0x7f0000001d80)=""/126, 0x7e}, {&(0x7f0000001e00)=""/201, 0xc9}, {&(0x7f0000001f00)=""/146, 0x92}, {&(0x7f0000001fc0)=""/168, 0xa8}, {&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000003080)=""/193, 0xc1}, {&(0x7f0000003180)=""/9, 0x9}, {&(0x7f00000031c0)=""/137, 0x89}, {&(0x7f0000003280)=""/216, 0xd8}], 0xa}, 0x8}, {{&(0x7f0000003440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000044c0)=[{&(0x7f00000034c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004500)=""/4096, 0x1000}, 0x3}], 0x4, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r12 = syz_open_procfs(0xffffffffffffffff, 0x0) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005600)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="18c53addd0db9c860324043ecefbae0100820c6c92c42de2361e053f7a6d94428fe529e2b06851e99c237bdefdc9cbdaf1c7d05a1909dcd6ab5742663569f6176ab1ab118e02559ed966801c24c3975f50c7fd841a30d5fc87fe2cfd0d0704eccc6776aa791ebaf036a63582f9efe83cd9cb24733ce15b6040ac5e5e017cf5104e7ba2ad58f1eb86bf3d831e2206b3e7c7"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r12}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r13}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000100000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfcf3a66f54990358e020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 6.832505894s ago: executing program 0 (id=1016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_dir_check_failed\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r6 = memfd_create(0x0, 0x2) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r8 = gettid() r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r9, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) gettid() sched_setaffinity(0x0, 0x0, 0x0) 6.491124423s ago: executing program 4 (id=1017): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.log\x00', 0x80, 0x98) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='fscache_access_volume\x00', r2, 0x0, 0xffffffffffffff1e}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000080)=@raw=[@map_fd={0x18, 0x9, 0x1, 0x0, r1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffd}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x98}], &(0x7f0000000140)='syzkaller\x00', 0xd7, 0xa4, &(0x7f0000000240)=""/164, 0x41100, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0x9, 0xf1, 0x3}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000300)=[{0x2, 0x3, 0x8, 0x4}, {0x2, 0x2, 0xb, 0xc}, {0x1, 0x3, 0x7, 0x5}, {0x1, 0x3, 0x9, 0x4}, {0x1, 0x4, 0x5, 0x9}, {0xfffffffe, 0x1, 0xd}, {0x4, 0x3, 0x2, 0xc}], 0x10, 0x6}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22ffef) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f00000000c0)) 6.46626282s ago: executing program 1 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000480)='./cgroup\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) chdir(&(0x7f0000000440)='./bus\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x90000011}) r4 = syz_open_dev$hiddev(&(0x7f0000000600), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r4, 0x40184810, &(0x7f00000002c0)={0x3, 0x100, 0x0, 0x8, 0x0, 0xa02}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x2, 0x0, 0x78d, 0x1}, 0x10) 6.414150942s ago: executing program 2 (id=1019): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x130}}, 0x2000c880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x13, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000d000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r5}, 0x15) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x214003, 0x0) io_uring_setup(0x40f8, &(0x7f0000000180)={0x0, 0x42bad, 0x40, 0x1, 0x272}) 5.975467369s ago: executing program 4 (id=1020): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x1}, 0x8) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x208, 0x8f, 0x206, 0xfffffffd, 0x3, 0xb37, 0xfffffe2f, 0x8}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0x209, 0x6, 0x807, 0x2097}, 0x8) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000", @ANYRES32=r6, @ANYBLOB="05005b"], 0x24}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 5.468215652s ago: executing program 5 (id=1021): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000480)={0x1ff, 0x200, 0x2, {0x4, @pix={0x7, 0x8, 0x34565559, 0x5, 0x0, 0xfffffff3, 0x5, 0x983e, 0x1, 0x3, 0x2}}, 0x9}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000200)={0x0, 0x80000000, 0x2, {0x6, @win={{0x5043, 0x9c, 0x6, 0x1}, 0x2, 0x3, 0x0, 0x6, 0x0, 0x8}}, 0x65c}) io_setup(0x7e, &(0x7f0000000080)=0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x200000000000000, 0x0, 0x0, 0x7, 0x0, r2, &(0x7f0000000340)='p', 0x300, 0xeffdffffffffffff}]) syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') prlimit64(0x0, 0x7, &(0x7f0000000140)={0x9, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd(0x8001) 5.46759571s ago: executing program 4 (id=1022): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc, 0x14, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000019c744000008010000008bd02800", [0xe0]}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$netlink(0x10, 0x3, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'dummy0\x00', &(0x7f0000000100)=@ethtool_gfeatures}) creat(0x0, 0xd931d3864d39dcca) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c8f3d", @ANYRESDEC=0x0, @ANYBLOB]) r7 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\x86\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8111}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000851}, 0x40c08c4) 4.07432653s ago: executing program 0 (id=1024): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='afs_dir_check_failed\x00', r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000001c0)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newsa={0x168, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {{@in6=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e20, 0x7, 0x4e20, 0x400, 0x2, 0x80, 0x20, 0x2b}, {@in6=@local, 0x4d3, 0x3c}, @in=@dev={0xac, 0x14, 0x14, 0x38}, {0x2, 0x7, 0xfd, 0x200, 0x2, 0x8, 0x5, 0x81}, {0xf8f1, 0x0, 0x4, 0xdf06}, {0x83a, 0x100, 0x7}, 0x70bd2b, 0x3503, 0xa, 0x1, 0x1, 0xc}, [@algo_auth={0x52, 0x1, {{'sha256-arm64-neon\x00'}, 0x50, "61814c8157223bcc975c"}}, @lifetime_val={0x24, 0x9, {0x2, 0x5, 0x7fffffffffffffff, 0xffff}}]}, 0x168}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) r6 = memfd_create(0x0, 0x2) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(0xffffffffffffffff, 0x80044dff, 0x0) r8 = gettid() r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r9, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) gettid() sched_setaffinity(0x0, 0x0, 0x0) 3.852808956s ago: executing program 2 (id=1025): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x130}}, 0x2000c880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x214003, 0x0) r4 = io_uring_setup(0x40f8, &(0x7f0000000180)={0x0, 0x42bad, 0x40, 0x1, 0x272}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x14, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="10030600e0ff020004004788aa", 0xd, 0x80, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) brk(0x689d80000000) munlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) 3.29145879s ago: executing program 5 (id=1026): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="002001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x3, 0x5001) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000001800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.939985434s ago: executing program 2 (id=1027): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), 0xffffffffffffffff) r1 = fanotify_init(0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002000)=""/102400, 0x19000) ioctl$X86_IOC_RDMSR_REGS(r5, 0xc02063a0, &(0x7f0000000000)=[0x8, 0x8, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1]) fanotify_mark(r1, 0x455, 0x8000003, r2, 0x0) r6 = syz_create_resource$binfmt(&(0x7f0000000140)='./mnt\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) close(r7) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r8, &(0x7f0000005200)={0x2020}, 0x2020) write$uinput_user_dev(r8, &(0x7f000001b000)={'syz1\x00', {0x0, 0x0, 0x4, 0x9}, 0x52, [0x8, 0x4, 0x1, 0x80, 0x4, 0x6, 0x10, 0xffff, 0x7, 0x2, 0x6, 0x7, 0x9, 0x0, 0x8, 0xf3, 0x9, 0x0, 0xd9, 0x2, 0x9, 0x7fff, 0x9, 0x0, 0x9, 0x0, 0x3, 0x0, 0x7, 0xa, 0x1, 0x7fff, 0xd, 0x6, 0x0, 0x0, 0x4, 0x9, 0x10, 0xd9a, 0x8000, 0xb19, 0x6, 0xf, 0x401, 0x3, 0x401, 0x18, 0x7f, 0x3, 0xd8, 0xc1, 0x751, 0x101, 0x5, 0x80, 0xb, 0x36, 0x66cf, 0x0, 0x0, 0xb, 0x2, 0x4456], [0x22, 0x6, 0x0, 0xe045, 0x2, 0xfffffff9, 0x9, 0xfffff800, 0x1, 0x3, 0x8000, 0x401, 0x3, 0x80010000, 0xa, 0xa, 0x7, 0x2, 0x9, 0x5, 0xfffffffc, 0x8000, 0x5, 0xe4, 0x4, 0x46e, 0x81, 0x8, 0xc548, 0xffffd04f, 0x1, 0x7, 0xe9a, 0xd, 0x8, 0x1, 0x5, 0x3, 0x10c2, 0x3, 0x2400, 0x3, 0x200, 0x3, 0xfffffffb, 0xf415, 0x2, 0x80000000, 0x503, 0x1, 0x7, 0x4, 0x9, 0x7fff, 0x80000000, 0x222, 0x7e0, 0x1, 0x5, 0x0, 0xffffffff, 0x4, 0x9, 0x6], [0x5, 0x81, 0x7f, 0xff, 0xf, 0x1, 0x3, 0x2, 0x8, 0x64, 0x7f, 0x0, 0x1, 0x5, 0xf4, 0xf97, 0x7, 0x4, 0x8, 0xb20f, 0x0, 0x8000, 0x1, 0x7, 0x1, 0xecec, 0x6, 0x3, 0xfffffffa, 0x3e97, 0x4, 0x3, 0x8, 0x4, 0x2, 0x6, 0x4, 0xf, 0x200, 0x1000, 0x4, 0x400, 0x1, 0x10, 0x1, 0x9, 0x4, 0x5, 0x6, 0x1, 0x0, 0x4, 0x0, 0x4, 0xfffffff8, 0x2, 0x2, 0x3, 0xd9, 0x0, 0x0, 0x5, 0x4, 0x7dc7], [0x9, 0x5, 0xb6a, 0x6c, 0x1, 0x2, 0x10000, 0xd, 0x3, 0xa5, 0xf7, 0x7f, 0x80000000, 0xa0d, 0x9, 0x6, 0x4, 0x5, 0x8, 0x0, 0xb, 0x1, 0x7fffffff, 0x5, 0x4, 0x7, 0x1, 0x0, 0x5, 0x9, 0xd9, 0xa, 0x6796, 0xd, 0x7, 0xc691, 0x4554, 0x6, 0x4, 0x7, 0x5, 0x3, 0x1, 0x2b, 0xa, 0x8, 0x80000001, 0xe8, 0x800, 0x3, 0x8, 0x29, 0x0, 0x3, 0x8, 0x6, 0x8, 0x9, 0x0, 0x9, 0x6, 0x178, 0x3, 0x4]}, 0x45c) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lchown(&(0x7f0000000080)='./file1\x00', 0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="9fe60000000000000000250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00000000000c009bb1b90000000000000000000c00900000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r0, @ANYBLOB="200029bd7000fbdbdf25410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000"], 0x100}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 2.612744381s ago: executing program 1 (id=1028): madvise(&(0x7f000033d000/0x1000)=nil, 0x1000, 0x17) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x40400, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030400"/28], 0x50) tee(r1, r3, 0x8000000000000001, 0xb) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000064f000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{}, {}], 0x2, 0x401, 0x0, 0x0, 0x10, 0x59}) 2.612312164s ago: executing program 1 (id=1029): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$inet6_sctp(0xa, 0x5, 0x84) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) pselect6(0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffd, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x17, 0xe9, &(0x7f0000000100)="b89adf62b89df390be41f9c533f651112c6d8976b10520", &(0x7f0000000340)=""/233, 0x9c, 0x0, 0xcf, 0xde, &(0x7f00000004c0)="728e18ba15087e737d9c5f6345a8c36b589d183fcbae5d1aa10e96ca2378677f59a0f1c56146eb5969dd05e18e82e90312b01af463c35df6e7f88aa0b38f2fd0bd66531ded5358ef82ce6f0f0c1762c9df8619281e54bde94a28a4501f5bb41d9080c6b7f968c0a37f3640658e540ea31986d788b7caaf846889cbcb9473f7103ecd81d798f1132545834072defd7a610aee3df5c3115988be6776cbb305523506f0a9a8b35bb1eb28771054b201fb65e4c8d4375d4c2c8821c8c174264318d72c96c9314944956a4b6acbd1fd9e81", &(0x7f00000005c0)="90bff15b5899607e74e0b4f4f8796ec30d6fcbbc7508679ba8f8835f6d5fcfaec2dbfdad52718d0f78d3c1fb8740751f832f51adfcd99bdc2ba2260600d5d00f480a186479c1b24bd91a2a590d3d6465e8eee065beb9f4cc7e9f8d885696d6c60be30d5d55c6cd476aae3a9590490f9e915aee612b38b813c1d028961a8b8d79f1663a2ed22041b74f022664dd6847d4539a5d81e276bc1ebe8ad97a6c5a97510fb0231538d7d00299c786ec24556eed3e96b2ba051db7693804598818a6c3771c2ce881020bcf489caced3e45fa7e2ad1a9bd181f05e0f7f10655192f1c", 0x2, 0x0, 0x8}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x88901, 0x0) socket(0x2b, 0x80801, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) r4 = landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000300)={0x1, 0x0, &(0x7f00000000c0)=[0x0]}) shmctl$SHM_STAT(0x0, 0xd, 0x0) 1.831924769s ago: executing program 5 (id=1030): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xece0, 0x0, 0x2, 0xbfdfffdc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 1.506876322s ago: executing program 5 (id=1031): r0 = socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0x54) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xece0, 0x0, 0x2, 0xbfdfffdc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r2, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) renameat(r1, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r7 = msgget$private(0x0, 0x3d2) msgsnd(r7, &(0x7f0000000d80)=ANY=[@ANYBLOB="02"], 0xe1, 0x0) msgrcv(r7, 0xffffffffffffffff, 0x0, 0x0, 0x1800) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 916.38289ms ago: executing program 4 (id=1032): socket$packet(0x11, 0x2, 0x300) r0 = syz_io_uring_setup(0x5239, 0x0, &(0x7f0000000240)=0x0, &(0x7f00000003c0)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x45, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r1], 0x140}, 0x1, 0x0, 0x0, 0x8800}, 0x0) io_setup(0xb, &(0x7f0000000040)=0x0) connect$can_bcm(r2, &(0x7f0000000000), 0x10) io_submit(r6, 0x1, &(0x7f0000000700)=[&(0x7f00000000c0)={0x400000, 0x600, 0x0, 0x1, 0x0, r2, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) sched_setattr(r3, &(0x7f0000000180)={0x38, 0x3, 0x6, 0xed, 0xfffff7ce, 0x10, 0x10, 0x2, 0x4, 0x3}, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) r8 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) r9 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200), &(0x7f0000000280)) io_uring_setup(0x3cd4, &(0x7f00000002c0)={0x0, 0x6c00, 0x20, 0x0, 0x20000404, 0x0, r9}) 0s ago: executing program 2 (id=1033): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x4000010, 0xffffffffffffffff, 0x4000) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000081dd22104c052e000005010203010902120001000000000904000000f704"], 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000002040)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000001b40)=""/145, 0x91}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 217.612786][ T1203] usb 1-1: unable to get BOS descriptor or descriptor too short [ 217.642238][ T7764] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 217.661184][ T30] audit: type=1400 audit(1767525696.976:435): avc: denied { unmount } for pid=5817 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 217.698076][ T1203] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 217.712222][ T1203] usb 1-1: can't read configurations, error -71 [ 217.754816][ T7764] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 218.158509][ T1203] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 218.292233][ T5869] usb 6-1: USB disconnect, device number 16 [ 218.556332][ T1203] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 218.572005][ T1203] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 218.583344][ T1203] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 218.658358][ T1203] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 218.724629][ T1203] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.852388][ T1203] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.889136][ T1203] usb 1-1: Product: syz [ 218.937110][ T1203] usb 1-1: Manufacturer: syz [ 218.953746][ T1203] usb 1-1: SerialNumber: syz [ 219.417536][ T7771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 219.469869][ T1203] cdc_mbim 1-1:1.0: skipping garbage [ 219.705873][ T7771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 219.738721][ T7771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 219.908737][ T30] audit: type=1400 audit(1767525699.166:436): avc: denied { create } for pid=7782 comm="syz.1.476" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 220.175943][ T7789] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 220.251750][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 220.361652][ T5891] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 220.361968][ T5876] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 220.522996][ T7771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 220.544372][ T7771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 220.553415][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.571725][ T5891] usb 2-1: Using ep0 maxpacket: 32 [ 220.581675][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.584390][ T1203] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 220.591440][ T5876] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 220.591464][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.615299][ T5876] usb 6-1: config 0 descriptor?? [ 220.621489][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.641931][ T5891] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.00 [ 220.650997][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.773368][ T5891] usb 2-1: config 0 descriptor?? [ 220.786431][ T5891] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 220.795832][ T5891] usb 2-1: Detected SIO [ 220.805021][ T5891] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 220.856134][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.872314][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.903462][ T1203] cdc_mbim 1-1:1.0: setting tx_max = 184 [ 220.914796][ T1203] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 221.076280][ T1203] wwan wwan0: port wwan0mbim0 attached [ 221.692910][ T5876] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 221.751883][ T1203] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 4a:3d:33:ad:1a:67 [ 221.788606][ T1203] usb 1-1: USB disconnect, device number 19 [ 221.800595][ T1203] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 221.894131][ T1203] wwan wwan0: port wwan0mbim0 disconnected [ 221.979092][ T6066] usb 6-1: USB disconnect, device number 17 [ 222.122179][ T5876] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 222.304960][ T5876] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.328404][ T5876] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 222.356715][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.382285][ T5876] usb 5-1: config 0 descriptor?? [ 222.773834][ T1203] usb 2-1: USB disconnect, device number 14 [ 222.901426][ T1203] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 223.348363][ T1203] ftdi_sio 2-1:0.0: device disconnected [ 223.416011][ T5876] ath6kl: Failed to submit usb control message: -71 [ 223.441140][ T5876] ath6kl: unable to send the bmi data to the device: -71 [ 223.461604][ T5876] ath6kl: Unable to send get target info: -71 [ 223.496837][ T5876] ath6kl: Failed to init ath6kl core: -71 [ 223.503096][ T5876] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 223.562984][ T5876] usb 5-1: USB disconnect, device number 12 [ 223.732671][ T7821] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 223.870434][ T7823] pim6reg: entered allmulticast mode [ 224.459553][ T7831] comedi comedi3: adq12b: I/O port conflict (0xfffffffffffffffa,16) [ 226.052290][ T7847] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 226.138193][ T7847] bridge_slave_0: left allmulticast mode [ 226.150504][ T7847] bridge_slave_0: left promiscuous mode [ 226.164117][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.177234][ T7847] bridge_slave_1: left allmulticast mode [ 226.188494][ T7847] bridge_slave_1: left promiscuous mode [ 226.205525][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.251931][ T5876] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 226.283678][ T7847] bond0: (slave bond_slave_0): Releasing backup interface [ 226.309591][ T7847] bond0: (slave bond_slave_1): Releasing backup interface [ 226.355929][ T7847] team0: Port device team_slave_0 removed [ 226.366525][ T7847] team0: Port device team_slave_1 removed [ 226.377607][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.388063][ T7847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.404849][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.416612][ T7847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.426476][ T7847] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 226.542978][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 226.580259][ T5876] usb 3-1: config 2 has an invalid interface number: 1 but max is 0 [ 226.588797][ T5876] usb 3-1: config 2 has an invalid interface number: 164 but max is 0 [ 226.597126][ T5876] usb 3-1: config 2 has an invalid descriptor of length 122, skipping remainder of the config [ 226.608654][ T5869] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 226.616489][ T5876] usb 3-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 226.625749][ T5876] usb 3-1: config 2 has no interface number 0 [ 226.632426][ T5876] usb 3-1: too many endpoints for config 2 interface 164 altsetting 161: 133, using maximum allowed: 30 [ 226.644047][ T5876] usb 3-1: config 2 interface 164 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 133 [ 226.667048][ T5876] usb 3-1: config 2 interface 164 has no altsetting 0 [ 226.691089][ T5876] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 226.701040][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.714880][ T5876] usb 3-1: Product: syz [ 226.719078][ T5876] usb 3-1: Manufacturer: syz [ 226.730293][ T5876] usb 3-1: SerialNumber: syz [ 226.812828][ T116] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 226.828662][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.850009][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.867862][ T5869] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 226.886341][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.925396][ T5869] usb 1-1: config 0 descriptor?? [ 226.975294][ T116] usb 2-1: unable to get BOS descriptor or descriptor too short [ 226.995286][ T5876] usb 3-1: USB disconnect, device number 20 [ 227.001796][ T116] usb 2-1: config 3 has an invalid interface number: 21 but max is 0 [ 227.010115][ T116] usb 2-1: config 3 has no interface number 0 [ 227.028696][ T116] usb 2-1: config 3 interface 21 has no altsetting 0 [ 227.039010][ T116] usb 2-1: New USB device found, idVendor=110a, idProduct=1658, bcdDevice=db.db [ 227.051481][ T116] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.059766][ T116] usb 2-1: Product: syz [ 227.064262][ T116] usb 2-1: Manufacturer: syz [ 227.068897][ T116] usb 2-1: SerialNumber: syz [ 227.765804][ T5869] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 229.206374][ T116] mxuport 2-1:3.21: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 229.244153][ T116] mxuport 2-1:3.21: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 229.269377][ T116] mxuport 2-1:3.21: probe with driver mxuport failed with error -71 [ 229.289555][ T116] usb 2-1: USB disconnect, device number 15 [ 230.508754][ T7905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 230.518567][ T7905] bridge_slave_1: left allmulticast mode [ 230.526412][ T116] usb 1-1: USB disconnect, device number 20 [ 230.532483][ T7905] bridge_slave_1: left promiscuous mode [ 230.538212][ T7905] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.562449][ T30] audit: type=1400 audit(1767525709.876:437): avc: denied { connect } for pid=7901 comm="syz.5.508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 230.653863][ T7905] bridge_slave_0: left allmulticast mode [ 230.850415][ T7905] bridge_slave_0: left promiscuous mode [ 230.856385][ T7905] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.041746][ T5884] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 231.121588][ T7915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.512'. [ 231.325945][ T7905] bond0: (slave bridge0): Releasing backup interface [ 231.410245][ T7917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.511'. [ 231.424899][ T7917] unsupported nlmsg_type 40 [ 231.425070][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.459241][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 231.479304][ T7915] team3: entered promiscuous mode [ 231.479961][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 231.496969][ T7915] team3: entered allmulticast mode [ 231.497239][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 231.514251][ T5884] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 231.568757][ T5884] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 231.578467][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 231.591666][ T5884] usb 5-1: Product: syz [ 231.595924][ T5884] usb 5-1: Manufacturer: syz [ 231.603149][ T5884] usb 5-1: SerialNumber: syz [ 231.697089][ T5884] usb 5-1: config 0 descriptor?? [ 232.154932][ T5884] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 232.181500][ T5884] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 232.205743][ T5884] usb 5-1: USB disconnect, device number 13 [ 232.805349][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 232.821212][ T7929] team4: entered promiscuous mode [ 232.826288][ T7929] team4: entered allmulticast mode [ 233.033141][ T7935] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 233.581829][ T5923] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 233.790099][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.941447][ T30] audit: type=1400 audit(1767525713.256:438): avc: denied { map } for pid=7956 comm="syz.5.522" path="socket:[18703]" dev="sockfs" ino=18703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 233.964670][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.974553][ T5923] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 234.063485][ T7962] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 234.467154][ T30] audit: type=1400 audit(1767525713.256:439): avc: denied { read } for pid=7956 comm="syz.5.522" path="socket:[18703]" dev="sockfs" ino=18703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 234.491202][ T5923] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.510399][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.547370][ T5923] usb 5-1: config 0 descriptor?? [ 235.151667][ T5923] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 235.159418][ T5923] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 235.167771][ T5923] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 235.178459][ T5923] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 235.188202][ T5923] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 235.196796][ T5923] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 235.208775][ T5923] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 235.217181][ T5923] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 235.224882][ T5923] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 235.232727][ T5923] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 235.261832][ T1203] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 235.296793][ T5923] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 235.421793][ T1203] usb 3-1: Using ep0 maxpacket: 32 [ 235.435154][ T1203] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 235.447622][ T1203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.484946][ T1203] usb 3-1: config 0 descriptor?? [ 235.633118][ T5869] usb 5-1: USB disconnect, device number 14 [ 235.722421][ T1203] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 235.730256][ T7981] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 235.743702][ T7981] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 235.798660][ T1203] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 236.026658][ T1203] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 236.046592][ T1203] usb 3-1: media controller created [ 236.224439][ T1203] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 236.514652][ T7992] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 236.521450][ T7992] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 236.531982][ T7992] vhci_hcd vhci_hcd.0: Device attached [ 236.540094][ T7993] vhci_hcd: connection closed [ 236.554203][ T6335] vhci_hcd vhci_hcd.0: stop threads [ 236.584084][ T6335] vhci_hcd vhci_hcd.0: release socket [ 236.603783][ T6335] vhci_hcd vhci_hcd.0: disconnect device [ 236.626640][ T7999] program syz.1.532 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.755179][ T30] audit: type=1400 audit(1767525716.076:440): avc: denied { map } for pid=7995 comm="syz.1.532" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 237.027597][ T1203] stb0899_attach: Driver disabled by Kconfig [ 237.270384][ T1203] az6027: no front-end attached [ 237.270384][ T1203] [ 237.295218][ T1203] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 237.329807][ T1203] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 237.359685][ T7971] NILFS (nullb0): couldn't find nilfs on the device [ 237.370249][ T30] audit: type=1400 audit(1767525716.676:441): avc: denied { mounton } for pid=7965 comm="syz.2.524" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 237.442751][ T1203] dvb-usb: schedule remote query interval to 400 msecs. [ 237.522237][ T1203] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 237.528209][ T8006] program syz.0.534 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.689799][ T1203] usb 3-1: USB disconnect, device number 21 [ 238.212741][ T1203] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 239.481715][ T1203] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 239.661659][ T1203] usb 3-1: Using ep0 maxpacket: 8 [ 239.694757][ T1203] usb 3-1: config 0 has an invalid interface number: 96 but max is 0 [ 239.724762][ T1203] usb 3-1: config 0 has no interface number 0 [ 239.730983][ T1203] usb 3-1: config 0 interface 96 has no altsetting 0 [ 239.754244][ T1203] usb 3-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 239.814291][ T1203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.975355][ T1203] usb 3-1: Product: syz [ 239.979587][ T1203] usb 3-1: Manufacturer: syz [ 240.015096][ T1203] usb 3-1: SerialNumber: syz [ 240.018825][ T8021] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 240.092345][ T1203] usb 3-1: config 0 descriptor?? [ 240.106573][ T1203] usbhid 3-1:0.96: couldn't find an input interrupt endpoint [ 240.792383][ T8013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.536'. [ 240.819176][ T5869] usb 3-1: USB disconnect, device number 22 [ 240.981697][ T5923] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 241.264808][ T5923] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 241.281720][ T5923] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.301730][ T5923] usb 2-1: config 0 has no interface number 0 [ 241.311647][ T5923] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 241.331674][ T5923] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 241.435807][ T5923] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 241.471734][ T5923] usb 2-1: config 0 interface 52 has no altsetting 0 [ 241.492240][ T5923] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 241.503158][ T5923] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 241.511356][ T5923] usb 2-1: Manufacturer: syz [ 241.519887][ T5923] usb 2-1: config 0 descriptor?? [ 241.564519][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.4.542'. [ 241.737763][ T5923] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 241.751858][ T5923] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 243.315951][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 243.331802][ T8054] team3: entered promiscuous mode [ 243.336858][ T8054] team3: entered allmulticast mode [ 243.469027][ T8060] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 243.541860][ T30] audit: type=1400 audit(1767525722.866:442): avc: denied { read } for pid=8055 comm="syz.0.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.674861][ T5884] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 243.775903][ T5923] usb 2-1: USB disconnect, device number 16 [ 244.160973][ T6066] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 244.728606][ T6066] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 244.751982][ T6066] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.761855][ T6066] usb 3-1: Product: syz [ 244.766796][ T6066] usb 3-1: Manufacturer: syz [ 244.772041][ T6066] usb 3-1: SerialNumber: syz [ 244.823288][ T8083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.556'. [ 244.838958][ T6066] usb 3-1: config 0 descriptor?? [ 244.849812][ T6066] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 023 [ 244.995909][ T30] audit: type=1400 audit(1767525724.316:443): avc: denied { read } for pid=8082 comm="syz.1.556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 245.817108][ T8095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.558'. [ 245.854559][ T6066] (null): failure reading functionality [ 245.914327][ T6066] i2c i2c-1: failure reading functionality [ 245.932440][ T6066] i2c i2c-1: connected i2c-tiny-usb device [ 246.114632][ T8106] loop6: detected capacity change from 0 to 2640 [ 246.126759][ T8106] buffer_io_error: 6 callbacks suppressed [ 246.126798][ T8106] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.142193][ T8106] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.180732][ T8106] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.188960][ T8106] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.197093][ T8106] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.205381][ T8106] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.243097][ T8106] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.251268][ T8106] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.259321][ T8106] ldm_validate_partition_table(): Disk read failed. [ 246.269842][ T8106] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.278944][ T8106] Buffer I/O error on dev loop6, logical block 0, async page read [ 246.287693][ T8106] Dev loop6: unable to read RDB block 0 [ 246.294355][ T8106] loop6: unable to read partition table [ 246.301258][ T8106] loop_reread_partitions: partition scan of loop6 (3„ ¾‚³˜) failed (rc=-5) [ 246.602390][ T30] audit: type=1400 audit(1767525725.896:444): avc: denied { block_suspend } for pid=8100 comm="syz.1.561" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 247.386057][ T30] audit: type=1400 audit(1767525726.706:445): avc: denied { ioctl } for pid=8122 comm="syz.4.566" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7451 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 247.944671][ T6066] usb 3-1: USB disconnect, device number 23 [ 248.121626][ T5876] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 248.851321][ T5876] usb 5-1: not running at top speed; connect to a high speed hub [ 249.029824][ T5876] usb 5-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 249.042982][ T30] audit: type=1400 audit(1767525728.366:446): avc: denied { watch watch_reads } for pid=8145 comm="syz.2.574" path="pipe:[19058]" dev="pipefs" ino=19058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 249.498204][ T5876] usb 5-1: config 1 interface 0 has no altsetting 0 [ 249.545460][ T5876] usb 5-1: string descriptor 0 read error: -71 [ 249.571373][ T8152] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 249.607270][ T5876] usb 5-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.40 [ 249.650307][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.774116][ T5876] usb 5-1: can't set config #1, error -71 [ 249.841905][ T5876] usb 5-1: USB disconnect, device number 15 [ 250.057241][ T30] audit: type=1400 audit(1767525729.346:447): avc: denied { shutdown } for pid=8154 comm="syz.0.576" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 250.743489][ T6066] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 251.023070][ T6066] usb 2-1: Invalid ep0 maxpacket: 16 [ 251.224222][ T6066] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 251.431789][ T6066] usb 2-1: Invalid ep0 maxpacket: 16 [ 251.455375][ T6066] usb usb2-port1: attempt power cycle [ 251.582671][ T30] audit: type=1400 audit(1767525730.906:448): avc: denied { connect } for pid=8179 comm="syz.5.583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 251.837392][ T8184] netlink: 24 bytes leftover after parsing attributes in process `syz.5.583'. [ 252.255355][ T6066] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 252.331986][ T1203] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 252.346211][ T6066] usb 2-1: Invalid ep0 maxpacket: 16 [ 253.023006][ T6066] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 253.053419][ T1203] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.063901][ T1203] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 253.073564][ T6066] usb 2-1: Invalid ep0 maxpacket: 16 [ 253.079127][ T1203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.087639][ T6066] usb usb2-port1: unable to enumerate USB device [ 253.102666][ T1203] usb 3-1: config 0 descriptor?? [ 254.453187][ T1203] ath6kl: Failed to submit usb control message: -110 [ 254.477841][ T1203] ath6kl: unable to send the bmi data to the device: -110 [ 254.498994][ T1203] ath6kl: Unable to send get target info: -110 [ 254.525909][ T1203] ath6kl: Failed to init ath6kl core: -110 [ 254.550480][ T1203] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 254.567997][ T30] audit: type=1400 audit(1767525733.886:449): avc: denied { bpf } for pid=8199 comm="syz.0.589" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 254.679575][ T1203] usb 3-1: USB disconnect, device number 24 [ 254.687688][ T30] audit: type=1400 audit(1767525733.906:450): avc: denied { execmem } for pid=8199 comm="syz.0.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 254.707461][ T30] audit: type=1400 audit(1767525733.996:451): avc: denied { module_request } for pid=8199 comm="syz.0.589" kmod="fs-coda" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 254.730339][ T30] audit: type=1400 audit(1767525734.046:452): avc: denied { read } for pid=8203 comm="syz.5.587" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.778281][ T30] audit: type=1400 audit(1767525734.046:453): avc: denied { open } for pid=8203 comm="syz.5.587" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 254.974874][ T30] audit: type=1400 audit(1767525734.076:454): avc: denied { write } for pid=8203 comm="syz.5.587" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 255.018647][ T30] audit: type=1400 audit(1767525734.076:455): avc: denied { ioctl } for pid=8203 comm="syz.5.587" path="/dev/binderfs/binder1" dev="binder" ino=11 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 255.050228][ T30] audit: type=1400 audit(1767525734.076:456): avc: denied { set_context_mgr } for pid=8203 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 255.076313][ T30] audit: type=1400 audit(1767525734.086:457): avc: denied { create } for pid=8203 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 255.099263][ T30] audit: type=1400 audit(1767525734.086:458): avc: denied { create } for pid=8203 comm="syz.5.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 255.173679][ T1203] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 255.284877][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.341902][ T1203] usb 5-1: Using ep0 maxpacket: 32 [ 255.350686][ T1203] usb 5-1: config 2 has an invalid interface number: 1 but max is 0 [ 255.368666][ T1203] usb 5-1: config 2 has an invalid interface number: 164 but max is 0 [ 255.387401][ T1203] usb 5-1: config 2 has an invalid descriptor of length 122, skipping remainder of the config [ 255.401426][ T1203] usb 5-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 255.410738][ T1203] usb 5-1: config 2 has no interface number 0 [ 255.417148][ T1203] usb 5-1: too many endpoints for config 2 interface 164 altsetting 161: 133, using maximum allowed: 30 [ 255.496873][ T1203] usb 5-1: config 2 interface 164 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 133 [ 255.776744][ T1203] usb 5-1: config 2 interface 164 has no altsetting 0 [ 255.785901][ T1203] usb 5-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 255.797479][ T1203] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.805677][ T1203] usb 5-1: Product: syz [ 255.809951][ T1203] usb 5-1: Manufacturer: syz [ 255.814731][ T1203] usb 5-1: SerialNumber: syz [ 256.631386][ T1203] usb 5-1: USB disconnect, device number 16 [ 257.327815][ T8230] netlink: 'syz.0.595': attribute type 30 has an invalid length. [ 257.392372][ T8231] netlink: 'syz.0.595': attribute type 30 has an invalid length. [ 257.470688][ T8232] 9pnet_virtio: no channels available for device syz [ 258.201065][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.597'. [ 258.217260][ T8234] team5: entered promiscuous mode [ 258.222345][ T8234] team5: entered allmulticast mode [ 258.333015][ T8243] xt_TPROXY: Can be used only with -p tcp or -p udp [ 259.623881][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 259.623913][ T30] audit: type=1400 audit(1767525738.936:502): avc: denied { create } for pid=8255 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 259.971679][ T30] audit: type=1400 audit(1767525738.816:501): avc: denied { create } for pid=8255 comm="syz.2.604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 261.000049][ T1203] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 261.011841][ T8267] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 261.058471][ T5923] lo speed is unknown, defaulting to 1000 [ 261.089440][ T8274] netlink: 24 bytes leftover after parsing attributes in process `syz.2.608'. [ 261.183426][ T30] audit: type=1400 audit(1767525740.496:503): avc: denied { read write } for pid=8273 comm="syz.2.608" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 261.274195][ T8278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 261.291649][ T30] audit: type=1400 audit(1767525740.496:504): avc: denied { mounton } for pid=8264 comm="syz.5.606" path="/90/bus" dev="tmpfs" ino=494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 261.359513][ T30] audit: type=1400 audit(1767525740.496:505): avc: denied { open } for pid=8273 comm="syz.2.608" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 261.452061][ T30] audit: type=1400 audit(1767525740.526:506): avc: denied { ioctl } for pid=8273 comm="syz.2.608" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 261.636308][ T30] audit: type=1400 audit(1767525740.576:507): avc: denied { read write } for pid=8276 comm="syz.4.609" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.103693][ T30] audit: type=1400 audit(1767525740.576:508): avc: denied { open } for pid=8276 comm="syz.4.609" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.162152][ T30] audit: type=1400 audit(1767525740.606:509): avc: denied { ioctl } for pid=8276 comm="syz.4.609" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 262.251189][ T30] audit: type=1400 audit(1767525740.746:510): avc: denied { create } for pid=8279 comm="syz.5.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.336803][ T8293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 262.353385][ T8293] team6: entered promiscuous mode [ 262.358447][ T8293] team6: entered allmulticast mode [ 263.341021][ T5923] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 263.821669][ T5923] usb 3-1: Using ep0 maxpacket: 32 [ 263.838983][ T5923] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 263.861338][ T5923] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 263.888172][ T5923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 263.906588][ T5923] usb 3-1: config 1 has no interface number 0 [ 263.920030][ T5923] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 263.936748][ T5923] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 263.951890][ T5923] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 263.961186][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.977543][ T5923] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 264.189478][ T5933] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 264.203826][ T5923] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 264.369381][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 184, changing to 11 [ 264.407428][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 16497, setting to 1024 [ 264.452010][ T5876] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 264.459702][ T5933] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 264.483775][ T6065] Bluetooth: Error in BCSP hdr checksum [ 264.507009][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.534347][ T5933] usb 5-1: config 0 descriptor?? [ 264.630055][ T1203] usb 3-1: USB disconnect, device number 25 [ 264.640139][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 264.646660][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 264.658910][ T5876] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.659510][ T1203] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 264.670082][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 264.688196][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 264.701507][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 264.708407][ T5876] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 264.718449][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 264.727979][ T5876] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.757047][ T3461] Bluetooth: Error in BCSP hdr checksum [ 264.790697][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 264.790709][ T30] audit: type=1400 audit(1767525744.106:533): avc: denied { create } for pid=8320 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 264.930454][ T5876] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 264.964564][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 264.984613][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 264.990589][ T30] audit: type=1400 audit(1767525744.156:534): avc: denied { bind } for pid=8320 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.015183][ T6017] Bluetooth: Error in BCSP hdr checksum [ 265.026916][ T5876] usb 6-1: Product: syz [ 265.031247][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 265.063096][ T5933] ath6kl: Failed to submit usb control message: -71 [ 265.077970][ T5876] usb 6-1: Manufacturer: syz [ 265.090400][ T5876] usb 6-1: SerialNumber: syz [ 265.095147][ T5933] ath6kl: unable to send the bmi data to the device: -71 [ 265.106644][ T30] audit: type=1400 audit(1767525744.156:535): avc: denied { listen } for pid=8320 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.132093][ T5876] usb 6-1: config 0 descriptor?? [ 265.137067][ T5933] ath6kl: Unable to send get target info: -71 [ 265.163504][ T30] audit: type=1400 audit(1767525744.166:536): avc: denied { accept } for pid=8320 comm="syz.4.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 265.167496][ T5933] ath6kl: Failed to init ath6kl core: -71 [ 265.194305][ T8327] ceph: No mds server is up or the cluster is laggy [ 265.216261][ T5933] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 265.355972][ T6027] Bluetooth: Error in BCSP hdr checksum [ 265.372388][ T5876] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 265.379261][ T5876] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 265.394798][ T5933] usb 5-1: USB disconnect, device number 17 [ 265.598740][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 265.605224][ T5876] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 265.613825][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 265.620819][ T5876] radio-si470x 6-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 265.636966][ T8339] lo speed is unknown, defaulting to 1000 [ 265.643683][ T5876] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 265.703835][ T5876] usb 6-1: USB disconnect, device number 18 [ 265.918689][ T8347] tipc: Started in network mode [ 265.928542][ T8347] tipc: Node identity ac141412, cluster identity 4711 [ 265.940468][ T8347] tipc: New replicast peer: 255.255.255.255 [ 265.949504][ T8347] tipc: Enabled bearer , priority 10 [ 266.241960][ T5810] Bluetooth: hci5: command 0x1003 tx timeout [ 266.271719][ T5136] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 266.616979][ T30] audit: type=1400 audit(1767525745.936:537): avc: denied { read write } for pid=8354 comm="syz.0.628" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 266.656855][ T30] audit: type=1400 audit(1767525745.936:538): avc: denied { open } for pid=8354 comm="syz.0.628" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 266.680219][ T30] audit: type=1400 audit(1767525745.976:539): avc: denied { mount } for pid=8354 comm="syz.0.628" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 267.063768][ T5933] tipc: Node number set to 2886997010 [ 267.218130][ T30] audit: type=1400 audit(1767525746.236:540): avc: denied { mounton } for pid=8354 comm="syz.0.628" path="/135/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 267.240730][ T30] audit: type=1400 audit(1767525746.256:541): avc: denied { mount } for pid=8354 comm="syz.0.628" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 267.274322][ T30] audit: type=1400 audit(1767525746.356:542): avc: denied { create } for pid=8354 comm="syz.0.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 268.992612][ T8389] comedi comedi3: adq12b: I/O port conflict (0xfffffffffffffffa,16) [ 269.402984][ T5891] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 269.430153][ T5869] libceph: connect (1)[c::]:6789 error -101 [ 269.436497][ T5869] libceph: mon0 (1)[c::]:6789 connect error [ 269.466193][ T8390] ceph: No mds server is up or the cluster is laggy [ 269.562881][ T5891] usb 1-1: Using ep0 maxpacket: 32 [ 269.573757][ T5891] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 269.583253][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.594857][ T5891] usb 1-1: config 0 descriptor?? [ 269.809931][ T5891] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 269.826947][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 269.839366][ T5891] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 269.873966][ T8407] team6: entered promiscuous mode [ 269.879088][ T8407] team6: entered allmulticast mode [ 270.135200][ T5891] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 270.170033][ T5891] usb 1-1: media controller created [ 270.184900][ T5891] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 270.236933][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 270.236950][ T30] audit: type=1400 audit(1767525749.556:567): avc: denied { write } for pid=8403 comm="syz.4.641" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 270.317118][ T8410] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 270.431528][ T8414] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 270.530364][ T30] audit: type=1400 audit(1767525749.846:568): avc: denied { ioctl } for pid=8416 comm="syz.1.644" path="socket:[21592]" dev="sockfs" ino=21592 ioctlcmd=0x9434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.630287][ T30] audit: type=1400 audit(1767525749.846:569): avc: denied { create } for pid=8416 comm="syz.1.644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 270.794428][ T30] audit: type=1400 audit(1767525750.106:570): avc: denied { write } for pid=8420 comm="syz.1.647" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 271.434575][ T5891] az6027: usb out operation failed. (-71) [ 271.440749][ T5891] stb0899_attach: Driver disabled by Kconfig [ 271.573865][ T5891] az6027: no front-end attached [ 271.573865][ T5891] [ 271.613819][ T5891] az6027: usb out operation failed. (-71) [ 271.621440][ T30] audit: type=1400 audit(1767525750.936:571): avc: denied { write } for pid=8420 comm="syz.1.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 271.757436][ T5891] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 271.961632][ T5891] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 272.019319][ T30] audit: type=1400 audit(1767525750.936:572): avc: denied { ioctl } for pid=8420 comm="syz.1.647" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 272.049176][ T30] audit: type=1400 audit(1767525751.076:573): avc: denied { bind } for pid=8428 comm="syz.0.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.063198][ T5891] dvb-usb: schedule remote query interval to 400 msecs. [ 272.077061][ T30] audit: type=1400 audit(1767525751.076:574): avc: denied { name_bind } for pid=8428 comm="syz.0.648" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 272.098134][ T5891] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 272.160758][ T30] audit: type=1400 audit(1767525751.076:575): avc: denied { node_bind } for pid=8428 comm="syz.0.648" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 272.171899][ T5891] usb 1-1: USB disconnect, device number 23 [ 272.249622][ T30] audit: type=1400 audit(1767525751.076:576): avc: denied { write } for pid=8428 comm="syz.0.648" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.969706][ T5891] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 274.571631][ T5891] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 274.753650][ T5891] usb 2-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x43, changing to 0x3 [ 274.825996][ T5891] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x3 has invalid maxpacket 65, setting to 64 [ 274.873281][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.663'. [ 274.904677][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 274.939968][ T5891] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 274.969721][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 275.006440][ T5891] usb 2-1: Product: syz [ 275.012130][ T5891] usb 2-1: Manufacturer: syz [ 275.016841][ T5891] usb 2-1: SerialNumber: syz [ 275.024609][ T5891] usb 2-1: config 0 descriptor?? [ 275.036144][ T8466] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 275.070720][ T5891] usb 2-1: selecting invalid altsetting 0 [ 275.356388][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 275.356401][ T30] audit: type=1400 audit(1767525754.656:601): avc: denied { relabelfrom } for pid=8465 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 275.711249][ T30] audit: type=1400 audit(1767525754.656:602): avc: denied { relabelto } for pid=8465 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 275.804531][ T30] audit: type=1400 audit(1767525754.706:603): avc: denied { append } for pid=8465 comm="syz.1.659" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 275.890663][ T30] audit: type=1400 audit(1767525754.706:604): avc: denied { ioctl } for pid=8465 comm="syz.1.659" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 276.073386][ T30] audit: type=1400 audit(1767525755.196:605): avc: denied { getopt } for pid=8488 comm="syz.4.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 276.334736][ T30] audit: type=1400 audit(1767525755.466:606): avc: denied { name_bind } for pid=8488 comm="syz.4.665" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 276.903777][ T8500] netlink: 'syz.2.670': attribute type 1 has an invalid length. [ 277.028218][ T8500] netlink: 224 bytes leftover after parsing attributes in process `syz.2.670'. [ 278.029725][ T8511] loop7: detected capacity change from 0 to 16384 [ 278.227029][ T8514] loop7: detected capacity change from 16384 to 0 [ 278.248973][ C0] I/O error, dev loop7, sector 8448 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 278.333535][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 279.047962][ T8520] team7: entered promiscuous mode [ 279.064466][ T5933] usb 2-1: USB disconnect, device number 21 [ 279.071586][ T8520] team7: entered allmulticast mode [ 279.144999][ T8524] netlink: 'syz.5.674': attribute type 4 has an invalid length. [ 279.176545][ T5869] lo speed is unknown, defaulting to 1000 [ 279.182564][ T5869] syz0: Port: 1 Link DOWN [ 279.195993][ T8524] netlink: 'syz.5.674': attribute type 4 has an invalid length. [ 279.226315][ T5869] lo speed is unknown, defaulting to 1000 [ 279.234351][ T8530] netlink: 104 bytes leftover after parsing attributes in process `syz.1.677'. [ 279.245427][ T5869] syz0: Port: 1 Link ACTIVE [ 279.258866][ T8524] overlayfs: missing 'lowerdir' [ 280.278095][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.5.681'. [ 280.548516][ T8552] fuse: Unknown parameter 'user_id00000000000000000000' [ 280.774353][ T30] audit: type=1400 audit(1767525760.096:607): avc: denied { setopt } for pid=8559 comm="syz.5.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 281.731648][ T30] audit: type=1400 audit(1767525761.046:608): avc: denied { getopt } for pid=8582 comm="syz.4.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 282.070172][ T30] audit: type=1400 audit(1767525761.386:609): avc: denied { append } for pid=8588 comm="syz.5.696" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.982255][ T8589] binder: 8588:8589 ioctl c0046209 0 returned -22 [ 283.029840][ T5933] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 283.353413][ T5933] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 283.355993][ T30] audit: type=1400 audit(1767525762.656:610): avc: denied { setopt } for pid=8592 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 283.361878][ T5933] usb 5-1: config 0 has no interface number 0 [ 284.007619][ T5933] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 284.040463][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.049707][ T5933] usb 5-1: Product: syz [ 284.152373][ T5933] usb 5-1: Manufacturer: syz [ 284.157025][ T5933] usb 5-1: SerialNumber: syz [ 284.205694][ T5933] usb 5-1: config 0 descriptor?? [ 284.290313][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.703'. [ 284.307856][ T30] audit: type=1400 audit(1767525763.626:611): avc: denied { getopt } for pid=8610 comm="syz.1.703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 284.649721][ T30] audit: type=1400 audit(1767525763.966:612): avc: denied { setopt } for pid=8618 comm="syz.2.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 284.997628][ T30] audit: type=1400 audit(1767525764.046:613): avc: denied { create } for pid=8586 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 285.324787][ T30] audit: type=1400 audit(1767525764.366:614): avc: denied { connect } for pid=8586 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.342139][ T5933] usb 5-1: Firmware version (0.0) predates our first public release. [ 285.348325][ T30] audit: type=1400 audit(1767525764.366:615): avc: denied { write } for pid=8586 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.402592][ T5933] usb 5-1: Please update to version 0.2 or newer [ 285.419170][ T30] audit: type=1400 audit(1767525764.366:616): avc: denied { shutdown } for pid=8586 comm="syz.4.695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 285.517619][ T8630] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 285.559927][ T5933] usb 5-1: USB disconnect, device number 18 [ 285.963990][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 285.964007][ T30] audit: type=1400 audit(1767525765.276:618): avc: denied { read } for pid=8639 comm="syz.1.710" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 286.021328][ T30] audit: type=1400 audit(1767525765.276:619): avc: denied { open } for pid=8639 comm="syz.1.710" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 286.057187][ T30] audit: type=1400 audit(1767525765.276:620): avc: denied { ioctl } for pid=8639 comm="syz.1.710" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 286.068215][ T8643] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 286.119326][ T8641] netlink: 133536 bytes leftover after parsing attributes in process `syz.2.708'. [ 286.238403][ T6066] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 286.525747][ T30] audit: type=1400 audit(1767525765.716:621): avc: denied { read write } for pid=8636 comm="syz.2.708" name="sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 286.725711][ T6066] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 286.893494][ T30] audit: type=1400 audit(1767525765.726:622): avc: denied { open } for pid=8636 comm="syz.2.708" path="/dev/sg0" dev="devtmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 286.918689][ T30] audit: type=1400 audit(1767525765.726:623): avc: denied { ioctl } for pid=8636 comm="syz.2.708" path="/dev/sg0" dev="devtmpfs" ino=770 ioctlcmd=0x2270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 287.003133][ T8651] netlink: 'syz.4.714': attribute type 12 has an invalid length. [ 287.445445][ T6066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.453538][ T6066] usb 6-1: Product: syz [ 287.457690][ T6066] usb 6-1: Manufacturer: syz [ 287.462291][ T6066] usb 6-1: SerialNumber: syz [ 287.503544][ T6066] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 287.527646][ T30] audit: type=1400 audit(1767525766.026:624): avc: denied { create } for pid=8650 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 287.586012][ T30] audit: type=1400 audit(1767525766.196:625): avc: denied { getopt } for pid=8650 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 287.586108][ T5884] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 287.731824][ T30] audit: type=1400 audit(1767525766.336:626): avc: denied { override_creds } for pid=8648 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 287.769150][ T8663] capability: warning: `syz.1.716' uses 32-bit capabilities (legacy support in use) [ 287.930741][ T30] audit: type=1400 audit(1767525766.836:627): avc: denied { firmware_load } for pid=5884 comm="kworker/1:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 288.175303][ T5869] usb 6-1: USB disconnect, device number 19 [ 288.809254][ T5884] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 289.101881][ T5884] ath9k_htc: Failed to initialize the device [ 289.149938][ T5869] usb 6-1: ath9k_htc: USB layer deinitialized [ 289.823634][ T8690] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 290.233475][ T8690] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 290.245258][ T8690] overlayfs: failed to look up (tracing) for ino (-66) [ 291.260315][ T8696] futex_wake_op: syz.0.726 tries to shift op by -1; fix this program [ 291.272893][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 291.272908][ T30] audit: type=1400 audit(1767525770.596:637): avc: denied { unmount } for pid=6229 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 291.363644][ T30] audit: type=1400 audit(1767525770.676:638): avc: denied { connect } for pid=8695 comm="syz.0.726" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 292.576917][ T8719] comedi comedi3: adq12b: I/O port conflict (0xfffffffffffffffa,16) [ 293.105896][ T30] audit: type=1400 audit(1767525772.426:639): avc: denied { create } for pid=8722 comm="syz.1.733" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 293.128118][ T30] audit: type=1400 audit(1767525772.426:640): avc: denied { link } for pid=8722 comm="syz.1.733" name="file1" dev="tmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 293.166191][ T30] audit: type=1400 audit(1767525772.476:641): avc: denied { map } for pid=8726 comm="syz.2.734" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 293.253982][ T30] audit: type=1400 audit(1767525772.576:642): avc: denied { call } for pid=8726 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 293.395104][ T8732] warning: `syz.4.735' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 293.414906][ T8725] kvm: emulating exchange as write [ 293.575921][ T5869] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 294.641626][ T5869] usb 2-1: Using ep0 maxpacket: 8 [ 294.650957][ T5869] usb 2-1: config 0 has an invalid interface number: 166 but max is 0 [ 294.679982][ T5869] usb 2-1: config 0 has no interface number 0 [ 294.764386][ T5869] usb 2-1: config 0 interface 166 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 294.778509][ T8740] FAULT_INJECTION: forcing a failure. [ 294.778509][ T8740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 294.793447][ T8740] CPU: 1 UID: 0 PID: 8740 Comm: syz.4.737 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.793477][ T8740] Tainted: [L]=SOFTLOCKUP [ 294.793484][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 294.793494][ T8740] Call Trace: [ 294.793500][ T8740] [ 294.793507][ T8740] dump_stack_lvl+0x16c/0x1f0 [ 294.793536][ T8740] should_fail_ex+0x512/0x640 [ 294.793567][ T8740] should_fail_alloc_page+0xe7/0x130 [ 294.793593][ T8740] prepare_alloc_pages+0x401/0x670 [ 294.793627][ T8740] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 294.793655][ T8740] ? find_held_lock+0x2b/0x80 [ 294.793686][ T8740] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.793708][ T8740] ? is_bpf_text_address+0x94/0x1a0 [ 294.793729][ T8740] ? kernel_text_address+0x8d/0x100 [ 294.793760][ T8740] ? do_raw_spin_lock+0x12c/0x2b0 [ 294.793788][ T8740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.793811][ T8740] ? policy_nodemask+0xea/0x4e0 [ 294.793838][ T8740] alloc_pages_mpol+0x1fb/0x550 [ 294.793863][ T8740] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 294.793894][ T8740] ___kmalloc_large_node+0x10c/0x150 [ 294.793919][ T8740] ? __sys_sendmsg+0x16d/0x220 [ 294.793941][ T8740] __kmalloc_large_node_noprof+0x1c/0x70 [ 294.793969][ T8740] __kmalloc_noprof.cold+0xc/0x62 [ 294.793996][ T8740] ? tcf_em_tree_validate+0x1c8/0xd60 [ 294.794021][ T8740] ? tcf_em_tree_validate+0x1c8/0xd60 [ 294.794039][ T8740] tcf_em_tree_validate+0x1c8/0xd60 [ 294.794066][ T8740] ? __pfx_tcf_em_tree_validate+0x10/0x10 [ 294.794096][ T8740] flow_change+0x3d8/0x19c0 [ 294.794123][ T8740] ? __pfx_flow_change+0x10/0x10 [ 294.794142][ T8740] ? __mutex_unlock_slowpath+0x161/0x790 [ 294.794182][ T8740] ? __pfx_flow_change+0x10/0x10 [ 294.794203][ T8740] tc_new_tfilter+0xa35/0x2340 [ 294.794243][ T8740] ? __pfx_tc_new_tfilter+0x10/0x10 [ 294.794275][ T8740] ? __lock_acquire+0x436/0x2890 [ 294.794311][ T8740] ? find_held_lock+0x2b/0x80 [ 294.794336][ T8740] ? __pfx_tc_new_tfilter+0x10/0x10 [ 294.794356][ T8740] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 294.794378][ T8740] ? __pfx_tc_new_tfilter+0x10/0x10 [ 294.794405][ T8740] rtnetlink_rcv_msg+0x95e/0xe90 [ 294.794427][ T8740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 294.794456][ T8740] ? ref_tracker_free+0x37c/0x830 [ 294.794477][ T8740] netlink_rcv_skb+0x158/0x420 [ 294.794499][ T8740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 294.794521][ T8740] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 294.794554][ T8740] ? netlink_deliver_tap+0x1ae/0xd30 [ 294.794580][ T8740] netlink_unicast+0x5aa/0x870 [ 294.794606][ T8740] ? __pfx_netlink_unicast+0x10/0x10 [ 294.794637][ T8740] netlink_sendmsg+0x8c8/0xdd0 [ 294.794664][ T8740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.794697][ T8740] ____sys_sendmsg+0xa5d/0xc30 [ 294.794722][ T8740] ? copy_msghdr_from_user+0x10a/0x160 [ 294.794741][ T8740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.794778][ T8740] ___sys_sendmsg+0x134/0x1d0 [ 294.794798][ T8740] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.794852][ T8740] __sys_sendmsg+0x16d/0x220 [ 294.794871][ T8740] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.794907][ T8740] do_syscall_64+0xcd/0xf80 [ 294.794933][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.794950][ T8740] RIP: 0033:0x7f52f698f749 [ 294.794965][ T8740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.794982][ T8740] RSP: 002b:00007f52f77c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 294.795000][ T8740] RAX: ffffffffffffffda RBX: 00007f52f6be5fa0 RCX: 00007f52f698f749 [ 294.795012][ T8740] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 294.795023][ T8740] RBP: 00007f52f77c0090 R08: 0000000000000000 R09: 0000000000000000 [ 294.795033][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.795043][ T8740] R13: 00007f52f6be6038 R14: 00007f52f6be5fa0 R15: 00007ffc88b7d9f8 [ 294.795068][ T8740] [ 295.187505][ T5869] usb 2-1: config 0 interface 166 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 16 [ 295.197603][ T5869] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=b0.a7 [ 295.206689][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.219387][ T5869] usb 2-1: config 0 descriptor?? [ 295.233737][ T8723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.248183][ T8723] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 295.625674][ T30] audit: type=1400 audit(1767525774.936:643): avc: denied { mount } for pid=8752 comm="syz.2.742" name="/" dev="rpc_pipefs" ino=22721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 295.657450][ T8741] usb 2-1: USB disconnect, device number 22 [ 295.671422][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 295.690210][ T8760] comedi comedi3: mpc624: I/O port conflict (0x44fa7,16) [ 295.690767][ T30] audit: type=1400 audit(1767525775.006:644): avc: denied { mount } for pid=8761 comm="syz.2.745" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 295.724147][ T30] audit: type=1400 audit(1767525775.036:645): avc: denied { ioctl } for pid=8761 comm="syz.2.745" path="socket:[22278]" dev="sockfs" ino=22278 ioctlcmd=0x4b4c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 295.843244][ T24] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 295.866800][ T30] audit: type=1400 audit(1767525775.186:646): avc: denied { setopt } for pid=8758 comm="syz.4.744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 295.991985][ T7086] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 296.011732][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 296.018494][ T24] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 296.027797][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.038228][ T24] usb 6-1: config 0 descriptor?? [ 296.047095][ T24] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 296.144903][ T7086] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 296.154958][ T7086] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.167324][ T7086] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 296.176546][ T7086] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 296.185242][ T7086] usb 3-1: Manufacturer: syz [ 296.193800][ T7086] usb 3-1: config 0 descriptor?? [ 296.291705][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 296.291730][ T30] audit: type=1400 audit(1767525775.586:648): avc: denied { connect } for pid=8774 comm="syz.4.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.651048][ T7086] rc_core: IR keymap rc-hauppauge not found [ 296.708084][ T48] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 296.737367][ T7086] Registered IR keymap rc-empty [ 296.786265][ T7086] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 296.874046][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.897524][ T7086] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input17 [ 296.909401][ T48] usb 5-1: device descriptor read/64, error -71 [ 296.977060][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.211866][ T48] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 297.228083][ T30] audit: type=1400 audit(1767525776.536:649): avc: denied { unlink } for pid=5808 comm="syz-executor" name="file0" dev="tmpfs" ino=822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 297.431835][ T48] usb 5-1: device descriptor read/64, error -71 [ 297.454366][ T30] audit: type=1400 audit(1767525776.766:650): avc: denied { write } for pid=8782 comm="syz.0.752" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 297.603739][ T48] usb usb5-port1: attempt power cycle [ 297.730256][ T30] audit: type=1400 audit(1767525776.776:651): avc: denied { open } for pid=8782 comm="syz.0.752" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 297.775837][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.815060][ T5884] usb 3-1: USB disconnect, device number 26 [ 297.869375][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.991750][ T48] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 298.065243][ T48] usb 5-1: device descriptor read/8, error -71 [ 298.161473][ T24] gspca_nw80x: reg_w err -71 [ 298.176339][ T24] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 298.239553][ T24] usb 6-1: USB disconnect, device number 20 [ 298.351685][ T48] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 298.416531][ T48] usb 5-1: device descriptor read/8, error -71 [ 298.443926][ T30] audit: type=1400 audit(1767525777.746:652): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 298.585242][ T8798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=48232 sclass=netlink_route_socket pid=8798 comm=syz.1.751 [ 298.599387][ T48] usb usb5-port1: unable to enumerate USB device [ 298.611068][ T8796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.754'. [ 298.671871][ T8796] tmpfs: Bad value for 'mpol' [ 298.814140][ T30] audit: type=1400 audit(1767525778.136:653): avc: denied { ioctl } for pid=8800 comm="syz.0.757" path="socket:[22867]" dev="sockfs" ino=22867 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 299.540606][ T30] audit: type=1400 audit(1767525778.136:654): avc: denied { mount } for pid=8800 comm="syz.0.757" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 299.995429][ T8819] qnx6: unable to read the first superblock [ 300.020611][ T8819] qnx6: unable to read the first superblock [ 300.034615][ T8819] qnx6: unable to read the first superblock [ 300.111478][ T30] audit: type=1400 audit(1767525779.426:655): avc: denied { write } for pid=8810 comm="syz.4.759" name="file0" dev="tmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 300.157868][ T30] audit: type=1400 audit(1767525779.426:656): avc: denied { open } for pid=8810 comm="syz.4.759" path="/157/file0" dev="tmpfs" ino=840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 300.369756][ T8831] FAULT_INJECTION: forcing a failure. [ 300.369756][ T8831] name failslab, interval 1, probability 0, space 0, times 0 [ 300.382718][ T8831] CPU: 1 UID: 0 PID: 8831 Comm: syz.1.763 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.382746][ T8831] Tainted: [L]=SOFTLOCKUP [ 300.382752][ T8831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.382762][ T8831] Call Trace: [ 300.382769][ T8831] [ 300.382775][ T8831] dump_stack_lvl+0x16c/0x1f0 [ 300.382804][ T8831] should_fail_ex+0x512/0x640 [ 300.382830][ T8831] ? __kmalloc_noprof+0xca/0x910 [ 300.382862][ T8831] should_failslab+0xc2/0x120 [ 300.382886][ T8831] __kmalloc_noprof+0xeb/0x910 [ 300.382914][ T8831] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 300.382948][ T8831] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 300.382974][ T8831] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 300.383006][ T8831] genl_start+0x18f/0x980 [ 300.383034][ T8831] __netlink_dump_start+0x60e/0x990 [ 300.383059][ T8831] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 300.383087][ T8831] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 300.383111][ T8831] ? genl_op_from_small+0x25/0x440 [ 300.383139][ T8831] ? __pfx_genl_get_cmd+0x10/0x10 [ 300.383160][ T8831] ? __pfx_genl_start+0x10/0x10 [ 300.383182][ T8831] ? __pfx_genl_dumpit+0x10/0x10 [ 300.383203][ T8831] ? __pfx_genl_done+0x10/0x10 [ 300.383230][ T8831] ? rcu_is_watching+0x12/0xc0 [ 300.383246][ T8831] ? __radix_tree_lookup+0x21f/0x2c0 [ 300.383271][ T8831] genl_rcv_msg+0x46e/0x800 [ 300.383299][ T8831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.383325][ T8831] ? __pfx_ieee802154_llsec_dump_devkeys+0x10/0x10 [ 300.383359][ T8831] ? __pfx___schedule+0x10/0x10 [ 300.383386][ T8831] netlink_rcv_skb+0x158/0x420 [ 300.383407][ T8831] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.383433][ T8831] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.383453][ T8831] ? preempt_schedule_thunk+0x16/0x30 [ 300.383483][ T8831] ? netlink_deliver_tap+0x1ae/0xd30 [ 300.383502][ T8831] ? __rcu_read_unlock+0x2b5/0x5a0 [ 300.383531][ T8831] genl_rcv+0x28/0x40 [ 300.383552][ T8831] netlink_unicast+0x5aa/0x870 [ 300.383578][ T8831] ? __pfx_netlink_unicast+0x10/0x10 [ 300.383615][ T8831] netlink_sendmsg+0x8c8/0xdd0 [ 300.383640][ T8831] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.383673][ T8831] ____sys_sendmsg+0xa5d/0xc30 [ 300.383698][ T8831] ? copy_msghdr_from_user+0x10a/0x160 [ 300.383716][ T8831] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.383753][ T8831] ___sys_sendmsg+0x134/0x1d0 [ 300.383772][ T8831] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.383816][ T8831] ? __schedule+0x1090/0x6150 [ 300.383843][ T8831] __sys_sendmsg+0x16d/0x220 [ 300.383862][ T8831] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.383899][ T8831] do_syscall_64+0xcd/0xf80 [ 300.383925][ T8831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.383942][ T8831] RIP: 0033:0x7f6819f8f749 [ 300.383957][ T8831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.383974][ T8831] RSP: 002b:00007f681ae38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.383992][ T8831] RAX: ffffffffffffffda RBX: 00007f681a1e6180 RCX: 00007f6819f8f749 [ 300.384004][ T8831] RDX: 0000000004009080 RSI: 00002000000003c0 RDI: 0000000000000004 [ 300.384016][ T8831] RBP: 00007f681ae38090 R08: 0000000000000000 R09: 0000000000000000 [ 300.384026][ T8831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.384037][ T8831] R13: 00007f681a1e6218 R14: 00007f681a1e6180 R15: 00007ffe320f8288 [ 300.384065][ T8831] [ 301.121934][ T30] audit: type=1400 audit(1767525780.436:657): avc: denied { connect } for pid=8837 comm="syz.4.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 301.388305][ T30] audit: type=1400 audit(1767525780.706:658): avc: denied { create } for pid=8852 comm="syz.1.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 301.424312][ T30] audit: type=1400 audit(1767525780.746:659): avc: denied { read write } for pid=8852 comm="syz.1.773" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 301.450029][ T30] audit: type=1400 audit(1767525780.776:660): avc: denied { open } for pid=8852 comm="syz.1.773" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 301.590176][ T30] audit: type=1400 audit(1767525780.796:661): avc: denied { ioctl } for pid=8852 comm="syz.1.773" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x560f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 301.618001][ T30] audit: type=1400 audit(1767525780.796:662): avc: denied { map } for pid=8852 comm="syz.1.773" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 301.642005][ T30] audit: type=1400 audit(1767525780.796:663): avc: denied { execute } for pid=8852 comm="syz.1.773" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 302.109807][ T30] audit: type=1400 audit(1767525780.796:664): avc: denied { setattr } for pid=8852 comm="syz.1.773" name="video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 303.373665][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 304.051676][ T5922] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 304.276178][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 304.284707][ T24] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 304.299196][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.310431][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.325209][ T24] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.337178][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.346448][ T24] usb 6-1: Product: syz [ 304.350680][ T24] usb 6-1: Manufacturer: syz [ 304.355710][ T24] usb 6-1: SerialNumber: syz [ 304.473077][ T5922] usb 2-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 304.487401][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.646392][ T5922] usb 2-1: config 0 descriptor?? [ 304.740461][ T7086] IPVS: starting estimator thread 0... [ 304.847839][ T30] audit: type=1400 audit(1767525784.166:665): avc: denied { load_policy } for pid=8896 comm="syz.0.785" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 304.865399][ T24] usb 6-1: 0:2 : does not exist [ 304.876079][ T30] audit: type=1400 audit(1767525784.196:666): avc: denied { write } for pid=8884 comm="syz.1.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.895775][ T8895] IPVS: using max 44 ests per chain, 105600 per kthread [ 304.975179][ T5922] usb 2-1: string descriptor 0 read error: -71 [ 304.983132][ T5922] usb-storage 2-1:0.0: USB Mass Storage device detected [ 304.992887][ T5922] usb-storage 2-1:0.0: Quirks match for vid 05ab pid 0060: 2 [ 305.024599][ T5922] usb 2-1: USB disconnect, device number 23 [ 305.035889][ T8898] SELinux: failed to load policy [ 305.623025][ T30] audit: type=1400 audit(1767525784.946:667): avc: denied { ioctl } for pid=8908 comm="syz.1.787" path="socket:[23241]" dev="sockfs" ino=23241 ioctlcmd=0xf508 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 305.690354][ T24] usb 6-1: USB disconnect, device number 21 [ 306.753274][ T8937] nfs: Unknown parameter '&[#' [ 306.804026][ T8932] IPVS: persistence engine module ip_vs_pe_ not found [ 306.821268][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 306.821286][ T30] audit: type=1400 audit(1767525786.136:672): avc: denied { ioctl } for pid=8939 comm="syz.2.794" path="socket:[23430]" dev="sockfs" ino=23430 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 306.876520][ T30] audit: type=1400 audit(1767525786.176:673): avc: denied { map } for pid=8939 comm="syz.2.794" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 306.926998][ T30] audit: type=1400 audit(1767525786.246:674): avc: denied { ioctl } for pid=8939 comm="syz.2.794" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x9432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 306.988435][ T7086] IPVS: starting estimator thread 0... [ 307.111687][ T8944] IPVS: using max 78 ests per chain, 187200 per kthread [ 307.401919][ T8950] FAULT_INJECTION: forcing a failure. [ 307.401919][ T8950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.711136][ T8950] CPU: 1 UID: 0 PID: 8950 Comm: syz.4.796 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.711167][ T8950] Tainted: [L]=SOFTLOCKUP [ 307.711173][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 307.711182][ T8950] Call Trace: [ 307.711188][ T8950] [ 307.711197][ T8950] dump_stack_lvl+0x16c/0x1f0 [ 307.711226][ T8950] should_fail_ex+0x512/0x640 [ 307.711258][ T8950] _copy_from_user+0x2e/0xd0 [ 307.711291][ T8950] snd_pcm_oss_write2+0x1c2/0x410 [ 307.711332][ T8950] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 307.711356][ T8950] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 307.711381][ T8950] snd_pcm_oss_write+0x710/0xa10 [ 307.711408][ T8950] ? security_file_permission+0x71/0x210 [ 307.711445][ T8950] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 307.711470][ T8950] vfs_write+0x2a0/0x11d0 [ 307.711500][ T8950] ? __pfx_vfs_write+0x10/0x10 [ 307.711520][ T8950] ? find_held_lock+0x2b/0x80 [ 307.711549][ T8950] ? __fget_files+0x204/0x3c0 [ 307.711578][ T8950] ? __fget_files+0x20e/0x3c0 [ 307.711608][ T8950] ksys_write+0x12a/0x250 [ 307.711631][ T8950] ? __pfx_ksys_write+0x10/0x10 [ 307.711661][ T8950] do_syscall_64+0xcd/0xf80 [ 307.711686][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.711705][ T8950] RIP: 0033:0x7f52f698f749 [ 307.711721][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.711738][ T8950] RSP: 002b:00007f52f779f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 307.711757][ T8950] RAX: ffffffffffffffda RBX: 00007f52f6be6090 RCX: 00007f52f698f749 [ 307.711769][ T8950] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 307.711779][ T8950] RBP: 00007f52f779f090 R08: 0000000000000000 R09: 0000000000000000 [ 307.711790][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 307.711800][ T8950] R13: 00007f52f6be6128 R14: 00007f52f6be6090 R15: 00007ffc88b7d9f8 [ 307.711828][ T8950] [ 307.971630][ T5869] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 308.146549][ T5869] usb 1-1: Using ep0 maxpacket: 32 [ 308.182530][ T5869] usb 1-1: config 2 has an invalid interface number: 1 but max is 0 [ 308.190568][ T5869] usb 1-1: config 2 has an invalid interface number: 164 but max is 0 [ 308.225198][ T8962] netlink: 'syz.1.802': attribute type 27 has an invalid length. [ 308.257603][ T5869] usb 1-1: config 2 has an invalid descriptor of length 122, skipping remainder of the config [ 308.283990][ T5869] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 308.294177][ T8963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=8963 comm=syz.1.802 [ 308.297071][ T5869] usb 1-1: config 2 has no interface number 0 [ 308.317070][ T5869] usb 1-1: too many endpoints for config 2 interface 164 altsetting 161: 133, using maximum allowed: 30 [ 308.318667][ T8962] sit0: left promiscuous mode [ 308.330187][ T5869] usb 1-1: config 2 interface 164 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 133 [ 308.381738][ T5869] usb 1-1: config 2 interface 164 has no altsetting 0 [ 308.399079][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.406686][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.512042][ T5869] usb 1-1: New USB device found, idVendor=22b8, idProduct=2d97, bcdDevice=51.64 [ 308.521198][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.530854][ T5869] usb 1-1: Product: syz [ 308.535194][ T5869] usb 1-1: Manufacturer: syz [ 308.539852][ T5869] usb 1-1: SerialNumber: syz [ 308.968503][ T5869] usb 1-1: USB disconnect, device number 24 [ 309.989565][ T8962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.000381][ T8962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.131059][ T8962] team1: left promiscuous mode [ 310.136159][ T8962] team1: left allmulticast mode [ 310.141212][ T8962] team2: left promiscuous mode [ 310.146215][ T8962] team2: left allmulticast mode [ 310.154877][ T8962] team3: left promiscuous mode [ 310.159666][ T8962] team3: left allmulticast mode [ 310.165308][ T8962] team4: left promiscuous mode [ 310.177256][ T8962] team4: left allmulticast mode [ 310.185017][ T8962] team5: left promiscuous mode [ 310.193034][ T8962] team5: left allmulticast mode [ 310.198427][ T8962] team6: left promiscuous mode [ 310.205596][ T8962] team6: left allmulticast mode [ 310.229859][ T6017] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.239393][ T6017] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.248475][ T6017] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.257525][ T6017] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.268876][ T30] audit: type=1400 audit(1767525789.596:675): avc: denied { create } for pid=8984 comm="syz.0.807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 310.320998][ T8987] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 310.391660][ T5869] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 310.416683][ T30] audit: type=1400 audit(1767525789.736:676): avc: denied { write } for pid=8989 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 310.569077][ T5869] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 310.581726][ T30] audit: type=1400 audit(1767525789.906:677): avc: denied { open } for pid=8996 comm="syz.1.812" path="/dev/ptyq7" dev="devtmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 311.057669][ T5869] usb 6-1: config 0 has no interface number 0 [ 311.084310][ T5869] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.129797][ T5869] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.150252][ T5869] usb 6-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 311.177430][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.560998][ T5869] usb 6-1: config 0 descriptor?? [ 311.628116][ T30] audit: type=1400 audit(1767525790.886:678): avc: denied { ioctl } for pid=9003 comm="syz.2.815" path="socket:[23928]" dev="sockfs" ino=23928 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 311.798407][ T30] audit: type=1400 audit(1767525791.116:679): avc: denied { read } for pid=8982 comm="syz.5.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 311.851051][ T8983] binder: 8982:8983 ioctl c0306201 200000000440 returned -14 [ 311.877258][ T30] audit: type=1400 audit(1767525791.186:680): avc: denied { create } for pid=8982 comm="syz.5.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 311.897616][ T30] audit: type=1400 audit(1767525791.186:681): avc: denied { write } for pid=8982 comm="syz.5.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 312.177636][ T5869] uclogic 0003:28BD:0905.0006: Interface probing failed: -22 [ 312.185148][ T5869] uclogic 0003:28BD:0905.0006: interface is invalid, ignoring [ 312.991749][ T30] audit: type=1400 audit(1767525792.316:682): avc: denied { bind } for pid=9011 comm="syz.2.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 313.246724][ T48] usb 6-1: USB disconnect, device number 22 [ 314.128662][ T30] audit: type=1400 audit(1767525793.446:683): avc: denied { ioctl } for pid=9040 comm="syz.4.824" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 315.342900][ T9066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.832'. [ 315.431691][ T48] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 315.601749][ T48] usb 2-1: device descriptor read/64, error -71 [ 315.740376][ T9079] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 315.746900][ T9079] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 315.783903][ T9079] vhci_hcd vhci_hcd.0: Device attached [ 315.881627][ T48] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 316.043036][ T9080] vhci_hcd: connection closed [ 316.055669][ T155] vhci_hcd vhci_hcd.5: stop threads [ 316.091602][ T155] vhci_hcd vhci_hcd.5: release socket [ 316.161775][ T7086] usb 44-1: SetAddress Request (2) to port 0 [ 316.168179][ T7086] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 316.181451][ T155] vhci_hcd vhci_hcd.5: disconnect device [ 316.198773][ T30] audit: type=1400 audit(1767525795.516:684): avc: denied { connect } for pid=9083 comm="syz.2.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 316.218900][ T48] usb 2-1: device descriptor read/64, error -71 [ 316.241699][ T7086] usb 44-1: enqueue for inactive port 0 [ 316.272942][ T30] audit: type=1400 audit(1767525795.596:685): avc: denied { getopt } for pid=9085 comm="syz.4.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.335377][ T48] usb usb2-port1: attempt power cycle [ 316.632187][ T7086] usb usb44-port1: attempt power cycle [ 317.673944][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.682361][ T48] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 317.759674][ T48] usb 2-1: device descriptor read/8, error -71 [ 317.846177][ T30] audit: type=1400 audit(1767525797.166:686): avc: denied { write } for pid=9104 comm="syz.0.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 317.866803][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 317.965835][ T9107] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.843'. [ 317.975356][ T9107] netlink: 4280 bytes leftover after parsing attributes in process `syz.2.843'. [ 318.019048][ T9105] team0 (unregistering): Port device team_slave_0 removed [ 318.030198][ T9105] team0 (unregistering): Port device team_slave_1 removed [ 318.037590][ T48] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 318.052965][ T5884] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 318.082394][ T48] usb 2-1: device descriptor read/8, error -71 [ 318.172365][ T7086] usb usb44-port1: unable to enumerate USB device [ 318.613252][ T48] usb usb2-port1: unable to enumerate USB device [ 318.631788][ T5884] usb 5-1: Using ep0 maxpacket: 16 [ 318.649066][ T5884] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 318.680540][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.697960][ T5884] usb 5-1: Product: syz [ 318.708436][ T5884] usb 5-1: Manufacturer: syz [ 318.717795][ T5884] usb 5-1: SerialNumber: syz [ 318.730831][ T5884] usb 5-1: config 0 descriptor?? [ 318.743902][ T5884] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 318.764295][ T5884] usb 5-1: Detected FT232H [ 319.121969][ T5884] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 319.134216][ T30] audit: type=1400 audit(1767525798.456:687): avc: denied { wake_alarm } for pid=9114 comm="syz.1.845" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 319.421127][ T9117] netlink: 68 bytes leftover after parsing attributes in process `syz.1.845'. [ 319.721482][ T5884] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 319.745115][ T30] audit: type=1400 audit(1767525799.066:688): avc: denied { shutdown } for pid=9118 comm="syz.2.846" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.930470][ T10] usb 5-1: USB disconnect, device number 23 [ 319.967685][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 319.994460][ T30] audit: type=1400 audit(1767525799.226:689): avc: denied { read } for pid=9118 comm="syz.2.846" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 320.052416][ T10] ftdi_sio 5-1:0.0: device disconnected [ 320.143397][ T30] audit: type=1400 audit(1767525799.456:690): avc: denied { read write } for pid=9132 comm="syz.5.840" name="mouse0" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 320.175294][ T5869] kernel write not supported for file /input/mouse0 (pid: 5869 comm: kworker/0:3) [ 320.188964][ T30] audit: type=1400 audit(1767525799.456:691): avc: denied { open } for pid=9132 comm="syz.5.840" path="/dev/input/mouse0" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 320.253380][ T48] kernel read not supported for file /dsp (pid: 48 comm: kworker/1:1) [ 320.965317][ T30] audit: type=1400 audit(1767525800.286:692): avc: denied { write } for pid=9139 comm="syz.0.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 321.064661][ T30] audit: type=1400 audit(1767525800.386:693): avc: denied { read write } for pid=9138 comm="syz.1.850" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 321.065403][ T9141] Error: Device magic number does not match. [ 321.453194][ T9149] overlayfs: failed to get inode (-116) [ 321.459561][ T9149] overlayfs: failed to get inode (-116) [ 322.111759][ T30] audit: type=1400 audit(1767525800.386:694): avc: denied { open } for pid=9138 comm="syz.1.850" path="/173/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 322.225809][ T30] audit: type=1400 audit(1767525800.636:695): avc: denied { mount } for pid=9138 comm="syz.1.850" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 323.512940][ T9178] FAULT_INJECTION: forcing a failure. [ 323.512940][ T9178] name failslab, interval 1, probability 0, space 0, times 0 [ 323.559650][ T9178] CPU: 1 UID: 0 PID: 9178 Comm: syz.4.861 Tainted: G L syzkaller #0 PREEMPT(full) [ 323.559682][ T9178] Tainted: [L]=SOFTLOCKUP [ 323.559687][ T9178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 323.559694][ T9178] Call Trace: [ 323.559699][ T9178] [ 323.559703][ T9178] dump_stack_lvl+0x16c/0x1f0 [ 323.559722][ T9178] should_fail_ex+0x512/0x640 [ 323.559745][ T9178] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 323.559766][ T9178] should_failslab+0xc2/0x120 [ 323.559789][ T9178] kmem_cache_alloc_node_noprof+0x86/0x800 [ 323.559806][ T9178] ? __alloc_skb+0x156/0x410 [ 323.559827][ T9178] ? __alloc_skb+0x156/0x410 [ 323.559842][ T9178] __alloc_skb+0x156/0x410 [ 323.559858][ T9178] ? __alloc_skb+0x35d/0x410 [ 323.559877][ T9178] ? __pfx___alloc_skb+0x10/0x10 [ 323.559894][ T9178] ? netlink_autobind.isra.0+0x158/0x370 [ 323.559913][ T9178] netlink_alloc_large_skb+0x69/0x140 [ 323.559928][ T9178] netlink_sendmsg+0x698/0xdd0 [ 323.559944][ T9178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 323.559963][ T9178] ____sys_sendmsg+0xa5d/0xc30 [ 323.559979][ T9178] ? copy_msghdr_from_user+0x10a/0x160 [ 323.559990][ T9178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.560011][ T9178] ___sys_sendmsg+0x134/0x1d0 [ 323.560023][ T9178] ? __pfx____sys_sendmsg+0x10/0x10 [ 323.560052][ T9178] __sys_sendmsg+0x16d/0x220 [ 323.560063][ T9178] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.560084][ T9178] do_syscall_64+0xcd/0xf80 [ 323.560099][ T9178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.560111][ T9178] RIP: 0033:0x7f52f698f749 [ 323.560120][ T9178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.560132][ T9178] RSP: 002b:00007f52f77c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.560143][ T9178] RAX: ffffffffffffffda RBX: 00007f52f6be5fa0 RCX: 00007f52f698f749 [ 323.560150][ T9178] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003 [ 323.560156][ T9178] RBP: 00007f52f77c0090 R08: 0000000000000000 R09: 0000000000000000 [ 323.560162][ T9178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.560168][ T9178] R13: 00007f52f6be6038 R14: 00007f52f6be5fa0 R15: 00007ffc88b7d9f8 [ 323.560182][ T9178] [ 323.844433][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 323.844448][ T30] audit: type=1400 audit(1767525803.166:699): avc: denied { connect } for pid=9173 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.872958][ T30] audit: type=1400 audit(1767525803.196:700): avc: denied { bind } for pid=9173 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 323.899175][ T30] audit: type=1400 audit(1767525803.216:701): avc: denied { write } for pid=9173 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 323.919127][ T30] audit: type=1400 audit(1767525803.216:702): avc: denied { ioctl } for pid=9173 comm="syz.0.859" path="socket:[24463]" dev="sockfs" ino=24463 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 323.944628][ T30] audit: type=1400 audit(1767525803.216:703): avc: denied { ioctl } for pid=9173 comm="syz.0.859" path="socket:[24378]" dev="sockfs" ino=24378 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 323.969130][ T30] audit: type=1400 audit(1767525803.216:704): avc: denied { write } for pid=9173 comm="syz.0.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 324.102583][ T30] audit: type=1400 audit(1767525803.426:705): avc: denied { read } for pid=9184 comm="syz.4.863" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 324.381764][ T5884] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 324.499482][ T9187] SELinux: failed to load policy [ 324.555263][ T5884] usb 5-1: config 0 has no interfaces? [ 324.561006][ T5884] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 324.601895][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.629939][ T5884] usb 5-1: config 0 descriptor?? [ 324.846191][ T9195] netlink: 124 bytes leftover after parsing attributes in process `syz.2.866'. [ 324.863343][ T9185] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 324.869886][ T9185] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 324.880162][ T9185] vhci_hcd vhci_hcd.0: Device attached [ 325.171947][ T5869] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 325.279546][ T9207] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.037346][ T5869] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 326.700921][ T30] audit: type=1400 audit(1767525806.016:706): avc: denied { mount } for pid=9218 comm="syz.2.872" name="/" dev="ramfs" ino=25229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 326.777883][ T9219] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 326.994692][ T30] audit: type=1400 audit(1767525806.316:707): avc: denied { watch watch_reads } for pid=9214 comm="syz.0.871" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 327.062582][ T10] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 327.233187][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 327.267621][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64 [ 327.286619][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 327.322000][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.332169][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 327.340577][ T10] usb 3-1: SerialNumber: syz [ 327.381687][ T9219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 327.402507][ T9219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 327.494318][ T9225] kvm: MONITOR instruction emulated as NOP! [ 327.508157][ T9201] vhci_hcd: connection reset by peer [ 327.510540][ T9224] No control pipe specified [ 327.514383][ T48] usb 5-1: USB disconnect, device number 24 [ 327.565203][ T50] vhci_hcd vhci_hcd.4: stop threads [ 327.591175][ T50] vhci_hcd vhci_hcd.4: release socket [ 327.601357][ T50] vhci_hcd vhci_hcd.4: disconnect device [ 327.655888][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.685907][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.725619][ T9219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 327.741808][ T9219] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 328.341697][ T48] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 328.367572][ T10] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 328.524623][ T48] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 328.585406][ T48] usb 6-1: config 0 has no interface number 0 [ 328.681143][ T48] usb 6-1: config 0 interface 41 has no altsetting 0 [ 328.787876][ T48] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 328.836128][ T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.857508][ T48] usb 6-1: Product: syz [ 328.868215][ T48] usb 6-1: Manufacturer: syz [ 328.877485][ T9244] netlink: 40 bytes leftover after parsing attributes in process `syz.4.879'. [ 328.878145][ T48] usb 6-1: SerialNumber: syz [ 328.897302][ T7086] usb 3-1: USB disconnect, device number 27 [ 328.921909][ T48] usb 6-1: config 0 descriptor?? [ 329.567107][ T48] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 329.711260][ T48] usb 6-1: USB disconnect, device number 23 [ 329.828384][ T30] audit: type=1400 audit(1767525809.146:708): avc: denied { read } for pid=9257 comm="syz.1.884" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 329.862019][ T30] audit: type=1400 audit(1767525809.176:709): avc: denied { open } for pid=9257 comm="syz.1.884" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 329.887197][ T30] audit: type=1400 audit(1767525809.176:710): avc: denied { ioctl } for pid=9257 comm="syz.1.884" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 330.682401][ T9267] FAULT_INJECTION: forcing a failure. [ 330.682401][ T9267] name failslab, interval 1, probability 0, space 0, times 0 [ 330.817805][ T9267] CPU: 1 UID: 0 PID: 9267 Comm: syz.4.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.817837][ T9267] Tainted: [L]=SOFTLOCKUP [ 330.817843][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 330.817854][ T9267] Call Trace: [ 330.817860][ T9267] [ 330.817867][ T9267] dump_stack_lvl+0x16c/0x1f0 [ 330.817895][ T9267] should_fail_ex+0x512/0x640 [ 330.817922][ T9267] ? fs_reclaim_acquire+0xae/0x150 [ 330.817949][ T9267] should_failslab+0xc2/0x120 [ 330.817973][ T9267] __kmalloc_noprof+0xeb/0x910 [ 330.818009][ T9267] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 330.818041][ T9267] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 330.818065][ T9267] tomoyo_realpath_from_path+0xc2/0x6e0 [ 330.818094][ T9267] ? tomoyo_profile+0x47/0x60 [ 330.818124][ T9267] tomoyo_path_number_perm+0x245/0x580 [ 330.818144][ T9267] ? tomoyo_path_number_perm+0x237/0x580 [ 330.818168][ T9267] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 330.818191][ T9267] ? find_held_lock+0x2b/0x80 [ 330.818243][ T9267] ? find_held_lock+0x2b/0x80 [ 330.818270][ T9267] ? hook_file_ioctl_common+0x144/0x410 [ 330.818304][ T9267] ? __fget_files+0x20e/0x3c0 [ 330.818334][ T9267] security_file_ioctl+0x9b/0x240 [ 330.818360][ T9267] __x64_sys_ioctl+0xb7/0x210 [ 330.818384][ T9267] do_syscall_64+0xcd/0xf80 [ 330.818409][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.818428][ T9267] RIP: 0033:0x7f52f698f749 [ 330.818443][ T9267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.818460][ T9267] RSP: 002b:00007f52f77c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 330.818478][ T9267] RAX: ffffffffffffffda RBX: 00007f52f6be5fa0 RCX: 00007f52f698f749 [ 330.818490][ T9267] RDX: 0000200000000040 RSI: 00000000c0845657 RDI: 0000000000000003 [ 330.818503][ T9267] RBP: 00007f52f77c0090 R08: 0000000000000000 R09: 0000000000000000 [ 330.818515][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.818525][ T9267] R13: 00007f52f6be6038 R14: 00007f52f6be5fa0 R15: 00007ffc88b7d9f8 [ 330.818553][ T9267] [ 331.208553][ T9267] ERROR: Out of memory at tomoyo_realpath_from_path. [ 331.323886][ T5869] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 331.361416][ T9277] netlink: 40 bytes leftover after parsing attributes in process `syz.5.890'. [ 331.552790][ T9279] netlink: 'syz.1.891': attribute type 29 has an invalid length. [ 331.572195][ T9279] netlink: 'syz.1.891': attribute type 29 has an invalid length. [ 331.587054][ T9279] netlink: 500 bytes leftover after parsing attributes in process `syz.1.891'. [ 331.607474][ T9282] FAULT_INJECTION: forcing a failure. [ 331.607474][ T9282] name failslab, interval 1, probability 0, space 0, times 0 [ 331.624805][ T9282] CPU: 1 UID: 0 PID: 9282 Comm: syz.2.893 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.624837][ T9282] Tainted: [L]=SOFTLOCKUP [ 331.624842][ T9282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 331.624851][ T9282] Call Trace: [ 331.624857][ T9282] [ 331.624864][ T9282] dump_stack_lvl+0x16c/0x1f0 [ 331.624891][ T9282] should_fail_ex+0x512/0x640 [ 331.624917][ T9282] ? __kvmalloc_node_noprof+0x129/0xa40 [ 331.624942][ T9282] should_failslab+0xc2/0x120 [ 331.624966][ T9282] __kvmalloc_node_noprof+0x14a/0xa40 [ 331.624986][ T9282] ? __pfx_dev_addr_init+0x10/0x10 [ 331.625012][ T9282] ? lockdep_init_map_type+0x5c/0x270 [ 331.625034][ T9282] ? alloc_netdev_mqs+0xaef/0x1550 [ 331.625057][ T9282] ? alloc_netdev_mqs+0xaef/0x1550 [ 331.625075][ T9282] alloc_netdev_mqs+0xaef/0x1550 [ 331.625101][ T9282] rtnl_create_link+0xc08/0xf60 [ 331.625124][ T9282] rtnl_newlink+0xb3b/0x1f50 [ 331.625151][ T9282] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.625169][ T9282] ? find_held_lock+0x2b/0x80 [ 331.625195][ T9282] ? avc_has_perm_noaudit+0x117/0x3b0 [ 331.625230][ T9282] ? avc_has_perm_noaudit+0x149/0x3b0 [ 331.625282][ T9282] ? find_held_lock+0x2b/0x80 [ 331.625307][ T9282] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.625325][ T9282] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.625343][ T9282] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 331.625363][ T9282] ? __pfx_rtnl_newlink+0x10/0x10 [ 331.625382][ T9282] rtnetlink_rcv_msg+0x95e/0xe90 [ 331.625405][ T9282] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.625432][ T9282] ? ref_tracker_free+0x37c/0x830 [ 331.625452][ T9282] netlink_rcv_skb+0x158/0x420 [ 331.625475][ T9282] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.625497][ T9282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.625530][ T9282] ? netlink_deliver_tap+0x1ae/0xd30 [ 331.625557][ T9282] netlink_unicast+0x5aa/0x870 [ 331.625582][ T9282] ? __pfx_netlink_unicast+0x10/0x10 [ 331.625617][ T9282] netlink_sendmsg+0x8c8/0xdd0 [ 331.625644][ T9282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.625676][ T9282] ____sys_sendmsg+0xa5d/0xc30 [ 331.625701][ T9282] ? copy_msghdr_from_user+0x10a/0x160 [ 331.625719][ T9282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.625756][ T9282] ___sys_sendmsg+0x134/0x1d0 [ 331.625776][ T9282] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.625836][ T9282] __sys_sendmsg+0x16d/0x220 [ 331.625855][ T9282] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.625894][ T9282] do_syscall_64+0xcd/0xf80 [ 331.625919][ T9282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.625937][ T9282] RIP: 0033:0x7f69a9b8f749 [ 331.625952][ T9282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.625969][ T9282] RSP: 002b:00007f69aaaad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.625986][ T9282] RAX: ffffffffffffffda RBX: 00007f69a9de5fa0 RCX: 00007f69a9b8f749 [ 331.625998][ T9282] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 331.626008][ T9282] RBP: 00007f69aaaad090 R08: 0000000000000000 R09: 0000000000000000 [ 331.626019][ T9282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 331.626029][ T9282] R13: 00007f69a9de6038 R14: 00007f69a9de5fa0 R15: 00007fffa6fbb788 [ 331.626055][ T9282] [ 332.081076][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 332.096787][ T7086] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 332.261621][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 332.283797][ T7086] usb 5-1: device descriptor read/64, error -71 [ 332.300652][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 332.349803][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.380610][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 332.448632][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 332.479116][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.498738][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 332.513115][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.702873][ T9308] netlink: 112 bytes leftover after parsing attributes in process `syz.0.899'. [ 332.714301][ T9308] netlink: get zone limit has 8 unknown bytes [ 332.801778][ T7086] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 332.840691][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 332.952082][ T10] usbtmc 2-1:16.0: can't read capabilities [ 333.013044][ T7086] usb 5-1: device descriptor read/64, error -71 [ 333.107095][ T10] usb 2-1: USB disconnect, device number 28 [ 333.246227][ T7086] usb usb5-port1: attempt power cycle [ 334.024483][ T9331] fuse: Unknown parameter 'ZŒð4dBÀG‘ì>Û³À«º§õˆ‡GÎÌÞ.*' [ 334.024736][ T30] audit: type=1400 audit(1767525813.346:711): avc: denied { mounton } for pid=9329 comm="syz.0.906" path="/199/file0" dev="tmpfs" ino=1051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 334.741839][ T7086] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 334.972093][ T7086] usb 5-1: device not accepting address 27, error -71 [ 335.207258][ T9356] FAULT_INJECTION: forcing a failure. [ 335.207258][ T9356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.223471][ T9356] CPU: 1 UID: 0 PID: 9356 Comm: syz.2.916 Tainted: G L syzkaller #0 PREEMPT(full) [ 335.223503][ T9356] Tainted: [L]=SOFTLOCKUP [ 335.223509][ T9356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 335.223519][ T9356] Call Trace: [ 335.223525][ T9356] [ 335.223532][ T9356] dump_stack_lvl+0x16c/0x1f0 [ 335.223560][ T9356] should_fail_ex+0x512/0x640 [ 335.223595][ T9356] _copy_from_user+0x2e/0xd0 [ 335.223623][ T9356] io_submit_one+0xbb/0x1e70 [ 335.223645][ T9356] ? __lock_acquire+0x436/0x2890 [ 335.223667][ T9356] ? lockdep_hardirqs_on+0x7c/0x110 [ 335.223693][ T9356] ? __pfx_io_submit_one+0x10/0x10 [ 335.223721][ T9356] ? __might_fault+0xe3/0x190 [ 335.223737][ T9356] ? __might_fault+0x13b/0x190 [ 335.223765][ T9356] ? __x64_sys_io_submit+0x1a9/0x370 [ 335.223783][ T9356] __x64_sys_io_submit+0x1a9/0x370 [ 335.223804][ T9356] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 335.223821][ T9356] ? fput+0x70/0xf0 [ 335.223849][ T9356] do_syscall_64+0xcd/0xf80 [ 335.223874][ T9356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.223892][ T9356] RIP: 0033:0x7f69a9b8f749 [ 335.223907][ T9356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.223924][ T9356] RSP: 002b:00007f69aaaad038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 335.223941][ T9356] RAX: ffffffffffffffda RBX: 00007f69a9de5fa0 RCX: 00007f69a9b8f749 [ 335.223953][ T9356] RDX: 0000200000000b40 RSI: 0000000000000003 RDI: 00007f69aaa8c000 [ 335.223964][ T9356] RBP: 00007f69aaaad090 R08: 0000000000000000 R09: 0000000000000000 [ 335.223976][ T9356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.223986][ T9356] R13: 00007f69a9de6038 R14: 00007f69a9de5fa0 R15: 00007fffa6fbb788 [ 335.224010][ T9356] [ 335.491653][ T7086] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 335.525890][ T7086] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.536400][ T7086] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 335.545647][ T7086] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.594716][ T7086] usb 5-1: config 0 descriptor?? [ 338.037500][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 338.134158][ T9382] ceph: No mds server is up or the cluster is laggy [ 338.234240][ T30] audit: type=1326 audit(1767525817.556:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9369 comm="syz.2.919" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f69a9b8f749 code=0x0 [ 338.319562][ T9394] mmap: syz.2.919 (9394) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 338.353656][ T30] audit: type=1400 audit(1767525817.636:713): avc: denied { setopt } for pid=9369 comm="syz.2.919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 338.533093][ T7086] usb 5-1: USB disconnect, device number 28 [ 342.111407][ T30] audit: type=1400 audit(1767525821.426:714): avc: denied { mount } for pid=9414 comm="syz.1.924" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 342.604119][ T9438] Failed to initialize the IGMP autojoin socket (err -2) [ 343.347192][ T30] audit: type=1400 audit(1767525822.666:715): avc: denied { bind } for pid=9404 comm="syz.4.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 343.804348][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 343.961641][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 343.968402][ T10] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 343.977890][ T10] usb 6-1: can't read configurations, error -22 [ 344.154654][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 344.476351][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 344.809523][ T10] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 344.849600][ T10] usb 6-1: can't read configurations, error -22 [ 344.961324][ T10] usb usb6-port1: attempt power cycle [ 345.536546][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 345.812204][ T30] audit: type=1400 audit(1767525825.036:716): avc: denied { read write } for pid=9468 comm="syz.0.946" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 345.849166][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 345.849278][ T30] audit: type=1400 audit(1767525825.036:717): avc: denied { open } for pid=9468 comm="syz.0.946" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 345.856193][ T10] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 345.856228][ T10] usb 6-1: can't read configurations, error -22 [ 346.031638][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 346.062073][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 346.068866][ T10] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 346.099379][ T10] usb 6-1: can't read configurations, error -22 [ 346.111955][ T10] usb usb6-port1: unable to enumerate USB device [ 347.080617][ T9502] comedi comedi3: adq12b: I/O port conflict (0xfffffffffffffffa,16) [ 347.201866][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 347.402157][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 347.425340][ T10] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 347.473513][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.505309][ T10] usb 6-1: Product: syz [ 347.526377][ T10] usb 6-1: Manufacturer: syz [ 347.563315][ T10] usb 6-1: SerialNumber: syz [ 347.588993][ T10] usb 6-1: config 0 descriptor?? [ 348.333018][ T10] dvb_usb_dtv5100 6-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 348.342530][ T5922] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 348.511732][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 348.523951][ T5922] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 348.551582][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.592570][ T5922] usb 2-1: config 0 descriptor?? [ 348.614756][ T5922] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 348.635054][ T5922] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 348.683269][ T5922] usb-storage 2-1:0.0: USB Mass Storage device detected [ 348.801907][ T30] audit: type=1400 audit(1767525828.116:718): avc: denied { read } for pid=9521 comm="syz.2.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 349.179503][ T5922] usb-storage 2-1:0.0: device ignored [ 349.246160][ T5922] usb 2-1: USB disconnect, device number 29 [ 350.480577][ T5922] usb 6-1: USB disconnect, device number 28 [ 350.500540][ T9542] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 350.511557][ T9542] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 350.521431][ T9542] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 350.535278][ T30] audit: type=1400 audit(1767525829.836:719): avc: denied { firmware_load } for pid=9534 comm="syz.0.965" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 351.531655][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 351.538738][ T9563] netlink: 'syz.5.971': attribute type 10 has an invalid length. [ 351.564589][ T9563] hsr0: entered promiscuous mode [ 351.580745][ T9563] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 351.654727][ T9563] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 351.675313][ T9563] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 351.823535][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 959 [ 352.190837][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 352.204723][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 352.218038][ T24] usb 1-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=e5.38 [ 352.227308][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.232531][ T10] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 352.235579][ T24] usb 1-1: Product: syz [ 352.247891][ T24] usb 1-1: Manufacturer: syz [ 352.252619][ T24] usb 1-1: SerialNumber: syz [ 352.263821][ T24] usb 1-1: config 0 descriptor?? [ 352.269597][ T9553] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 352.494590][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.519085][ T10] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 352.541810][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 352.555212][ T9582] comedi comedi3: adq12b: I/O port conflict (0xfffffffffffffffa,16) [ 352.559834][ T10] usb 2-1: Product: syz [ 352.570604][ T10] usb 2-1: Manufacturer: syz [ 352.577527][ T5922] usb 1-1: USB disconnect, device number 25 [ 352.596256][ T10] usb 2-1: SerialNumber: syz [ 352.605983][ T10] usb 2-1: config 0 descriptor?? [ 353.770650][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.981'. [ 353.957874][ T9602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.977807][ T30] audit: type=1400 audit(1767525833.296:720): avc: denied { map } for pid=9599 comm="syz.2.982" path="socket:[26503]" dev="sockfs" ino=26503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.064407][ T30] audit: type=1400 audit(1767525833.336:721): avc: denied { accept } for pid=9599 comm="syz.2.982" path="socket:[26503]" dev="sockfs" ino=26503 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 354.111307][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.983'. [ 354.120726][ T9607] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 354.131395][ T9607] netlink: 48 bytes leftover after parsing attributes in process `syz.5.983'. [ 354.152007][ T30] audit: type=1400 audit(1767525833.426:722): avc: denied { setopt } for pid=9606 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 354.934805][ T9616] netlink: 40 bytes leftover after parsing attributes in process `syz.5.986'. [ 355.060138][ T10] usb 2-1: USB disconnect, device number 30 [ 362.109929][ T30] audit: type=1400 audit(1767525841.426:723): avc: denied { mounton } for pid=9702 comm="syz.2.1011" path="/199/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 364.914041][ T9749] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 364.920596][ T9749] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 365.139357][ T9749] vhci_hcd vhci_hcd.0: Device attached [ 365.159505][ T30] audit: type=1400 audit(1767525844.446:724): avc: denied { read } for pid=9732 comm="syz.2.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 365.249650][ T9758] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44 sclass=netlink_tcpdiag_socket pid=9758 comm=syz.0.1023 [ 365.481674][ T24] usb 42-1: SetAddress Request (2) to port 0 [ 365.490648][ T24] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 365.540458][ T9750] vhci_hcd: connection closed [ 365.540820][ T6354] vhci_hcd vhci_hcd.4: stop threads [ 365.550917][ T6354] vhci_hcd vhci_hcd.4: release socket [ 365.581299][ T6354] vhci_hcd vhci_hcd.4: disconnect device [ 365.641614][ T24] usb 42-1: enqueue for inactive port 0 [ 366.418441][ T24] usb usb42-port1: attempt power cycle [ 367.062929][ T24] usb usb42-port1: unable to enumerate USB device [ 367.687046][ T30] audit: type=1326 audit(1767525847.006:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9778 comm="syz.1.1029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6819f8f749 code=0x7fc00000 [ 378.173408][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.613386][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 474.781497][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 474.788462][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9724/1:b..l P9788/1:b..l [ 474.797955][ C1] rcu: (detected by 1, t=10502 jiffies, g=32325, q=880 ncpus=2) [ 474.805662][ C1] task:syz.5.1031 state:R running task stack:26504 pid:9788 tgid:9787 ppid:6229 task_flags:0x400140 flags:0x00080000 [ 474.819783][ C1] Call Trace: [ 474.823068][ C1] [ 474.826004][ C1] ? __schedule+0x10b9/0x6150 [ 474.830679][ C1] __schedule+0x1139/0x6150 [ 474.835174][ C1] ? arch_stack_walk+0xa6/0x100 [ 474.840049][ C1] ? __pfx___schedule+0x10/0x10 [ 474.844895][ C1] ? mark_held_locks+0x49/0x80 [ 474.849659][ C1] preempt_schedule_irq+0x51/0x90 [ 474.854679][ C1] irqentry_exit+0x1d8/0x8c0 [ 474.859260][ C1] ? rcu_is_watching+0x12/0xc0 [ 474.864017][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 474.869469][ C1] RIP: 0010:lock_acquire+0x62/0x330 [ 474.874658][ C1] Code: b4 18 12 83 f8 07 0f 87 a2 02 00 00 89 c0 48 0f a3 05 22 be ee 0e 0f 82 74 02 00 00 8b 35 ba ee ee 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 39 b4 18 12 0f 85 ad 02 00 00 48 83 c4 [ 474.894269][ C1] RSP: 0018:ffffc9000bfd7508 EFLAGS: 00000206 [ 474.900344][ C1] RAX: 0000000000000046 RBX: ffffffff8e3c96a0 RCX: 00000000638649d5 [ 474.908316][ C1] RDX: 0000000000000000 RSI: ffffffff8daa845f RDI: ffffffff8bf2b480 [ 474.916296][ C1] RBP: 0000000000000002 R08: 00000000ecffd74e R09: 00000000eecffd74 [ 474.924275][ C1] R10: 0000000000000002 R11: ffff8880784baff0 R12: 0000000000000000 [ 474.932248][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 474.940228][ C1] ? is_module_text_address+0x148/0x220 [ 474.945777][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 474.951924][ C1] is_bpf_text_address+0x36/0x1a0 [ 474.956945][ C1] ? is_bpf_text_address+0x25/0x1a0 [ 474.962134][ C1] kernel_text_address+0x8d/0x100 [ 474.967158][ C1] __kernel_text_address+0xd/0x40 [ 474.972176][ C1] unwind_get_return_address+0x59/0xa0 [ 474.977631][ C1] arch_stack_walk+0xa6/0x100 [ 474.982314][ C1] stack_trace_save+0x8e/0xc0 [ 474.986981][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 474.992350][ C1] ? rcu_is_watching+0x12/0xc0 [ 474.997106][ C1] kasan_save_stack+0x33/0x60 [ 475.001775][ C1] ? kasan_save_stack+0x33/0x60 [ 475.006617][ C1] ? kasan_save_track+0x14/0x30 [ 475.011462][ C1] ? __kasan_kmalloc+0xaa/0xb0 [ 475.016214][ C1] ? __kmalloc_node_noprof+0x355/0x930 [ 475.021666][ C1] ? alloc_slab_obj_exts+0x43/0xf0 [ 475.026776][ C1] ? new_slab+0x353/0x430 [ 475.031101][ C1] ? ___slab_alloc+0xe18/0x1c90 [ 475.035948][ C1] ? __kmem_cache_alloc_bulk+0x1fb/0x6c0 [ 475.041572][ C1] ? kmem_cache_alloc_bulk_noprof+0x4e1/0x800 [ 475.047630][ C1] ? __io_alloc_req_refill+0x9d/0x5e0 [ 475.052996][ C1] ? io_submit_sqes+0xf94/0x28e0 [ 475.057936][ C1] ? __do_sys_io_uring_enter+0xd6b/0x1630 [ 475.063646][ C1] ? do_syscall_64+0xcd/0xf80 [ 475.068317][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.074415][ C1] kasan_save_track+0x14/0x30 [ 475.079089][ C1] __kasan_kmalloc+0xaa/0xb0 [ 475.083674][ C1] __kmalloc_node_noprof+0x355/0x930 [ 475.088952][ C1] ? alloc_slab_obj_exts+0x43/0xf0 [ 475.094058][ C1] ? policy_nodemask+0x441/0x4e0 [ 475.099002][ C1] ? alloc_slab_obj_exts+0x43/0xf0 [ 475.104113][ C1] alloc_slab_obj_exts+0x43/0xf0 [ 475.109051][ C1] new_slab+0x353/0x430 [ 475.113207][ C1] ___slab_alloc+0xe18/0x1c90 [ 475.117881][ C1] ? lock_acquire+0x179/0x330 [ 475.122553][ C1] ? kmem_cache_alloc_bulk_noprof+0x4e1/0x800 [ 475.128622][ C1] ? __kmem_cache_alloc_bulk+0x1fb/0x6c0 [ 475.134244][ C1] __kmem_cache_alloc_bulk+0x1fb/0x6c0 [ 475.139702][ C1] kmem_cache_alloc_bulk_noprof+0x4e1/0x800 [ 475.145597][ C1] __io_alloc_req_refill+0x9d/0x5e0 [ 475.150793][ C1] ? rcu_is_watching+0x12/0xc0 [ 475.155547][ C1] ? io_nop+0x35e/0x630 [ 475.159702][ C1] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 475.165512][ C1] ? io_issue_sqe+0xba/0x1410 [ 475.170178][ C1] ? io_submit_sqes+0xadc/0x28e0 [ 475.175110][ C1] io_submit_sqes+0xf94/0x28e0 [ 475.179968][ C1] __do_sys_io_uring_enter+0xd6b/0x1630 [ 475.185513][ C1] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 475.191492][ C1] ? __x64_sys_futex+0x1e0/0x4c0 [ 475.196427][ C1] ? __x64_sys_futex+0x1e9/0x4c0 [ 475.201369][ C1] ? fput+0x70/0xf0 [ 475.205167][ C1] ? xfd_validate_state+0x61/0x180 [ 475.210278][ C1] do_syscall_64+0xcd/0xf80 [ 475.214792][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.220677][ C1] RIP: 0033:0x7f3eb198f749 [ 475.225079][ C1] RSP: 002b:00007f3eb284a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 475.233486][ C1] RAX: ffffffffffffffda RBX: 00007f3eb1be5fa0 RCX: 00007f3eb198f749 [ 475.241450][ C1] RDX: 000000000000f9d0 RSI: 0000000000002b93 RDI: 0000000000000004 [ 475.249415][ C1] RBP: 00007f3eb1a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 475.257382][ C1] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000000 [ 475.265345][ C1] R13: 00007f3eb1be6038 R14: 00007f3eb1be5fa0 R15: 00007ffc04c372a8 [ 475.273320][ C1] [ 475.276332][ C1] task:syz.4.1014 state:R running task stack:24008 pid:9724 tgid:9724 ppid:5815 task_flags:0x40064c flags:0x00080001 [ 475.289829][ C1] Call Trace: [ 475.293109][ C1] [ 475.296046][ C1] ? __schedule+0x10b9/0x6150 [ 475.300725][ C1] __schedule+0x1139/0x6150 [ 475.305237][ C1] ? lock_acquire+0x179/0x330 [ 475.309944][ C1] ? __pfx___schedule+0x10/0x10 [ 475.314802][ C1] preempt_schedule_irq+0x51/0x90 [ 475.319820][ C1] irqentry_exit+0x1d8/0x8c0 [ 475.324407][ C1] ? rcu_is_watching+0x12/0xc0 [ 475.329165][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 475.334619][ C1] RIP: 0010:unwind_next_frame+0x522/0x20b0 [ 475.340427][ C1] Code: 00 00 fc ff df 4c 8d 79 05 4c 89 fa 48 c1 ea 03 0f b6 04 02 4c 89 fa 83 e2 07 38 d0 7f 08 84 c0 0f 85 28 15 00 00 0f b6 41 05 <83> e0 07 0f 84 53 fe ff ff 3c 01 0f 84 7b fe ff ff 4c 8d 41 04 4c [ 475.360036][ C1] RSP: 0018:ffffc9000c006f38 EFLAGS: 00000246 [ 475.366095][ C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffffffff91261edc [ 475.374054][ C1] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffffff90a1022c [ 475.382016][ C1] RBP: ffffc9000c006ff0 R08: ffffffff91261f0c R09: 00000000ffffffff [ 475.389979][ C1] R10: 0000000000000002 R11: 000000000000a963 R12: ffffc9000c006ff8 [ 475.397939][ C1] R13: ffffc9000c006fa8 R14: ffffc9000c006fdd R15: ffffffff91261ee1 [ 475.405920][ C1] ? unwind_next_frame+0x2ec/0x20b0 [ 475.411116][ C1] ? stack_trace_save+0x8e/0xc0 [ 475.415963][ C1] ? __unwind_start+0x45f/0x7f0 [ 475.420812][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 475.426970][ C1] arch_stack_walk+0x94/0x100 [ 475.431648][ C1] ? stack_trace_save+0x8e/0xc0 [ 475.436499][ C1] stack_trace_save+0x8e/0xc0 [ 475.441177][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 475.446547][ C1] ? __lock_acquire+0x436/0x2890 [ 475.451480][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.456693][ C1] save_stack+0x160/0x1f0 [ 475.461016][ C1] ? __pfx_save_stack+0x10/0x10 [ 475.465871][ C1] ? page_ext_put+0x3e/0xd0 [ 475.470375][ C1] __reset_page_owner+0x84/0x1a0 [ 475.475310][ C1] free_unref_folios+0xa22/0x1610 [ 475.480332][ C1] ? rcu_is_watching+0x12/0xc0 [ 475.485089][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 475.490891][ C1] folios_put_refs+0x4be/0x750 [ 475.495653][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 475.500933][ C1] ? folio_batch_remove_exceptionals+0x115/0x1a0 [ 475.507257][ C1] shmem_undo_range+0x58f/0x1140 [ 475.512198][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 475.517587][ C1] ? find_held_lock+0x2b/0x80 [ 475.522293][ C1] shmem_evict_inode+0x39e/0xbe0 [ 475.527228][ C1] ? inode_wait_for_writeback+0x170/0x390 [ 475.532946][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 475.538400][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 475.544470][ C1] ? find_held_lock+0x2b/0x80 [ 475.549151][ C1] ? evict+0x37e/0xad0 [ 475.553223][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 475.558676][ C1] evict+0x3c2/0xad0 [ 475.562561][ C1] ? find_held_lock+0x2b/0x80 [ 475.567237][ C1] ? __pfx_evict+0x10/0x10 [ 475.571651][ C1] ? iput.part.0+0x619/0x1190 [ 475.576326][ C1] iput.part.0+0x621/0x1190 [ 475.580824][ C1] iput+0x35/0x40 [ 475.584451][ C1] dentry_unlink_inode+0x29c/0x480 [ 475.589563][ C1] __dentry_kill+0x1d0/0x600 [ 475.594151][ C1] finish_dput+0x76/0x480 [ 475.598475][ C1] dput.part.0+0x451/0x570 [ 475.602889][ C1] dput+0x1f/0x30 [ 475.606519][ C1] __fput+0x51c/0xb70 [ 475.610496][ C1] task_work_run+0x150/0x240 [ 475.615088][ C1] ? __pfx_task_work_run+0x10/0x10 [ 475.620194][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 475.625395][ C1] do_exit+0x87f/0x2bd0 [ 475.629546][ C1] ? proc_coredump_connector+0x2d1/0x4f0 [ 475.635174][ C1] ? __pfx_do_exit+0x10/0x10 [ 475.639766][ C1] do_group_exit+0xd3/0x2a0 [ 475.644266][ C1] get_signal+0x2671/0x26d0 [ 475.648781][ C1] ? __pfx_get_signal+0x10/0x10 [ 475.653724][ C1] arch_do_signal_or_restart+0x8f/0x7e0 [ 475.659268][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 475.665428][ C1] ? __bad_area_nosemaphore+0x350/0x690 [ 475.670974][ C1] irqentry_exit+0x38a/0x8c0 [ 475.675564][ C1] asm_exc_page_fault+0x26/0x30 [ 475.680406][ C1] RIP: 0033:0x7f52f698f751 [ 475.684810][ C1] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 475.690872][ C1] RAX: 0000000000000000 RBX: 00007f52f6be6090 RCX: 00007f52f698f749 [ 475.698833][ C1] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 475.706795][ C1] RBP: 00007f52f6a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 475.714755][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 475.722715][ C1] R13: 00007f52f6be6128 R14: 00007f52f6be6090 R15: 00007ffc88b7d9f8 [ 475.730693][ C1] [ 475.733707][ C1] rcu: rcu_preempt kthread starved for 10593 jiffies! g32325 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 475.744903][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 475.754863][ C1] rcu: RCU grace-period kthread stack dump: [ 475.760737][ C1] task:rcu_preempt state:R running task stack:28320 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 475.774219][ C1] Call Trace: [ 475.777490][ C1] [ 475.780418][ C1] ? __schedule+0x10b9/0x6150 [ 475.785093][ C1] __schedule+0x1139/0x6150 [ 475.789611][ C1] ? __pfx___schedule+0x10/0x10 [ 475.794458][ C1] ? find_held_lock+0x2b/0x80 [ 475.799142][ C1] ? schedule+0x2d7/0x3a0 [ 475.803468][ C1] schedule+0xe7/0x3a0 [ 475.807536][ C1] schedule_timeout+0x123/0x290 [ 475.812378][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 475.817742][ C1] ? __pfx_process_timeout+0x10/0x10 [ 475.823024][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 475.828827][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 475.834284][ C1] rcu_gp_fqs_loop+0x1ea/0xaf0 [ 475.839045][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 475.844327][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.849527][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 475.854467][ C1] ? rcu_gp_cleanup+0x7c1/0xe90 [ 475.859348][ C1] rcu_gp_kthread+0x26d/0x380 [ 475.864042][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 475.869237][ C1] ? rcu_is_watching+0x12/0xc0 [ 475.873994][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.879193][ C1] ? __kthread_parkme+0x19e/0x250 [ 475.884213][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 475.889407][ C1] kthread+0x3c5/0x780 [ 475.893482][ C1] ? __pfx_kthread+0x10/0x10 [ 475.898067][ C1] ? rcu_is_watching+0x12/0xc0 [ 475.902820][ C1] ? __pfx_kthread+0x10/0x10 [ 475.907406][ C1] ret_from_fork+0x983/0xb10 [ 475.911996][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 475.917104][ C1] ? __switch_to+0x7af/0x10d0 [ 475.921776][ C1] ? __pfx_kthread+0x10/0x10 [ 475.926365][ C1] ret_from_fork_asm+0x1a/0x30 [ 475.931140][ C1] [ 475.934149][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 475.940462][ C1] Sending NMI from CPU 1 to CPUs 0: [ 475.945764][ C0] NMI backtrace for cpu 0 [ 475.945786][ C0] CPU: 0 UID: 0 PID: 9778 Comm: syz.1.1029 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.945806][ C0] Tainted: [L]=SOFTLOCKUP [ 475.945810][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 475.945818][ C0] RIP: 0010:native_apic_msr_write+0x28/0x40 [ 475.945843][ C0] Code: 90 90 f3 0f 1e fa 8d 87 30 ff ff ff 83 e0 ef 74 20 89 f8 83 e0 ef 83 f8 20 74 16 c1 ef 04 31 d2 89 f0 8d 8f 00 08 00 00 0f 30 <66> 90 e9 91 06 10 0a e9 8c 06 10 0a 89 f6 31 d2 89 cf e9 a1 ef 76 [ 475.945857][ C0] RSP: 0018:ffffc90000007ec8 EFLAGS: 00000046 [ 475.945869][ C0] RAX: 000000000000207a RBX: ffff8880b8423f40 RCX: 0000000000000838 [ 475.945878][ C0] RDX: 0000000000000000 RSI: 000000000000207a RDI: 0000000000000038 [ 475.945887][ C0] RBP: 000000000000207a R08: 0000000000000005 R09: 000000000000003f [ 475.945898][ C0] R10: 0000000000000020 R11: ffff8880330ad4b0 R12: 0000000000000000 [ 475.945907][ C0] R13: 0000000000000000 R14: 0000000000000020 R15: ffff8880b8428440 [ 475.945916][ C0] FS: 000055557b095500(0000) GS:ffff8881248f5000(0000) knlGS:0000000000000000 [ 475.945931][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 475.945940][ C0] CR2: 00007f3eb27c4d58 CR3: 00000000575db000 CR4: 00000000003526f0 [ 475.945949][ C0] Call Trace: [ 475.945956][ C0] [ 475.945960][ C0] lapic_next_event+0x10/0x20 [ 475.945975][ C0] clockevents_program_event+0x26e/0x370 [ 475.945999][ C0] tick_program_event+0xa9/0x140 [ 475.946015][ C0] hrtimer_interrupt+0x3e9/0x8e0 [ 475.946034][ C0] __sysvec_apic_timer_interrupt+0x10b/0x3c0 [ 475.946051][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 475.946069][ C0] [ 475.946073][ C0] [ 475.946078][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 475.946093][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 475.946109][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 7a 0e 1f f6 48 89 df e8 32 61 1f f6 e8 9d 24 4c f6 fb bf 01 00 00 00 42 64 0f f6 65 8b 05 9b c9 37 08 85 c0 74 06 5b e9 01 4d 00 00 [ 475.946123][ C0] RSP: 0018:ffffc90004f3fca0 EFLAGS: 00000202 [ 475.946133][ C0] RAX: 000000000a916d3b RBX: ffff8880311cc0c0 RCX: ffffffff81c70a2f [ 475.946142][ C0] RDX: 0000000000000000 RSI: ffffffff8dace4f3 RDI: 0000000000000001 [ 475.946151][ C0] RBP: ffff8880311cc4c0 R08: 0000000000000001 R09: 0000000000000001 [ 475.946159][ C0] R10: ffffffff9088b9d7 R11: ffff8880330ad4b0 R12: 0000000000000000 [ 475.946168][ C0] R13: 0000000000000021 R14: 0000000000000400 R15: ffff8880311cc0c0 [ 475.946179][ C0] ? trace_irq_enable.constprop.0+0x2f/0x110 [ 475.946200][ C0] get_signal+0x1e6a/0x26d0 [ 475.946223][ C0] ? __pfx_get_signal+0x10/0x10 [ 475.946245][ C0] arch_do_signal_or_restart+0x8f/0x7e0 [ 475.946265][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 475.946282][ C0] ? __pfx_restore_altstack+0x10/0x10 [ 475.946299][ C0] ? restore_signal_shadow_stack+0x63/0x460 [ 475.946323][ C0] exit_to_user_mode_loop+0x8c/0x540 [ 475.946344][ C0] do_syscall_64+0x4ee/0xf80 [ 475.946362][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.946376][ C0] RIP: 0033:0x7f6819f8f749 [ 475.946386][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.946398][ C0] RSP: 002b:00007ffe320f83e8 EFLAGS: 00000246 [ 475.946407][ C0] RAX: fffffffffffffffc RBX: 0000000000059cf6 RCX: 00007f6819f8f749 [ 475.946416][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f681a1e618c [ 475.946424][ C0] RBP: 0000000000000032 R08: 00007f681ae7b000 R09: 0000001b320f86df [ 475.946432][ C0] R10: 00007ffe320f84e0 R11: 0000000000000246 R12: 00007f681a1e618c [ 475.946440][ C0] R13: 00007ffe320f84e0 R14: 0000000000059d28 R15: 00007ffe320f8500 [ 475.946455][ C0]