last executing test programs: 17.032124997s ago: executing program 1 (id=182): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xc54827b730b6982b, 0x800, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)) close(r3) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e24, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x8, {0x2, 0x4e24, @empty}, 'vxcan1\x00'}) r4 = timerfd_create(0x0, 0x0) sched_setattr(0x0, &(0x7f0000003940)={0x38, 0x5, 0x2, 0xfffffff8, 0x9, 0x4, 0x8, 0x5, 0x800, 0x6f}, 0x0) timerfd_gettime(r4, 0x0) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x80302, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e000000000000000000000000ffff"], 0x4c}}, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000000)={0x55, 0x6, 0x6, 0x873e, 0x200}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000000000000950000000000000051b954a65f06fab75fa734d53a9f5f87e10d35a2e10be4ba6c665d5d4b0baeeb5ae94e57fbc8fb92ec431ad68f03b4062038970b688a9510edecb6ea75bcc4914ad2d0"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r9}, 0x10) 15.293190143s ago: executing program 3 (id=185): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x120, 0x0) sendmsg$nl_generic(r0, 0x0, 0x4044000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x72, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f00000002c0)=@mgmt_frame=@probe_response={{{}, {}, @device_b}, 0x0, @random=0xfffe, 0x110b, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6, {0x3, 0x9, 0x0, 0xf9f}}, @void, @val={0x2d, 0x1a, {0x1000, 0x2, 0x0, 0x0, {0xa55, 0x8, 0x0, 0x1, 0x0, 0x1, 0x0, 0x2}, 0x300, 0xa, 0x1}}, @void, @void}, 0x52) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x40, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000100)={0x0, 0x7fffffffffffffff, 0x3}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040884) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4800000041000501010000000000000003010000000000001c0001000600060008000000100007"], 0x48}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8840}, 0x8000) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f00000007c0)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1}, {0x1}, @from_mac, @device_a, @device_a, {0xb, 0x479}}, @random="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"}, 0x23a) 14.682125227s ago: executing program 1 (id=186): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) (async) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") (async) write(r0, &(0x7f0000000140)='vd\n', 0x3) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000803)=0xc0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x12000, 0x0) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e24, 0x400000, @mcast1, 0x9}, 0x1c) (async) setsockopt$sock_int(r4, 0x1, 0xc, &(0x7f0000000000)=0x101, 0x4) (async) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f0000000380)=@x86={0x4, 0x0, 0x1c, 0x0, 0x5, 0x4, 0x59, 0x9, 0xd5, 0x8, 0x1, 0xc6, 0x0, 0x7fff, 0x9, 0x1, 0xa0, 0x5, 0xfc, '\x00', 0x3, 0x89}) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x9) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r9) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000a80)=ANY=[], 0x0) (async) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) syz_open_procfs(r8, &(0x7f0000000180)='mountinfo\x00') (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x6b) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r11, r10, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) 13.740139129s ago: executing program 3 (id=188): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000140)={0x5, @win={{0x6, 0xb, 0x0, 0xd}, 0x1, 0x1, 0x0, 0x1ff8000, 0x0, 0x53}}) 13.604193543s ago: executing program 3 (id=189): r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x802) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x40, 0x0, 0xe7}}}}}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) 12.31339051s ago: executing program 4 (id=193): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000090000007b8af8ff382b59d5c41d7d00000000bfa200000000000007020000f8ffffff9803000008000000b7040000010000008500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000000001000085000002000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f00000003c0)=""/10, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x49) 11.869149142s ago: executing program 2 (id=195): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3) write$binfmt_script(0xffffffffffffffff, &(0x7f0000010100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl(r2, 0xc4c85513, &(0x7f0000000200)) add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000140)="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", 0x1d8, 0xfffffffffffffffd) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, &(0x7f0000000400)) 11.867904927s ago: executing program 3 (id=196): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x54) chdir(&(0x7f0000000000)='./bus\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) 11.753220695s ago: executing program 4 (id=197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='rd_pages=6', 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='1', 0x1) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000040)=0x0) getpgrp(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) semop(0x0, &(0x7f0000000000)=[{0x3, 0x9, 0x1000}, {0x3, 0x0, 0x1000}], 0x2) 11.740539784s ago: executing program 0 (id=198): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x7ffffffe}]}, 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x14, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 9.062105147s ago: executing program 4 (id=199): r0 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x0, @broadcast}, 0x6, {0x2, 0x4e23, @broadcast}, 'wg0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000200)=[{&(0x7f0000001040)=""/122, 0x7a}], 0x1, 0x4000ffe, 0x0) 8.57765414s ago: executing program 2 (id=200): r0 = socket$inet(0x2, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000007100250428bd70507e00000007000000", @ANYRES32=r3, @ANYBLOB="0c0001"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@private1, 0x0}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x8000, 0x0, 0x0, 0xbb8d, {{0xf, 0x4, 0x1, 0x38, 0x3c, 0x64, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x39}, {[@timestamp={0x44, 0xc, 0xe4, 0x0, 0xd, [0xa8, 0x7]}, @timestamp_addr={0x44, 0xc, 0x4c, 0x1, 0x3, [{@remote, 0x7}]}, @generic={0x86, 0xe, "e4a3b7f68fd8c7fef9d5be31"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x700, 0x20, 0x2, 0x4, {{0x1f, 0x4, 0x0, 0xa, 0x7c, 0x67, 0x0, 0xf3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @private=0xa010101, {[@lsrr={0x83, 0x27, 0x5b, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010100, @rand_addr=0x64010102, @local, @multicast2, @loopback, @rand_addr=0x64010102]}, @noop, @generic={0x89, 0x12, "019df62bc5115bcf507b30d28ef20546"}, @rr={0x7, 0x27, 0x4b, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x43}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @private=0xa010101]}, @ssrr={0x89, 0x7, 0xeb, [@multicast2]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000480)={0x350, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfdc1}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r5}, {0x1f4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x85}}}]}}]}, 0x350}, 0x1, 0x0, 0x0, 0x10000040}, 0x20000840) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3a}}, {0x0, @broadcast}, 0x6, {0x2, 0x4e23, @broadcast}, 'wg0\x00'}) r8 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r8, 0x0, 0x0, 0x2004c080, 0x0, 0x0) r9 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x8}, 0x1c) r10 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp6\x00') preadv(r10, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f0000000180)=""/215, 0xd7}], 0x2, 0x9, 0x7ffffffe) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000001000084ffffffff00000000030000020000000000000000000000060200"/74], 0x0, 0x4a}, 0x28) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r11, &(0x7f0000000200)=[{&(0x7f0000001040)=""/122, 0x7a}], 0x1, 0x4000ffe, 0x0) 8.576802216s ago: executing program 3 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getsig(0x4202, r4, 0x100000001, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r5, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x52, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x7fe, 0xc7, 0x202}, {0x2, 0x5, 0x1, 0x46, 0x2, 0x101}]}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r6 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000180)='source\x00', &(0x7f00000001c0)='//127.0.0.1/share\x00', 0x0) setns(0xc9, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000100)={0x6, 'nicvf0\x00', {0x294}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4) 8.405234263s ago: executing program 0 (id=202): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000"], 0xa4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='rd_pages=6', 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='1', 0x1) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000040)=0x0) getpgrp(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) semop(0x0, &(0x7f0000000000)=[{0x3, 0x9, 0x1000}, {0x3, 0x0, 0x1000}], 0x2) 8.375553068s ago: executing program 1 (id=203): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000180)={0x1d, r3, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, 0x0, 0x0) r4 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0xb) sendmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) write(r1, &(0x7f0000000100)="95e391b75325c9038ddfd6fc2275eff1fe0ebbdc15e2a54de3c1f4b55b0f7a304f345b62b3e0acf716bd1a5c1bffe90fd029dff9eb65ff054efb44bbccbefc2f58ecdaba4b4d3b4b1dac6f", 0x4b) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) close_range(r2, r2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="7db49fdb07ac1af786f979a7c4c98f4a30507687a32c16c61e034cb67357e38da3fbe77aa31c827b802222469f1809decbb3a12e1757d1ac4ca0cfbbc289bc69b43b1b7d2e896183837a7224005c40412d2937969050f4a048a1", 0x5a}, {&(0x7f0000000600)="a55b2c8f73dfa037f58774af75d97ac0c02173e2c7efc30f342a5e29dfdc47280776b0deecfb7e4911e4dd33096e8823fb8ba706e431aa", 0x37}], 0x2, &(0x7f0000000740)=[@assoc={0x18, 0x117, 0x4, 0x86}], 0x18, 0xc840}], 0x1, 0x84) 7.415747146s ago: executing program 0 (id=204): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f000000a3c0)={0x2020}, 0xff9c) r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000000040)=""/102396, &(0x7f0000000000)=0x18ffc) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000080)="f4", 0x1, 0xe3}]) syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x140) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001400b59500000000000002000a402200", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff00000000140001d92b80000000210000000007"], 0x40}}, 0x0) 7.057300242s ago: executing program 2 (id=205): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4080}, 0x60000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1440}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x800, 0x0) 6.213424819s ago: executing program 2 (id=206): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TCXONC(r0, 0x540a, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(0x0) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r8, 0x0, 0x8080) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r4, 0xcd2e8000) getdents64(0xffffffffffffffff, 0x0, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/211, 0xd3) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 6.052134931s ago: executing program 3 (id=207): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = gettid() sendmmsg$unix(r1, &(0x7f0000004200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee01}}}], 0x20, 0x20004844}}], 0x1, 0x20000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file3\x00', 0x1c0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000180)='./file1\x00', 0x40) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, 0x0, 0x0, 0x10, 0x0, 0x0) r4 = io_uring_setup(0x6ded, &(0x7f0000000080)={0x0, 0x4279, 0x1, 0x801, 0x135}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x2, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000d0000000180100002001752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x20, &(0x7f0000000180)={&(0x7f0000000000)=""/225, 0xe1, 0x0, &(0x7f0000000100)=""/70, 0x46}}, 0x10) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000200)={'pcmad\x00', [0x7, 0xdfff, 0x6, 0x47, 0x8000, 0x2, 0x15, 0xffffff00, 0x200, 0x6, 0xfffffff7, 0xffffc907, 0x6, 0x0, 0x2, 0x9, 0x9, 0x7f, 0x8, 0xf, 0x4, 0x5, 0x48, 0x80, 0x2, 0x4, 0x80000000, 0xbb9, 0x2ff, 0x5, 0x6, 0xfffffffb]}) 5.439030903s ago: executing program 4 (id=208): write(0xffffffffffffffff, &(0x7f0000000180)='3\x00\x00\x00\b', 0x5) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0xc, &(0x7f0000000240)=0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, 0x0, &(0x7f0000000180)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='pstore\x00', 0x1, &(0x7f0000000100)='\x00\b\x00\x00') openat$comedi(0xffffff9c, 0x0, 0x101001, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0xc0803, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r2, 0x4b72, &(0x7f0000000080)={0x5, 0x7d, 0x8, 0xffffffff, 0xe, "00602100000000f60000000000000000000800"}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) connect$vsock_stream(r1, &(0x7f0000000380)={0x28, 0x0, 0x2711, @hyper}, 0x10) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x16) setns(0xc9, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write(r5, &(0x7f0000000000)="30000000240001040100000000000000000000000100000000000000ffffffff000000000a0001007465716c30000000", 0x30) socket$inet(0x2, 0x2, 0x0) 3.853137335s ago: executing program 4 (id=209): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f000000a3c0)={0x2020}, 0xff9c) r0 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000000040)=""/102396, &(0x7f0000000000)=0x18ffc) io_setup(0x1, &(0x7f0000002500)=0x0) io_submit(r4, 0x1, &(0x7f0000000880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000080)="f4", 0x1, 0xe3}]) syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x140) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001400b59500000000000002000a402200", @ANYRES32=r7, @ANYBLOB="1400020000000000000000000000ffff00000000140001d92b8000000021"], 0x40}}, 0x0) 3.829611987s ago: executing program 0 (id=210): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) (fail_nth: 1) 2.473043307s ago: executing program 0 (id=211): r0 = socket$nl_route(0x10, 0x3, 0x0) getgid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a7080001400000000009"], 0xd0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x23, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0xfff3, 0x2}}}, 0x24}}, 0x4000800) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400c6d3b2d840cd6161000010024b0401800000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xc0, 0x30, 0xb, 0x0, 0x25dfdbff, {}, [{0xac, 0x1, [@m_ct={0xa8, 0x1, 0x0, 0x0, {{0x7}, {0x4}, {0x80, 0x6, "76d4d50e8441f45d1b1e0b179c4adafe6ba90a31521d63fc4c9d09438e8edf5254764e3b791b37f60cf1d26fbb0f878cdae603055623189f39722265f09d20c7d427d00fb06085392fd0e50b2622dd3787e6495327feacea12ad6e279b5990853b83053a3438ead732ffe0a947b7b2251570a228586bf69fa46d9780"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x400) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x8, 0x40) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x8d0e, 0xc5) syz_emit_ethernet(0x8e, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="9008000790780005220ada21e4514509bb2a1e0dd081e0000001ff80b57d7300050e0000cc0700000004000000081312ad3d44b99f9ea59963e5768db6fdaab422124b39e2"], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000180001092cbd7000fbdbdf25021800000000fd080001000008000400", @ANYRES32], 0x2c}}, 0x4) syz_extract_tcp_res(&(0x7f0000000000), 0x6000008, 0x3c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f00001fb000/0x4000)=nil, &(0x7f000022f000/0x4000)=nil, &(0x7f0000591000/0x2000)=nil, &(0x7f00002fe000/0x800000)=nil, &(0x7f0000acb000/0x1000)=nil, &(0x7f0000907000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000093b000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0}, 0x68) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r7, 0x6145, 0x7721, 0x17, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r6, 0x40045701, &(0x7f0000000040)=0xffffff67) syz_extract_tcp_res(&(0x7f0000000040), 0x8d0e, 0xc5) syz_emit_ethernet(0x8e, &(0x7f0000000180)=ANY=[], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) 2.459904855s ago: executing program 1 (id=212): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000004c0)={@remote, @loopback, @private1, 0x5, 0x6, 0x0, 0x100, 0x5, 0x86120186}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x32095}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) dup3(r0, r2, 0x80000) 2.291007009s ago: executing program 4 (id=213): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xc54827b730b6982b, 0x800, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./gadget\x00', 0x1ff) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xfffffffe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000500)='n', 0x1) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) close(r3) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e24, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x8, {0x2, 0x4e24, @empty}, 'vxcan1\x00'}) r4 = timerfd_create(0x0, 0x0) sched_setattr(0x0, &(0x7f0000003940)={0x38, 0x5, 0x2, 0xfffffff8, 0x9, 0x4, 0x8, 0x5, 0x800, 0x6f}, 0x0) timerfd_gettime(r4, 0x0) mount(0x0, &(0x7f0000000140)='./gadget\x00', &(0x7f0000000180)='gadgetfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./gadget/dummy_udc\x00', 0x80302, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003050000000000000a0900000000000000000000000000000100ffffee9e000000000000000000000000ffff"], 0x4c}}, 0x0) ioctl$KVM_SET_CLOCK(r5, 0x4030ae7b, &(0x7f0000000000)={0x55, 0x6, 0x6, 0x873e, 0x200}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000030000000000000000000000950000000000000051b954a65f06fab75fa734d53a9f5f87e10d35a2e10be4ba6c665d5d4b0baeeb5ae94e57fbc8fb92ec431ad68f03b4062038970b688a9510edecb6ea75bcc4914ad2d0"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, r9}, 0x10) 1.127841896s ago: executing program 1 (id=214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000"], 0xa4}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000240)='rd_pages=6', 0xa) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r6, &(0x7f00000002c0)='1', 0x1) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000040)=0x0) getpgrp(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) semop(0x0, &(0x7f0000000000)=[{0x3, 0x9, 0x1000}, {0x3, 0x0, 0x1000}], 0x2) 252.714944ms ago: executing program 1 (id=215): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000006c0)=0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r2, 0x16, 0x1, 0x1400000, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000480)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffffff, 0x0, 0x4c9128d4e1c3bded) openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000700)='minix\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000009) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) close(r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000340)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r7}}], 0x20, 0x2400e044}, 0x20001080) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000740)={0x0, 0xf1, "1362cf85f2c7002f0e320199d800e04f6bbf19b74c626646981158fb970d0c92bd138f6e5fdbe001773043a2bfec6e4509d22795336f086f35ccd9b9c5d0295e7a3328ab4bce4d25a06349b2622bd6f6e3597d50a49a3222bd9c6fdfc3790fc3e1bf6ec913afc71d6759ee74e272ab933fa356d1047a86fd935123c82587cf17cd22387c3b4f2d5ff59fa872bf85c1776995397644646b48b50f4d15f33b54e54d1c7b0228b0baf0723a1e20f64fcc790d5ac13ee4396b9d4677d9df810a00f56f90ad60d5f1827b53d517f89a8f0a3b83203e44cadab2abcd5de3d2b37cc78f6e38e073de1904dcc2bb55409eb2b503b4"}, &(0x7f0000000880)=0xf9) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 231.810294ms ago: executing program 2 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) 47.552582ms ago: executing program 0 (id=217): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000080)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="1484000d17eeffffff0000000000030a03000000000000000000020000020900030073797a32000000001c0008800c00014000000000000000270c00020700f19c00000000f60900010073797a310000000180000024c4000000000000000a00"/108], 0x70}}, 0x4000) (async) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) capset(&(0x7f00000001c0)={0x19980330}, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 64) lseek(r5, 0x2000, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b95483d387dbe9abc89b6f5bec", 0x0, 0x100002d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x5, 0x10, 0x2, 0x0, 0x7e, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) (async, rerun: 64) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) (rerun: 64) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') sendfile(r6, r7, 0x0, 0x3) (async, rerun: 32) syz_open_dev$tty20(0xc, 0x4, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r8 = socket(0x1, 0x800, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001400a59500000000fedbdf250a6842c8", @ANYRES32=r9, @ANYBLOB="14000200ff0200000000e40000000000000000010800080006070000"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000046) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async, rerun: 64) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (rerun: 64) syz_usb_control_io(r11, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) (async, rerun: 64) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000280)={{@local, 0x3}, @host, 0x8, 0x0, 0x5, 0xfffffffffffffffb, 0xff, 0x2ef, 0x2}) (rerun: 64) syz_usb_control_io(r11, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="200e4a0000005983ccb694f9b913f1ab251cdd0ce51faa847ef67f87695c00f2ff3e565c62dbf0ec0f937f4554031e52d7c1f9913a41064aa7ff8f531bd94c418adbab6f219b267d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f00000003c0)=ANY=[@ANYRES8=r11, @ANYBLOB="43a51cb592916c3fcb677df064e4dac23d307a8b96aa9f69397c30c1dcdc28a5435d836009bd93f940448c06fddc70eab22e2957fe26718ca0ad1d6294d0f3337cfa434c7f6491de38dcae57", @ANYRES32=r2, @ANYRESDEC=r10]) 0s ago: executing program 2 (id=218): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0xbe02, @mcast1, 0x2}, 0x1c, 0x0}}], 0x1, 0x1) (fail_nth: 1) kernel console output (not intermixed with test programs): 82.239569][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.315986][ T5804] MINIX-fs: unable to read superblock [ 82.501294][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.611343][ T1080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.612587][ T1080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.612727][ T1080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.612802][ T1080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.460103][ T5812] FAULT_INJECTION: forcing a failure. [ 83.460103][ T5812] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 83.460152][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: syz.1.8 Not tainted syzkaller #0 PREEMPT(full) [ 83.460175][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 83.460192][ T5812] Call Trace: [ 83.460199][ T5812] [ 83.460206][ T5812] dump_stack_lvl+0x100/0x190 [ 83.460249][ T5812] should_fail_ex.cold+0x5/0xa [ 83.460276][ T5812] _copy_from_user+0x2e/0xd0 [ 83.460300][ T5812] do_ipv6_setsockopt+0x73d/0x44a0 [ 83.460326][ T5812] ? lock_acquire+0x1d1/0x380 [ 83.460353][ T5812] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 83.460377][ T5812] ? avc_has_perm_noaudit+0x56/0x470 [ 83.460406][ T5812] ? avc_has_perm_noaudit+0x11e/0x470 [ 83.460432][ T5812] ? avc_has_perm_noaudit+0x11e/0x470 [ 83.460464][ T5812] ? avc_has_perm_noaudit+0x145/0x470 [ 83.460495][ T5812] ? avc_has_perm+0x135/0x1e0 [ 83.460523][ T5812] ? __pfx_avc_has_perm+0x10/0x10 [ 83.460553][ T5812] ? get_pid_task+0x106/0x250 [ 83.460583][ T5812] ? sock_has_perm+0x25a/0x2f0 [ 83.460604][ T5812] ? __pfx_sock_has_perm+0x10/0x10 [ 83.460629][ T5812] ? ipv6_setsockopt+0xcb/0x170 [ 83.460653][ T5812] ipv6_setsockopt+0xcb/0x170 [ 83.460682][ T5812] rawv6_setsockopt+0xee/0x5a0 [ 83.460705][ T5812] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 83.460727][ T5812] ? selinux_socket_setsockopt+0x6a/0x80 [ 83.460745][ T5812] ? sock_common_setsockopt+0x2e/0xf0 [ 83.460765][ T5812] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 83.460785][ T5812] do_sock_setsockopt+0xf3/0x1d0 [ 83.460814][ T5812] __sys_setsockopt+0x195/0x220 [ 83.460843][ T5812] __x64_sys_setsockopt+0xbd/0x160 [ 83.460866][ T5812] ? do_syscall_64+0xae/0x790 [ 83.460885][ T5812] ? lockdep_hardirqs_on+0x7d/0x110 [ 83.460903][ T5812] do_syscall_64+0x123/0x790 [ 83.460924][ T5812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.460942][ T5812] RIP: 0033:0x7f0a5c59e159 [ 83.460959][ T5812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.460982][ T5812] RSP: 002b:00007f0a5d533028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 83.461005][ T5812] RAX: ffffffffffffffda RBX: 00007f0a5c825fa0 RCX: 00007f0a5c59e159 [ 83.461016][ T5812] RDX: 0000000000000012 RSI: 0000000000000029 RDI: 0000000000000003 [ 83.461030][ T5812] RBP: 00007f0a5d533090 R08: 0000000000000004 R09: 0000000000000000 [ 83.461042][ T5812] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000001 [ 83.461053][ T5812] R13: 00007f0a5c826038 R14: 00007f0a5c825fa0 R15: 00007ffc138c0958 [ 83.461081][ T5812] [ 83.499388][ T5813] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4'. [ 83.719869][ T1080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.719890][ T1080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.943349][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.943370][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.304083][ T5827] MINIX-fs: unable to read superblock [ 85.592509][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 85.592527][ T31] audit: type=1400 audit(1790559924.756:220): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 85.673401][ T31] audit: type=1400 audit(1790559924.836:221): avc: denied { mount } for pid=5832 comm="syz.3.15" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 85.719643][ T31] audit: type=1400 audit(1790559924.886:222): avc: denied { read } for pid=5834 comm="syz.1.13" name="system" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.720036][ T31] audit: type=1400 audit(1790559924.886:223): avc: denied { open } for pid=5834 comm="syz.1.13" path="/dev/dma_heap/system" dev="devtmpfs" ino=699 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.723906][ T31] audit: type=1400 audit(1790559924.886:224): avc: denied { read write } for pid=5834 comm="syz.1.13" name="uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.724273][ T31] audit: type=1400 audit(1790559924.886:225): avc: denied { open } for pid=5834 comm="syz.1.13" path="/dev/uinput" dev="devtmpfs" ino=914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 85.796832][ T31] audit: type=1400 audit(1790559924.946:226): avc: denied { read } for pid=5834 comm="syz.1.13" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.796885][ T31] audit: type=1400 audit(1790559924.946:227): avc: denied { open } for pid=5834 comm="syz.1.13" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.909130][ T31] audit: type=1400 audit(1790559925.046:228): avc: denied { ioctl } for pid=5836 comm="syz.0.14" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.912662][ T31] audit: type=1400 audit(1790559925.066:229): avc: denied { set_context_mgr } for pid=5836 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.697889][ T5838] binder: BINDER_SET_CONTEXT_MGR already set [ 86.697907][ T5838] binder: 5836:5838 ioctl 4018620d 200000004a80 returned -16 [ 86.834171][ T5833] hub 1-0:1.0: USB hub found [ 86.884072][ T5833] hub 1-0:1.0: 1 port detected [ 88.432553][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 89.925633][ T5868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 90.357279][ T5874] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18'. [ 90.437386][ T5699] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.167892][ T5699] usb 4-1: Using ep0 maxpacket: 8 [ 91.176078][ T5699] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.176201][ T5699] usb 4-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice=2a.af [ 91.287956][ T5882] binder: 5879:5882 ioctl 4018620d 0 returned -22 [ 91.293993][ T5882] binder: 5879:5882 unknown command 0 [ 91.294042][ T5882] binder: 5879:5882 ioctl c0306201 200000000080 returned -22 [ 91.713522][ T5699] usb 4-1: config 4 interface 0 has no altsetting 0 [ 91.732257][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.732284][ T5699] usb 4-1: Product: syz [ 91.732298][ T5699] usb 4-1: Manufacturer: syz [ 91.732311][ T5699] usb 4-1: SerialNumber: syz [ 91.797857][ T5885] FAULT_INJECTION: forcing a failure. [ 91.797857][ T5885] name failslab, interval 1, probability 0, space 0, times 1 [ 91.797889][ T5885] CPU: 1 UID: 0 PID: 5885 Comm: syz.1.25 Not tainted syzkaller #0 PREEMPT(full) [ 91.797913][ T5885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.797925][ T5885] Call Trace: [ 91.797932][ T5885] [ 91.797940][ T5885] dump_stack_lvl+0x100/0x190 [ 91.797974][ T5885] should_fail_ex.cold+0x5/0xa [ 91.798000][ T5885] should_failslab+0xc2/0x120 [ 91.798027][ T5885] __kmalloc_noprof+0xfc/0x840 [ 91.798050][ T5885] ? rcu_is_watching+0x13/0xc0 [ 91.798078][ T5885] ? tomoyo_realpath_from_path+0xb6/0x690 [ 91.798112][ T5885] tomoyo_realpath_from_path+0xb6/0x690 [ 91.798146][ T5885] tomoyo_path_number_perm+0x23c/0x580 [ 91.798168][ T5885] ? tomoyo_path_number_perm+0x22e/0x580 [ 91.798192][ T5885] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 91.798233][ T5885] ? __lock_acquire+0x5c0/0x1f40 [ 91.798270][ T5885] ? __fget_files+0x34/0x3d0 [ 91.798297][ T5885] ? find_held_lock+0x2b/0x80 [ 91.798323][ T5885] ? hook_file_ioctl_common+0x140/0x440 [ 91.798358][ T5885] ? __fget_files+0x21f/0x3d0 [ 91.798389][ T5885] security_file_ioctl+0xd3/0x230 [ 91.798415][ T5885] __x64_sys_ioctl+0xb7/0x210 [ 91.798444][ T5885] do_syscall_64+0x123/0x790 [ 91.798468][ T5885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.798488][ T5885] RIP: 0033:0x7f0a5c59e159 [ 91.798505][ T5885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.798522][ T5885] RSP: 002b:00007f0a5d533028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.798541][ T5885] RAX: ffffffffffffffda RBX: 00007f0a5c825fa0 RCX: 00007f0a5c59e159 [ 91.798552][ T5885] RDX: 0000200000000000 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 91.798564][ T5885] RBP: 00007f0a5d533090 R08: 0000000000000000 R09: 0000000000000000 [ 91.798575][ T5885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.798586][ T5885] R13: 00007f0a5c826038 R14: 00007f0a5c825fa0 R15: 00007ffc138c0958 [ 91.798613][ T5885] [ 91.801696][ T5885] ERROR: Out of memory at tomoyo_realpath_from_path. [ 92.426889][ T5699] usb 4-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 92.495508][ T5699] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 92.496521][ T5699] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 92.505122][ T5699] usb 4-1: media controller created [ 92.573089][ T5699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.587306][ T5599] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 92.647244][ T5699] usb 4-1: selecting invalid altsetting 1 [ 92.647271][ T5699] set interface failed [ 92.647700][ T5699] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 92.647723][ T5699] error writing reg: 0xff, val: 0x00 [ 92.741427][ T5599] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.742404][ T5599] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.742426][ T5599] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 5 [ 92.742474][ T5599] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 92.745642][ T5599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.745667][ T5599] usb 5-1: Product: syz [ 92.745682][ T5599] usb 5-1: Manufacturer: syz [ 92.745697][ T5599] usb 5-1: SerialNumber: syz [ 92.846535][ T5599] usb 5-1: config 0 descriptor?? [ 92.857109][ T5889] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 92.875806][ T5599] cdc_ncm 5-1:0.0: skipping garbage [ 92.875833][ T5599] cdc_ncm 5-1:0.0: NCM or ECM functional descriptors missing [ 92.875876][ T5599] cdc_ncm 5-1:0.0: bind() failure [ 92.940573][ T5699] dvb_usb_mxl111sf 4-1:4.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 92.962383][ T5699] usb 4-1: USB disconnect, device number 2 [ 93.478554][ T5897] binder: BINDER_SET_CONTEXT_MGR already set [ 93.478584][ T5897] binder: 5893:5897 ioctl 4018620d 200000004a80 returned -16 [ 94.142530][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 94.142547][ T31] audit: type=1400 audit(1790559933.306:252): avc: denied { name_bind } for pid=5895 comm="syz.1.28" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 94.142779][ T31] audit: type=1400 audit(1790559933.306:253): avc: denied { node_bind } for pid=5895 comm="syz.1.28" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 94.350598][ T31] audit: type=1400 audit(1790559933.506:254): avc: denied { create } for pid=5886 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.400377][ T31] audit: type=1400 audit(1790559933.556:255): avc: denied { setopt } for pid=5886 comm="syz.4.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.400593][ T31] audit: type=1400 audit(1790559933.556:256): avc: denied { connect } for pid=5886 comm="syz.4.26" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.400716][ T31] audit: type=1400 audit(1790559933.556:257): avc: denied { write } for pid=5886 comm="syz.4.26" laddr=172.20.20.44 lport=4 faddr=10.1.1.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.779664][ T5902] netlink: 'syz.0.30': attribute type 4 has an invalid length. [ 95.779685][ T5902] netlink: 17 bytes leftover after parsing attributes in process `syz.0.30'. [ 95.903265][ T1198] usb 5-1: USB disconnect, device number 2 [ 95.905537][ T31] audit: type=1400 audit(1790559935.066:258): avc: denied { create } for pid=5903 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.907320][ T5904] 9pnet_virtio: no channels available for device syz [ 95.947960][ T31] audit: type=1400 audit(1790559935.116:259): avc: denied { unlink } for pid=5903 comm="syz.1.31" name="#1" dev="tmpfs" ino=78 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.948008][ T31] audit: type=1400 audit(1790559935.116:260): avc: denied { mount } for pid=5903 comm="syz.1.31" name="/" dev="overlay" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 97.475823][ T5914] binder: BINDER_SET_CONTEXT_MGR already set [ 97.475889][ T5914] binder: 5910:5914 ioctl 4018620d 200000004a80 returned -16 [ 97.716757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.146831][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.299768][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 98.301700][ T25] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.304123][ T25] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.304153][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.304178][ T25] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.304201][ T25] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.304236][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.420908][ T5924] FAULT_INJECTION: forcing a failure. [ 98.420908][ T5924] name failslab, interval 1, probability 0, space 0, times 0 [ 98.420939][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.3.37 Not tainted syzkaller #0 PREEMPT(full) [ 98.420959][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.420972][ T5924] Call Trace: [ 98.420978][ T5924] [ 98.420986][ T5924] dump_stack_lvl+0x100/0x190 [ 98.421016][ T5924] should_fail_ex.cold+0x5/0xa [ 98.421043][ T5924] should_failslab+0xc2/0x120 [ 98.421068][ T5924] __kmalloc_noprof+0xfc/0x840 [ 98.421089][ T5924] ? rcu_is_watching+0x13/0xc0 [ 98.421117][ T5924] ? tomoyo_realpath_from_path+0xb6/0x690 [ 98.421150][ T5924] tomoyo_realpath_from_path+0xb6/0x690 [ 98.421182][ T5924] tomoyo_path_number_perm+0x23c/0x580 [ 98.421200][ T5924] ? tomoyo_path_number_perm+0x22e/0x580 [ 98.421222][ T5924] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 98.421252][ T5924] ? __lock_acquire+0x5c0/0x1f40 [ 98.421290][ T5924] ? __fget_files+0x34/0x3d0 [ 98.421313][ T5924] ? find_held_lock+0x2b/0x80 [ 98.421337][ T5924] ? hook_file_ioctl_common+0x140/0x440 [ 98.421372][ T5924] ? __fget_files+0x21f/0x3d0 [ 98.421402][ T5924] security_file_ioctl+0xd3/0x230 [ 98.421428][ T5924] __x64_sys_ioctl+0xb7/0x210 [ 98.421453][ T5924] do_syscall_64+0x123/0x790 [ 98.421476][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.421495][ T5924] RIP: 0033:0x7f1394f9e159 [ 98.421509][ T5924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.421523][ T5924] RSP: 002b:00007f1395f20028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.421542][ T5924] RAX: ffffffffffffffda RBX: 00007f1395225fa0 RCX: 00007f1394f9e159 [ 98.421555][ T5924] RDX: 0000200000000540 RSI: 00000000c100565c RDI: 0000000000000003 [ 98.421565][ T5924] RBP: 00007f1395f20090 R08: 0000000000000000 R09: 0000000000000000 [ 98.421576][ T5924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.421587][ T5924] R13: 00007f1395226038 R14: 00007f1395225fa0 R15: 00007fffddfced58 [ 98.421612][ T5924] [ 98.421643][ T5924] ERROR: Out of memory at tomoyo_realpath_from_path. [ 98.608992][ T25] usb 1-1: GET_CAPABILITIES returned 0 [ 98.609040][ T25] usbtmc 1-1:16.0: can't read capabilities [ 98.716509][ T5917] tmpfs: Unknown parameter 'grpquotaÇD$¾' [ 98.819979][ T31] audit: type=1400 audit(1790559937.986:261): avc: denied { write } for pid=5908 comm="syz.0.32" name="usbtmc0" dev="devtmpfs" ino=2792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 98.831641][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 98.854468][ T5909] Illegal XDP return value 5909 on prog (id 4) dev N/A, expect packet loss! [ 98.866565][ T5909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.871976][ T5909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.888646][ T5909] Zero length message leads to an empty skb [ 98.935508][ T5728] usb 1-1: USB disconnect, device number 2 [ 99.029257][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.166856][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 99.188697][ T25] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 99.191410][ T25] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 99.191438][ T25] usb 4-1: config 0 has no interface number 0 [ 99.191475][ T25] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.208279][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.208307][ T25] usb 4-1: Product: syz [ 99.208321][ T25] usb 4-1: Manufacturer: syz [ 99.208334][ T25] usb 4-1: SerialNumber: syz [ 99.259836][ T25] usb 4-1: config 0 descriptor?? [ 99.279516][ T25] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 99.577061][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 100.226492][ T5935] FAULT_INJECTION: forcing a failure. [ 100.226492][ T5935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.226544][ T5935] CPU: 1 UID: 0 PID: 5935 Comm: syz.3.38 Not tainted syzkaller #0 PREEMPT(full) [ 100.226567][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.226579][ T5935] Call Trace: [ 100.226585][ T5935] [ 100.226593][ T5935] dump_stack_lvl+0x100/0x190 [ 100.226626][ T5935] should_fail_ex.cold+0x5/0xa [ 100.226654][ T5935] _copy_to_user+0x32/0xd0 [ 100.226680][ T5935] simple_read_from_buffer+0xcb/0x170 [ 100.226706][ T5935] proc_fail_nth_read+0x1af/0x230 [ 100.226732][ T5935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.226760][ T5935] ? rw_verify_area+0xce/0x6d0 [ 100.226779][ T5935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.226804][ T5935] vfs_read+0x1e4/0xb40 [ 100.226826][ T5935] ? lock_acquire+0x1d1/0x380 [ 100.226847][ T5935] ? __fget_files+0x34/0x3d0 [ 100.226872][ T5935] ? __pfx_vfs_read+0x10/0x10 [ 100.226891][ T5935] ? find_held_lock+0x2b/0x80 [ 100.226918][ T5935] ? __fget_files+0x215/0x3d0 [ 100.226948][ T5935] ? __fget_files+0x21f/0x3d0 [ 100.226981][ T5935] ksys_read+0x12a/0x250 [ 100.227002][ T5935] ? __pfx_ksys_read+0x10/0x10 [ 100.227033][ T5935] do_syscall_64+0x123/0x790 [ 100.227057][ T5935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.227077][ T5935] RIP: 0033:0x7f1394f5e98e [ 100.227093][ T5935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 100.227110][ T5935] RSP: 002b:00007f1395efefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.227129][ T5935] RAX: ffffffffffffffda RBX: 00007f1395eff6c0 RCX: 00007f1394f5e98e [ 100.227142][ T5935] RDX: 000000000000000f RSI: 00007f1395eff0a0 RDI: 0000000000000003 [ 100.227153][ T5935] RBP: 00007f1395eff090 R08: 0000000000000000 R09: 0000000000000000 [ 100.227165][ T5935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.227176][ T5935] R13: 00007f1395226128 R14: 00007f1395226090 R15: 00007fffddfced58 [ 100.227205][ T5935] [ 100.276950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 100.306817][ T5599] usb 4-1: USB disconnect, device number 3 [ 100.358080][ T5599] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 100.591183][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 100.591221][ T31] audit: type=1400 audit(1790559939.756:266): avc: denied { create } for pid=5937 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.701543][ T31] audit: type=1400 audit(1790559939.866:267): avc: denied { create } for pid=5944 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.753822][ T31] audit: type=1400 audit(1790559939.916:268): avc: denied { write } for pid=5944 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.754193][ T5945] ieee802154 phy0 wpan0: encryption failed: -22 [ 100.787201][ T31] audit: type=1400 audit(1790559939.926:269): avc: denied { read } for pid=5944 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.842192][ T31] audit: type=1400 audit(1790559940.006:270): avc: denied { create } for pid=5944 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.867662][ T31] audit: type=1400 audit(1790559940.016:271): avc: denied { ioctl } for pid=5944 comm="syz.0.42" path="socket:[9594]" dev="sockfs" ino=9594 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.206739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.396744][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.556739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.711998][ T5955] binder: BINDER_SET_CONTEXT_MGR already set [ 102.712008][ T5955] binder: 5953:5955 ioctl 4018620d 200000004a80 returned -16 [ 103.163283][ T31] audit: type=1400 audit(1790559942.326:272): avc: denied { write } for pid=5964 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 103.188288][ T5965] netdevsim0 speed is unknown, defaulting to 1000 [ 103.208439][ T5965] netdevsim0 speed is unknown, defaulting to 1000 [ 103.423521][ T5970] se_dev->se_dev_ptr already set for storage object [ 104.222589][ T31] audit: type=1400 audit(1790559943.376:273): avc: denied { create } for pid=5964 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.445566][ T5965] netdevsim0 speed is unknown, defaulting to 1000 [ 104.570978][ T5965] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 104.571046][ T5965] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 104.571104][ T5965] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 104.631975][ T31] audit: type=1400 audit(1790559943.796:274): avc: denied { mount } for pid=5969 comm="syz.3.49" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 104.752908][ T31] audit: type=1400 audit(1790559943.916:275): avc: denied { setopt } for pid=5969 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 104.981674][ T5965] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.288032][ T5965] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.589823][ T5965] netdevsim0 speed is unknown, defaulting to 1000 [ 106.729353][ T5965] netdevsim0 speed is unknown, defaulting to 1000 [ 106.839643][ T5965] netdevsim0 speed is unknown, defaulting to 1000 [ 106.884495][ T5965] netdevsim0 speed is unknown, defaulting to 1000 [ 106.900186][ T5965] netdevsim0 speed is unknown, defaulting to 1000 [ 106.997723][ T31] audit: type=1400 audit(1790559946.166:276): avc: denied { unmount } for pid=5609 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 107.200423][ T5983] MINIX-fs: unable to read superblock [ 107.225218][ T31] audit: type=1400 audit(1790559946.386:277): avc: denied { name_connect } for pid=5981 comm="syz.3.51" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 108.568615][ T5988] se_dev->se_dev_ptr already set for storage object [ 109.686838][ T30] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 110.448012][ T6003] binder: BINDER_SET_CONTEXT_MGR already set [ 110.448022][ T6003] binder: 6002:6003 ioctl 4018620d 200000004a80 returned -16 [ 110.530435][ T30] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 110.533157][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.533192][ T30] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 110.572608][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.572626][ T30] usb 4-1: Product: syz [ 110.572634][ T30] usb 4-1: Manufacturer: syz [ 110.572642][ T30] usb 4-1: SerialNumber: syz [ 110.811009][ T5998] warning: `syz.3.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.878164][ T5599] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.027083][ T5599] usb 2-1: Using ep0 maxpacket: 16 [ 111.030000][ T5599] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 111.039183][ T5599] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.039208][ T5599] usb 2-1: Product: syz [ 111.039223][ T5599] usb 2-1: Manufacturer: syz [ 111.039237][ T5599] usb 2-1: SerialNumber: syz [ 111.073054][ C1] usb 4-1: received EP1 urb->status = -2 [ 111.073943][ T30] usb 4-1: unable to init card! (ret=-110) [ 111.074875][ T30] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 111.508832][ T30] usb 4-1: USB disconnect, device number 4 [ 111.943428][ T31] audit: type=1400 audit(1790559951.046:278): avc: denied { mmap_zero } for pid=6012 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 112.003467][ T31] audit: type=1400 audit(1790559951.166:279): avc: denied { map } for pid=6012 comm="syz.4.54" path="socket:[7964]" dev="sockfs" ino=7964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 112.057513][ T5599] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 113.552049][ T31] audit: type=1400 audit(1790559952.716:280): avc: denied { create } for pid=6020 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.672843][ T31] audit: type=1400 audit(1790559952.836:281): avc: denied { ioctl } for pid=6020 comm="syz.3.60" path="socket:[7976]" dev="sockfs" ino=7976 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.871620][ T5599] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 113.872089][ T5599] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 113.872134][ T5599] usb 2-1: media controller created [ 113.905233][ T6021] syz.3.60 uses obsolete (PF_INET,SOCK_PACKET) [ 113.951105][ T5599] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.973269][ T31] audit: type=1400 audit(1790559953.136:282): avc: denied { create } for pid=6023 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.296840][ T31] audit: type=1400 audit(1790559953.396:283): avc: denied { getopt } for pid=6023 comm="syz.0.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.632386][ T5599] zl10353_read_register: readreg error (reg=127, ret==-71) [ 114.725441][ T5599] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 114.770839][ T5599] usb 2-1: USB disconnect, device number 3 [ 115.008747][ T31] audit: type=1400 audit(1790559954.176:284): avc: denied { name_bind } for pid=6029 comm="syz.2.57" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 115.097065][ T6030] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 115.137337][ T31] audit: type=1400 audit(1790559954.296:285): avc: denied { view } for pid=6027 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 115.259299][ T31] audit: type=1400 audit(1790559954.426:286): avc: denied { write } for pid=6027 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.287684][ T31] audit: type=1400 audit(1790559954.446:287): avc: denied { read } for pid=6027 comm="syz.1.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.397793][ T5936] IPVS: starting estimator thread 0... [ 115.487176][ T6036] IPVS: using max 46 ests per chain, 110400 per kthread [ 115.492176][ T6022] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 116.927532][ T6043] se_dev->se_dev_ptr already set for storage object [ 118.023271][ T31] audit: type=1400 audit(1790559957.186:288): avc: denied { sqpoll } for pid=6048 comm="syz.2.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 118.647320][ T31] audit: type=1400 audit(1790559957.816:289): avc: denied { ioctl } for pid=6048 comm="syz.2.67" path="socket:[9900]" dev="sockfs" ino=9900 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.030185][ T31] audit: type=1400 audit(1790559958.196:290): avc: denied { open } for pid=6056 comm="syz.3.68" path="/dev/ttyqb" dev="devtmpfs" ino=386 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 119.075887][ T31] audit: type=1400 audit(1790559958.236:291): avc: denied { create } for pid=6056 comm="syz.3.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 119.321787][ T6061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.68'. [ 119.326683][ T6061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.68'. [ 119.708861][ T31] audit: type=1400 audit(1790559958.876:292): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 120.394758][ T31] audit: type=1400 audit(1790559959.556:293): avc: denied { ioctl } for pid=6065 comm="syz.1.71" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 121.240755][ T6076] qnx4: no qnx4 filesystem (no root dir). [ 121.254693][ T31] audit: type=1400 audit(1790559960.216:294): avc: denied { bind } for pid=6073 comm="syz.2.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.254895][ T31] audit: type=1400 audit(1790559960.216:295): avc: denied { name_bind } for pid=6073 comm="syz.2.72" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 121.254965][ T31] audit: type=1400 audit(1790559960.216:296): avc: denied { node_bind } for pid=6073 comm="syz.2.72" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 121.255192][ T31] audit: type=1400 audit(1790559960.346:297): avc: denied { shutdown } for pid=6073 comm="syz.2.72" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 121.255357][ T31] audit: type=1400 audit(1790559960.406:298): avc: denied { mounton } for pid=6073 comm="syz.2.72" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 123.355622][ T6083] se_dev->se_dev_ptr already set for storage object [ 124.461198][ T6096] MINIX-fs: unable to read superblock [ 125.543024][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.74'. [ 125.753490][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 125.753508][ T31] audit: type=1400 audit(1790559964.916:300): avc: denied { read } for pid=6103 comm="syz.1.80" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.753696][ T31] audit: type=1400 audit(1790559964.916:301): avc: denied { open } for pid=6103 comm="syz.1.80" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.806662][ T6107] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 125.812163][ T31] audit: type=1400 audit(1790559964.966:302): avc: denied { ioctl } for pid=6103 comm="syz.1.80" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 126.514539][ T6111] se_dev->se_dev_ptr already set for storage object [ 127.077517][ T5762] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.222291][ T5762] usb 2-1: device descriptor read/64, error -71 [ 127.416344][ T6116] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 127.458403][ T5762] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.532067][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.587226][ T5762] usb 2-1: device descriptor read/64, error -71 [ 127.697091][ T5762] usb usb2-port1: attempt power cycle [ 128.360057][ T5762] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 128.446333][ T5762] usb 2-1: device descriptor read/8, error -71 [ 128.638079][ T31] audit: type=1400 audit(1790559967.806:303): avc: denied { create } for pid=6121 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.701274][ T31] audit: type=1400 audit(1790559967.866:304): avc: denied { ioctl } for pid=6121 comm="syz.0.82" path="socket:[8172]" dev="sockfs" ino=8172 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.746773][ T5762] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 128.834011][ T31] audit: type=1400 audit(1790559967.996:305): avc: denied { read } for pid=6121 comm="syz.0.82" path="socket:[8172]" dev="sockfs" ino=8172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 128.901636][ T31] audit: type=1400 audit(1790559968.066:306): avc: denied { create } for pid=6124 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.904990][ T31] audit: type=1400 audit(1790559968.066:307): avc: denied { ioctl } for pid=6121 comm="syz.0.82" path="socket:[8184]" dev="sockfs" ino=8184 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.905148][ T6123] syzkaller1: entered promiscuous mode [ 128.905161][ T6123] syzkaller1: entered allmulticast mode [ 128.926537][ T31] audit: type=1400 audit(1790559968.086:308): avc: denied { bind } for pid=6124 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.982565][ T5762] usb 2-1: device not accepting address 7, error -71 [ 128.984382][ T5762] usb usb2-port1: unable to enumerate USB device [ 129.745927][ T6129] se_dev->se_dev_ptr already set for storage object [ 129.842539][ T31] audit: type=1400 audit(1790559969.006:309): avc: denied { create } for pid=6114 comm="syz.3.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 131.217080][ T6143] FAULT_INJECTION: forcing a failure. [ 131.217080][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 131.217116][ T6143] CPU: 0 UID: 0 PID: 6143 Comm: syz.2.90 Not tainted syzkaller #0 PREEMPT(full) [ 131.217141][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.217153][ T6143] Call Trace: [ 131.217161][ T6143] [ 131.217169][ T6143] dump_stack_lvl+0x100/0x190 [ 131.217211][ T6143] should_fail_ex.cold+0x5/0xa [ 131.217242][ T6143] should_failslab+0xc2/0x120 [ 131.217271][ T6143] kmem_cache_alloc_noprof+0x92/0x6a0 [ 131.217297][ T6143] ? ceph_msg_new2+0x3e/0x4f0 [ 131.217331][ T6143] ceph_msg_new2+0x3e/0x4f0 [ 131.217362][ T6143] ceph_monc_init+0x63d/0xcd0 [ 131.217393][ T6143] ceph_create_client+0x25e/0x370 [ 131.217420][ T6143] ceph_get_tree+0x1a4/0x1fd0 [ 131.217441][ T6143] ? bpf_lsm_capable+0x9/0x10 [ 131.217459][ T6143] ? security_capable+0x80/0x260 [ 131.217484][ T6143] vfs_get_tree+0x92/0x320 [ 131.217514][ T6143] vfs_cmd_create+0xd7/0x2a0 [ 131.217542][ T6143] __do_sys_fsconfig+0x55a/0xcb0 [ 131.217570][ T6143] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 131.217608][ T6143] do_syscall_64+0x123/0x790 [ 131.217633][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.217654][ T6143] RIP: 0033:0x7f9cf159e159 [ 131.217676][ T6143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.217694][ T6143] RSP: 002b:00007f9cf24c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 131.217716][ T6143] RAX: ffffffffffffffda RBX: 00007f9cf1825fa0 RCX: 00007f9cf159e159 [ 131.217732][ T6143] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 131.217744][ T6143] RBP: 00007f9cf163506b R08: 0000000000000000 R09: 0000000000000000 [ 131.217757][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.217769][ T6143] R13: 00007f9cf1826038 R14: 00007f9cf1825fa0 R15: 00007fff17f74e48 [ 131.217798][ T6143] [ 131.964524][ T6150] netlink: 72 bytes leftover after parsing attributes in process `syz.2.93'. [ 132.038000][ T6152] se_dev->se_dev_ptr already set for storage object [ 132.631871][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.631935][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.959056][ T31] audit: type=1400 audit(1790559972.126:310): avc: denied { create } for pid=6149 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.004842][ T31] audit: type=1400 audit(1790559972.166:311): avc: denied { create } for pid=6155 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.100238][ T31] audit: type=1400 audit(1790559972.266:312): avc: denied { bind } for pid=6149 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.138616][ T31] audit: type=1400 audit(1790559972.306:313): avc: denied { setopt } for pid=6149 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.237460][ T31] audit: type=1400 audit(1790559972.396:314): avc: denied { mount } for pid=6149 comm="syz.3.92" name="/" dev="rpc_pipefs" ino=10153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 133.307282][ T31] audit: type=1400 audit(1790559972.476:315): avc: denied { write } for pid=6149 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 133.477048][ T31] audit: type=1400 audit(1790559972.636:316): avc: denied { call } for pid=6155 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 133.630382][ T31] audit: type=1400 audit(1790559972.796:317): avc: denied { transfer } for pid=6155 comm="syz.0.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 133.745819][ T6156] smpboot: CPU 1 is now offline [ 135.577670][ T6171] se_dev->se_dev_ptr already set for storage object [ 135.800552][ T31] audit: type=1400 audit(1790559974.966:318): avc: denied { map_create } for pid=6174 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 135.802551][ T31] audit: type=1400 audit(1790559974.966:319): avc: denied { map_read map_write } for pid=6174 comm="syz.1.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 137.118760][ T6181] binder: BINDER_SET_CONTEXT_MGR already set [ 137.118771][ T6181] binder: 6180:6181 ioctl 4018620d 200000004a80 returned -16 [ 139.437980][ T6184] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 140.438695][ T6191] netlink: 72 bytes leftover after parsing attributes in process `syz.0.104'. [ 140.460755][ T6191] se_dev->se_dev_ptr already set for storage object [ 140.801709][ T6196] MINIX-fs: unable to read superblock [ 142.074368][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 142.075692][ T6204] binder: 6201:6204 ioctl 4018620d 0 returned -22 [ 142.076316][ T6204] binder: 6201:6204 unknown command 0 [ 142.076326][ T6204] binder: 6201:6204 ioctl c0306201 200000000080 returned -22 [ 143.023958][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 143.070930][ T6215] se_dev->se_dev_ptr already set for storage object [ 143.165553][ T6210] syzkaller0: entered promiscuous mode [ 143.165569][ T6210] syzkaller0: entered allmulticast mode [ 143.196005][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 143.196017][ T31] audit: type=1400 audit(1790559982.356:326): avc: denied { write } for pid=6208 comm="syz.2.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.222934][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 143.228679][ T9] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 143.240227][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.240243][ T9] usb 4-1: config 0 has no interface number 0 [ 143.240264][ T9] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 143.240292][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.278643][ T9] usb 4-1: config 0 descriptor?? [ 143.319806][ T9] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 144.419367][ T9] usb 4-1: USB disconnect, device number 5 [ 144.789857][ T31] audit: type=1400 audit(1790559983.956:327): avc: denied { listen } for pid=6220 comm="syz.2.112" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.885330][ T31] audit: type=1400 audit(1790559985.046:328): avc: denied { accept } for pid=6220 comm="syz.2.112" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 145.943539][ T31] audit: type=1400 audit(1790559985.106:329): avc: denied { create } for pid=6224 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.024108][ T31] audit: type=1400 audit(1790559985.186:330): avc: denied { connect } for pid=6224 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.384593][ T6225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 148.558143][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 148.687363][ T9] usb 5-1: device descriptor read/64, error -71 [ 148.927710][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 148.967858][ T31] audit: type=1400 audit(1790559988.136:331): avc: denied { read write } for pid=6252 comm="syz.1.118" name="vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 148.969239][ T31] audit: type=1400 audit(1790559988.136:332): avc: denied { open } for pid=6252 comm="syz.1.118" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 149.059439][ T9] usb 5-1: device descriptor read/64, error -71 [ 149.065178][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 149.167615][ T9] usb usb5-port1: attempt power cycle [ 149.270189][ T5762] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 149.419307][ T5762] usb 2-1: Using ep0 maxpacket: 8 [ 149.421771][ T5762] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.426015][ T5762] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 149.426044][ T5762] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.426057][ T5762] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.426071][ T5762] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.426085][ T5762] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.426107][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.735818][ T5762] usb 2-1: GET_CAPABILITIES returned 0 [ 150.735845][ T5762] usbtmc 2-1:16.0: can't read capabilities [ 150.922009][ T6261] MINIX-fs: unable to read superblock [ 151.185966][ T6253] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 151.840504][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 151.891936][ T6272] se_dev->se_dev_ptr already set for storage object [ 152.899681][ T9] usb 5-1: device descriptor read/64, error -71 [ 152.970255][ T6273] binder: 6270:6273 ioctl 4018620d 0 returned -22 [ 152.970920][ T6273] binder: 6270:6273 unknown command 0 [ 152.970930][ T6273] binder: 6270:6273 ioctl c0306201 200000000080 returned -22 [ 153.071789][ T5599] usb 2-1: USB disconnect, device number 8 [ 154.586107][ T31] audit: type=1400 audit(1790559993.746:333): avc: denied { read } for pid=6284 comm="syz.3.127" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.586325][ T31] audit: type=1400 audit(1790559993.746:334): avc: denied { open } for pid=6284 comm="syz.3.127" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 154.643386][ T31] audit: type=1400 audit(1790559993.806:335): avc: denied { allowed } for pid=6279 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 154.643417][ T31] audit: type=1400 audit(1790559993.806:336): avc: denied { create } for pid=6279 comm="syz.4.126" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.032993][ T31] audit: type=1400 audit(1790559994.196:337): avc: denied { map } for pid=6279 comm="syz.4.126" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.033028][ T31] audit: type=1400 audit(1790559994.196:338): avc: denied { read write } for pid=6279 comm="syz.4.126" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11870 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 155.260728][ T6278] ceph: No mds server is up or the cluster is laggy [ 155.560298][ T31] audit: type=1400 audit(1790559994.726:339): avc: denied { create } for pid=6284 comm="syz.3.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.655271][ T9] libceph: connect (1)[c::]:6789 error -101 [ 155.655757][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 155.742792][ T31] audit: type=1400 audit(1790559994.906:340): avc: denied { write } for pid=6279 comm="syz.4.126" name="demux0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 155.743019][ T31] audit: type=1400 audit(1790559994.906:341): avc: denied { open } for pid=6279 comm="syz.4.126" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 155.745130][ T31] audit: type=1400 audit(1790559994.906:342): avc: denied { read write } for pid=5597 comm="syz-executor" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 157.112584][ T6299] tipc: Started in network mode [ 157.112607][ T6299] tipc: Node identity f20b9241973f, cluster identity 4711 [ 157.112744][ T6299] tipc: Enabled bearer , priority 0 [ 157.145884][ T6299] syzkaller0: entered promiscuous mode [ 157.145900][ T6299] syzkaller0: entered allmulticast mode [ 157.625669][ T2266] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 158.249682][ T6303] MINIX-fs: unable to read superblock [ 158.264188][ T2266] usb 5-1: Using ep0 maxpacket: 8 [ 158.277794][ T2266] usb 5-1: New USB device found, idVendor=0413, idProduct=6a04, bcdDevice=27.2b [ 158.281113][ T2266] usb 5-1: config 135 interface 0 has no altsetting 0 [ 158.288001][ T2266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.288033][ T2266] usb 5-1: Product: syz [ 158.288042][ T2266] usb 5-1: Manufacturer: syz [ 158.288051][ T2266] usb 5-1: SerialNumber: syz [ 158.365461][ T9] tipc: Node number set to 1697944129 [ 158.397055][ T6308] tipc: Resetting bearer [ 158.400337][ T6296] tipc: Started in network mode [ 158.400356][ T6296] tipc: Node identity 068428f6a4e, cluster identity 4711 [ 158.400444][ T6296] tipc: Enabled bearer , priority 0 [ 158.402910][ T6307] syzkaller0: entered promiscuous mode [ 158.402923][ T6307] syzkaller0: entered allmulticast mode [ 158.465747][ T6298] tipc: Resetting bearer [ 158.540676][ T6298] tipc: Disabling bearer [ 158.555736][ T6304] FAULT_INJECTION: forcing a failure. [ 158.555736][ T6304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.555758][ T6304] CPU: 0 UID: 0 PID: 6304 Comm: syz.4.131 Not tainted syzkaller #0 PREEMPT(full) [ 158.555773][ T6304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.555781][ T6304] Call Trace: [ 158.555785][ T6304] [ 158.555789][ T6304] dump_stack_lvl+0x100/0x190 [ 158.555811][ T6304] should_fail_ex.cold+0x5/0xa [ 158.555829][ T6304] _copy_from_user+0x2e/0xd0 [ 158.555844][ T6304] io_uring_setup+0xc0/0x160 [ 158.555861][ T6304] ? lock_acquire+0x1d1/0x380 [ 158.555874][ T6304] ? avc_has_perm_noaudit+0x56/0x470 [ 158.555891][ T6304] ? __pfx_io_uring_setup+0x10/0x10 [ 158.555905][ T6304] ? find_held_lock+0x2b/0x80 [ 158.555922][ T6304] ? avc_has_perm_noaudit+0x11e/0x470 [ 158.555938][ T6304] ? avc_has_perm_noaudit+0x11e/0x470 [ 158.555965][ T6304] ? ksys_write+0x1ac/0x250 [ 158.555978][ T6304] ? __pfx_ksys_write+0x10/0x10 [ 158.555994][ T6304] __x64_sys_io_uring_setup+0xc2/0x170 [ 158.556010][ T6304] do_syscall_64+0x123/0x790 [ 158.556024][ T6304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.556036][ T6304] RIP: 0033:0x7f9a49f9e159 [ 158.556046][ T6304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.556057][ T6304] RSP: 002b:00007f9a4aed9ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 158.556068][ T6304] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007f9a49f9e159 [ 158.556075][ T6304] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 00000000000003b5 [ 158.556082][ T6304] RBP: 0000200000000500 R08: 0000200000000340 R09: 0000000000000000 [ 158.556089][ T6304] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588 [ 158.556096][ T6304] R13: 0000200000000590 R14: 00007f9a4aed9fd8 R15: 0000000000000000 [ 158.556111][ T6304] [ 158.804717][ T2266] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 158.805474][ T2266] dvb_usb_af9015 5-1:135.0: probe with driver dvb_usb_af9015 failed with error -22 [ 158.830669][ T6313] tipc: Resetting bearer [ 158.831060][ T2266] usb 5-1: USB disconnect, device number 8 [ 158.947393][ T6310] capability: warning: `syz.1.133' uses deprecated v2 capabilities in a way that may be insecure [ 159.013267][ T6315] macvtap1: entered allmulticast mode [ 159.013514][ T6315] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 159.013614][ T6315] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 159.052568][ T6315] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 159.081191][ T6315] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 159.149588][ T6318] EXT4-fs warning (device sda1): verify_group_input:158: Reserved blocks too high (5) [ 159.193420][ T9] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 159.194810][ T6295] tipc: Resetting bearer [ 159.217582][ T6295] tipc: Disabling bearer hÝ[ 159.529087][ T6330] mmap: syz.4.137 (6330) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 159.579939][ T5762] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 159.871381][ T5762] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 160.568801][ T5762] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.568844][ T5762] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 160.568868][ T5762] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.808102][ T6334] 9pnet_virtio: no channels available for device syz [ 160.815157][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 160.815170][ T31] audit: type=1400 audit(1790559999.976:399): avc: denied { unlink } for pid=6333 comm="syz.4.139" name="#3" dev="tmpfs" ino=173 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.014968][ T31] audit: type=1400 audit(1790560001.176:400): avc: denied { mount } for pid=6337 comm="syz.3.140" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 162.058683][ T31] audit: type=1400 audit(1790560001.216:401): avc: denied { read } for pid=6326 comm="syz.2.136" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 162.061745][ T31] audit: type=1400 audit(1790560001.226:402): avc: denied { open } for pid=6326 comm="syz.2.136" path="/dev/input/mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 162.154630][ T31] audit: type=1400 audit(1790560001.316:403): avc: denied { cmd } for pid=6326 comm="iou-wrk-6327" path="socket:[12229]" dev="sockfs" ino=12229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.210719][ T5762] dvb_ttusb_budget: cmd xter failed, receive error -22 [ 162.210733][ T5762] dvb_ttusb_budget: ttusb_init_controller: error [ 162.210742][ T5762] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 162.383193][ T5762] DVB: Unable to find symbol stv0299_attach() [ 162.427678][ T5599] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 162.429208][ T6346] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 162.626726][ T5599] usb 5-1: Using ep0 maxpacket: 8 [ 162.627202][ T5599] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 163.006759][ T5599] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 163.006779][ T5599] usb 5-1: config 0 has no interface number 0 [ 163.068263][ T5599] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.068296][ T5599] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.449956][ T5599] usb 5-1: config 0 descriptor?? [ 163.579488][ T5762] DVB: Unable to find symbol tda8083_attach() [ 163.579499][ T5762] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 163.615152][ T5599] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 163.644327][ T6352] MINIX-fs: unable to read superblock [ 163.710680][ T5599] usb 3-1: USB disconnect, device number 2 [ 164.083899][ T31] audit: type=1400 audit(1790560003.246:404): avc: denied { execute } for pid=6368 comm="syz.3.148" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.084379][ T6369] process 'syz.3.148' launched '/dev/fd/3' with NULL argv: empty string added [ 164.084579][ T31] audit: type=1400 audit(1790560003.246:405): avc: denied { execute_no_trans } for pid=6368 comm="syz.3.148" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 164.161896][ T31] audit: type=1400 audit(1790560003.326:406): avc: denied { create } for pid=6368 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 164.165299][ T31] audit: type=1400 audit(1790560003.326:407): avc: denied { write } for pid=6368 comm="syz.3.148" name="icmp" dev="proc" ino=4026533370 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 164.242630][ T31] audit: type=1400 audit(1790560003.406:408): avc: denied { setopt } for pid=6368 comm="syz.3.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.107237][ T5599] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 166.354558][ T5599] usb 4-1: device descriptor read/64, error -71 [ 167.374983][ T6394] binder: 6389:6394 ioctl 4018620d 0 returned -22 [ 167.375847][ T6394] binder: 6389:6394 unknown command 0 [ 167.375858][ T6394] binder: 6389:6394 ioctl c0306201 200000000080 returned -22 [ 167.398098][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 167.398109][ T31] audit: type=1400 audit(1790560006.536:417): avc: denied { ioctl } for pid=6389 comm="syz.1.154" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.456843][ T5599] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 167.587491][ T5599] usb 4-1: device descriptor read/64, error -71 [ 167.663228][ T31] audit: type=1400 audit(1790560006.826:418): avc: denied { create } for pid=6398 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.807815][ T5599] usb usb4-port1: attempt power cycle [ 168.683429][ T31] audit: type=1400 audit(1790560007.336:419): avc: denied { getopt } for pid=6398 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 168.844942][ T6404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.156'. [ 168.857374][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 168.927762][ T5728] usb 5-1: USB disconnect, device number 9 [ 168.996822][ T9] usb 3-1: device descriptor read/64, error -71 [ 169.155709][ T31] audit: type=1400 audit(1790560008.316:420): avc: denied { create } for pid=6409 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.201321][ T31] audit: type=1400 audit(1790560008.366:421): avc: denied { write } for pid=6409 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 169.205415][ T31] audit: type=1400 audit(1790560008.366:422): avc: denied { setopt } for pid=6409 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.257682][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 169.275049][ T6407] syzkaller0: entered promiscuous mode [ 169.275064][ T6407] syzkaller0: entered allmulticast mode [ 169.296634][ T31] audit: type=1400 audit(1790560008.466:423): avc: denied { ioctl } for pid=6406 comm="syz.3.157" path="socket:[12466]" dev="sockfs" ino=12466 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.327594][ T31] audit: type=1400 audit(1790560008.496:424): avc: denied { write } for pid=6406 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 169.380391][ T31] audit: type=1400 audit(1790560008.546:425): avc: denied { write } for pid=6406 comm="syz.3.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 169.410737][ T9] usb 3-1: device descriptor read/64, error -71 [ 169.517982][ T9] usb usb3-port1: attempt power cycle [ 169.576118][ T31] audit: type=1400 audit(1790560008.736:426): avc: denied { create } for pid=6412 comm="syz.1.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 169.823206][ T6418] FAULT_INJECTION: forcing a failure. [ 169.823206][ T6418] name failslab, interval 1, probability 0, space 0, times 0 [ 169.823228][ T6418] CPU: 0 UID: 0 PID: 6418 Comm: syz.1.162 Not tainted syzkaller #0 PREEMPT(full) [ 169.823242][ T6418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.823249][ T6418] Call Trace: [ 169.823253][ T6418] [ 169.823258][ T6418] dump_stack_lvl+0x100/0x190 [ 169.823280][ T6418] should_fail_ex.cold+0x5/0xa [ 169.823298][ T6418] should_failslab+0xc2/0x120 [ 169.823314][ T6418] __kmalloc_noprof+0xfc/0x840 [ 169.823327][ T6418] ? rcu_is_watching+0x13/0xc0 [ 169.823344][ T6418] ? tomoyo_realpath_from_path+0xb6/0x690 [ 169.823368][ T6418] tomoyo_realpath_from_path+0xb6/0x690 [ 169.823387][ T6418] tomoyo_path_number_perm+0x23c/0x580 [ 169.823407][ T6418] ? tomoyo_path_number_perm+0x22e/0x580 [ 169.823421][ T6418] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 169.823440][ T6418] ? __lock_acquire+0x5c0/0x1f40 [ 169.823462][ T6418] ? __fget_files+0x34/0x3d0 [ 169.823477][ T6418] ? find_held_lock+0x2b/0x80 [ 169.823494][ T6418] ? hook_file_ioctl_common+0x140/0x440 [ 169.823516][ T6418] ? __fget_files+0x21f/0x3d0 [ 169.823534][ T6418] security_file_ioctl+0xd3/0x230 [ 169.823549][ T6418] __x64_sys_ioctl+0xb7/0x210 [ 169.823564][ T6418] do_syscall_64+0x123/0x790 [ 169.823578][ T6418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.823590][ T6418] RIP: 0033:0x7f0a5c59e159 [ 169.823600][ T6418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.823611][ T6418] RSP: 002b:00007f0a5d533028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.823622][ T6418] RAX: ffffffffffffffda RBX: 00007f0a5c825fa0 RCX: 00007f0a5c59e159 [ 169.823629][ T6418] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000003 [ 169.823636][ T6418] RBP: 00007f0a5d533090 R08: 0000000000000000 R09: 0000000000000000 [ 169.823643][ T6418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.823649][ T6418] R13: 00007f0a5c826038 R14: 00007f0a5c825fa0 R15: 00007ffc138c0958 [ 169.823664][ T6418] [ 169.823689][ T6418] ERROR: Out of memory at tomoyo_realpath_from_path. [ 169.868974][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 169.892684][ T9] usb 3-1: device descriptor read/8, error -71 [ 170.126880][ T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 170.149255][ T6416] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 170.151024][ T9] usb 3-1: device descriptor read/8, error -71 [ 170.257116][ T9] usb usb3-port1: unable to enumerate USB device [ 172.245944][ T6427] netlink: 'syz.1.165': attribute type 11 has an invalid length. [ 172.245959][ T6427] netlink: 220 bytes leftover after parsing attributes in process `syz.1.165'. [ 174.102247][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 174.102260][ T31] audit: type=1400 audit(1790560013.236:435): avc: denied { read } for pid=6455 comm="syz.3.170" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 174.102287][ T31] audit: type=1400 audit(1790560013.236:436): avc: denied { open } for pid=6455 comm="syz.3.170" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 174.102309][ T31] audit: type=1400 audit(1790560013.266:437): avc: denied { write } for pid=6455 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.286815][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 174.482243][ T9] usb 2-1: New USB device found, idVendor=6547, idProduct=0232, bcdDevice= 0.00 [ 174.496999][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.497016][ T9] usb 2-1: Product: syz [ 174.497025][ T9] usb 2-1: Manufacturer: syz [ 174.497033][ T9] usb 2-1: SerialNumber: syz [ 174.529513][ T9] ark3116 2-1:1.0: ark3116 converter detected [ 174.575851][ T6467] FAULT_INJECTION: forcing a failure. [ 174.575851][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.575874][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.4.173 Not tainted syzkaller #0 PREEMPT(full) [ 174.575887][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 174.575894][ T6467] Call Trace: [ 174.575898][ T6467] [ 174.575903][ T6467] dump_stack_lvl+0x100/0x190 [ 174.575926][ T6467] should_fail_ex.cold+0x5/0xa [ 174.575945][ T6467] _copy_from_user+0x2e/0xd0 [ 174.575960][ T6467] move_addr_to_kernel+0x65/0x170 [ 174.575975][ T6467] __sys_connect+0xb5/0x170 [ 174.575989][ T6467] ? __pfx___sys_connect+0x10/0x10 [ 174.576002][ T6467] ? __fget_files+0x21f/0x3d0 [ 174.576023][ T6467] ? __pfx_ksys_write+0x10/0x10 [ 174.576040][ T6467] __x64_sys_connect+0x72/0xb0 [ 174.576053][ T6467] ? lockdep_hardirqs_on+0x7d/0x110 [ 174.576065][ T6467] do_syscall_64+0x123/0x790 [ 174.576078][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.576090][ T6467] RIP: 0033:0x7f9a49f9e159 [ 174.576107][ T6467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.576117][ T6467] RSP: 002b:00007f9a4aeda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 174.576129][ T6467] RAX: ffffffffffffffda RBX: 00007f9a4a225fa0 RCX: 00007f9a49f9e159 [ 174.576137][ T6467] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000003 [ 174.576143][ T6467] RBP: 00007f9a4aeda090 R08: 0000000000000000 R09: 0000000000000000 [ 174.576150][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.576156][ T6467] R13: 00007f9a4a226038 R14: 00007f9a4a225fa0 R15: 00007ffc0f61bf78 [ 174.576172][ T6467] [ 174.795165][ T6451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.795422][ T6451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.831548][ T31] audit: type=1400 audit(1790560013.996:438): avc: denied { sqpoll } for pid=6450 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 174.975280][ T9] ark3116 ttyUSB0: using RS232 mode [ 174.987777][ T9] usb 2-1: ark3116 converter now attached to ttyUSB0 [ 175.043435][ T9] usb 2-1: USB disconnect, device number 9 [ 175.129254][ T31] audit: type=1400 audit(1790560014.296:439): avc: denied { ioctl } for pid=6473 comm="syz.4.176" path="socket:[12714]" dev="sockfs" ino=12714 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 175.129613][ T9] ark3116 ttyUSB0: ark3116 converter now disconnected from ttyUSB0 [ 175.130134][ T9] ark3116 2-1:1.0: device disconnected [ 176.458870][ T31] audit: type=1400 audit(1790560015.626:440): avc: denied { mount } for pid=6476 comm="syz.0.177" name="/" dev="gadgetfs" ino=7130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 176.585059][ T31] audit: type=1400 audit(1790560015.746:441): avc: denied { create } for pid=6485 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.624076][ T6486] ieee802154 phy0 wpan0: encryption failed: -22 [ 176.624130][ T31] audit: type=1400 audit(1790560015.786:442): avc: denied { write } for pid=6485 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 176.796755][ T5599] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 176.976790][ T5599] usb 5-1: Using ep0 maxpacket: 32 [ 177.021467][ T5599] usb 5-1: unable to get BOS descriptor or descriptor too short [ 177.021501][ T5599] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 177.049512][ T5599] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 177.049529][ T5599] usb 5-1: config 14 has an invalid interface number: 81 but max is 1 [ 177.049541][ T5599] usb 5-1: config 14 has no interface number 0 [ 177.049550][ T5599] usb 5-1: config 14 has no interface number 1 [ 177.049581][ T5599] usb 5-1: config 14 interface 81 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 177.049594][ T5599] usb 5-1: config 14 interface 81 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 177.049608][ T5599] usb 5-1: config 14 interface 81 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 177.049623][ T5599] usb 5-1: config 14 interface 81 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 177.049637][ T5599] usb 5-1: config 14 interface 81 altsetting 5 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 177.049651][ T5599] usb 5-1: config 14 interface 81 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0 [ 177.049669][ T5599] usb 5-1: config 14 interface 81 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.049683][ T5599] usb 5-1: config 14 interface 57 has no altsetting 0 [ 177.049692][ T5599] usb 5-1: config 14 interface 81 has no altsetting 0 [ 177.396605][ T5599] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.396625][ T5599] usb 5-1: Product: syz [ 177.396633][ T5599] usb 5-1: Manufacturer: syz [ 177.396642][ T5599] usb 5-1: SerialNumber: syz [ 178.043138][ T6484] bridge0: port 3(veth1_to_bridge) entered blocking state [ 178.043220][ T6484] bridge0: port 3(veth1_to_bridge) entered disabled state [ 178.043448][ T6484] veth1_to_bridge: entered allmulticast mode [ 178.119139][ T6484] veth1_to_bridge: entered promiscuous mode [ 178.119309][ T6484] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 178.153810][ T6488] MINIX-fs: unable to read superblock [ 178.183392][ T6484] bridge0: port 3(veth1_to_bridge) entered blocking state [ 178.183587][ T6484] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 178.304928][ T5599] legousbtower 5-1:14.57: interrupt endpoints not found [ 178.378837][ T31] audit: type=1400 audit(1790560017.546:443): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 178.637305][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.662488][ T6504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.185'. [ 178.662698][ T6504] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 178.712582][ T31] audit: type=1400 audit(1790560017.876:444): avc: denied { bind } for pid=6483 comm="syz.4.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 178.748590][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 178.777329][ T5599] legousbtower 5-1:14.81: LEGO USB Tower firmware version is 0.0 build 0 [ 178.784051][ T5599] legousbtower 5-1:14.81: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 178.821685][ T6504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.898760][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 178.921836][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.921853][ T9] usb 1-1: Product: syz [ 178.921862][ T9] usb 1-1: Manufacturer: syz [ 178.921871][ T9] usb 1-1: SerialNumber: syz [ 178.924397][ T9] usb 1-1: config 0 descriptor?? [ 178.992118][ T6505] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 179.214114][ T31] audit: type=1400 audit(1790560018.376:445): avc: denied { sys_module } for pid=6506 comm="syz.1.186" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 179.312977][ T31] audit: type=1400 audit(1790560018.476:446): avc: denied { read } for pid=5264 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 179.369135][ T6493] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 179.389472][ T9] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 179.389540][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 179.389551][ T9] usb 1-1: Please update to version 0.2 or newer [ 179.391498][ T31] audit: type=1400 audit(1790560018.556:447): avc: denied { mount } for pid=6506 comm="syz.1.186" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 179.394728][ T31] audit: type=1400 audit(1790560018.556:448): avc: denied { search } for pid=5264 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.396358][ T31] audit: type=1400 audit(1790560018.556:449): avc: denied { search } for pid=5264 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.414205][ T31] audit: type=1400 audit(1790560018.586:450): avc: denied { search } for pid=5264 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 179.446270][ T31] audit: type=1400 audit(1790560018.586:451): avc: denied { read } for pid=5264 comm="dhcpcd" name="n30" dev="tmpfs" ino=2654 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.446934][ T31] audit: type=1400 audit(1790560018.616:452): avc: denied { open } for pid=5264 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2654 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.470578][ T31] audit: type=1400 audit(1790560018.646:453): avc: denied { getattr } for pid=5264 comm="dhcpcd" path="/run/udev/data/n30" dev="tmpfs" ino=2654 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 179.568938][ C0] usb 5-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 179.648399][ T5599] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 179.691713][ T5728] usb 5-1: USB disconnect, device number 10 [ 179.718529][ T5728] legousbtower 5-1:14.81: LEGO USB Tower #-160 now disconnected [ 179.777003][ T5599] usb 2-1: device descriptor read/64, error -71 [ 179.803341][ T9] usb 1-1: USB disconnect, device number 3 [ 180.016986][ T5599] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 180.026403][ T31] audit: type=1400 audit(1790560019.186:454): avc: denied { read } for pid=6527 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.149042][ T5599] usb 2-1: device descriptor read/64, error -71 [ 180.257737][ T5599] usb usb2-port1: attempt power cycle [ 180.298508][ T6533] ip_tables: iptables: counters copy to user failed while replacing table [ 181.359365][ T6546] binder: 6536:6546 ioctl 4018620d 0 returned -22 [ 181.359757][ T6546] binder: 6536:6546 unknown command 0 [ 181.359766][ T6546] binder: 6536:6546 ioctl c0306201 200000000080 returned -22 [ 181.373905][ T5599] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 181.398075][ T5599] usb 2-1: device descriptor read/8, error -71 [ 181.489285][ T6548] FAULT_INJECTION: forcing a failure. [ 181.489285][ T6548] name failslab, interval 1, probability 0, space 0, times 0 [ 181.489307][ T6548] CPU: 0 UID: 0 PID: 6548 Comm: syz.2.192 Not tainted syzkaller #0 PREEMPT(full) [ 181.489320][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.489327][ T6548] Call Trace: [ 181.489331][ T6548] [ 181.489336][ T6548] dump_stack_lvl+0x100/0x190 [ 181.489358][ T6548] should_fail_ex.cold+0x5/0xa [ 181.489376][ T6548] should_failslab+0xc2/0x120 [ 181.489393][ T6548] __kmalloc_noprof+0xfc/0x840 [ 181.489406][ T6548] ? rcu_is_watching+0x13/0xc0 [ 181.489423][ T6548] ? tomoyo_realpath_from_path+0xb6/0x690 [ 181.489444][ T6548] tomoyo_realpath_from_path+0xb6/0x690 [ 181.489464][ T6548] tomoyo_path_number_perm+0x23c/0x580 [ 181.489476][ T6548] ? tomoyo_path_number_perm+0x22e/0x580 [ 181.489494][ T6548] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 181.489514][ T6548] ? __lock_acquire+0x5c0/0x1f40 [ 181.489535][ T6548] ? __fget_files+0x34/0x3d0 [ 181.489551][ T6548] ? find_held_lock+0x2b/0x80 [ 181.489568][ T6548] ? hook_file_ioctl_common+0x140/0x440 [ 181.489590][ T6548] ? __fget_files+0x21f/0x3d0 [ 181.489608][ T6548] security_file_ioctl+0xd3/0x230 [ 181.489623][ T6548] __x64_sys_ioctl+0xb7/0x210 [ 181.489638][ T6548] do_syscall_64+0x123/0x790 [ 181.489652][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.489664][ T6548] RIP: 0033:0x7f9cf159e159 [ 181.489674][ T6548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.489685][ T6548] RSP: 002b:00007f9cf24c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.489697][ T6548] RAX: ffffffffffffffda RBX: 00007f9cf1825fa0 RCX: 00007f9cf159e159 [ 181.489705][ T6548] RDX: 0000200000000140 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 181.489712][ T6548] RBP: 00007f9cf24c4090 R08: 0000000000000000 R09: 0000000000000000 [ 181.489719][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.489732][ T6548] R13: 00007f9cf1826038 R14: 00007f9cf1825fa0 R15: 00007fff17f74e48 [ 181.489748][ T6548] [ 181.493971][ T6548] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.708193][ T5599] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 181.760838][ T5599] usb 2-1: device descriptor read/8, error -71 [ 181.871592][ T5599] usb usb2-port1: unable to enumerate USB device [ 184.925911][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 184.925924][ T31] audit: type=1400 audit(1790560024.086:465): avc: denied { write } for pid=6559 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.968296][ T31] audit: type=1400 audit(1790560024.136:466): avc: denied { remove_name } for pid=6559 comm="rm" name="resolv.conf.sl0.dhcp" dev="tmpfs" ino=2683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.997454][ T31] audit: type=1400 audit(1790560024.166:467): avc: denied { unlink } for pid=6559 comm="rm" name="resolv.conf.sl0.dhcp" dev="tmpfs" ino=2683 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 185.321367][ T6575] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 185.370396][ T31] audit: type=1400 audit(1790560024.536:468): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 185.401669][ T31] audit: type=1400 audit(1790560024.566:469): avc: denied { ioctl } for pid=6573 comm="syz.2.200" path="socket:[13096]" dev="sockfs" ino=13096 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 185.444884][ T6580] jffs2: notice: (6580) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 186.136442][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.202'. [ 186.136847][ T31] audit: type=1400 audit(1790560025.296:470): avc: denied { mount } for pid=6577 comm="syz.0.202" name="/" dev="configfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 186.136876][ T31] audit: type=1400 audit(1790560025.296:471): avc: denied { search } for pid=6577 comm="syz.0.202" name="/" dev="configfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.136899][ T31] audit: type=1400 audit(1790560025.296:472): avc: denied { search } for pid=6577 comm="syz.0.202" name="usb_gadget" dev="configfs" ino=3524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.136922][ T31] audit: type=1400 audit(1790560025.296:473): avc: denied { search } for pid=6577 comm="syz.0.202" name="/" dev="configfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.136944][ T31] audit: type=1400 audit(1790560025.296:474): avc: denied { search } for pid=6577 comm="syz.0.202" name="usb_gadget" dev="configfs" ino=3524 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 186.200627][ T6583] se_dev->se_dev_ptr already set for storage object [ 186.767839][ T6575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.470745][ T6600] binder: BINDER_SET_CONTEXT_MGR already set [ 187.470756][ T6600] binder: 6599:6600 ioctl 4018620d 200000004a80 returned -16 [ 187.556219][ T6575] bond1: (slave bond2): making interface the new active one [ 187.604128][ T6575] bond1: (slave bond2): Enslaving as an active interface with an up link [ 190.032888][ T6630] FAULT_INJECTION: forcing a failure. [ 190.032888][ T6630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.032911][ T6630] CPU: 0 UID: 0 PID: 6630 Comm: syz.0.210 Not tainted syzkaller #0 PREEMPT(full) [ 190.032924][ T6630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 190.032931][ T6630] Call Trace: [ 190.032936][ T6630] [ 190.032940][ T6630] dump_stack_lvl+0x100/0x190 [ 190.032962][ T6630] should_fail_ex.cold+0x5/0xa [ 190.032978][ T6630] _copy_from_user+0x2e/0xd0 [ 190.032994][ T6630] move_addr_to_kernel+0x65/0x170 [ 190.033008][ T6630] __sys_sendto+0x1b8/0x4e0 [ 190.033024][ T6630] ? __pfx___sys_sendto+0x10/0x10 [ 190.033042][ T6630] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 190.033062][ T6630] ? ksys_write+0x1ac/0x250 [ 190.033075][ T6630] ? __pfx_ksys_write+0x10/0x10 [ 190.033090][ T6630] __x64_sys_sendto+0xe0/0x1c0 [ 190.033104][ T6630] ? do_syscall_64+0xae/0x790 [ 190.033116][ T6630] ? lockdep_hardirqs_on+0x7d/0x110 [ 190.033127][ T6630] do_syscall_64+0x123/0x790 [ 190.033140][ T6630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.033152][ T6630] RIP: 0033:0x7fb18e19e159 [ 190.033162][ T6630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.033173][ T6630] RSP: 002b:00007fb18f09d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 190.033184][ T6630] RAX: ffffffffffffffda RBX: 00007fb18e425fa0 RCX: 00007fb18e19e159 [ 190.033192][ T6630] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 190.033199][ T6630] RBP: 00007fb18f09d090 R08: 0000200000000240 R09: 000000000000001c [ 190.033206][ T6630] R10: 0000000000040811 R11: 0000000000000246 R12: 0000000000000001 [ 190.033212][ T6630] R13: 00007fb18e426038 R14: 00007fb18e425fa0 R15: 00007ffc02611dc8 [ 190.033228][ T6630] [ 191.402255][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 191.402269][ T31] audit: type=1400 audit(1790560030.566:497): avc: denied { write } for pid=6637 comm="syz.2.206" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 191.519830][ T6643] netlink: 'syz.1.212': attribute type 4 has an invalid length. [ 191.540207][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 191.540233][ T6641] netlink: 'syz.0.211': attribute type 10 has an invalid length. [ 191.540242][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.211'. [ 191.582977][ T6641] geneve2: entered promiscuous mode [ 191.582994][ T6641] geneve2: entered allmulticast mode [ 192.506748][ T31] audit: type=1400 audit(1790560031.666:498): avc: denied { map } for pid=6637 comm="syz.2.206" path="socket:[13253]" dev="sockfs" ino=13253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 192.585782][ T6649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.211'. [ 193.423061][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 193.440466][ T6656] se_dev->se_dev_ptr already set for storage object [ 193.538939][ T31] audit: type=1400 audit(1790560032.706:499): avc: denied { write } for pid=6621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.686237][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 193.845670][ T6665] capability: warning: `syz.0.217' uses 32-bit capabilities (legacy support in use) [ 193.904711][ T6673] FAULT_INJECTION: forcing a failure. [ 193.904711][ T6673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.904734][ T6673] CPU: 0 UID: 0 PID: 6673 Comm: syz.2.218 Tainted: G L syzkaller #0 PREEMPT(full) [ 193.904750][ T6673] Tainted: [L]=SOFTLOCKUP [ 193.904754][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.904761][ T6673] Call Trace: [ 193.904765][ T6673] [ 193.904770][ T6673] dump_stack_lvl+0x100/0x190 [ 193.904800][ T6673] should_fail_ex.cold+0x5/0xa [ 193.904823][ T6673] _copy_from_user+0x2e/0xd0 [ 193.904840][ T6673] copy_msghdr_from_user+0x9f/0x4c0 [ 193.904855][ T6673] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 193.904870][ T6673] ? _kstrtoull+0x144/0x200 [ 193.904886][ T6673] ? __pfx__kstrtoull+0x10/0x10 [ 193.904905][ T6673] ___sys_sendmsg+0x106/0x1e0 [ 193.904919][ T6673] ? __pfx____sys_sendmsg+0x10/0x10 [ 193.904937][ T6673] ? __fget_files+0x34/0x3d0 [ 193.904965][ T6673] __sys_sendmmsg+0x20c/0x440 [ 193.904984][ T6673] ? __pfx___sys_sendmmsg+0x10/0x10 [ 193.905000][ T6673] ? ksys_write+0x190/0x250 [ 193.905024][ T6673] ? fput+0x7c/0x100 [ 193.905039][ T6673] ? ksys_write+0x1ac/0x250 [ 193.905052][ T6673] ? __pfx_ksys_write+0x10/0x10 [ 193.905067][ T6673] __x64_sys_sendmmsg+0x9c/0x100 [ 193.905083][ T6673] ? lockdep_hardirqs_on+0x7d/0x110 [ 193.905095][ T6673] do_syscall_64+0x123/0x790 [ 193.905109][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.905120][ T6673] RIP: 0033:0x7f9cf159e159 [ 193.905131][ T6673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.905141][ T6673] RSP: 002b:00007f9cf24c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 193.905153][ T6673] RAX: ffffffffffffffda RBX: 00007f9cf1825fa0 RCX: 00007f9cf159e159 [ 193.905161][ T6673] RDX: 0000000000000001 RSI: 0000200000003400 RDI: 0000000000000003 [ 193.905168][ T6673] RBP: 00007f9cf24c4090 R08: 0000000000000000 R09: 0000000000000000 [ 193.905175][ T6673] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 193.905181][ T6673] R13: 00007f9cf1826038 R14: 00007f9cf1825fa0 R15: 00007fff17f74e48 [ 193.905197][ T6673] [ 193.949182][ T31] audit: type=1400 audit(1790560033.106:500): avc: denied { write } for pid=6667 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.183979][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.194980][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.747152][ T5614] Bluetooth: hci1: command 0x0406 tx timeout [ 196.747240][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 196.747256][ T5614] Bluetooth: hci3: command 0x0406 tx timeout [ 196.747271][ T5614] Bluetooth: hci0: command 0x0406 tx timeout [ 196.747321][ T5616] Bluetooth: hci4: command 0x0406 tx timeout [ 199.195241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 199.195799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 199.196210][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 199.196642][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 199.197302][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 199.197844][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 199.198286][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 199.198799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 199.199251][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 199.199713][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 204.197044][ C0] net_ratelimit: 11638 callbacks suppressed [ 204.197060][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 204.197477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 204.197886][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 204.198317][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 204.198747][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 204.199175][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 204.199589][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 204.200340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 204.200740][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 204.201153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 209.206907][ C0] net_ratelimit: 18584 callbacks suppressed [ 209.206924][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 209.207198][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.207488][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 209.207786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.208063][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 209.208333][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.208600][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 209.208884][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.209151][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 209.209433][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 209.976696][ C0] sched: DL replenish lagged too much [ 214.216784][ C0] net_ratelimit: 26362 callbacks suppressed [ 214.216801][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.217050][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.217316][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 214.217430][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.217539][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.217784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.218026][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 214.218134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.218242][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 214.218522][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.226723][ C0] net_ratelimit: 27175 callbacks suppressed [ 219.226740][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.226983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 219.227097][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.227204][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.227460][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.227698][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 219.227805][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.227928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 219.228173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.228412][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 224.236743][ C0] net_ratelimit: 27850 callbacks suppressed [ 224.236760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.237008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 224.237134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.237243][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.237492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.237747][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 224.237855][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.237963][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.238206][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.238474][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 229.246784][ C0] net_ratelimit: 29394 callbacks suppressed [ 229.246801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.247046][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 229.247155][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.247264][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.247516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.247776][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 229.247885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.248009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.248254][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.248505][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 234.256736][ C0] net_ratelimit: 29331 callbacks suppressed [ 234.256753][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 234.256863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.256970][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.257229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 234.257473][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 234.257579][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.257690][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.257931][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 234.258173][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 234.258304][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.266809][ C0] net_ratelimit: 29942 callbacks suppressed [ 239.266826][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 239.266936][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.267044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.267286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 239.267539][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 239.267646][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.267775][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.268015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 239.268269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 239.268376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.276710][ C0] net_ratelimit: 29640 callbacks suppressed [ 244.276725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.276993][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 244.277232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 244.277339][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.277445][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.277707][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 244.277950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 244.278057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.278163][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.278417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.286725][ C0] net_ratelimit: 29430 callbacks suppressed [ 249.286742][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.287451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.287698][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 249.287807][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.287915][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.288165][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.288407][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 249.288519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.288643][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.288889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.296867][ C0] net_ratelimit: 29392 callbacks suppressed [ 254.296885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 254.296995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.297104][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.297348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.297590][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 254.297699][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.297830][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.298077][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.298320][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 254.298431][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.306688][ C0] net_ratelimit: 29796 callbacks suppressed [ 259.306705][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.306958][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 259.307198][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 259.307305][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.307411][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.307657][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 259.307895][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 259.308001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.308107][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.308346][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 264.316676][ C0] net_ratelimit: 29828 callbacks suppressed [ 264.316694][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 264.316804][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.316928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.317173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 264.317412][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 264.317519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.317626][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.317882][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 264.318124][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 264.318231][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.326663][ C0] net_ratelimit: 29515 callbacks suppressed [ 269.326682][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.326799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.327045][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.327288][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 269.327396][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.327504][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.327747][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.328035][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 269.328145][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.328253][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.336687][ C0] net_ratelimit: 29403 callbacks suppressed [ 274.336705][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.336954][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 274.337215][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 274.337323][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.337446][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.337691][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 274.337933][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 274.338041][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.338149][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.338397][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 276.487266][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.501180][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.346752][ C0] net_ratelimit: 29387 callbacks suppressed [ 279.346768][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 279.347022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 279.347131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.347240][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.347497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 279.347738][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 279.347846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.347976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.348221][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 279.348462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 284.356692][ C0] net_ratelimit: 29099 callbacks suppressed [ 284.356709][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 284.356821][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.356930][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.357175][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.357425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 284.357533][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.357641][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.357886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.358144][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 284.358253][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.366740][ C0] net_ratelimit: 29236 callbacks suppressed [ 289.366757][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.367010][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.367276][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 289.367384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.367508][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.367752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.367999][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 289.368108][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.368216][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.368462][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.376761][ C0] net_ratelimit: 29240 callbacks suppressed [ 294.376777][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 294.376888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.377003][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.377250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.377509][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 294.377617][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.377725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.377974][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 294.378226][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 294.378334][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.386863][ C0] net_ratelimit: 29294 callbacks suppressed [ 299.386879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 299.386989][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.387097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.387342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.387584][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 299.387692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.387805][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.388087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 299.388329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 299.388439][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.396703][ C0] net_ratelimit: 29270 callbacks suppressed [ 304.396719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 304.396830][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.396966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.397211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 304.397458][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 304.397584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.397691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.397934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 304.398176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 304.398283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.406662][ C0] net_ratelimit: 24790 callbacks suppressed [ 309.406680][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 309.406791][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.407203][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.407443][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 309.407691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 309.407797][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.408168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.408406][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 309.408671][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 309.408778][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.417354][ C0] net_ratelimit: 22401 callbacks suppressed [ 314.417371][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 314.417481][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.417869][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.417977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 314.418217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.418474][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 314.418580][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.418981][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.419087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 314.419327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.426738][ C0] net_ratelimit: 23880 callbacks suppressed [ 319.426754][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 319.426871][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.427250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.427359][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 319.427602][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.427848][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 319.427980][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.428367][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.428495][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:5a:4c:f2:eb:1f:a3, vlan:0) [ 319.428739][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 321.166623][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 323.664661][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6673/1:b..l P6193/1:b..l P5609/1:b..l P6619/1:b..l P39/1:b..l [ 323.676911][ C0] rcu: (detected by 0, t=10502 jiffies, g=25181, q=1707 ncpus=1) [ 323.684684][ C0] task:kworker/u8:2 state:R running task stack:25448 pid:39 tgid:39 ppid:2 task_flags:0x4248060 flags:0x00080000 [ 323.698239][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 323.704214][ C0] Call Trace: [ 323.707465][ C0] [ 323.710371][ C0] __schedule+0x1259/0x6920 [ 323.714863][ C0] ? unwind_next_frame+0xbd/0x2090 [ 323.719958][ C0] ? __pfx___schedule+0x10/0x10 [ 323.724785][ C0] ? mark_held_locks+0x40/0x70 [ 323.729522][ C0] preempt_schedule_irq+0x4e/0x90 [ 323.734524][ C0] irqentry_exit+0x205/0xa10 [ 323.739100][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.745053][ C0] RIP: 0010:lock_release+0x73/0x310 [ 323.750228][ C0] Code: 11 5e 0f 85 ff 0f 84 4a 01 00 00 65 8b 05 bd dc a5 12 85 c0 0f 85 3b 01 00 00 65 4c 8b 25 ed 95 a5 12 41 8b b4 24 a4 0b 00 00 <85> f6 0f 85 23 01 00 00 48 81 3b 40 d9 91 94 0f 84 16 01 00 00 9c [ 323.769807][ C0] RSP: 0018:ffffc90000af6c38 EFLAGS: 00000246 [ 323.775849][ C0] RAX: 0000000000000000 RBX: ffffffff8edec5a0 RCX: ffffffff92002701 [ 323.783804][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 323.791751][ C0] RBP: ffffffff81b9b54e R08: 0000000000000001 R09: 0000000000000007 [ 323.799709][ C0] R10: 0000000000000200 R11: 000000000001f349 R12: ffff888021a82580 [ 323.807651][ C0] R13: ffffc90000af6cf0 R14: ffffc90000af7140 R15: ffffc90000af6d24 [ 323.815613][ C0] ? unwind_next_frame+0x3be/0x2090 [ 323.820801][ C0] ? lock_release+0x24d/0x310 [ 323.825452][ C0] unwind_next_frame+0x3c3/0x2090 [ 323.830450][ C0] ? jbd2__journal_start+0x24a/0x6b0 [ 323.835723][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 323.841862][ C0] arch_stack_walk+0x94/0xf0 [ 323.846431][ C0] ? __ext4_journal_start_sb+0x314/0x610 [ 323.852047][ C0] stack_trace_save+0x8e/0xc0 [ 323.856765][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 323.862133][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 323.867060][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 323.871994][ C0] save_stack+0x162/0x1e0 [ 323.876301][ C0] ? __pfx_save_stack+0x10/0x10 [ 323.881126][ C0] ? __free_frozen_pages+0x79f/0x10f0 [ 323.886474][ C0] ? qlist_free_all+0x47/0xf0 [ 323.891122][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 323.896730][ C0] ? __kasan_slab_alloc+0x69/0x90 [ 323.901730][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 323.907335][ C0] ? jbd2__journal_start+0x24a/0x6b0 [ 323.912596][ C0] ? page_ext_put+0x3e/0xd0 [ 323.917075][ C0] __reset_page_owner+0x84/0x190 [ 323.921993][ C0] __free_frozen_pages+0x79f/0x10f0 [ 323.927167][ C0] ? __free_slab+0x80/0x220 [ 323.931641][ C0] qlist_free_all+0x47/0xf0 [ 323.936119][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 323.941554][ C0] __kasan_slab_alloc+0x69/0x90 [ 323.946381][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 323.951828][ C0] ? jbd2__journal_start+0x24a/0x6b0 [ 323.957106][ C0] jbd2__journal_start+0x24a/0x6b0 [ 323.962214][ C0] __ext4_journal_start_sb+0x314/0x610 [ 323.967665][ C0] ? ext4_do_writepages+0xbe4/0x3e80 [ 323.972969][ C0] ? ext4_meta_trans_blocks+0x24b/0x2f0 [ 323.978523][ C0] ext4_do_writepages+0xbe4/0x3e80 [ 323.983652][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 323.988573][ C0] ? lock_acquire+0x1d1/0x380 [ 323.993231][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 323.998783][ C0] ? ext4_writepages+0x34a/0x750 [ 324.003699][ C0] ext4_writepages+0x34a/0x750 [ 324.008457][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 324.013720][ C0] ? __page_table_check_zero+0x27f/0x410 [ 324.019334][ C0] ? do_writepages+0x4b5/0x600 [ 324.024094][ C0] ? do_writepages+0x4b5/0x600 [ 324.028834][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 324.034146][ C0] do_writepages+0x278/0x600 [ 324.038742][ C0] ? __pfx_do_writepages+0x10/0x10 [ 324.043841][ C0] ? reacquire_held_locks+0xdd/0x1f0 [ 324.049108][ C0] ? writeback_sb_inodes+0x3e1/0x1c50 [ 324.054467][ C0] __writeback_single_inode+0x164/0x1560 [ 324.060092][ C0] ? wbc_attach_and_unlock_inode+0xf7/0x120 [ 324.065982][ C0] ? __pfx___writeback_single_inode+0x10/0x10 [ 324.072030][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 324.077229][ C0] writeback_sb_inodes+0x766/0x1c50 [ 324.082429][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 324.088055][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 324.092985][ C0] ? _raw_spin_unlock+0x28/0x50 [ 324.097814][ C0] ? move_expired_inodes+0x5ea/0x8f0 [ 324.103091][ C0] __writeback_inodes_wb+0xf8/0x2d0 [ 324.108274][ C0] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 324.114054][ C0] ? queue_io+0x287/0x530 [ 324.118355][ C0] wb_writeback+0x6f6/0xb50 [ 324.122856][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 324.127880][ C0] ? get_nr_inodes+0x100/0x150 [ 324.132624][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.137805][ C0] wb_workfn+0x93f/0xc80 [ 324.142039][ C0] ? __pfx_try_to_wake_up+0x10/0x10 [ 324.147214][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 324.152014][ C0] ? process_one_work+0x906/0x1b10 [ 324.157187][ C0] ? process_one_work+0x906/0x1b10 [ 324.162301][ C0] process_one_work+0xac7/0x1b10 [ 324.167239][ C0] ? __pfx_process_one_work+0x10/0x10 [ 324.172615][ C0] ? lock_acquire+0x1d1/0x380 [ 324.177273][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 324.182019][ C0] worker_thread+0x5ef/0xe50 [ 324.186595][ C0] ? __pfx_worker_thread+0x10/0x10 [ 324.191687][ C0] ? kthread+0x13a/0x450 [ 324.195905][ C0] ? __pfx_worker_thread+0x10/0x10 [ 324.201000][ C0] kthread+0x373/0x450 [ 324.205044][ C0] ? __pfx_kthread+0x10/0x10 [ 324.209611][ C0] ret_from_fork+0x730/0xd60 [ 324.214194][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 324.219280][ C0] ? __switch_to+0x800/0x10f0 [ 324.223951][ C0] ? __pfx_kthread+0x10/0x10 [ 324.228522][ C0] ret_from_fork_asm+0x1a/0x30 [ 324.233283][ C0] [ 324.236279][ C0] task:syz.3.207 state:R running task stack:25640 pid:6619 tgid:6605 ppid:5609 task_flags:0x400140 flags:0x00080002 [ 324.249725][ C0] Call Trace: [ 324.252981][ C0] [ 324.255889][ C0] __schedule+0x1259/0x6920 [ 324.260391][ C0] ? finish_task_switch.isra.0+0x2bd/0x10d0 [ 324.266280][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 324.271210][ C0] ? __pfx___schedule+0x10/0x10 [ 324.276056][ C0] ? mark_held_locks+0x40/0x70 [ 324.280797][ C0] preempt_schedule_irq+0x4e/0x90 [ 324.285799][ C0] irqentry_exit+0x205/0xa10 [ 324.290365][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 324.296321][ C0] RIP: 0010:lock_acquire+0x42/0x380 [ 324.301496][ C0] Code: fd 53 89 d3 48 83 ec 38 65 4c 8b 3d b0 9b a5 12 4c 89 7c 24 30 4d 89 cf 66 90 65 8b 05 cf 9b a5 12 83 f8 07 0f 87 da 00 00 00 <48> 0f a3 05 de e5 5d 0f 0f 82 c9 02 00 00 8b 35 7e 17 5e 0f 85 f6 [ 324.321093][ C0] RSP: 0018:ffffc90006acecc0 EFLAGS: 00000297 [ 324.327148][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 324.335094][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8edec5a0 [ 324.343058][ C0] RBP: ffffffff8edec5a0 R08: 0000000000000000 R09: 0000000000000000 [ 324.351005][ C0] R10: 0000000000000200 R11: 0000000000018a67 R12: 0000000000000002 [ 324.358964][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 324.366923][ C0] ? unwind_next_frame+0x3be/0x2090 [ 324.372102][ C0] ? unwind_next_frame+0x3be/0x2090 [ 324.377282][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 324.383407][ C0] unwind_next_frame+0xd1/0x2090 [ 324.388323][ C0] ? unwind_next_frame+0xbd/0x2090 [ 324.393425][ C0] ? __set_page_owner+0x8c/0x540 [ 324.398346][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 324.404474][ C0] arch_stack_walk+0x94/0xf0 [ 324.409057][ C0] ? __set_page_owner+0x8c/0x540 [ 324.413975][ C0] stack_trace_save+0x8e/0xc0 [ 324.418626][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 324.423991][ C0] ? lock_acquire+0x1d1/0x380 [ 324.428643][ C0] save_stack+0x162/0x1e0 [ 324.432951][ C0] ? __pfx_save_stack+0x10/0x10 [ 324.437798][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 324.442714][ C0] __set_page_owner+0x8c/0x540 [ 324.447473][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 324.452823][ C0] ? bad_range+0x257/0x3f0 [ 324.457302][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 324.462477][ C0] ? get_page_from_freelist+0x10e6/0x35d0 [ 324.468173][ C0] post_alloc_hook+0xfd/0x120 [ 324.472824][ C0] get_page_from_freelist+0x110d/0x35d0 [ 324.478370][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 324.484256][ C0] ? prepare_alloc_pages+0x1f0/0x5b0 [ 324.489517][ C0] ? clockevents_program_event+0x23e/0x820 [ 324.495304][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 324.501176][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 324.507479][ C0] ? ktime_get+0x9f/0x320 [ 324.511781][ C0] ? ktime_get+0x1a4/0x320 [ 324.516172][ C0] ? lapic_next_event+0x10/0x20 [ 324.520997][ C0] ? clockevents_program_event+0x1ef/0x820 [ 324.526784][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 324.533089][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 324.538001][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.543877][ C0] ? __page_table_check_ptes_set+0x1d5/0x530 [ 324.549841][ C0] ? do_raw_spin_lock+0x128/0x260 [ 324.554839][ C0] ? find_held_lock+0x2b/0x80 [ 324.559491][ C0] ? kasan_populate_vmalloc_pte+0xe3/0x170 [ 324.565275][ C0] ? kasan_populate_vmalloc_pte+0xe3/0x170 [ 324.571060][ C0] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 324.576583][ C0] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 324.582801][ C0] ? __apply_to_page_range+0x12b2/0x1520 [ 324.588417][ C0] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 324.594373][ C0] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 324.600598][ C0] __kasan_populate_vmalloc+0xf0/0x210 [ 324.606050][ C0] alloc_vmap_area+0x95d/0x2bb0 [ 324.610888][ C0] ? kasan_save_track+0x14/0x30 [ 324.615743][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 324.620482][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 324.625763][ C0] ? __get_vm_area_node+0x124/0x350 [ 324.630943][ C0] __get_vm_area_node+0x1ed/0x350 [ 324.635949][ C0] __vmalloc_node_range_noprof+0x268/0x1420 [ 324.641822][ C0] ? io_pin_pages+0xc3/0x1d0 [ 324.646407][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 324.652284][ C0] ? io_pin_pages+0xc3/0x1d0 [ 324.656854][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 324.662223][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 324.668535][ C0] ? rcu_is_watching+0x13/0xc0 [ 324.673283][ C0] __kvmalloc_node_noprof+0x3da/0x9b0 [ 324.678632][ C0] ? io_pin_pages+0xc3/0x1d0 [ 324.683201][ C0] ? io_cache_alloc_new+0x45/0xe0 [ 324.688213][ C0] ? io_pin_pages+0xc3/0x1d0 [ 324.692786][ C0] io_pin_pages+0xc3/0x1d0 [ 324.697186][ C0] io_sqe_buffer_register+0x1d9/0x1500 [ 324.702650][ C0] ? trace_kmalloc+0xc0/0x110 [ 324.707339][ C0] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 324.713226][ C0] ? __kvmalloc_node_noprof+0x377/0x9b0 [ 324.718776][ C0] ? copy_iovec_from_user+0x102/0x140 [ 324.724123][ C0] ? iovec_from_user+0xda/0x140 [ 324.728951][ C0] io_sqe_buffers_register.cold+0x346/0x4c3 [ 324.734821][ C0] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 324.740776][ C0] ? __fget_files+0x21f/0x3d0 [ 324.745435][ C0] __do_sys_io_uring_register+0x13ce/0x1bc0 [ 324.751310][ C0] ? __pfx___do_sys_io_uring_register+0x10/0x10 [ 324.757556][ C0] ? __x64_sys_futex+0x34f/0x4d0 [ 324.762502][ C0] ? __x64_sys_futex+0x358/0x4d0 [ 324.767465][ C0] ? xfd_validate_state+0x129/0x190 [ 324.772650][ C0] do_syscall_64+0x123/0x790 [ 324.777221][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.783092][ C0] RIP: 0033:0x7f1394f9e159 [ 324.787493][ C0] RSP: 002b:00007f1395eff028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 324.795881][ C0] RAX: ffffffffffffffda RBX: 00007f1395226090 RCX: 00007f1394f9e159 [ 324.803843][ C0] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000007 [ 324.811792][ C0] RBP: 00007f139503506b R08: 0000000000000000 R09: 0000000000000000 [ 324.819753][ C0] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000000 [ 324.827714][ C0] R13: 00007f1395226128 R14: 00007f1395226090 R15: 00007fffddfced58 [ 324.835672][ C0] [ 324.838667][ C0] task:syz-executor state:R running task stack:23560 pid:5609 tgid:5609 ppid:1 task_flags:0x40054c flags:0x00080003 [ 324.852125][ C0] Call Trace: [ 324.855385][ C0] [ 324.858302][ C0] __schedule+0x1259/0x6920 [ 324.862789][ C0] ? radix_tree_next_chunk+0x56b/0xad0 [ 324.868256][ C0] ? idr_get_next_ul+0x196/0x2e0 [ 324.873191][ C0] ? __pfx___schedule+0x10/0x10 [ 324.878052][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 324.883838][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 324.889011][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 324.894363][ C0] preempt_schedule_common+0x3c/0xb0 [ 324.899644][ C0] preempt_schedule_thunk+0x16/0x40 [ 324.904824][ C0] _raw_read_unlock+0x3e/0x50 [ 324.909480][ C0] zap_pid_ns_processes+0x259/0x6a0 [ 324.914657][ C0] ? do_raw_write_lock+0x11e/0x260 [ 324.919774][ C0] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 324.925487][ C0] ? do_exit+0x218e/0x2a50 [ 324.929879][ C0] ? rcu_is_watching+0x13/0xc0 [ 324.934643][ C0] do_exit+0x2300/0x2a50 [ 324.938876][ C0] ? __pfx_do_exit+0x10/0x10 [ 324.943483][ C0] ? do_raw_spin_lock+0x128/0x260 [ 324.948488][ C0] ? find_held_lock+0x2b/0x80 [ 324.953145][ C0] ? get_signal+0x7e0/0x21e0 [ 324.957737][ C0] do_group_exit+0xd5/0x2a0 [ 324.962220][ C0] get_signal+0x1ec7/0x21e0 [ 324.966704][ C0] ? __pfx_get_signal+0x10/0x10 [ 324.971537][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 324.977070][ C0] ? __pfx___do_sys_wait4+0x10/0x10 [ 324.982260][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 324.988411][ C0] exit_to_user_mode_loop+0x139/0x700 [ 324.993785][ C0] ? rcu_is_watching+0x13/0xc0 [ 324.998546][ C0] do_syscall_64+0x661/0x790 [ 325.003132][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.009018][ C0] RIP: 0033:0x7f1394f5e98e [ 325.013426][ C0] RSP: 002b:00007fffddfcf058 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 325.021815][ C0] RAX: fffffffffffffe00 RBX: 000055558e75d500 RCX: 00007f1394f5e98e [ 325.029760][ C0] RDX: 0000000040000000 RSI: 00007fffddfcf0fc RDI: ffffffffffffffff [ 325.037704][ C0] RBP: 00007fffddfcf0fc R08: 0000000000000000 R09: 0000000000000000 [ 325.045673][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000028 [ 325.053643][ C0] R13: 000055558e770a10 R14: 000000000002e5f9 R15: 00007fffddfcf150 [ 325.061608][ C0] [ 325.064613][ C0] task:udevd state:R running task stack:26104 pid:6193 tgid:6193 ppid:4969 task_flags:0x40014c flags:0x00080000 [ 325.078080][ C0] Call Trace: [ 325.081357][ C0] [ 325.084270][ C0] __schedule+0x1259/0x6920 [ 325.088779][ C0] ? __pfx___schedule+0x10/0x10 [ 325.093610][ C0] ? mark_held_locks+0x40/0x70 [ 325.098352][ C0] preempt_schedule_irq+0x4e/0x90 [ 325.103357][ C0] irqentry_exit+0x205/0xa10 [ 325.107939][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.113911][ C0] RIP: 0010:stack_access_ok+0x53/0x1d0 [ 325.119366][ C0] Code: c0 74 08 3c 03 0f 8e 3f 01 00 00 8b 13 85 d2 74 65 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 24 01 00 00 48 8d 7b 10 4c 8b 6b 08 48 b8 00 00 00 00 00 fc [ 325.139130][ C0] RSP: 0018:ffffc900045d7690 EFLAGS: 00000246 [ 325.145184][ C0] RAX: dffffc0000000000 RBX: ffffc900045d7730 RCX: ffffffff91e8b698 [ 325.153164][ C0] RDX: 1ffff920008baee7 RSI: ffffc900045d7de0 RDI: ffffc900045d7738 [ 325.161136][ C0] RBP: ffffc900045d7de0 R08: ffffffff91e8b69c R09: 0000000000000007 [ 325.169114][ C0] R10: 0000000000000200 R11: 000000000000c782 R12: 0000000000000008 [ 325.177079][ C0] R13: ffffc900045d7730 R14: ffffc900045d7de8 R15: ffffc900045d7764 [ 325.185064][ C0] unwind_next_frame+0xcf5/0x2090 [ 325.190072][ C0] ? mmput+0x67/0x80 [ 325.193945][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.200090][ C0] arch_stack_walk+0x94/0xf0 [ 325.204672][ C0] ? mmput+0x67/0x80 [ 325.208557][ C0] ? tear_down_vmas+0x2a5/0x610 [ 325.213395][ C0] stack_trace_save+0x8e/0xc0 [ 325.218094][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 325.223444][ C0] ? kmem_cache_free+0x40f/0x6c0 [ 325.228359][ C0] ? mmput+0x67/0x80 [ 325.232231][ C0] ? do_exit+0x83b/0x2a50 [ 325.236540][ C0] ? do_group_exit+0xd5/0x2a0 [ 325.241193][ C0] ? __x64_sys_exit_group+0x3e/0x50 [ 325.246376][ C0] ? x64_sys_call+0x1567/0x1570 [ 325.251216][ C0] ? do_syscall_64+0x123/0x790 [ 325.255982][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.262066][ C0] kasan_save_stack+0x30/0x50 [ 325.266755][ C0] ? kasan_save_stack+0x30/0x50 [ 325.271597][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 325.277055][ C0] ? kmem_cache_free+0x424/0x6c0 [ 325.281985][ C0] ? tear_down_vmas+0x2a5/0x610 [ 325.286812][ C0] ? exit_mmap+0x469/0xa00 [ 325.291233][ C0] ? __mmput+0x12a/0x410 [ 325.295450][ C0] ? mmput+0x67/0x80 [ 325.299361][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 325.304558][ C0] kmem_cache_free+0x424/0x6c0 [ 325.309324][ C0] tear_down_vmas+0x2a5/0x610 [ 325.313999][ C0] exit_mmap+0x469/0xa00 [ 325.318254][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 325.323014][ C0] ? rcu_is_watching+0x13/0xc0 [ 325.327768][ C0] ? uprobe_clear_state+0x49/0x250 [ 325.332865][ C0] ? find_held_lock+0x2b/0x80 [ 325.337521][ C0] ? uprobe_clear_state+0x5f/0x250 [ 325.342628][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 325.348246][ C0] __mmput+0x12a/0x410 [ 325.352308][ C0] mmput+0x67/0x80 [ 325.356009][ C0] do_exit+0x83b/0x2a50 [ 325.360146][ C0] ? do_raw_spin_lock+0x128/0x260 [ 325.365162][ C0] ? __pfx_do_exit+0x10/0x10 [ 325.369740][ C0] ? do_group_exit+0x1bd/0x2a0 [ 325.374481][ C0] ? rcu_is_watching+0x13/0xc0 [ 325.379224][ C0] do_group_exit+0xd5/0x2a0 [ 325.383719][ C0] __x64_sys_exit_group+0x3e/0x50 [ 325.388719][ C0] x64_sys_call+0x1567/0x1570 [ 325.393371][ C0] do_syscall_64+0x123/0x790 [ 325.397937][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.403803][ C0] RIP: 0033:0x7fa40f0f16c5 [ 325.408262][ C0] RSP: 002b:00007ffdea787978 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 325.416648][ C0] RAX: ffffffffffffffda RBX: 000055d909f4a500 RCX: 00007fa40f0f16c5 [ 325.424595][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 325.432540][ C0] RBP: 000055d909cfa2c0 R08: 0000000000000000 R09: 0000000000000000 [ 325.440485][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.448433][ C0] R13: 00007ffdea7879c0 R14: 0000000000000000 R15: 0000000000000000 [ 325.456391][ C0] [ 325.459435][ C0] task:syz.2.218 state:R running task stack:27160 pid:6673 tgid:6669 ppid:5606 task_flags:0x40044c flags:0x00080000 [ 325.472895][ C0] Call Trace: [ 325.476170][ C0] [ 325.479095][ C0] __schedule+0x1259/0x6920 [ 325.483592][ C0] ? __pfx___schedule+0x10/0x10 [ 325.488419][ C0] ? mark_held_locks+0x40/0x70 [ 325.493165][ C0] preempt_schedule_irq+0x4e/0x90 [ 325.498180][ C0] irqentry_exit+0x205/0xa10 [ 325.502746][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 325.508699][ C0] RIP: 0010:unwind_next_frame+0x16c7/0x2090 [ 325.514571][ C0] Code: 00 0f 85 c1 07 00 00 49 8d 7d 10 49 8b 6d 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 94 07 00 00 <49> 8b 45 10 48 39 dd 0f 87 f5 f8 ff ff 48 39 d8 0f 86 ec f8 ff ff [ 325.534160][ C0] RSP: 0018:ffffc90004db7468 EFLAGS: 00000246 [ 325.540218][ C0] RAX: dffffc0000000000 RBX: ffffc90004db7dc0 RCX: ffffffff91e94806 [ 325.548163][ C0] RDX: 1ffff920009b6e9d RSI: ffffc90004db7d90 RDI: ffffc90004db74e8 [ 325.556118][ C0] RBP: ffffc90004db0000 R08: 0000000000000001 R09: 0000000000000007 [ 325.564065][ C0] R10: 0000000000000200 R11: 000000000000cd5e R12: ffffc90004db7528 [ 325.572035][ C0] R13: ffffc90004db74d8 R14: ffffc90004db7dc0 R15: ffffc90004db750c [ 325.580003][ C0] ? unwind_next_frame+0x1561/0x2090 [ 325.585271][ C0] ? get_signal+0x1ec7/0x21e0 [ 325.589926][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.596054][ C0] arch_stack_walk+0x94/0xf0 [ 325.600624][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 325.606329][ C0] ? tear_down_vmas+0x2a5/0x610 [ 325.611163][ C0] stack_trace_save+0x8e/0xc0 [ 325.615817][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 325.621175][ C0] ? kmem_cache_free+0x40f/0x6c0 [ 325.626087][ C0] ? mmput+0x67/0x80 [ 325.629956][ C0] ? do_exit+0x83b/0x2a50 [ 325.634276][ C0] ? do_group_exit+0xd5/0x2a0 [ 325.638931][ C0] ? get_signal+0x1ec7/0x21e0 [ 325.643603][ C0] ? arch_do_signal_or_restart+0x91/0x7e0 [ 325.649302][ C0] ? exit_to_user_mode_loop+0x139/0x700 [ 325.654832][ C0] ? do_syscall_64+0x661/0x790 [ 325.659570][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.665643][ C0] kasan_save_stack+0x30/0x50 [ 325.670314][ C0] ? kasan_save_stack+0x30/0x50 [ 325.675144][ C0] ? kasan_record_aux_stack+0xa7/0xc0 [ 325.680492][ C0] ? kmem_cache_free+0x424/0x6c0 [ 325.685417][ C0] ? tear_down_vmas+0x2a5/0x610 [ 325.690245][ C0] ? exit_mmap+0x469/0xa00 [ 325.694649][ C0] ? __mmput+0x12a/0x410 [ 325.698881][ C0] ? mmput+0x67/0x80 [ 325.702763][ C0] ? do_exit+0x83b/0x2a50 [ 325.707085][ C0] ? do_group_exit+0xd5/0x2a0 [ 325.711738][ C0] ? get_signal+0x1ec7/0x21e0 [ 325.716423][ C0] kasan_record_aux_stack+0xa7/0xc0 [ 325.721597][ C0] kmem_cache_free+0x424/0x6c0 [ 325.726349][ C0] tear_down_vmas+0x2a5/0x610 [ 325.731024][ C0] exit_mmap+0x469/0xa00 [ 325.735286][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 325.740034][ C0] ? rcu_is_watching+0x13/0xc0 [ 325.744781][ C0] ? find_held_lock+0x2b/0x80 [ 325.749439][ C0] ? uprobe_clear_state+0x5f/0x250 [ 325.754529][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 325.760149][ C0] __mmput+0x12a/0x410 [ 325.764196][ C0] mmput+0x67/0x80 [ 325.767907][ C0] do_exit+0x83b/0x2a50 [ 325.772062][ C0] ? __pfx_do_exit+0x10/0x10 [ 325.776629][ C0] ? do_raw_spin_lock+0x128/0x260 [ 325.781646][ C0] ? find_held_lock+0x2b/0x80 [ 325.786307][ C0] ? get_signal+0x7e0/0x21e0 [ 325.790881][ C0] do_group_exit+0xd5/0x2a0 [ 325.795364][ C0] get_signal+0x1ec7/0x21e0 [ 325.799848][ C0] ? __pfx_get_signal+0x10/0x10 [ 325.804675][ C0] ? do_futex+0x190/0x440 [ 325.808987][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 325.814531][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 325.820682][ C0] exit_to_user_mode_loop+0x139/0x700 [ 325.826031][ C0] ? rcu_is_watching+0x13/0xc0 [ 325.830773][ C0] do_syscall_64+0x661/0x790 [ 325.835351][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.841216][ C0] RIP: 0033:0x7f9cf159e159 [ 325.845603][ C0] RSP: 002b:00007f9cf24c40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 325.853989][ C0] RAX: fffffffffffffe00 RBX: 00007f9cf1825fa8 RCX: 00007f9cf159e159 [ 325.861935][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9cf1825fa8 [ 325.869879][ C0] RBP: 00007f9cf1825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 325.877826][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.885784][ C0] R13: 00007f9cf1826038 R14: 00007fff17f74d60 R15: 00007fff17f74e48 [ 325.893773][ C0] [ 325.896771][ C0] rcu: rcu_preempt kthread starved for 764 jiffies! g25181 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 325.907589][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 325.917530][ C0] rcu: RCU grace-period kthread stack dump: [ 325.923402][ C0] task:rcu_preempt state:R running task stack:27560 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 325.936847][ C0] Call Trace: [ 325.940115][ C0] [ 325.943023][ C0] __schedule+0x1259/0x6920 [ 325.947525][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 325.952444][ C0] ? lock_acquire+0x1d1/0x380 [ 325.957099][ C0] ? __pfx___schedule+0x10/0x10 [ 325.961944][ C0] ? find_held_lock+0x2b/0x80 [ 325.966602][ C0] ? schedule+0x225/0x2c0 [ 325.970910][ C0] schedule+0xdd/0x2c0 [ 325.974980][ C0] schedule_timeout+0x127/0x280 [ 325.979815][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 325.985165][ C0] ? __pfx_process_timeout+0x10/0x10 [ 325.990425][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 325.996226][ C0] ? prepare_to_swait_event+0xdf/0x4a0 [ 326.001677][ C0] rcu_gp_fqs_loop+0x1a9/0x8f0 [ 326.006419][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 326.011681][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 326.016594][ C0] ? __pfx_rcu_gp_cleanup+0x10/0x10 [ 326.021764][ C0] ? rcu_is_watching+0x13/0xc0 [ 326.026513][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 326.032300][ C0] rcu_gp_kthread+0x17a/0x220 [ 326.036954][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 326.042130][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 326.047916][ C0] ? __kthread_parkme+0x18f/0x230 [ 326.052921][ C0] ? kthread+0x13a/0x450 [ 326.057140][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 326.062315][ C0] kthread+0x373/0x450 [ 326.066374][ C0] ? __pfx_kthread+0x10/0x10 [ 326.070942][ C0] ret_from_fork+0x730/0xd60 [ 326.075523][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 326.080635][ C0] ? __switch_to+0x800/0x10f0 [ 326.085324][ C0] ? __pfx_kthread+0x10/0x10 [ 326.089909][ C0] ret_from_fork_asm+0x1a/0x30 [ 326.094675][ C0] [ 326.097688][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 326.103987][ C0] CPU: 0 UID: 0 PID: 3222 Comm: kworker/R-bat_e Tainted: G L syzkaller #0 PREEMPT(full) [ 326.115239][ C0] Tainted: [L]=SOFTLOCKUP [ 326.119542][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 326.129588][ C0] Workqueue: bat_events batadv_tt_purge [ 326.135118][ C0] RIP: 0010:stack_access_ok+0x53/0x1d0 [ 326.140572][ C0] Code: c0 74 08 3c 03 0f 8e 3f 01 00 00 8b 13 85 d2 74 65 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 <0f> 85 24 01 00 00 48 8d 7b 10 4c 8b 6b 08 48 b8 00 00 00 00 00 fc [ 326.160169][ C0] RSP: 0018:ffffc90000007208 EFLAGS: 00000246 [ 326.166224][ C0] RAX: dffffc0000000000 RBX: ffffc900000072a8 RCX: ffffffff927df428 [ 326.174171][ C0] RDX: 1ffff92000000e56 RSI: ffffc90000007d20 RDI: ffffc900000072b0 [ 326.182118][ C0] RBP: ffffc90000007d20 R08: ffffffff927df42c R09: 0000000000000007 [ 326.190076][ C0] R10: 0000000000000200 R11: 000000000008a167 R12: 0000000000000008 [ 326.198020][ C0] R13: ffffc900000072a8 R14: ffffc90000007d28 R15: ffffc900000072dc [ 326.205980][ C0] FS: 0000000000000000(0000) GS:ffff888123b4f000(0000) knlGS:0000000000000000 [ 326.214883][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.221441][ C0] CR2: 00007ffc02610fe8 CR3: 00000000760fe000 CR4: 00000000003526f0 [ 326.229401][ C0] Call Trace: [ 326.232655][ C0] [ 326.235477][ C0] unwind_next_frame+0xcf5/0x2090 [ 326.240570][ C0] ? process_backlog+0x487/0x1600 [ 326.245582][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 326.251712][ C0] arch_stack_walk+0x94/0xf0 [ 326.256310][ C0] ? process_backlog+0x487/0x1600 [ 326.261333][ C0] stack_trace_save+0x8e/0xc0 [ 326.266025][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 326.271391][ C0] ? netif_receive_skb+0x1dd/0x7d0 [ 326.276485][ C0] ? br_multicast_count+0x8d/0xbc0 [ 326.281577][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 326.287029][ C0] kasan_save_stack+0x30/0x50 [ 326.291688][ C0] ? kasan_save_stack+0x30/0x50 [ 326.296515][ C0] ? kasan_save_track+0x14/0x30 [ 326.301340][ C0] ? __kasan_slab_alloc+0x89/0x90 [ 326.306339][ C0] ? kmem_cache_alloc_noprof+0x269/0x6a0 [ 326.311956][ C0] ? __skb_ext_alloc+0x1a/0x80 [ 326.316715][ C0] ? skb_ext_add+0x40b/0x810 [ 326.321293][ C0] ? br_nf_pre_routing_ipv6+0xc7/0x8b0 [ 326.326744][ C0] ? br_nf_pre_routing+0x90f/0x1560 [ 326.331940][ C0] ? br_handle_frame+0xd59/0x1670 [ 326.336952][ C0] ? __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 326.343784][ C0] ? __netif_receive_skb_one_core+0xb0/0x1e0 [ 326.349739][ C0] ? __netif_receive_skb+0x1f/0x120 [ 326.354938][ C0] ? process_backlog+0x487/0x1600 [ 326.359957][ C0] kasan_save_track+0x14/0x30 [ 326.364818][ C0] __kasan_slab_alloc+0x89/0x90 [ 326.369660][ C0] kmem_cache_alloc_noprof+0x269/0x6a0 [ 326.375193][ C0] ? __skb_ext_alloc+0x1a/0x80 [ 326.379948][ C0] __skb_ext_alloc+0x1a/0x80 [ 326.384537][ C0] skb_ext_add+0x40b/0x810 [ 326.388963][ C0] ? __local_bh_enable_ip+0xa5/0x120 [ 326.394224][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 326.399428][ C0] br_nf_pre_routing_ipv6+0xc7/0x8b0 [ 326.404691][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 326.410623][ C0] ? net_generic+0x25/0x2a0 [ 326.415112][ C0] ? find_held_lock+0x2b/0x80 [ 326.419765][ C0] ? net_generic+0xea/0x2a0 [ 326.424239][ C0] ? net_generic+0xea/0x2a0 [ 326.428724][ C0] br_nf_pre_routing+0x90f/0x1560 [ 326.433741][ C0] br_handle_frame+0xd59/0x1670 [ 326.438579][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 326.443842][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 326.449707][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 326.454987][ C0] __netif_receive_skb_core.constprop.0+0x6c5/0x3530 [ 326.461657][ C0] ? find_held_lock+0x2b/0x80 [ 326.466326][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 326.471504][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 326.477286][ C0] ? debug_object_activate+0x343/0x4b0 [ 326.482745][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 326.488092][ C0] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 326.495177][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 326.500956][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 326.506301][ C0] ? find_held_lock+0x2b/0x80 [ 326.510955][ C0] ? mark_held_locks+0x40/0x70 [ 326.515690][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 326.521479][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 326.526665][ C0] ? __lock_acquire+0x5c0/0x1f40 [ 326.531572][ C0] ? __pfx___mod_timer+0x10/0x10 [ 326.536485][ C0] ? process_backlog+0x437/0x1600 [ 326.541482][ C0] __netif_receive_skb_one_core+0xb0/0x1e0 [ 326.547261][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 326.553663][ C0] ? lock_acquire+0x1d1/0x380 [ 326.558325][ C0] ? process_backlog+0x437/0x1600 [ 326.563338][ C0] ? process_backlog+0x437/0x1600 [ 326.568333][ C0] __netif_receive_skb+0x1f/0x120 [ 326.573335][ C0] process_backlog+0x487/0x1600 [ 326.578172][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 326.583624][ C0] net_rx_action+0xa40/0xf20 [ 326.588207][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 326.593322][ C0] ? mark_held_locks+0x40/0x70 [ 326.598097][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 326.603282][ C0] ? tmigr_handle_remote+0x132/0x380 [ 326.608547][ C0] ? run_timer_base+0x121/0x190 [ 326.613385][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 326.618589][ C0] handle_softirqs+0x1e6/0x9d0 [ 326.623362][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 326.628629][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 326.633884][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 326.639488][ C0] ? batadv_tt_local_purge+0x21c/0x3d0 [ 326.644921][ C0] do_softirq+0xaf/0xf0 [ 326.649061][ C0] [ 326.651980][ C0] [ 326.654881][ C0] __local_bh_enable_ip+0xff/0x120 [ 326.660324][ C0] batadv_tt_local_purge+0x21c/0x3d0 [ 326.665598][ C0] ? look_up_lock_class+0x55/0x120 [ 326.670696][ C0] ? __pfx_batadv_tt_local_purge+0x10/0x10 [ 326.676500][ C0] batadv_tt_purge+0x8b/0xbd0 [ 326.681159][ C0] ? reacquire_held_locks+0xdd/0x1f0 [ 326.686419][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 326.691679][ C0] ? lock_acquire+0x1d1/0x380 [ 326.696328][ C0] ? process_one_work+0xa2c/0x1b10 [ 326.701417][ C0] ? process_one_work+0x906/0x1b10 [ 326.706501][ C0] ? process_one_work+0x906/0x1b10 [ 326.711590][ C0] process_one_work+0xac7/0x1b10 [ 326.716511][ C0] ? __pfx_process_one_work+0x10/0x10 [ 326.721860][ C0] ? lock_acquire+0x1d1/0x380 [ 326.726517][ C0] ? __pfx_batadv_tt_purge+0x10/0x10 [ 326.731777][ C0] rescuer_thread+0x918/0x14e0 [ 326.736529][ C0] ? rescuer_thread+0x256/0x14e0 [ 326.741459][ C0] ? rescuer_thread+0x118/0x14e0 [ 326.746370][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 326.751557][ C0] ? __kthread_parkme+0x18f/0x230 [ 326.756574][ C0] ? kthread+0x13a/0x450 [ 326.760792][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 326.765971][ C0] kthread+0x373/0x450 [ 326.770027][ C0] ? __pfx_kthread+0x10/0x10 [ 326.774607][ C0] ret_from_fork+0x730/0xd60 [ 326.779438][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 326.784524][ C0] ? __switch_to+0x800/0x10f0 [ 326.789190][ C0] ? __pfx_kthread+0x10/0x10 [ 326.793757][ C0] ret_from_fork_asm+0x1a/0x30 [ 326.798501][ C0]