last executing test programs: 3m6.826334914s ago: executing program 3 (id=774): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x2b, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3m6.357632433s ago: executing program 3 (id=784): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000200)={0x2a, 0x1, 0x1}, 0x66) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 3m5.982842342s ago: executing program 0 (id=790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) 3m5.773098146s ago: executing program 0 (id=793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@window={0x3, 0x3, 0x6}]}}}}}}}, 0x0) 3m5.495548554s ago: executing program 3 (id=796): r0 = fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x165240, 0x1) creat(&(0x7f0000000000)='./file0\x00', 0x40) 3m5.269495939s ago: executing program 3 (id=797): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r2, 0x7ff, 0x1) 3m5.127906744s ago: executing program 3 (id=798): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x110, &(0x7f0000000080)=0x80000001, 0x0, 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000}) 3m4.887898323s ago: executing program 0 (id=801): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000031c0)=""/4091, 0xff4, 0x0, 0x0, 0xfffffffffffffda6}, &(0x7f0000000000)=0x40) 3m4.677553946s ago: executing program 0 (id=803): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x400000004a882, 0x0) r1 = dup(r0) read$snddsp(r1, &(0x7f0000000300)=""/57, 0x39) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x9) 3m4.038710642s ago: executing program 3 (id=806): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x1000000, 0x0) 3m3.775449841s ago: executing program 0 (id=809): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="6103064b057d818101ce0214"], 0xb) 3m2.380102341s ago: executing program 0 (id=817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x40000}) 2m46.150822135s ago: executing program 32 (id=817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0xc40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xe, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f00000000c0)={0x40000}) 2m42.974125693s ago: executing program 33 (id=806): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x1000000, 0x0) 5.52278137s ago: executing program 1 (id=2761): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000180), &(0x7f0000000200)=r3}, 0x20) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) 3.053493205s ago: executing program 1 (id=2786): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000140)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000300)={0x0, 0xe823, 0x3400, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2.40105777s ago: executing program 5 (id=2796): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x20}, 0x700) 2.27284625s ago: executing program 1 (id=2799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000140)=[@increfs, @request_death], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0}) 2.026632893s ago: executing program 1 (id=2803): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x3}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90) 2.013108664s ago: executing program 2 (id=2804): setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) unshare(0x64000600) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 1.856940376s ago: executing program 1 (id=2806): write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x3, 0x7, 0xe9, 0x9, 0x3, 0x6, 0x5, 0xf3, 0x40, 0x3ce, 0x80000001, 0x81, 0x38, 0x1, 0xc800, 0xcdcb, 0x7}, [{0x3, 0x0, 0x400000000000, 0xa, 0xffffffff, 0x1, 0x9, 0xa}]}, 0x78) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0xa, 0x40, 0x4, '\x00', 0xc94}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.760134891s ago: executing program 4 (id=2808): pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r3, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 1.687744249s ago: executing program 2 (id=2809): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001780)=0x100000, 0x4) bind$xdp(r1, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000002c0)=0x200, 0x4) close(0x3) 1.607431695s ago: executing program 1 (id=2810): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000040)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1.504320644s ago: executing program 5 (id=2811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x140b, 0x1, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x140000c4}, 0x4000004) 1.456709847s ago: executing program 5 (id=2812): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r1) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003580)=@newtfilter={0x100, 0x2c, 0x200, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0x0, 0xffe0}, {0x9, 0x6}}, [@f_rsvp={{0x9}, {0xd0, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffff9, 0x5, 0x1}, {0x80000001, 0x7, 0x75}, 0x2e, 0xff, 0x3}}, @TCA_RSVP_SRC={0x8, 0x3, @multicast1}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xb, 0x1}}, @TCA_RSVP_ACT={0x9c, 0x6, [@m_mirred={0x98, 0xa, 0x0, 0x0, {{0xb}, {0x4}, {0x69, 0x6, "677b8dde80612e76b04b25fcac9d021afc015599bdc6fbc24126e0b3ea5310ab6ceb2f2e7585d8ac7147fa010784c6cf775cfd55eb168340a9b955431e1d876ff6c2ec00dfdbb96630471b15869d5ea074be7a547239e389b17b1db050d590ad07c1c6daac"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) 1.372429169s ago: executing program 2 (id=2813): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 1.342382876s ago: executing program 2 (id=2814): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000080)={r1, 0x1, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r2, 0x1, r0, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000280)={r2, 0x0, 0x5}) 1.177921006s ago: executing program 2 (id=2815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000022640)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x1, r1, &(0x7f00000001c0), 0x8) ptrace$poke(0x4, r1, &(0x7f0000000100), 0x3) 1.082762583s ago: executing program 2 (id=2816): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) read(r0, &(0x7f0000000180)=""/170, 0xaa) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.017064755s ago: executing program 6 (id=2817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 892.40993ms ago: executing program 6 (id=2818): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 819.87912ms ago: executing program 6 (id=2819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000300)={"7e28c58b5dd756ecf4d28b535af9d2fffff6fe48b6d0d4199ea867810f71e349f28f65470b74e91ceb352fe0c1f7efb977664b5d7dc23bc0c3e85e5979cbb328ee856ad503103d6c15edab5b345202b3ba248a4db75912512b850994970df217f38a5ba6a26e4f44e5cab769203411ac9f9e83361984d317aceb89ebb1a3444d9248bec93109af8b6c1434d3a1383976590a58b5aa4800e17761d629c5330a9b974a2a629aff59fe134d3f8eb88b76f9d6438178a38524f32ef5585831dcdf74300f371dff8a8c9049ddcca42d35a2c377b913587849aacac07a641971d2fd99438a439609eaa93e39bfca9e0ab55043ccebfc6ac589ebfe2713f3c40ea7426f56f74b6d75ce313e50bcb53df6f75a8b406beb8ce56c73984833f1d75d086c3d307eb11263dd0ed832c58e69485f8d8ddcf32600009aae8ffda9c9d06d18253217bf48f3aa550c8dd5402046148abb0da4fc029e86c9b79fcf36d68c10895f942b8b4dc0f8e96c16a3bff2a2de7919f952fc3af33c36fe6ec053162f4a694a3676385882e80957d62704c7460d89450fd07360ffa004f437dead795bbb3b816c754bb3f3a7751cdeea2253c8372327187fa0cedff90d141a4074f6d1ecce4f59325709c96b13ef00cf589e70d519931a6e847a5e4deea45ed251698dac22a59b246a43166221b9cd42aae3adda9fd03c9024be9cfbdf740540dd3f91f821f63057c0cf780652db3001c79dad63d1fb7af509c5af7132561419a1f2ef6717965000f2ab873294d80626a371a89c1b28b26becc86548f733a173ec470f1f2f860facf0fd8d1aec32dff3466ae6409be505b8d3fb4e5aec363490aee081e458363a3669886076dcb6ac725b8a3086e2885e8b29d30491cc020abe0b410213c1c20c88b74445682653eaa3f033d7263922c19cc295d64423ca1bbe855d4012c1b233943a48640fde700a258a09adadbeee3b9000996b4cbac64764f4b6ead5293b1aa3da46714d4852fae4f8de1605fe7beef7b68e234e3f2a9ceb584350141a6725622c4eab67fc7a107307250ac6e698ffa57d20ed5e6203302e19d4a8e0e53a6887bb86589c54de8852806bf81c6e1acd74d83873fd2b4509265a20cf8a42462c8a2d26c53afec2a0f2e64620250ada0e09144b23d1dd5f99818abde27b99b56c3dae83d24ff2366c613d8a51c4707353fba85ac21706eb59f3e70a788e830a3cfd0341701d8b2a87f046ebd6793fe377a621f66dcdea75fedf6332e738f220b8dd3d3c37e19fa434cf4d748a61a14e9fffafb845e017b650946cc0a0ef4c6c3981e5b6402c51b0a05bdfcc72cacdcf563097d9cf2dc77d4041fb161a360c521ac6dec09154b9d16a0757969463ef238d17ddce82a84cb6134dfa27287f5034f1274f38762da61551a0b29e51da592a3899c32befb05c3358bdec62e04547520d"}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xc, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x0, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x8, 0x11, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x3, 0xfc}, {0xeeee8000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x0, 0xe6e70c00, [0xffffffffffffff47, 0x401, 0x7, 0x10800000000000c5]}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000700)) 778.42315ms ago: executing program 4 (id=2820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0xc3072, 0xffffffffffffffff, 0x3000000) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 726.253164ms ago: executing program 6 (id=2821): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',debug=0x04,access=']) 597.223752ms ago: executing program 4 (id=2822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000200)={{0xeeef0000, 0x4000, 0x8, 0xff, 0x3, 0x4, 0xe, 0x9, 0x48, 0x6, 0x80, 0x70}, {0x1, 0x3000, 0x0, 0xc, 0x23, 0x21, 0xf9, 0xc5, 0x1, 0x32, 0x2, 0xff}, {0x2, 0xd000, 0x4, 0x8, 0x8, 0x3, 0x2, 0x2, 0x7, 0x82, 0x3, 0x10}, {0xeeef0000, 0x10000, 0x9, 0x11, 0x0, 0xc, 0x6, 0xfa, 0x3, 0x0, 0x3, 0x9}, {0xf000, 0x1, 0xe, 0x80, 0xfc, 0x40, 0x7f, 0x7, 0xb5, 0x99, 0x8, 0x3}, {0x4cdda800, 0x5000, 0x9, 0xe4, 0x3, 0xcb, 0x9, 0x7, 0x8, 0x7, 0xb, 0x7}, {0x8080000, 0xeeee8000, 0xb, 0xfb, 0x8, 0x6, 0x9, 0x6, 0x9, 0x5, 0xb2}, {0x6000, 0x8000000, 0x9, 0x2, 0x13, 0x4, 0x1, 0x3, 0x0, 0xf8, 0x40, 0xb}, {0x0, 0x1}, {0x3000, 0xa469}, 0x80000001, 0x0, 0xdddd0000, 0x420020, 0x5, 0x5400, 0xeeee8000, 0x1, [0x8, 0x70000, 0x101, 0x7fffffffffffffff]}) 539.146083ms ago: executing program 5 (id=2823): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x12) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}, {@ignoreqv}], [], 0x6b}}) 508.946362ms ago: executing program 6 (id=2824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000080)={0xd000, 0x8000, 0x1}) 507.907134ms ago: executing program 4 (id=2825): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x20000001, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 423.876286ms ago: executing program 6 (id=2826): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) 377.73599ms ago: executing program 5 (id=2827): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 343.561663ms ago: executing program 4 (id=2828): socket(0x840000000002, 0x3, 0x100) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) faccessat2(0xffffffffffffffff, 0x0, 0x2, 0x1100) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 160.047655ms ago: executing program 4 (id=2829): socket$inet6(0xa, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 0s ago: executing program 5 (id=2830): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x20000084) kernel console output (not intermixed with test programs): ection found [ 219.703264][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.711175][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.718993][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.726961][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.734796][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.742721][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.750567][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.758489][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.766353][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.774535][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.782381][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.790251][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.798035][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.805973][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.813817][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.821736][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.829557][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.837434][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.845277][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.853157][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.861174][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.869039][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.876881][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.884755][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.892588][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.900489][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.908293][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.916204][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.924033][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.931933][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.939759][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.947606][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 219.955452][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 219.990774][ T9056] netlink: 'syz.5.1250': attribute type 5 has an invalid length. [ 220.305175][ T9075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1257'. [ 220.335230][ T9075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.414904][ T9075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 220.431597][ T9075] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 220.462409][ T9075] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 220.494313][ T9083] binder: 9082:9083 ioctl 4018620d 0 returned -22 [ 220.559992][ T9086] binder: 9082:9086 ioctl c018620c 0 returned -14 [ 220.769691][ T9094] evm: overlay not supported [ 221.225878][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1270'. [ 221.344593][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 221.376606][ T9119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9119 comm=syz.5.1275 [ 221.425851][ T9119] netlink: 'syz.5.1275': attribute type 1 has an invalid length. [ 221.442011][ T9113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.496739][ T9119] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 222.531954][ T9121] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.596657][ T9121] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 222.629491][ T9121] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 222.788059][ T9149] fuse: Unknown parameter 'fd00000000000000000003' [ 222.845812][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1287'. [ 222.910986][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 223.073305][ T30] audit: type=1400 audit(229.058:765): avc: denied { create } for pid=9161 comm="syz.4.1290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 223.097380][ T9] usb 6-1: config 0 has no interfaces? [ 223.103110][ T9] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 223.112535][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.123157][ T9] usb 6-1: config 0 descriptor?? [ 223.179966][ T9169] overlayfs: failed to clone upperpath [ 223.297747][ T5589] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 223.338485][ T9] usb 6-1: USB disconnect, device number 5 [ 223.424697][ T30] audit: type=1400 audit(229.408:766): avc: denied { watch_sb watch_reads } for pid=9180 comm="syz.4.1297" path="/333/file0" dev="tmpfs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 223.457664][ T5589] usb 2-1: Using ep0 maxpacket: 16 [ 223.466169][ T5589] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 223.476898][ T5589] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.487945][ T5589] usb 2-1: Product: syz [ 223.492218][ T5589] usb 2-1: Manufacturer: syz [ 223.497055][ T5589] usb 2-1: SerialNumber: syz [ 223.505581][ T5589] usb 2-1: config 0 descriptor?? [ 223.515441][ T5589] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 223.920320][ T9160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.943535][ T9160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.136888][ T9200] loop3: detected capacity change from 0 to 1 [ 224.146038][ T9200] Dev loop3: unable to read RDB block 1 [ 224.152852][ T9200] loop3: unable to read partition table [ 224.160514][ T9200] loop3: partition table beyond EOD, truncated [ 224.167308][ T9200] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 224.247475][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 224.418871][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.446461][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 224.458224][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 224.469735][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 224.479540][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 224.507366][ T9] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 224.547125][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 224.555234][ T9] usb 7-1: Product: syz [ 224.562858][ T9] usb 7-1: Manufacturer: syz [ 224.573233][ T5589] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 224.576847][ T9] usb 7-1: SerialNumber: syz [ 224.588853][ T9] usb 7-1: config 0 descriptor?? [ 224.592742][ T5589] usb 2-1: USB disconnect, device number 18 [ 224.658447][ T9212] kvm: emulating exchange as write [ 224.800811][ T9] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 224.807799][ T9] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 225.706564][ T9] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 225.714154][ T9] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 225.765614][ T9224] macvtap1: left allmulticast mode [ 225.801552][ T9] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 225.826472][ T30] audit: type=1400 audit(231.809:767): avc: denied { accept } for pid=9225 comm="syz.2.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 225.886258][ T9] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 225.931384][ T30] audit: type=1400 audit(231.919:768): avc: denied { map } for pid=9227 comm="syz.4.1316" path="socket:[27406]" dev="sockfs" ino=27406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 225.988381][ T30] audit: type=1400 audit(231.919:769): avc: denied { read accept } for pid=9227 comm="syz.4.1316" path="socket:[27406]" dev="sockfs" ino=27406 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 226.083764][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 226.150562][ T9237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.247302][ T9242] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.276448][ T9242] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 226.295630][ T9242] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 226.302843][ T30] audit: type=1400 audit(232.279:770): avc: denied { name_bind 0x1000000 } for pid=9249 comm="syz.5.1324" path="socket:[28678]" dev="sockfs" ino=28678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 226.311820][ T9250] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 226.359138][ T9249] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 226.697562][ T9] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 226.710655][ T9] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 226.756194][ T9] usb 7-1: USB disconnect, device number 4 [ 226.765777][ T975] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 226.919792][ T975] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.941312][ T975] usb 3-1: config 0 has no interfaces? [ 226.951982][ T975] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 226.965819][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.978669][ T975] usb 3-1: config 0 descriptor?? [ 227.060599][ T9298] policy can only be matched on NF_INET_PRE_ROUTING [ 227.060619][ T9298] unable to load match [ 227.197428][ T30] audit: type=1326 audit(233.180:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.5.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9c78ebe9 code=0x7fc00000 [ 227.235556][ T975] usb 3-1: USB disconnect, device number 17 [ 227.435584][ T1172] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 227.605304][ T1172] usb 2-1: Using ep0 maxpacket: 32 [ 227.617949][ T1172] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 227.627342][ T1172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.639794][ T1172] usb 2-1: Product: syz [ 227.644986][ T1172] usb 2-1: Manufacturer: syz [ 227.649686][ T1172] usb 2-1: SerialNumber: syz [ 227.667914][ T1172] usb 2-1: config 0 descriptor?? [ 227.983361][ T30] audit: type=1326 audit(233.950:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.5.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8b9c78ebe9 code=0x7fc00000 [ 228.041757][ T30] audit: type=1326 audit(233.950:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.5.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9c78ebe9 code=0x7fc00000 [ 228.074401][ T30] audit: type=1326 audit(233.950:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.5.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9c78ebe9 code=0x7fc00000 [ 228.098901][ T1172] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 228.101498][ T30] audit: type=1326 audit(233.950:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.5.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9c78ebe9 code=0x7fc00000 [ 228.138389][ T30] audit: type=1326 audit(233.950:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9299 comm="syz.5.1343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b9c78ebe9 code=0x7fc00000 [ 228.146479][ T1172] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 228.224491][ T9327] netlink: 'syz.5.1356': attribute type 10 has an invalid length. [ 228.244494][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.253812][ T9327] bridge_slave_1: left allmulticast mode [ 228.260260][ T9327] bridge_slave_1: left promiscuous mode [ 228.269269][ T9327] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.276624][ T1172] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 228.291657][ T9327] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 228.292512][ T1172] usb 2-1: USB disconnect, device number 19 [ 229.041631][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1362'. [ 229.071778][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1365'. [ 229.110675][ T9348] dummy0: left allmulticast mode [ 229.118836][ T9348] bridge0: port 3(dummy0) entered disabled state [ 229.130762][ T9348] bridge_slave_1: left allmulticast mode [ 229.137691][ T9348] bridge_slave_1: left promiscuous mode [ 229.143827][ T9348] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.155218][ T9348] bridge_slave_0: left allmulticast mode [ 229.155239][ T9348] bridge_slave_0: left promiscuous mode [ 229.155414][ T9348] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.304700][ T1172] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 229.317234][ T9360] ref_ctr_offset mismatch. inode: 0x5fd offset: 0x0 ref_ctr_offset(old): 0xa0 ref_ctr_offset(new): 0x0 [ 229.464652][ T1172] usb 3-1: Using ep0 maxpacket: 8 [ 229.479052][ T1172] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 229.499281][ T1172] usb 3-1: config 179 has no interface number 0 [ 229.512842][ T1172] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 229.529875][ T1172] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 229.547058][ T1172] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 229.558791][ T1172] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 229.615034][ T1172] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 229.647330][ T1172] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 229.658855][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.769911][ T9347] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.907853][ T975] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 230.076715][ T975] usb 2-1: Using ep0 maxpacket: 16 [ 230.106933][ T975] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 230.140442][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 230.196250][ T975] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 230.212466][ T1172] usb 3-1: USB disconnect, device number 18 [ 230.218556][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 230.218604][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 230.224057][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.276391][ T975] usb 2-1: Product: syz [ 230.280587][ T975] usb 2-1: Manufacturer: syz [ 230.296425][ T975] usb 2-1: SerialNumber: syz [ 230.312257][ T975] usb 2-1: config 0 descriptor?? [ 230.327642][ T975] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 230.348794][ T975] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 230.499435][ T9393] fuse: Bad value for 'fd' [ 230.842024][ T9408] raw_sendmsg: syz.2.1387 forgot to set AF_INET. Fix it! [ 230.942868][ T975] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 230.943759][ T9413] netlink: 'syz.2.1389': attribute type 1 has an invalid length. [ 230.956452][ T975] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 230.996034][ T9413] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1389'. [ 231.394696][ T975] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 231.401738][ T975] em28xx 2-1:0.0: No AC97 audio processor [ 231.414484][ T975] usb 2-1: USB disconnect, device number 20 [ 231.422941][ T975] em28xx 2-1:0.0: Disconnecting em28xx [ 231.461337][ T975] em28xx 2-1:0.0: Freeing device [ 231.603308][ T5920] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 231.740563][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 231.740583][ T30] audit: type=1400 audit(237.722:797): avc: denied { getopt } for pid=9444 comm="syz.6.1403" lport=44003 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 231.774572][ T5920] usb 6-1: Using ep0 maxpacket: 32 [ 231.781633][ T5920] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 231.801404][ T5920] usb 6-1: config 0 has no interface number 0 [ 231.820819][ T5920] usb 6-1: config 0 interface 184 has no altsetting 0 [ 231.850141][ T5920] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 231.865236][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.882449][ T5920] usb 6-1: Product: syz [ 231.890464][ T5920] usb 6-1: Manufacturer: syz [ 231.898137][ T5920] usb 6-1: SerialNumber: syz [ 231.909989][ T5920] usb 6-1: config 0 descriptor?? [ 231.932027][ T5920] smsc75xx v1.0.0 [ 232.475835][ T30] audit: type=1400 audit(238.463:798): avc: denied { read } for pid=9475 comm="syz.4.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 232.545814][ T9485] syz_tun: entered allmulticast mode [ 232.556011][ T5920] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 232.558700][ T9484] syz_tun: left allmulticast mode [ 232.578882][ T5920] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 232.592078][ T5920] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 232.603629][ T5920] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 232.616433][ T5920] usb 6-1: USB disconnect, device number 6 [ 232.694259][ T9492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1424'. [ 232.712289][ T9492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1424'. [ 232.772886][ T9494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 232.793933][ T9494] erspan0: entered promiscuous mode [ 232.802281][ T9494] macvtap1: entered promiscuous mode [ 232.817075][ T9494] macvtap1: entered allmulticast mode [ 232.824348][ T9494] erspan0: entered allmulticast mode [ 232.840440][ T9499] erspan0: left allmulticast mode [ 232.854308][ T9499] erspan0: left promiscuous mode [ 232.896067][ T9502] input: syz0 as /devices/virtual/input/input18 [ 232.968475][ T9505] kvm: MWAIT instruction emulated as NOP! [ 233.422466][ T5920] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 233.603943][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 233.622147][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.657702][ T5920] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.685371][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.710167][ T5920] usb 6-1: config 0 descriptor?? [ 233.929121][ T5920] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 234.126269][ T9534] kvm: kvm [9533]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x5407 [ 234.163091][ T9538] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 234.204459][ T9534] kvm: kvm [9533]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x5b07 [ 234.331065][ T9534] kvm_intel: kvm [9533]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x9cbf [ 234.343238][ T9534] kvm: kvm [9533]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xcabf [ 234.345309][ T5920] usb 6-1: USB disconnect, device number 7 [ 234.352368][ T9534] kvm: kvm [9533]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x78ae [ 234.370874][ T9534] kvm: kvm [9533]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x835b [ 234.383087][ T9534] kvm: kvm [9533]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x1b4a [ 234.396491][ T9534] kvm: kvm [9533]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x553a [ 234.455099][ T9542] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1444'. [ 234.954235][ T9558] veth0_to_bridge: entered promiscuous mode [ 234.983125][ T9557] veth0_to_bridge: left promiscuous mode [ 235.662557][ T5920] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 235.848367][ T5920] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 235.858396][ T5920] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 235.891317][ T5920] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.917462][ T5920] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.949927][ T5920] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.002361][ T5920] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 236.011301][ T5920] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.050365][ T5920] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.079473][ T5920] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.109051][ T5920] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.135163][ T5920] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 236.142988][ T5920] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 236.166906][ T5920] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 236.177231][ T9587] overlayfs: failed to clone upperpath [ 236.200998][ T5920] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 236.226588][ T5920] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 236.310601][ T5920] usb 7-1: string descriptor 0 read error: -22 [ 236.317330][ T5920] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 236.361232][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.400773][ T5920] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 236.623940][ T5920] usb 7-1: USB disconnect, device number 5 [ 236.652360][ T30] audit: type=1400 audit(242.635:799): avc: denied { create } for pid=9600 comm="syz.2.1467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 236.694069][ T30] audit: type=1400 audit(242.665:800): avc: denied { sys_admin } for pid=9600 comm="syz.2.1467" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 236.867856][ T9604] usb usb8: usbfs: process 9604 (syz.2.1468) did not claim interface 0 before use [ 236.913431][ T30] audit: type=1400 audit(242.905:801): avc: denied { read } for pid=9608 comm="syz.5.1470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.144769][ T30] audit: type=1400 audit(243.135:802): avc: denied { mounton } for pid=9621 comm="syz.5.1473" path="/proc/227/cgroup" dev="proc" ino=29296 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 237.190330][ T30] audit: type=1400 audit(243.135:803): avc: denied { remount } for pid=9621 comm="syz.5.1473" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 237.984976][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1479'. [ 238.319161][ T30] audit: type=1400 audit(244.305:804): avc: denied { create } for pid=9644 comm="syz.4.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 238.729603][ T9668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 238.737225][ T9668] IPv6: NLM_F_CREATE should be set when creating new route [ 238.756838][ T30] audit: type=1400 audit(244.716:805): avc: denied { connect } for pid=9665 comm="syz.6.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 238.836574][ T30] audit: type=1400 audit(244.716:806): avc: denied { write } for pid=9665 comm="syz.6.1492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 239.179076][ T9678] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1496'. [ 239.332167][ T9647] syz.5.1485: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 239.412530][ T9647] CPU: 1 UID: 0 PID: 9647 Comm: syz.5.1485 Not tainted syzkaller #0 PREEMPT(full) [ 239.412557][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 239.412569][ T9647] Call Trace: [ 239.412575][ T9647] [ 239.412582][ T9647] dump_stack_lvl+0x16c/0x1f0 [ 239.412609][ T9647] warn_alloc+0x248/0x3a0 [ 239.412631][ T9647] ? __pfx_warn_alloc+0x10/0x10 [ 239.412662][ T9647] ? hash_ipport4_resize+0x1b4/0x1b10 [ 239.412685][ T9647] ? __vmalloc_node_noprof+0xad/0xf0 [ 239.412716][ T9647] __vmalloc_node_range_noprof+0x101b/0x14b0 [ 239.412752][ T9647] ? hash_ipport4_resize+0x1b4/0x1b10 [ 239.412782][ T9647] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 239.412812][ T9647] ? ___kmalloc_large_node+0xed/0x160 [ 239.412842][ T9647] __kvmalloc_node_noprof+0x30a/0x620 [ 239.412861][ T9647] ? hash_ipport4_resize+0x1b4/0x1b10 [ 239.412885][ T9647] ? hash_ipport4_resize+0x1b4/0x1b10 [ 239.412913][ T9647] ? hash_ipport4_resize+0x1b4/0x1b10 [ 239.412935][ T9647] hash_ipport4_resize+0x1b4/0x1b10 [ 239.412961][ T9647] ? __pfx_hash_ipport4_add+0x10/0x10 [ 239.412984][ T9647] ? __pfx_hash_ipport4_uadt+0x10/0x10 [ 239.413014][ T9647] ? __pfx_hash_ipport4_resize+0x10/0x10 [ 239.413048][ T9647] call_ad.constprop.0+0x36d/0x940 [ 239.413077][ T9647] ? __pfx_hash_ipport4_resize+0x10/0x10 [ 239.413103][ T9647] ? __pfx_call_ad.constprop.0+0x10/0x10 [ 239.413129][ T9647] ? __pfx___nla_validate_parse+0x10/0x10 [ 239.413167][ T9647] ? __nla_parse+0x40/0x60 [ 239.413194][ T9647] ip_set_ad.constprop.0.isra.0+0x3ce/0x870 [ 239.413225][ T9647] ? __pfx_ip_set_ad.constprop.0.isra.0+0x10/0x10 [ 239.413253][ T9647] ? rcu_sync_enter+0x50/0x350 [ 239.413301][ T9647] ? find_held_lock+0x2b/0x80 [ 239.413330][ T9647] nfnetlink_rcv_msg+0x9fc/0x1200 [ 239.413367][ T9647] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 239.413398][ T9647] ? __lock_acquire+0x62e/0x1ce0 [ 239.413446][ T9647] ? avc_has_perm_noaudit+0x149/0x3b0 [ 239.413473][ T9647] netlink_rcv_skb+0x155/0x420 [ 239.413495][ T9647] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 239.413524][ T9647] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.413558][ T9647] ? ns_capable+0xd7/0x110 [ 239.413583][ T9647] nfnetlink_rcv+0x1b3/0x430 [ 239.413613][ T9647] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 239.413639][ T9647] ? netlink_deliver_tap+0x1ae/0xd30 [ 239.413665][ T9647] netlink_unicast+0x5aa/0x870 [ 239.413690][ T9647] ? __pfx_netlink_unicast+0x10/0x10 [ 239.413711][ T9647] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 239.413740][ T9647] netlink_sendmsg+0x8d1/0xdd0 [ 239.413767][ T9647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.413798][ T9647] ____sys_sendmsg+0xa98/0xc70 [ 239.413825][ T9647] ? copy_msghdr_from_user+0x10a/0x160 [ 239.413845][ T9647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.413876][ T9647] ? __pfx_futex_wake_mark+0x10/0x10 [ 239.413900][ T9647] ___sys_sendmsg+0x134/0x1d0 [ 239.413923][ T9647] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.413977][ T9647] __sys_sendmsg+0x16d/0x220 [ 239.413997][ T9647] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.414016][ T9647] ? __x64_sys_futex+0x1e0/0x4c0 [ 239.414065][ T9647] do_syscall_64+0xcd/0x4c0 [ 239.414089][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.414108][ T9647] RIP: 0033:0x7f8b9c78ebe9 [ 239.414123][ T9647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.414140][ T9647] RSP: 002b:00007f8b9d56d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.414158][ T9647] RAX: ffffffffffffffda RBX: 00007f8b9c9b5fa0 RCX: 00007f8b9c78ebe9 [ 239.414171][ T9647] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000005 [ 239.414182][ T9647] RBP: 00007f8b9c811e19 R08: 0000000000000000 R09: 0000000000000000 [ 239.414192][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.414203][ T9647] R13: 00007f8b9c9b6038 R14: 00007f8b9c9b5fa0 R15: 00007ffda2751c08 [ 239.414229][ T9647] [ 239.414301][ T9647] Mem-Info: [ 239.759317][ T5900] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 239.763953][ T9647] active_anon:7285 inactive_anon:0 isolated_anon:0 [ 239.763953][ T9647] active_file:19265 inactive_file:40627 isolated_file:0 [ 239.763953][ T9647] unevictable:768 dirty:290 writeback:0 [ 239.763953][ T9647] slab_reclaimable:12349 slab_unreclaimable:108117 [ 239.763953][ T9647] mapped:29441 shmem:3407 pagetables:1296 [ 239.763953][ T9647] sec_pagetables:0 bounce:0 [ 239.763953][ T9647] kernel_misc_reclaimable:0 [ 239.763953][ T9647] free:1248729 free_pcp:23655 free_cma:0 [ 239.859339][ T9647] Node 0 active_anon:29040kB inactive_anon:0kB active_file:77004kB inactive_file:162308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117608kB dirty:1160kB writeback:0kB shmem:12092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12216kB pagetables:5040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.907681][ T9647] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 239.942123][ T9647] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.975445][ T9647] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 239.982023][ T9647] Node 0 DMA32 free:1077572kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29112kB inactive_anon:0kB active_file:77004kB inactive_file:160984kB unevictable:1536kB writepending:1160kB present:3129332kB managed:2539364kB mlocked:0kB bounce:0kB free_pcp:78656kB local_pcp:34056kB free_cma:0kB [ 240.019777][ T9647] lowmem_reserve[]: 0 0 1 1 1 [ 240.024512][ T9647] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 240.027552][ T5900] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 240.057921][ T9647] lowmem_reserve[]: 0 0 0 0 0 [ 240.067427][ T9647] Node 1 Normal free:3894904kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19160kB local_pcp:8376kB free_cma:0kB [ 240.108773][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.127554][ T5900] usb 2-1: Product: syz [ 240.133552][ T5900] usb 2-1: Manufacturer: syz [ 240.144851][ T5900] usb 2-1: SerialNumber: syz [ 240.146878][ T9647] lowmem_reserve[]: 0 0 0 0 0 [ 240.159023][ T9647] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.174321][ T9647] Node 0 DMA32: 1104*4kB (UME) 468*8kB (ME) 372*16kB (ME) 273*32kB (UME) 237*64kB (ME) 163*128kB (UME) 168*256kB (UM) 59*512kB (UM) 15*1024kB (UME) 6*2048kB (M) 224*4096kB (UM) = 1077248kB [ 240.195692][ T9647] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 240.216613][ T9647] Node 1 Normal: 159*4kB (UME) 38*8kB (UE) 30*16kB (UME) 87*32kB (UME) 27*64kB (UME) 7*128kB (UE) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3894956kB [ 240.238830][ T9647] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.256789][ T9647] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.266391][ T9647] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.278452][ T9647] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.287864][ T9647] 63295 total pagecache pages [ 240.294752][ T9647] 0 pages in swap cache [ 240.299036][ T9647] Free swap = 124996kB [ 240.303262][ T9647] Total swap = 124996kB [ 240.307487][ T9647] 2097051 pages RAM [ 240.313608][ T9647] 0 pages HighMem/MovableOnly [ 240.318423][ T9647] 430248 pages reserved [ 240.326488][ T9647] 0 pages cma reserved [ 240.826725][ T9711] overlayfs: failed to clone upperpath [ 241.677956][ T5900] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 241.730070][ T5900] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 241.798348][ T5900] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 241.821839][ T9746] loop6: detected capacity change from 0 to 7 [ 241.838466][ T30] audit: type=1400 audit(247.827:807): avc: denied { read } for pid=9744 comm="syz.4.1521" path="socket:[29528]" dev="sockfs" ino=29528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 241.851791][ T9746] Dev loop6: unable to read RDB block 7 [ 241.862578][ T5900] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 241.897878][ T9746] loop6: AHDI p4 [ 241.898399][ T5900] usb 2-1: USB disconnect, device number 21 [ 241.908040][ T9746] loop6: partition table partially beyond EOD, truncated [ 242.225957][ T30] audit: type=1400 audit(248.217:808): avc: denied { create } for pid=9755 comm="syz.2.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 242.328389][ T30] audit: type=1400 audit(248.297:809): avc: denied { write } for pid=9755 comm="syz.2.1528" path="socket:[29556]" dev="sockfs" ino=29556 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 242.671638][ T9776] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1534'. [ 243.729567][ T30] audit: type=1326 audit(249.728:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21638ebe9 code=0x7ffc0000 [ 243.876436][ T30] audit: type=1326 audit(249.728:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21638ebe9 code=0x7ffc0000 [ 243.899634][ T30] audit: type=1326 audit(249.728:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb21638ebe9 code=0x7ffc0000 [ 243.946432][ T30] audit: type=1326 audit(249.728:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21638ebe9 code=0x7ffc0000 [ 243.975568][ T30] audit: type=1326 audit(249.728:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21638ebe9 code=0x7ffc0000 [ 244.005684][ T30] audit: type=1326 audit(249.728:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb21638ebe9 code=0x7ffc0000 [ 244.036050][ T30] audit: type=1326 audit(249.728:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21638ebe9 code=0x7ffc0000 [ 244.061224][ T30] audit: type=1326 audit(249.728:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.6.1541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21638ebe9 code=0x7ffc0000 [ 244.520447][ T9822] vlan2: entered allmulticast mode [ 244.570892][ T9822] dummy0: entered allmulticast mode [ 245.106554][ T5589] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 245.287083][ T5589] usb 3-1: Using ep0 maxpacket: 32 [ 245.300852][ T5589] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 245.328360][ T5589] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.358410][ T5589] usb 3-1: Product: syz [ 245.362609][ T5589] usb 3-1: Manufacturer: syz [ 245.391458][ T5589] usb 3-1: SerialNumber: syz [ 245.410529][ T5589] usb 3-1: config 0 descriptor?? [ 245.441819][ T5589] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 246.821606][ T9874] mmap: syz.5.1572 (9874) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 246.850829][ T5589] gspca_stk1135: reg_w 0xf err -71 [ 246.875492][ T5589] gspca_stk1135: serial bus timeout: status=0x00 [ 246.890435][ T5589] gspca_stk1135: Sensor write failed [ 246.905664][ T5589] gspca_stk1135: serial bus timeout: status=0x00 [ 246.915250][ T9877] tipc: Started in network mode [ 246.921040][ T5589] gspca_stk1135: Sensor write failed [ 246.927498][ T9877] tipc: Node identity 4, cluster identity 4711 [ 246.955798][ T5589] gspca_stk1135: serial bus timeout: status=0x00 [ 246.962153][ T5589] gspca_stk1135: Sensor read failed [ 246.975859][ T9877] tipc: Node number set to 4 [ 246.980557][ T5589] gspca_stk1135: serial bus timeout: status=0x00 [ 246.995706][ T5589] gspca_stk1135: Sensor read failed [ 247.011380][ T5589] gspca_stk1135: Detected sensor type unknown (0x0) [ 247.024619][ T5589] gspca_stk1135: serial bus timeout: status=0x00 [ 247.047650][ T5589] gspca_stk1135: Sensor read failed [ 247.065589][ T5589] gspca_stk1135: serial bus timeout: status=0x00 [ 247.071947][ T5589] gspca_stk1135: Sensor read failed [ 247.095563][ T5589] gspca_stk1135: serial bus timeout: status=0x00 [ 247.102422][ T5589] gspca_stk1135: Sensor write failed [ 247.122245][ T5589] gspca_stk1135: serial bus timeout: status=0x00 [ 247.135490][ T5589] gspca_stk1135: Sensor write failed [ 247.146052][ T5589] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 247.165208][ T5589] usb 3-1: USB disconnect, device number 19 [ 248.048972][ T9935] netlink: set zone limit has 4 unknown bytes [ 248.330803][ T5900] libceph: connect (1)[c::]:6789 error -1 [ 248.337561][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 248.414054][ T1172] libceph: connect (1)[c::]:6789 error -1 [ 248.440368][ T1172] libceph: mon0 (1)[c::]:6789 connect error [ 248.595272][ T5900] libceph: connect (1)[c::]:6789 error -1 [ 248.601371][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 248.711959][ T5589] libceph: connect (1)[c::]:6789 error -1 [ 248.726018][ T5589] libceph: mon0 (1)[c::]:6789 connect error [ 248.740849][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 249.115089][ T5900] libceph: connect (1)[c::]:6789 error -1 [ 249.123429][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 249.128490][ T9960] ceph: No mds server is up or the cluster is laggy [ 249.135109][ T9955] ceph: No mds server is up or the cluster is laggy [ 249.175327][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 249.175345][ T30] audit: type=1400 audit(255.161:824): avc: denied { write } for pid=9988 comm="syz.2.1618" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 249.258240][ T30] audit: type=1400 audit(255.161:825): avc: denied { open } for pid=9988 comm="syz.2.1618" path="/309/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 249.264866][ T5589] libceph: connect (1)[c::]:6789 error -1 [ 249.281672][ T30] audit: type=1400 audit(255.161:826): avc: denied { module_request } for pid=9988 comm="syz.2.1618" kmod="char-major-0-7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 249.344329][ T5589] libceph: mon0 (1)[c::]:6789 connect error [ 249.448871][T10002] tipc: Failed to remove unknown binding: 66,1,1/4:3099191865/3099191867 [ 249.476166][T10002] tipc: Failed to remove unknown binding: 66,1,1/4:3099191865/3099191867 [ 250.014130][ T30] audit: type=1400 audit(255.991:827): avc: denied { read write } for pid=10033 comm="syz.2.1633" name="file0" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 250.051879][ T30] audit: type=1400 audit(255.991:828): avc: denied { open } for pid=10033 comm="syz.2.1633" path="/313/file0" dev="tmpfs" ino=1661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 250.091469][ T30] audit: type=1400 audit(256.001:829): avc: denied { ioctl } for pid=10033 comm="syz.2.1633" path="/313/file0" dev="tmpfs" ino=1661 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 250.743970][ T975] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 250.897721][ T975] usb 3-1: config 0 has no interfaces? [ 250.907516][ T975] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 250.928195][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.936722][ T975] usb 3-1: Product: syz [ 250.940941][ T975] usb 3-1: Manufacturer: syz [ 250.946119][ T975] usb 3-1: SerialNumber: syz [ 250.953028][ T975] usb 3-1: config 0 descriptor?? [ 250.953266][T10078] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1650'. [ 250.986267][T10081] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1649'. [ 251.131442][T10088] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1652'. [ 251.265945][T10054] veth0_vlan: left promiscuous mode [ 251.285124][T10054] veth0_vlan: entered promiscuous mode [ 251.314515][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.325628][ T975] usb 3-1: USB disconnect, device number 20 [ 251.334931][T10090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.344151][T10090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.351545][T10090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.518019][T10097] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1657'. [ 251.528425][T10097] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1657'. [ 251.631061][ C1] hrtimer: interrupt took 30701 ns [ 251.932986][T10118] overlayfs: failed to decode file handle (len=0, type=251, flags=0, err=-22) [ 253.392477][ T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 253.552821][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 253.574345][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.594925][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.616595][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 253.648467][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.686437][ T24] usb 3-1: config 0 descriptor?? [ 253.707622][ T24] hub 3-1:0.0: USB hub found [ 253.911608][ T24] hub 3-1:0.0: 1 port detected [ 253.954546][T10146] kexec: Could not allocate control_code_buffer [ 254.211585][T10180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1690'. [ 254.297985][T10183] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 254.335263][ T30] audit: type=1400 audit(260.333:830): avc: denied { unmount } for pid=5847 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 254.382033][ T975] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 254.480149][ T30] audit: type=1326 audit(260.474:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10192 comm="syz.4.1695" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb45578ebe9 code=0x0 [ 254.531957][ T975] usb 6-1: Using ep0 maxpacket: 8 [ 254.540535][ T975] usb 6-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.553354][ T24] hub 3-1:0.0: activate --> -90 [ 254.559411][ T975] usb 6-1: config 1 interface 0 has no altsetting 0 [ 254.569142][ T975] usb 6-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 254.580215][ T975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.589120][ T975] usb 6-1: Product: syz [ 254.595193][ T975] usb 6-1: Manufacturer: syz [ 254.599866][ T975] usb 6-1: SerialNumber: syz [ 254.641837][ T5900] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 254.793326][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.804610][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.819482][ T5900] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 254.829002][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.846121][ T5900] usb 2-1: config 0 descriptor?? [ 254.852132][ T975] usbhid 6-1:1.0: can't add hid device: -71 [ 254.858118][ T975] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 254.876602][ T975] usb 6-1: USB disconnect, device number 8 [ 254.962149][ T1172] usb 3-1: USB disconnect, device number 21 [ 255.028784][T10204] netlink: 'syz.6.1700': attribute type 5 has an invalid length. [ 255.280954][ T5900] hid_parser_main: 8 callbacks suppressed [ 255.280969][ T5900] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 255.296579][ T5900] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 255.354832][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.362653][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.464854][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 255.483465][ T5900] cp2112 0003:10C4:EA90.000E: Part Number: 0x82 Device Version: 0xFE [ 255.504190][T10217] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 256.340318][ T5900] usb 2-1: USB disconnect, device number 22 [ 256.496686][T10253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10253 comm=syz.6.1719 [ 256.512100][T10253] netlink: 'syz.6.1719': attribute type 1 has an invalid length. [ 256.574043][T10253] bond3: (slave bridge1): making interface the new active one [ 256.582962][T10253] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 256.794831][T10273] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1723'. [ 257.249725][T10297] fuse: Unknown parameter 'fd00000000000000000003' [ 257.692458][T10312] loop3: detected capacity change from 0 to 1 [ 257.699963][T10312] Dev loop3: unable to read RDB block 1 [ 257.709985][T10312] loop3: unable to read partition table [ 257.720406][T10312] loop3: partition table beyond EOD, truncated [ 257.758794][T10312] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 258.132499][T10327] loop6: detected capacity change from 0 to 7 [ 258.154334][T10327] Dev loop6: unable to read RDB block 7 [ 258.167905][T10327] loop6: AHDI p2 p3 p4 [ 258.174248][T10327] loop6: partition table partially beyond EOD, truncated [ 258.199069][T10327] loop6: p2 size 47 extends beyond EOD, truncated [ 258.221524][T10327] loop6: p3 start 1886353253 is beyond EOD, truncated [ 258.522501][T10349] loop2: detected capacity change from 0 to 7 [ 258.595070][T10349] Dev loop2: unable to read RDB block 7 [ 258.622461][T10349] loop2: unable to read partition table [ 258.639228][T10349] loop2: partition table beyond EOD, truncated [ 258.647763][T10349] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 258.769716][ T5920] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 258.931221][ T5920] usb 7-1: config 0 has no interfaces? [ 258.940681][ T5920] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 258.962542][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.014749][ T5920] usb 7-1: config 0 descriptor?? [ 259.246208][ T5920] usb 7-1: USB disconnect, device number 6 [ 259.551179][T10382] netlink: 'syz.5.1773': attribute type 1 has an invalid length. [ 259.666575][T10382] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.710267][T10388] bond4: (slave geneve2): making interface the new active one [ 259.719695][T10388] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 259.894903][T10399] program syz.1.1777 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.921985][T10399] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 260.160326][ T30] audit: type=1400 audit(265.896:832): avc: denied { ioctl } for pid=10398 comm="syz.1.1777" path="/dev/sg0" dev="devtmpfs" ino=773 ioctlcmd=0x5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 260.292419][T10410] netlink: 'syz.1.1781': attribute type 10 has an invalid length. [ 260.402223][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.437222][T10410] bridge_slave_1: left allmulticast mode [ 260.443867][T10410] bridge_slave_1: left promiscuous mode [ 260.449926][T10410] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.517076][T10410] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 260.767811][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1783'. [ 260.793200][T10414] bridge_slave_0: left allmulticast mode [ 260.810670][T10414] bridge_slave_0: left promiscuous mode [ 260.826289][T10414] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.117356][T10429] block nbd6: shutting down sockets [ 261.338516][ T1172] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 261.518811][ T1172] usb 3-1: Using ep0 maxpacket: 32 [ 261.531081][ T1172] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 261.549912][ T1172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.557938][ T1172] usb 3-1: Product: syz [ 261.579499][ T1172] usb 3-1: Manufacturer: syz [ 261.584131][ T1172] usb 3-1: SerialNumber: syz [ 261.588291][ T5920] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 261.597177][ T1172] usb 3-1: config 0 descriptor?? [ 261.628299][ T975] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 261.753693][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.769002][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 261.782748][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 261.795908][ T975] usb 7-1: Using ep0 maxpacket: 8 [ 261.804690][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 261.816011][ T975] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 261.826457][ T975] usb 7-1: config 179 has no interface number 0 [ 261.833569][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 261.847908][ T975] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 261.861015][ T975] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 261.873175][ T975] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 261.888491][ T975] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 261.900422][ T5920] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 261.920424][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 261.929987][ T975] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 261.944437][ T5920] usb 6-1: Product: syz [ 261.949295][ T5920] usb 6-1: Manufacturer: syz [ 261.953898][ T5920] usb 6-1: SerialNumber: syz [ 261.959792][ T975] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 261.971594][ T5920] usb 6-1: config 0 descriptor?? [ 261.977656][ T975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.994737][T10444] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 262.057455][ T1172] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 262.066332][ T1172] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 262.109075][ T1172] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 262.123475][ T1172] usb 3-1: USB disconnect, device number 22 [ 262.218784][ T5920] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 262.237847][ T5920] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 262.266811][T10462] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 262.285387][ T24] usb 7-1: USB disconnect, device number 7 [ 262.285388][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 262.285522][ C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 262.415988][ T5920] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 262.424336][ T5920] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 262.438368][ T5920] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 262.616813][ T5920] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 262.784949][T10484] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 263.323456][ T30] audit: type=1400 audit(269.328:833): avc: denied { bind } for pid=10507 comm="syz.1.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.423682][ T5920] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 263.436303][ T5920] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22 [ 263.480725][ T5920] usb 6-1: USB disconnect, device number 9 [ 264.014598][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1826'. [ 264.124859][T10548] erspan0: entered promiscuous mode [ 264.143244][T10548] macvtap1: entered promiscuous mode [ 264.163214][T10548] macvtap1: entered allmulticast mode [ 264.339681][T10548] erspan0: entered allmulticast mode [ 264.463590][T10550] erspan0: left allmulticast mode [ 264.468987][T10550] erspan0: left promiscuous mode [ 264.957623][T10573] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1833'. [ 265.096205][T10576] warn_alloc: 1 callbacks suppressed [ 265.096223][T10576] syz.4.1836: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 265.136539][T10576] CPU: 1 UID: 0 PID: 10576 Comm: syz.4.1836 Not tainted syzkaller #0 PREEMPT(full) [ 265.136571][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.136583][T10576] Call Trace: [ 265.136590][T10576] [ 265.136598][T10576] dump_stack_lvl+0x16c/0x1f0 [ 265.136633][T10576] warn_alloc+0x248/0x3a0 [ 265.136656][T10576] ? __pfx_warn_alloc+0x10/0x10 [ 265.136674][T10576] ? __pfx_stack_trace_save+0x10/0x10 [ 265.136711][T10576] ? kasan_save_stack+0x42/0x60 [ 265.136728][T10576] ? kasan_save_stack+0x33/0x60 [ 265.136744][T10576] ? kasan_save_track+0x14/0x30 [ 265.136760][T10576] ? xskq_create+0x52/0x1d0 [ 265.136775][T10576] ? xsk_setsockopt+0x792/0x9a0 [ 265.136799][T10576] ? do_sock_setsockopt+0xf0/0x1d0 [ 265.136823][T10576] ? xskq_create+0xfb/0x1d0 [ 265.136839][T10576] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 265.136875][T10576] ? xskq_create+0xfb/0x1d0 [ 265.136897][T10576] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 265.136931][T10576] ? xskq_create+0xfb/0x1d0 [ 265.136947][T10576] vmalloc_user_noprof+0x9e/0xe0 [ 265.136972][T10576] ? xskq_create+0xfb/0x1d0 [ 265.136989][T10576] xskq_create+0xfb/0x1d0 [ 265.137007][T10576] xsk_setsockopt+0x792/0x9a0 [ 265.137034][T10576] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.137059][T10576] ? find_held_lock+0x2b/0x80 [ 265.137086][T10576] ? selinux_socket_setsockopt+0x6a/0x80 [ 265.137110][T10576] ? __pfx_xsk_setsockopt+0x10/0x10 [ 265.137136][T10576] do_sock_setsockopt+0xf0/0x1d0 [ 265.137162][T10576] __sys_setsockopt+0x1a0/0x230 [ 265.137184][T10576] __x64_sys_setsockopt+0xbd/0x160 [ 265.137202][T10576] ? do_syscall_64+0x91/0x4c0 [ 265.137222][T10576] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.137241][T10576] do_syscall_64+0xcd/0x4c0 [ 265.137263][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.137280][T10576] RIP: 0033:0x7fb45578ebe9 [ 265.137297][T10576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.137314][T10576] RSP: 002b:00007fb4565ce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 265.137333][T10576] RAX: ffffffffffffffda RBX: 00007fb4559b5fa0 RCX: 00007fb45578ebe9 [ 265.137344][T10576] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 265.137354][T10576] RBP: 00007fb455811e19 R08: 0000000000000004 R09: 0000000000000000 [ 265.137366][T10576] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 265.137377][T10576] R13: 00007fb4559b6038 R14: 00007fb4559b5fa0 R15: 00007ffcde1e4508 [ 265.137402][T10576] [ 265.137409][T10576] Mem-Info: [ 265.225785][T10581] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 265.234273][T10576] active_anon:7285 inactive_anon:0 isolated_anon:0 [ 265.234273][T10576] active_file:19265 inactive_file:40637 isolated_file:0 [ 265.234273][T10576] unevictable:755 dirty:617 writeback:0 [ 265.234273][T10576] slab_reclaimable:8096 slab_unreclaimable:113031 [ 265.234273][T10576] mapped:29445 shmem:3408 pagetables:1259 [ 265.234273][T10576] sec_pagetables:0 bounce:0 [ 265.234273][T10576] kernel_misc_reclaimable:0 [ 265.234273][T10576] free:1273068 free_pcp:27492 free_cma:0 [ 265.450300][T10576] Node 0 active_anon:29140kB inactive_anon:0kB active_file:77004kB inactive_file:162348kB unevictable:1484kB isolated(anon):0kB isolated(file):0kB mapped:117724kB dirty:2464kB writeback:0kB shmem:12096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12660kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.484950][T10576] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 265.527137][T10576] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 265.581220][T10576] lowmem_reserve[]: 0 2479 2481 2481 2481 [ 265.588681][T10576] Node 0 DMA32 free:1186600kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28932kB inactive_anon:0kB active_file:77004kB inactive_file:161024kB unevictable:1540kB writepending:2476kB present:3129332kB managed:2539364kB mlocked:48kB bounce:0kB free_pcp:86460kB local_pcp:40060kB free_cma:0kB [ 265.622531][T10576] lowmem_reserve[]: 0 0 1 1 1 [ 265.632407][T10576] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:1324kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:28kB free_cma:0kB [ 265.663465][T10576] lowmem_reserve[]: 0 0 0 0 0 [ 265.668695][T10576] Node 1 Normal free:3895972kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18144kB local_pcp:7616kB free_cma:0kB [ 265.700112][T10576] lowmem_reserve[]: 0 0 0 0 0 [ 265.704857][T10576] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 265.718233][T10576] Node 0 DMA32: 6318*4kB (UME) 3014*8kB (UME) 2218*16kB (UME) 1258*32kB (UME) 596*64kB (UME) 210*128kB (UME) 175*256kB (UME) 60*512kB (UM) 15*1024kB (UME) 0*2048kB 221*4096kB (UM) = 1186248kB [ 265.738307][T10576] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 265.750437][T10576] Node 1 Normal: 157*4kB (UE) 38*8kB (UE) 30*16kB (UE) 99*32kB (UE) 27*64kB (UME) 10*128kB (UME) 5*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3895972kB [ 265.773268][T10576] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.789089][T10576] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.831183][T10576] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 265.847263][ T5920] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 265.849277][T10576] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 265.897964][T10576] 63306 total pagecache pages [ 265.902667][T10576] 0 pages in swap cache [ 265.928347][T10576] Free swap = 124996kB [ 265.932539][T10576] Total swap = 124996kB [ 265.947744][T10576] 2097051 pages RAM [ 265.951599][T10576] 0 pages HighMem/MovableOnly [ 265.970516][T10576] 430248 pages reserved [ 265.977058][T10576] 0 pages cma reserved [ 266.016425][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 266.024762][ T5920] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 266.042568][ T5920] usb 3-1: config 0 has no interface number 0 [ 266.058385][ T5920] usb 3-1: config 0 interface 184 has no altsetting 0 [ 266.080556][ T5920] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 266.092188][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.123076][ T5920] usb 3-1: Product: syz [ 266.138467][ T5920] usb 3-1: Manufacturer: syz [ 266.153289][ T5920] usb 3-1: SerialNumber: syz [ 266.167171][ T5920] usb 3-1: config 0 descriptor?? [ 266.181670][ T5920] smsc75xx v1.0.0 [ 266.801145][ T5920] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 266.916284][ T5920] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 266.929865][ T5920] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 267.118607][ T5920] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 267.196395][ T5920] usb 3-1: USB disconnect, device number 23 [ 267.209871][ T30] audit: type=1400 audit(273.210:834): avc: denied { bind } for pid=10618 comm="syz.5.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 267.505689][ T30] audit: type=1400 audit(273.490:835): avc: denied { accept } for pid=10628 comm="syz.6.1854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 267.913884][T10648] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1860'. [ 267.958107][T10648] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 268.394949][ T24] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 268.557973][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.584482][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.613675][ T24] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.633664][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.652492][ T24] usb 7-1: config 0 descriptor?? [ 268.687658][ T24] hub 7-1:0.0: USB hub found [ 268.895919][ T24] hub 7-1:0.0: 1 port detected [ 268.925428][T10669] overlayfs: failed to decode file handle (len=24, type=0, flags=0, err=-22) [ 269.526836][ T5589] hub 7-1:0.0: activate --> -90 [ 269.612808][T10690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.964123][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 270.155421][ T1172] usb 7-1: USB disconnect, device number 8 [ 270.161391][ T5589] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 270.170204][ T5589] usb 7-1-port1: attempt power cycle [ 270.186068][ T9] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 270.197660][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.413923][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.432186][ T9] usb 3-1: Product: syz [ 270.442327][ T9] usb 3-1: Manufacturer: syz [ 270.467844][ T9] usb 3-1: SerialNumber: syz [ 270.488753][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 270.527868][ T30] audit: type=1400 audit(276.512:836): avc: denied { firmware_load } for pid=5900 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 270.580447][ T5900] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 271.039759][T10697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.054470][T10697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.101145][T10697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.149805][T10697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.209794][T10697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.259549][T10697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.290356][ T30] audit: type=1400 audit(277.292:837): avc: denied { ioctl } for pid=10738 comm="syz.5.1900" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 271.322158][ T1172] usb 3-1: USB disconnect, device number 24 [ 271.623847][T10763] overlayfs: failed to clone upperpath [ 271.659537][T10766] overlayfs: missing 'lowerdir' [ 271.673851][ T5900] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 271.688960][ T5900] ath9k_htc: Failed to initialize the device [ 271.696463][T10766] overlayfs: missing 'lowerdir' [ 271.715274][ T1172] usb 3-1: ath9k_htc: USB layer deinitialized [ 271.765312][T10776] netlink: 'syz.4.1917': attribute type 1 has an invalid length. [ 271.789814][T10776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 271.815166][T10776] bond3: (slave gretap1): making interface the new active one [ 271.824356][T10776] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 272.039560][T10788] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1921'. [ 272.048695][ T1172] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 272.100304][T10790] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1921'. [ 272.111647][T10790] nbd: device at index 64 is going down [ 272.202998][ T1172] usb 3-1: Using ep0 maxpacket: 32 [ 272.209731][ T1172] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 272.221207][ T1172] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 272.235042][ T1172] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 272.246000][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.260661][ T1172] usb 3-1: config 0 descriptor?? [ 272.270001][ T1172] mos7840 3-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 272.480517][ T1172] mos7840 3-1:0.0: probe with driver mos7840 failed with error -71 [ 272.510886][ T1172] usb 3-1: USB disconnect, device number 25 [ 273.530551][T10844] tipc: Started in network mode [ 273.537169][T10844] tipc: Node identity 4, cluster identity 4711 [ 273.545860][T10844] tipc: Node number set to 4 [ 273.558412][T10845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1944'. [ 274.833919][T10892] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1957'. [ 275.089939][ T5900] IPVS: starting estimator thread 0... [ 275.183744][T10897] IPVS: using max 43 ests per chain, 103200 per kthread [ 275.819247][T10929] block nbd5: Attempted send on invalid socket [ 275.828378][T10929] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.849563][T10929] block nbd5: Attempted send on invalid socket [ 275.856855][T10929] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.868727][T10929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 275.883645][T10929] block nbd5: Attempted send on invalid socket [ 275.889865][T10929] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.901421][T10929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 275.928131][T10929] block nbd5: Attempted send on invalid socket [ 275.934461][T10929] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.946086][T10929] block nbd5: Attempted send on invalid socket [ 275.953201][T10929] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.964422][T10929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 275.981083][T10929] block nbd5: Attempted send on invalid socket [ 275.987491][T10929] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.015216][T10929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 276.282504][T10929] block nbd5: Attempted send on invalid socket [ 276.319756][T10929] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.547754][T10929] block nbd5: Attempted send on invalid socket [ 276.559663][T10929] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.578625][T10929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 276.594846][T10929] block nbd5: Attempted send on invalid socket [ 276.601746][T10929] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.613906][T10929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 276.669254][T10929] block nbd5: Attempted send on invalid socket [ 276.675761][T10929] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 276.695223][T10929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 276.718715][T10929] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 276.728501][T10929] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 277.567685][T10957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.583785][T10957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.605894][T10957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.618242][T10957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.700322][ T30] audit: type=1326 audit(283.695:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10940 comm="syz.6.1986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb21638ebe9 code=0x7fc00000 [ 278.514271][T10972] netlink: 'syz.4.1987': attribute type 5 has an invalid length. [ 279.028554][T10993] binder: 10992:10993 ioctl 4018620d 0 returned -22 [ 279.059209][T10970] kexec: Could not allocate control_code_buffer [ 279.078963][T10994] binder: 10992:10994 ioctl c018620c 0 returned -14 [ 279.272516][T11003] netlink: 'syz.2.1997': attribute type 10 has an invalid length. [ 280.348622][T11026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2007'. [ 280.590696][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2013'. [ 280.636531][T11039] netlink: 'syz.1.2013': attribute type 12 has an invalid length. [ 280.657863][T11039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2013'. [ 280.692681][T11039] netlink: 'syz.1.2013': attribute type 12 has an invalid length. [ 281.202233][T11080] tipc: Enabled bearer , priority 0 [ 281.230434][T11080] tipc: Disabling bearer [ 281.809861][T11122] loop6: detected capacity change from 0 to 7 [ 281.825101][T11122] Dev loop6: unable to read RDB block 7 [ 281.831231][T11122] loop6: AHDI p2 p3 p4 [ 281.835794][T11122] loop6: partition table partially beyond EOD, truncated [ 281.849019][T11122] loop6: p2 size 47 extends beyond EOD, truncated [ 281.859409][T11122] loop6: p3 start 1886353253 is beyond EOD, truncated [ 281.869367][T11126] policy can only be matched on NF_INET_PRE_ROUTING [ 281.869381][T11126] unable to load match [ 282.378831][T11146] program syz.5.2055 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 282.389049][T11146] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 282.732266][ T5900] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 282.832421][ T30] audit: type=1326 audit(288.848:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11152 comm="syz.1.2058" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7261f8ebe9 code=0x0 [ 282.887498][T11158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2060'. [ 282.908447][ T5900] usb 6-1: Using ep0 maxpacket: 32 [ 282.936879][ T5900] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 282.953758][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.972800][ T5900] usb 6-1: Product: syz [ 282.982895][ T5900] usb 6-1: Manufacturer: syz [ 282.992347][ T5900] usb 6-1: SerialNumber: syz [ 283.002236][ T5900] usb 6-1: config 0 descriptor?? [ 283.071541][T11171] overlayfs: failed to clone upperpath [ 283.294218][T11182] overlayfs: failed to clone upperpath [ 283.384097][T11188] overlayfs: failed to clone upperpath [ 283.423315][ T5900] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 283.447484][ T5900] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 283.454530][T11190] overlayfs: failed to clone upperpath [ 283.508770][ T5900] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 283.529713][ T5900] usb 6-1: USB disconnect, device number 10 [ 283.863127][T11203] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 283.928354][ T5920] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 284.107027][ T5920] usb 2-1: Using ep0 maxpacket: 16 [ 284.130301][ T5920] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 284.176342][ T5920] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 55, changing to 9 [ 284.210572][T11214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2085'. [ 284.225952][ T5920] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 8496, setting to 1024 [ 284.242424][ T5920] usb 2-1: config 0 interface 0 has no altsetting 0 [ 284.269645][ T5920] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 284.281114][T11214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2085'. [ 284.294801][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.313575][ T5920] usb 2-1: Product: syz [ 284.328345][ T5920] usb 2-1: Manufacturer: syz [ 284.332978][ T5920] usb 2-1: SerialNumber: syz [ 284.349320][ T5920] usb 2-1: config 0 descriptor?? [ 284.569829][ T5920] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input19 [ 284.785582][ T1172] usb 2-1: USB disconnect, device number 23 [ 284.852034][T11257] 9pnet_fd: Insufficient options for proto=fd [ 285.338492][T11275] netlink: 566 bytes leftover after parsing attributes in process `syz.1.2110'. [ 285.375901][T11277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11277 comm=syz.1.2111 [ 285.390724][T11277] netlink: 'syz.1.2111': attribute type 1 has an invalid length. [ 285.397127][ T1172] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 285.423149][T11277] bond2: (slave bridge0): making interface the new active one [ 285.431383][T11277] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 285.472674][ T30] audit: type=1400 audit(291.489:840): avc: denied { map } for pid=11279 comm="syz.2.2113" path="socket:[36445]" dev="sockfs" ino=36445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.495922][ T30] audit: type=1400 audit(291.489:841): avc: denied { accept } for pid=11279 comm="syz.2.2113" path="socket:[36445]" dev="sockfs" ino=36445 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 285.532076][ T30] audit: type=1400 audit(291.549:842): avc: denied { mount } for pid=11281 comm="syz.1.2114" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 285.555253][ T30] audit: type=1400 audit(291.549:843): avc: denied { search } for pid=11281 comm="syz.1.2114" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.576990][ T30] audit: type=1400 audit(291.549:844): avc: denied { search } for pid=11281 comm="syz.1.2114" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.598411][ T30] audit: type=1400 audit(291.549:845): avc: denied { read open } for pid=11281 comm="syz.1.2114" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 285.627237][ T1172] usb 6-1: Using ep0 maxpacket: 16 [ 285.649232][ T1172] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 285.664826][ T1172] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 285.690420][ T1172] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 285.701198][ T1172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.717414][ T1172] usb 6-1: Product: syz [ 285.731813][ T1172] usb 6-1: Manufacturer: syz [ 285.743678][ T1172] usb 6-1: SerialNumber: syz [ 285.773904][ T1172] usb 6-1: config 0 descriptor?? [ 285.795502][ T1172] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 285.822509][ T1172] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 286.058903][T11305] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.413968][ T1172] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 286.441387][ T1172] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 286.457265][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2130'. [ 286.487473][T11317] team1: entered promiscuous mode [ 286.493353][T11317] team1: entered allmulticast mode [ 286.858810][ T1172] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 286.869260][ T1172] em28xx 6-1:0.0: No AC97 audio processor [ 286.883634][ T1172] usb 6-1: USB disconnect, device number 11 [ 286.897822][ T1172] em28xx 6-1:0.0: Disconnecting em28xx [ 286.922294][ T1172] em28xx 6-1:0.0: Freeing device [ 287.015685][ T5589] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 287.197205][ T5589] usb 3-1: config 0 has no interfaces? [ 287.202762][ T5589] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 287.248651][ T5589] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.269732][ T5589] usb 3-1: config 0 descriptor?? [ 287.394860][T11364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2149'. [ 287.455490][ T30] audit: type=1400 audit(293.470:846): avc: denied { map } for pid=11367 comm="syz.5.2151" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 287.478610][ T30] audit: type=1400 audit(293.470:847): avc: denied { execute } for pid=11367 comm="syz.5.2151" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 287.512982][ T5589] usb 3-1: USB disconnect, device number 26 [ 287.530134][T11370] RGB/YUV Input: ================= START STATUS ================= [ 287.539141][T11370] RGB/YUV Input: Test Pattern: 75% Colorbar [ 287.547204][T11370] RGB/YUV Input: Show Information: All [ 287.552891][T11370] RGB/YUV Input: Vertical Flip: false [ 287.558851][T11370] RGB/YUV Input: Horizontal Flip: false [ 287.564480][T11370] RGB/YUV Input: Brightness: 128 [ 287.569696][T11370] RGB/YUV Input: Contrast: 128 [ 287.574543][T11370] RGB/YUV Input: Hue: 0 [ 287.578918][T11370] RGB/YUV Input: Saturation: 128 [ 287.583941][T11370] RGB/YUV Input: ================== END STATUS ================== [ 287.708615][T11374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2153'. [ 288.140149][T11384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 288.154032][T11384] macsec1: entered promiscuous mode [ 288.159741][T11384] syzkaller0: entered promiscuous mode [ 288.170523][T11384] syzkaller0: left promiscuous mode [ 288.622207][T11416] netlink: 'syz.5.2167': attribute type 21 has an invalid length. [ 288.630792][T11416] netlink: 'syz.5.2167': attribute type 22 has an invalid length. [ 288.643451][T11416] netlink: 'syz.5.2167': attribute type 23 has an invalid length. [ 288.657974][T11416] netlink: 'syz.5.2167': attribute type 25 has an invalid length. [ 288.671160][T11416] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2167'. [ 288.862740][ T30] audit: type=1400 audit(294.871:848): avc: denied { unmount } for pid=11433 comm="syz.4.2176" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 289.172921][T11452] batadv_slave_1: entered promiscuous mode [ 289.180434][T11451] batadv_slave_1: left promiscuous mode [ 289.250026][T11454] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 290.135786][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2192'. [ 290.323549][T11496] netlink: 'syz.2.2200': attribute type 4 has an invalid length. [ 290.332054][T11496] netlink: 210788 bytes leftover after parsing attributes in process `syz.2.2200'. [ 290.552670][T11507] tipc: Enabling of bearer rejected, already enabled [ 290.709833][T11513] Bluetooth: hci0: unsupported parameter 256 [ 290.716217][T11513] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 290.723828][ T5962] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 290.900287][ T5962] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 290.913847][ T5962] usb 3-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.927726][ T5962] usb 3-1: config 0 interface 0 has no altsetting 0 [ 290.950031][ T5962] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 291.026986][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.233597][ T5962] usb 3-1: config 0 descriptor?? [ 291.442096][T11532] hsr_slave_0: left promiscuous mode [ 291.448414][T11532] hsr_slave_1: left promiscuous mode [ 291.693547][ T5962] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 291.708972][ T5962] kovaplus 0003:1E7D:2D50.000F: unknown main item tag 0x0 [ 291.765759][ T5962] kovaplus 0003:1E7D:2D50.000F: item fetching failed at offset 4/5 [ 291.782108][ T5962] kovaplus 0003:1E7D:2D50.000F: parse failed [ 291.793754][ T5962] kovaplus 0003:1E7D:2D50.000F: probe with driver kovaplus failed with error -22 [ 291.895781][ T5920] usb 3-1: USB disconnect, device number 27 [ 292.866210][T11585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.882961][T11585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.900022][T11585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.920659][T11585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.172054][ T5962] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 294.424240][ T5962] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 294.453489][ T5962] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 294.501804][ T5962] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.542568][ T5962] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 294.582457][ T5962] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 294.632094][ T5962] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 294.651791][ T5962] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 294.694510][ T5962] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.735495][ T5962] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 294.769548][ T5962] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 294.804693][ T5962] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 294.827912][ T5962] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 294.850238][ T5962] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.881253][ T5962] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 294.917383][ T5962] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 294.953660][ T5962] usb 6-1: string descriptor 0 read error: -22 [ 294.959936][ T5962] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 294.976550][ T5962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.016252][ T5962] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 295.313049][ T5920] usb 6-1: USB disconnect, device number 12 [ 295.351035][T11694] netlink: 'syz.6.2269': attribute type 13 has an invalid length. [ 295.422275][T11694] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 295.580885][T11710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2274'. [ 296.072223][T11718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 296.166266][T11724] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2277'. [ 296.213151][ T30] audit: type=1400 audit(558.220:849): avc: denied { accept } for pid=11726 comm="syz.5.2280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 296.599835][T11748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2289'. [ 296.609535][T11748] netlink: 'syz.1.2289': attribute type 7 has an invalid length. [ 296.619630][T11748] netlink: 'syz.1.2289': attribute type 8 has an invalid length. [ 296.628756][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2289'. [ 296.891563][ T5962] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 297.115185][ T5962] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 297.124433][ T5962] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 297.151758][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 297.172933][ T5962] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 297.193293][ T5962] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 297.211247][ T5962] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 297.222848][ T5962] usb 6-1: Manufacturer: syz [ 297.232631][ T5962] usb 6-1: config 0 descriptor?? [ 297.246589][ T5962] igorplugusb 6-1:0.0: endpoint incorrect [ 297.331519][ T30] audit: type=1800 audit(559.340:850): pid=11785 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.2303" name="bus" dev="overlay" ino=2291 res=0 errno=0 [ 297.393990][ T30] audit: type=1400 audit(559.410:851): avc: denied { create } for pid=11787 comm="syz.4.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.429740][ T30] audit: type=1400 audit(559.440:852): avc: denied { write } for pid=11787 comm="syz.4.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.447667][ T5962] usb 6-1: USB disconnect, device number 13 [ 297.455067][ T30] audit: type=1400 audit(559.440:853): avc: denied { nlmsg_write } for pid=11787 comm="syz.4.2306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 297.578572][T11801] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2310'. [ 297.596109][T11800] overlayfs: overlapping lowerdir path [ 297.729511][T11812] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 297.908675][ T30] audit: type=1400 audit(559.920:854): avc: denied { execute } for pid=11822 comm="syz.6.2319" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=38383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 298.072309][ T5962] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 298.224875][ T5962] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.235471][ T5962] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 298.245187][ T5962] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.258883][ T5962] usb 2-1: config 0 descriptor?? [ 298.270713][ T5962] pwc: Askey VC010 type 2 USB webcam detected. [ 298.291111][T11836] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2324'. [ 298.381637][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 298.501637][ T5920] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 298.662999][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.674386][ T5962] pwc: recv_control_msg error -32 req 02 val 2b00 [ 298.678312][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.694082][ T5962] pwc: recv_control_msg error -32 req 02 val 2700 [ 298.701568][ T5962] pwc: recv_control_msg error -32 req 02 val 2c00 [ 298.706151][ T5920] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 298.726806][ T5920] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.752015][ T5920] usb 6-1: config 0 descriptor?? [ 298.766860][ T5962] pwc: recv_control_msg error -32 req 04 val 1000 [ 298.980191][ T5962] pwc: recv_control_msg error -71 req 04 val 1400 [ 298.991962][ T5962] pwc: recv_control_msg error -71 req 02 val 2000 [ 299.009445][ T5962] pwc: recv_control_msg error -71 req 02 val 2100 [ 299.016435][ T5962] pwc: recv_control_msg error -71 req 04 val 1500 [ 299.037466][ T5962] pwc: recv_control_msg error -71 req 02 val 2500 [ 299.046788][ T5962] pwc: recv_control_msg error -71 req 02 val 2400 [ 299.062022][ T5962] pwc: recv_control_msg error -71 req 02 val 2600 [ 299.070959][ T5962] pwc: recv_control_msg error -71 req 02 val 2900 [ 299.089218][ T5962] pwc: recv_control_msg error -71 req 02 val 2800 [ 299.099450][ T5962] pwc: recv_control_msg error -71 req 04 val 1100 [ 299.111844][ T5962] pwc: recv_control_msg error -71 req 04 val 1200 [ 299.132543][ T5962] pwc: Registered as video103. [ 299.140697][ T5962] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input20 [ 299.155245][ T5962] usb 2-1: USB disconnect, device number 24 [ 299.242635][T11885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.257555][T11885] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.272113][T11885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.344339][T11891] netlink: 'syz.6.2345': attribute type 1 has an invalid length. [ 299.376109][T11891] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.474523][T11899] overlayfs: failed to clone upperpath [ 299.534224][T11901] netlink: 'syz.4.2349': attribute type 7 has an invalid length. [ 299.550664][T11903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2350'. [ 299.560157][T11901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2349'. [ 299.627290][T11907] 9pnet_fd: Insufficient options for proto=fd [ 299.682335][T11911] bond4: entered allmulticast mode [ 299.687779][T11911] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.695728][T11911] bridge0: port 1(bond4) entered blocking state [ 299.703029][T11911] bridge0: port 1(bond4) entered disabled state [ 299.716341][T11911] bridge0: port 1(bond4) entered blocking state [ 299.722988][T11911] bridge0: port 1(bond4) entered forwarding state [ 299.773960][ T5920] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 299.980731][ T5962] usb 6-1: USB disconnect, device number 14 [ 300.295214][T11948] fuse: Bad value for 'fd' [ 300.405662][T11951] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2369'. [ 300.457104][ T1160] bridge0: port 1(bond4) entered disabled state [ 300.647042][T11960] netlink: 'syz.5.2373': attribute type 1 has an invalid length. [ 300.707515][T11960] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.730705][T11964] bond5: (slave gretap1): making interface the new active one [ 300.742896][T11964] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 301.874631][T12005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2389'. [ 302.179527][ T30] audit: type=1400 audit(564.190:855): avc: denied { read } for pid=12023 comm="syz.4.2398" path="socket:[38648]" dev="sockfs" ino=38648 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.231225][T12026] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2398'. [ 302.241558][ T30] audit: type=1326 audit(564.190:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12023 comm="syz.4.2398" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb45578ebe9 code=0x0 [ 302.747565][T12040] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2405'. [ 302.876768][T12048] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2409'. [ 302.883370][T12050] bond_slave_1: entered promiscuous mode [ 302.896012][T12050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2410'. [ 302.944194][T12050] bond0: (slave bond_slave_1): Releasing backup interface [ 302.960021][T12050] bond_slave_1 (unregistering): left promiscuous mode [ 303.005350][T12051] Process accounting resumed [ 304.248620][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2425'. [ 304.258051][T12101] netlink: 'syz.4.2425': attribute type 20 has an invalid length. [ 304.275158][ T1144] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.284119][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2425'. [ 304.291028][ T1144] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.305006][T12101] netlink: 'syz.4.2425': attribute type 20 has an invalid length. [ 304.313435][ T1144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.327903][ T1144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.826215][ T30] audit: type=1400 audit(566.840:857): avc: denied { accept } for pid=12121 comm="syz.2.2435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 306.092324][ T1172] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 306.255344][ T1172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.280535][ T1172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 306.308227][ T1172] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 306.324530][ T1172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 306.345323][ T1172] usb 2-1: SerialNumber: syz [ 306.366969][ T1172] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 306.386277][ T1172] usb-storage 2-1:1.0: USB Mass Storage device detected [ 306.412558][ T1172] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 306.425228][ T1172] scsi host1: usb-storage 2-1:1.0 [ 306.577159][ T5962] usb 2-1: USB disconnect, device number 25 [ 306.751580][ T1172] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 306.904390][ T1172] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 306.915660][ T1172] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 306.928898][ T1172] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 306.938711][ T1172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.947075][ T1172] usb 6-1: Product: syz [ 306.951380][ T1172] usb 6-1: Manufacturer: syz [ 306.957109][ T1172] usb 6-1: SerialNumber: syz [ 307.184738][ T1172] usb 6-1: 0:2 : does not exist [ 307.201455][ T1172] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 307.270454][ T1172] usb 6-1: USB disconnect, device number 15 [ 307.335122][T12258] SELinux: Context system_u:object_r:ping_exec_t:s0 is not valid (left unmapped). [ 307.350346][ T30] audit: type=1400 audit(569.360:858): avc: denied { relabelto } for pid=12256 comm="syz.6.2481" name="file0" dev="tmpfs" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ping_exec_t:s0" [ 307.392408][ T30] audit: type=1400 audit(569.360:859): avc: denied { associate } for pid=12256 comm="syz.6.2481" name="file0" dev="tmpfs" ino=1879 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ping_exec_t:s0" [ 307.419853][ T30] audit: type=1400 audit(569.360:860): avc: denied { append } for pid=12256 comm="syz.6.2481" path="/346/file0" dev="tmpfs" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ping_exec_t:s0" [ 307.494452][ T30] audit: type=1400 audit(569.500:861): avc: denied { unlink } for pid=7993 comm="syz-executor" name="file0" dev="tmpfs" ino=1879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ping_exec_t:s0" [ 307.921590][ T5962] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 308.081634][ T5962] usb 3-1: Using ep0 maxpacket: 16 [ 308.090291][ T5962] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 308.100183][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.145083][ T5962] usb 3-1: config 0 descriptor?? [ 308.160104][ T5962] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 308.611571][ T5859] Bluetooth: hci5: command 0x0406 tx timeout [ 308.612184][ T30] audit: type=1400 audit(570.620:862): avc: denied { link } for pid=12300 comm="syz.1.2499" name="#4b" dev="tmpfs" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 308.685912][ T30] audit: type=1400 audit(570.620:863): avc: denied { rename } for pid=12300 comm="syz.1.2499" name="#4c" dev="tmpfs" ino=2621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 309.069229][T12310] netlink: 'syz.5.2503': attribute type 2 has an invalid length. [ 309.077346][T12310] netlink: 1184 bytes leftover after parsing attributes in process `syz.5.2503'. [ 309.415574][ T30] audit: type=1400 audit(571.430:864): avc: denied { read write } for pid=12331 comm="syz.5.2511" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 309.440818][ T30] audit: type=1400 audit(571.430:865): avc: denied { open } for pid=12331 comm="syz.5.2511" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 309.471395][ T5920] kernel read not supported for file /vga_arbiter (pid: 5920 comm: kworker/0:4) [ 309.571757][ T5962] gspca_sonixj: i2c_w8 err -71 [ 309.602173][ T5962] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 309.627576][ T5962] usb 3-1: USB disconnect, device number 28 [ 309.694107][T12337] SELinux: failed to load policy [ 310.373792][T12380] overlayfs: failed to clone upperpath [ 310.548519][T12392] overlayfs: failed to clone upperpath [ 310.966964][T12433] input: syz1 as /devices/virtual/input/input21 [ 311.033540][T12435] fuse: Bad value for 'fd' [ 311.038101][ T30] audit: type=1400 audit(573.050:866): avc: denied { mounton } for pid=12434 comm="syz.6.2553" path="/366/file0" dev="tmpfs" ino=1989 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 311.163276][ T30] audit: type=1326 audit(573.180:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12438 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x7ffc0000 [ 311.634543][T12473] overlayfs: failed to clone upperpath [ 311.771584][ T1172] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 311.945083][ T1172] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 311.981719][ T1172] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.025010][ T1172] usb 2-1: Product: syz [ 312.029247][ T1172] usb 2-1: Manufacturer: syz [ 312.048411][ T1172] usb 2-1: SerialNumber: syz [ 312.075098][ T1172] usb 2-1: config 0 descriptor?? [ 313.167349][T12536] overlayfs: failed to clone upperpath [ 313.231704][ T5900] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 313.307362][T12541] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2593'. [ 313.361701][ T1172] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 313.381548][ T1172] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 313.385090][ T5900] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.402599][ T1172] asix 2-1:0.0: probe with driver asix failed with error -71 [ 313.409612][ T5900] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.427298][ T1172] usb 2-1: USB disconnect, device number 26 [ 313.472816][ T5900] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 313.487933][ T5900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 313.504053][ T5900] usb 6-1: SerialNumber: syz [ 313.591553][ T5962] IPVS: starting estimator thread 0... [ 313.700069][T12553] netlink: 'syz.6.2598': attribute type 1 has an invalid length. [ 313.714722][T12549] IPVS: using max 44 ests per chain, 105600 per kthread [ 313.768756][ T5900] usb 6-1: 0:2 : does not exist [ 313.785091][ T5900] usb 6-1: unit 5: unexpected type 0x09 [ 313.828500][ T5900] usb 6-1: USB disconnect, device number 16 [ 313.897351][T12553] 8021q: adding VLAN 0 to HW filter on device bond6 [ 314.074368][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2604'. [ 314.170856][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 314.170877][ T30] audit: type=1400 audit(576.180:876): avc: denied { listen } for pid=12570 comm="syz.6.2606" lport=59062 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 314.200843][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.260001][T10538] IPVS: stop unused estimator thread 0... [ 314.341377][ T30] audit: type=1400 audit(576.350:877): avc: denied { read } for pid=12582 comm="syz.4.2611" path="socket:[41604]" dev="sockfs" ino=41604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 314.402373][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2612'. [ 314.420412][ T1160] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.430305][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2612'. [ 314.440974][ T1160] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.472093][ T1160] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.490110][ T1160] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 314.501069][T12591] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2611'. [ 315.030693][T12618] nbd_handle_cmd: 2 callbacks suppressed [ 315.030727][T12618] block nbd1: Attempted send on invalid socket [ 315.047681][ T5962] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 315.062345][T12618] blk_print_req_error: 2 callbacks suppressed [ 315.062386][T12618] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.113027][T12618] block nbd1: Attempted send on invalid socket [ 315.120152][T12618] I/O error, dev nbd1, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.130044][T12618] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 315.144478][T12618] block nbd1: Attempted send on invalid socket [ 315.150906][T12618] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.161815][T12618] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 315.180718][T12618] block nbd1: Attempted send on invalid socket [ 315.187563][T12618] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.208934][T12618] block nbd1: Attempted send on invalid socket [ 315.215826][T12618] I/O error, dev nbd1, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.221589][ T5962] usb 6-1: Using ep0 maxpacket: 8 [ 315.233879][T12618] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 315.239704][ T5962] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.248070][T12618] block nbd1: Attempted send on invalid socket [ 315.275426][T12618] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.288017][T12618] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 315.293226][ T5962] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 315.337090][ T5962] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.362456][T12618] block nbd1: Attempted send on invalid socket [ 315.369138][T12618] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.392308][ T5962] usb 6-1: config 0 descriptor?? [ 315.399094][ T5962] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 315.402008][T12618] block nbd1: Attempted send on invalid socket [ 315.413812][T12618] I/O error, dev nbd1, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.425078][T12618] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 315.454869][T12618] block nbd1: Attempted send on invalid socket [ 315.462443][T12618] I/O error, dev nbd1, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.477943][T12618] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 315.495536][ T30] audit: type=1400 audit(577.510:878): avc: denied { setattr } for pid=12631 comm="syz.4.2630" name="RDS" dev="sockfs" ino=41656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 315.541800][T12630] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3940630386 (15762521544 ns) > initial count (6051692324 ns). Using initial count to start timer. [ 315.585953][T12618] block nbd1: Attempted send on invalid socket [ 315.617528][T12618] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 315.666305][T12618] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 315.701326][T12618] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 315.725076][T12618] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 316.628566][T12667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2641'. [ 316.817220][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.823912][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.826943][ T9] usb 6-1: USB disconnect, device number 17 [ 317.119514][T12691] overlayfs: failed to clone upperpath [ 317.492923][T12700] 9pnet_fd: Insufficient options for proto=fd [ 317.790033][T12711] dvmrp8: entered allmulticast mode [ 317.816550][T12708] dvmrp8: left allmulticast mode [ 318.279916][T12731] netlink: 'syz.5.2668': attribute type 4 has an invalid length. [ 318.469074][T12740] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 318.484584][ T30] audit: type=1400 audit(580.500:879): avc: denied { relabelto } for pid=12739 comm="syz.6.2672" name="file0" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 318.511731][ T30] audit: type=1400 audit(580.530:880): avc: denied { associate } for pid=12739 comm="syz.6.2672" name="file0" dev="tmpfs" ino=2145 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 318.579467][ T30] audit: type=1400 audit(580.590:881): avc: denied { rmdir } for pid=7993 comm="syz-executor" name="file0" dev="tmpfs" ino=2145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 318.714305][T12755] fuse: Bad value for 'fd' [ 318.843853][ T5920] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 318.880010][T12765] tls_set_device_offload_rx: netdev not found [ 319.024477][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 319.046275][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 319.098363][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 319.149971][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 319.188398][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 319.231630][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.244473][T12774] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.260935][ T5920] usb 2-1: config 0 descriptor?? [ 319.519953][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 319.527016][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 319.620717][T12799] overlayfs: failed to clone upperpath [ 319.659772][T12789] ceph: No mds server is up or the cluster is laggy [ 319.712107][ T5920] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 319.899753][T12777] : entered promiscuous mode [ 319.946942][ T78] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.962043][ T78] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.014207][ T78] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.061803][ T78] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.360055][T12834] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2700'. [ 320.586390][ T5920] usb 2-1: USB disconnect, device number 27 [ 320.689291][T12849] fuse: Bad value for 'fd' [ 320.703556][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 320.732155][T12848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2706'. [ 320.797142][T12857] fuse: Bad value for 'fd' [ 321.261877][T12882] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2721'. [ 321.582718][ T5920] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 321.698308][T12904] batadv_slave_1: entered promiscuous mode [ 321.709899][T12904] ip6tnl0: entered promiscuous mode [ 321.727879][T12903] ip6tnl0: left promiscuous mode [ 321.741563][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 321.749936][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.751674][T12903] batadv_slave_1: left promiscuous mode [ 321.759292][ T5920] usb 2-1: config 0 has no interface number 0 [ 321.775192][ T5920] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 321.785489][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.813887][ T5920] usb 2-1: Product: syz [ 321.826973][ T5920] usb 2-1: Manufacturer: syz [ 321.839834][ T5920] usb 2-1: SerialNumber: syz [ 321.853018][ T5920] usb 2-1: config 0 descriptor?? [ 321.868766][ T5920] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 321.899029][ T5920] usb 2-1: selecting invalid altsetting 1 [ 321.905347][ T5920] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 321.946762][ T5920] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 321.977264][ T5920] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 321.996845][ T5920] usb 2-1: media controller created [ 322.058730][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.144511][ T5920] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 322.186956][ T5920] zl10353_read_register: readreg error (reg=127, ret==-71) [ 322.196269][ T5920] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 322.305928][ T5920] usb 2-1: USB disconnect, device number 28 [ 322.598390][ T30] audit: type=1800 audit(584.600:882): pid=12918 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2737" name="bus" dev="tmpfs" ino=2260 res=0 errno=0 [ 322.642237][ T48] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 322.928740][ T48] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.948831][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.972679][ T48] usb 3-1: Product: syz [ 322.976893][ T48] usb 3-1: Manufacturer: syz [ 322.994769][ T48] usb 3-1: SerialNumber: syz [ 323.171773][ T5920] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 323.351572][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 323.358716][ T5920] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.367465][ T5920] usb 2-1: config 0 has no interface number 0 [ 323.377574][ T5920] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.391009][ T5920] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.412065][ T5920] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 323.435478][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.451330][ T5920] usb 2-1: config 0 descriptor?? [ 324.043924][ T48] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 324.057221][ T48] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 324.073937][ T5920] input: HID 28bd:0094 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0094.0012/input/input23 [ 324.167437][ T5920] uclogic 0003:28BD:0094.0012: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.1-1/input1 [ 324.280363][ T5589] usb 2-1: USB disconnect, device number 29 [ 325.194973][ T30] audit: type=1400 audit(587.200:883): avc: denied { bind } for pid=12986 comm="syz.2.2764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 325.636134][T13000] overlayfs: failed to clone upperpath [ 325.804131][ T30] audit: type=1326 audit(587.820:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13007 comm="syz.2.2773" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x0 [ 325.996690][T13006] netlink: 'syz.6.2771': attribute type 2 has an invalid length. [ 327.371672][ T48] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 327.466763][ T48] usb 3-1: USB disconnect, device number 29 [ 327.506903][ T48] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 327.542320][T13043] loop9: detected capacity change from 0 to 7 [ 327.570690][T13043] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.589268][T13043] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.619185][T13043] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.657471][T13043] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.705612][T13043] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.812329][T13043] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.861644][T13043] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.890934][T13043] ldm_validate_partition_table(): Disk read failed. [ 327.910038][T13043] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.944087][T13043] Buffer I/O error on dev loop9, logical block 0, async page read [ 327.967989][T13043] Buffer I/O error on dev loop9, logical block 0, async page read [ 328.007269][T13043] Dev loop9: unable to read RDB block 0 [ 328.022036][T13043] loop9: unable to read partition table [ 328.038113][T13043] loop9: partition table beyond EOD, truncated [ 328.060189][T13043] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 328.060189][T13043] ) failed (rc=-5) [ 328.305804][T13076] binder: 13075:13076 ioctl c0306201 0 returned -14 [ 328.444556][T13083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13083 comm=syz.4.2802 [ 328.502825][T13083] gtp0: entered promiscuous mode [ 329.132792][ T48] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 329.229818][ T30] audit: type=1326 audit(591.240:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.2.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x7fc00000 [ 329.254564][ T30] audit: type=1326 audit(591.250:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.2.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf6e78ebe9 code=0x7fc00000 [ 329.279885][ T30] audit: type=1326 audit(591.250:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.2.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x7fc00000 [ 329.304516][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 329.310582][ T30] audit: type=1326 audit(591.250:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.2.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x7fc00000 [ 329.336439][ T48] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 329.344614][ T48] usb 2-1: config 0 has no interface number 0 [ 329.349499][ T30] audit: type=1326 audit(591.250:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.2.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x7fc00000 [ 329.351376][ T48] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.374096][ T30] audit: type=1326 audit(591.250:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.2.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x7fc00000 [ 329.409220][ T30] audit: type=1326 audit(591.250:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.2.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x7fc00000 [ 329.432347][ T48] usb 2-1: config 0 interface 85 has no altsetting 0 [ 329.448002][ T30] audit: type=1326 audit(591.250:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.2.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x7fc00000 [ 329.473322][ T30] audit: type=1326 audit(591.250:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.2.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x7fc00000 [ 329.496761][ T48] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 329.506598][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.515886][ T48] usb 2-1: Product: syz [ 329.520859][ T48] usb 2-1: Manufacturer: syz [ 329.567028][ T30] audit: type=1326 audit(591.250:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13115 comm="syz.2.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6e78ebe9 code=0x7fc00000 [ 329.802808][ T48] usb 2-1: SerialNumber: syz [ 329.851231][ T48] usb 2-1: config 0 descriptor?? [ 330.472302][ T48] appletouch 2-1:0.85: Geyser mode initialized. [ 330.480165][ T48] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input24 [ 330.497188][ C0] [ 330.499532][ C0] ======================================================== [ 330.506712][ C0] WARNING: possible irq lock inversion dependency detected [ 330.513882][ C0] syzkaller #0 Not tainted [ 330.518284][ C0] -------------------------------------------------------- [ 330.525478][ C0] acpid/5206 just changed the state of lock: [ 330.531483][ C0] ffff888053572230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x74/0xd0 [ 330.540515][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 330.548499][ C0] (tasklist_lock){.+.+}-{3:3} [ 330.548533][ C0] [ 330.548533][ C0] [ 330.548533][ C0] and interrupts could create inverse lock ordering between them. [ 330.548533][ C0] [ 330.567584][ C0] [ 330.567584][ C0] other info that might help us debug this: [ 330.575643][ C0] Chain exists of: [ 330.575643][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 330.575643][ C0] [ 330.589236][ C0] Possible interrupt unsafe locking scenario: [ 330.589236][ C0] [ 330.597587][ C0] CPU0 CPU1 [ 330.602954][ C0] ---- ---- [ 330.608312][ C0] lock(tasklist_lock); [ 330.612555][ C0] local_irq_disable(); [ 330.619299][ C0] lock(&dev->event_lock#2); [ 330.626502][ C0] lock(&client->buffer_lock); [ 330.633878][ C0] [ 330.637322][ C0] lock(&dev->event_lock#2); [ 330.642174][ C0] [ 330.642174][ C0] *** DEADLOCK *** [ 330.642174][ C0] [ 330.650305][ C0] 2 locks held by acpid/5206: [ 330.654972][ C0] #0: ffff888078841160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x23/0x140 [ 330.665252][ C0] #1: ffff8880535722c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x4b/0x3d0 [ 330.674850][ C0] [ 330.674850][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 330.684241][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 330.689723][ C0] HARDIRQ-ON-R at: [ 330.694046][ C0] lock_acquire+0x179/0x350 [ 330.700907][ C0] _raw_read_lock+0x5f/0x70 [ 330.707750][ C0] __do_wait+0x105/0x890 [ 330.714332][ C0] do_wait+0x21e/0x5a0 [ 330.720731][ C0] kernel_wait+0x9f/0x160 [ 330.727383][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 330.735601][ C0] process_one_work+0x9cf/0x1b70 [ 330.742860][ C0] worker_thread+0x6c8/0xf10 [ 330.749774][ C0] kthread+0x3c5/0x780 [ 330.756165][ C0] ret_from_fork+0x5d7/0x6f0 [ 330.763080][ C0] ret_from_fork_asm+0x1a/0x30 [ 330.770173][ C0] SOFTIRQ-ON-R at: [ 330.774479][ C0] lock_acquire+0x179/0x350 [ 330.781311][ C0] _raw_read_lock+0x5f/0x70 [ 330.788137][ C0] __do_wait+0x105/0x890 [ 330.794707][ C0] do_wait+0x21e/0x5a0 [ 330.801104][ C0] kernel_wait+0x9f/0x160 [ 330.807753][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 330.815988][ C0] process_one_work+0x9cf/0x1b70 [ 330.823252][ C0] worker_thread+0x6c8/0xf10 [ 330.830259][ C0] kthread+0x3c5/0x780 [ 330.836649][ C0] ret_from_fork+0x5d7/0x6f0 [ 330.843560][ C0] ret_from_fork_asm+0x1a/0x30 [ 330.850651][ C0] INITIAL USE at: [ 330.854867][ C0] lock_acquire+0x179/0x350 [ 330.861629][ C0] _raw_write_lock_irq+0x36/0x50 [ 330.868801][ C0] copy_process+0x4caf/0x7690 [ 330.875717][ C0] kernel_clone+0xfc/0x930 [ 330.882380][ C0] user_mode_thread+0xc7/0x110 [ 330.889382][ C0] rest_init+0x23/0x2b0 [ 330.895780][ C0] start_kernel+0x3ee/0x4d0 [ 330.902516][ C0] x86_64_start_reservations+0x18/0x30 [ 330.910231][ C0] x86_64_start_kernel+0x130/0x190 [ 330.917575][ C0] common_startup_64+0x13e/0x148 [ 330.924748][ C0] INITIAL READ USE at: [ 330.929398][ C0] lock_acquire+0x179/0x350 [ 330.936579][ C0] _raw_read_lock+0x5f/0x70 [ 330.943772][ C0] __do_wait+0x105/0x890 [ 330.950692][ C0] do_wait+0x21e/0x5a0 [ 330.957436][ C0] kernel_wait+0x9f/0x160 [ 330.964436][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 330.973002][ C0] process_one_work+0x9cf/0x1b70 [ 330.980610][ C0] worker_thread+0x6c8/0xf10 [ 330.987871][ C0] kthread+0x3c5/0x780 [ 330.994624][ C0] ret_from_fork+0x5d7/0x6f0 [ 331.001883][ C0] ret_from_fork_asm+0x1a/0x30 [ 331.009321][ C0] } [ 331.012161][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 331.020209][ C0] ... acquired at: [ 331.024333][ C0] _raw_read_lock+0x5f/0x70 [ 331.028985][ C0] send_sigurg+0xed/0xc80 [ 331.033473][ C0] sk_send_sigurg+0x76/0x360 [ 331.038217][ C0] unix_stream_sendmsg+0xfa5/0x1340 [ 331.043571][ C0] ____sys_sendmsg+0xa98/0xc70 [ 331.048489][ C0] ___sys_sendmsg+0x134/0x1d0 [ 331.053320][ C0] __sys_sendmmsg+0x200/0x420 [ 331.058154][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 331.063250][ C0] do_syscall_64+0xcd/0x4c0 [ 331.067905][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.073948][ C0] [ 331.076248][ C0] -> (&f_owner->lock){....}-{3:3} { [ 331.081700][ C0] INITIAL USE at: [ 331.085832][ C0] lock_acquire+0x179/0x350 [ 331.092426][ C0] _raw_write_lock_irq+0x36/0x50 [ 331.099427][ C0] __f_setown+0x61/0x3c0 [ 331.105740][ C0] fcntl_dirnotify+0x7b1/0xb60 [ 331.112575][ C0] do_fcntl+0xe62/0x15a0 [ 331.118901][ C0] __x64_sys_fcntl+0x163/0x200 [ 331.125734][ C0] do_syscall_64+0xcd/0x4c0 [ 331.132302][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.140276][ C0] INITIAL READ USE at: [ 331.144843][ C0] lock_acquire+0x179/0x350 [ 331.151855][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 331.159554][ C0] send_sigio+0x31/0x3e0 [ 331.166308][ C0] dnotify_handle_event+0x15e/0x2b0 [ 331.174013][ C0] fsnotify_handle_inode_event.isra.0+0x1e2/0x3f0 [ 331.182928][ C0] fsnotify+0x13d6/0x1dc0 [ 331.189776][ C0] path_openat+0x1b50/0x2cb0 [ 331.196867][ C0] do_filp_open+0x20b/0x470 [ 331.203870][ C0] do_sys_openat2+0x11b/0x1d0 [ 331.211065][ C0] __x64_sys_creat+0xcc/0x120 [ 331.218246][ C0] do_syscall_64+0xcd/0x4c0 [ 331.225250][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.233641][ C0] } [ 331.236382][ C0] ... key at: [] __key.1+0x0/0x40 [ 331.243734][ C0] ... acquired at: [ 331.247774][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 331.253127][ C0] send_sigio+0x31/0x3e0 [ 331.257530][ C0] kill_fasync+0x214/0x510 [ 331.262103][ C0] lease_break_callback+0x23/0x30 [ 331.267321][ C0] __break_lease+0x674/0x1810 [ 331.272152][ C0] do_dentry_open+0x91f/0x1530 [ 331.277071][ C0] vfs_open+0x82/0x3f0 [ 331.281298][ C0] path_openat+0x1de4/0x2cb0 [ 331.286041][ C0] do_filp_open+0x20b/0x470 [ 331.290699][ C0] do_sys_openat2+0x11b/0x1d0 [ 331.295544][ C0] __x64_sys_open+0x153/0x1e0 [ 331.300381][ C0] do_syscall_64+0xcd/0x4c0 [ 331.305040][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.311086][ C0] [ 331.313387][ C0] -> (&new->fa_lock){....}-{3:3} { [ 331.318669][ C0] INITIAL USE at: [ 331.322710][ C0] lock_acquire+0x179/0x350 [ 331.329111][ C0] _raw_write_lock_irq+0x36/0x50 [ 331.335937][ C0] fasync_remove_entry+0xb2/0x1e0 [ 331.342855][ C0] fasync_helper+0xaf/0xd0 [ 331.349168][ C0] lease_modify+0x232/0x500 [ 331.355588][ C0] locks_remove_file+0x29e/0x5c0 [ 331.362416][ C0] __fput+0x351/0xb70 [ 331.368315][ C0] task_work_run+0x14d/0x240 [ 331.374797][ C0] exit_to_user_mode_loop+0xeb/0x110 [ 331.381971][ C0] do_syscall_64+0x3f6/0x4c0 [ 331.388453][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.396260][ C0] INITIAL READ USE at: [ 331.400753][ C0] lock_acquire+0x179/0x350 [ 331.407592][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 331.415115][ C0] kill_fasync+0x138/0x510 [ 331.421878][ C0] lease_break_callback+0x23/0x30 [ 331.429237][ C0] __break_lease+0x674/0x1810 [ 331.436238][ C0] do_dentry_open+0x91f/0x1530 [ 331.443325][ C0] vfs_open+0x82/0x3f0 [ 331.449729][ C0] path_openat+0x1de4/0x2cb0 [ 331.456654][ C0] do_filp_open+0x20b/0x470 [ 331.463482][ C0] do_sys_openat2+0x11b/0x1d0 [ 331.470487][ C0] __x64_sys_open+0x153/0x1e0 [ 331.477501][ C0] do_syscall_64+0xcd/0x4c0 [ 331.484329][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.492545][ C0] } [ 331.495206][ C0] ... key at: [] __key.0+0x0/0x40 [ 331.502473][ C0] ... acquired at: [ 331.506426][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 331.511780][ C0] kill_fasync+0x138/0x510 [ 331.516351][ C0] evdev_pass_values+0x619/0x9b0 [ 331.521447][ C0] evdev_events+0x1bb/0x390 [ 331.526120][ C0] input_pass_values+0x74b/0x880 [ 331.531214][ C0] input_handle_event+0xf00/0x14d0 [ 331.536484][ C0] input_inject_event+0x1e8/0x3b0 [ 331.541670][ C0] evdev_write+0x457/0x750 [ 331.546264][ C0] vfs_write+0x29d/0x11d0 [ 331.550745][ C0] ksys_write+0x1f8/0x250 [ 331.555228][ C0] do_syscall_64+0xcd/0x4c0 [ 331.559888][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.565941][ C0] [ 331.568244][ C0] -> (&client->buffer_lock){....}-{3:3} { [ 331.574045][ C0] INITIAL USE at: [ 331.578005][ C0] lock_acquire+0x179/0x350 [ 331.584233][ C0] _raw_spin_lock+0x2e/0x40 [ 331.590459][ C0] evdev_pass_values+0x10e/0x9b0 [ 331.597122][ C0] evdev_events+0x1bb/0x390 [ 331.603347][ C0] input_pass_values+0x74b/0x880 [ 331.610004][ C0] input_handle_event+0xf00/0x14d0 [ 331.616837][ C0] input_inject_event+0x1e8/0x3b0 [ 331.623597][ C0] evdev_write+0x457/0x750 [ 331.629734][ C0] vfs_write+0x29d/0x11d0 [ 331.635778][ C0] ksys_write+0x1f8/0x250 [ 331.641820][ C0] do_syscall_64+0xcd/0x4c0 [ 331.648047][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.655659][ C0] } [ 331.658220][ C0] ... key at: [] __key.1+0x0/0x40 [ 331.665397][ C0] ... acquired at: [ 331.669262][ C0] _raw_spin_lock+0x2e/0x40 [ 331.673923][ C0] evdev_pass_values+0x10e/0x9b0 [ 331.679023][ C0] evdev_events+0x1bb/0x390 [ 331.683679][ C0] input_pass_values+0x74b/0x880 [ 331.689205][ C0] input_handle_event+0xf00/0x14d0 [ 331.694488][ C0] input_inject_event+0x1e8/0x3b0 [ 331.699668][ C0] evdev_write+0x457/0x750 [ 331.704243][ C0] vfs_write+0x29d/0x11d0 [ 331.708736][ C0] ksys_write+0x1f8/0x250 [ 331.713218][ C0] do_syscall_64+0xcd/0x4c0 [ 331.717873][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.723924][ C0] [ 331.726225][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 331.731767][ C0] IN-SOFTIRQ-W at: [ 331.735733][ C0] lock_acquire+0x179/0x350 [ 331.741871][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 331.748695][ C0] input_event+0x74/0xd0 [ 331.754571][ C0] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 331.761746][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 331.768753][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 331.775584][ C0] dummy_timer+0x1814/0x3a30 [ 331.781806][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 331.788636][ C0] hrtimer_run_softirq+0x17d/0x350 [ 331.795638][ C0] handle_softirqs+0x216/0x8e0 [ 331.802032][ C0] __irq_exit_rcu+0x109/0x170 [ 331.808338][ C0] irq_exit_rcu+0x9/0x30 [ 331.814211][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 331.821475][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 331.829088][ C0] _raw_spin_unlock_irqrestore+0x31/0x80 [ 331.836435][ C0] dummy_urb_enqueue+0x558/0x920 [ 331.843000][ C0] usb_hcd_submit_urb+0x25b/0x1c60 [ 331.849743][ C0] usb_submit_urb+0x890/0x1770 [ 331.856133][ C0] atp_open+0x60/0xd0 [ 331.861742][ C0] input_open_device+0x249/0x3d0 [ 331.868312][ C0] mousedev_open_device+0xe0/0x140 [ 331.875052][ C0] mousedev_open+0x2fd/0x580 [ 331.881268][ C0] chrdev_open+0x234/0x6a0 [ 331.887319][ C0] do_dentry_open+0x97f/0x1530 [ 331.893709][ C0] vfs_open+0x82/0x3f0 [ 331.899408][ C0] path_openat+0x1de4/0x2cb0 [ 331.905638][ C0] do_filp_open+0x20b/0x470 [ 331.911772][ C0] do_sys_openat2+0x11b/0x1d0 [ 331.918078][ C0] __x64_sys_openat+0x174/0x210 [ 331.924562][ C0] do_syscall_64+0xcd/0x4c0 [ 331.930786][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.938306][ C0] INITIAL USE at: [ 331.942175][ C0] lock_acquire+0x179/0x350 [ 331.948228][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 331.954964][ C0] input_inject_event+0x9f/0x3b0 [ 331.961461][ C0] led_set_brightness+0x217/0x290 [ 331.968056][ C0] kbd_led_trigger_activate+0xcb/0x110 [ 331.975072][ C0] led_trigger_set+0x59a/0xc50 [ 331.981385][ C0] led_trigger_set_default+0x1e0/0x2e0 [ 331.988419][ C0] led_classdev_register_ext+0x7b8/0xa10 [ 331.995875][ C0] input_leds_connect+0x552/0x8e0 [ 332.002446][ C0] input_attach_handler.isra.0+0x173/0x250 [ 332.009802][ C0] input_register_device+0xab9/0x1180 [ 332.016720][ C0] atkbd_connect+0x5f8/0xa40 [ 332.022858][ C0] serio_driver_probe+0x7f/0xd0 [ 332.029283][ C0] really_probe+0x241/0xa90 [ 332.035340][ C0] __driver_probe_device+0x1de/0x440 [ 332.042173][ C0] driver_probe_device+0x4c/0x1b0 [ 332.048742][ C0] __driver_attach+0x283/0x580 [ 332.055047][ C0] bus_for_each_dev+0x13e/0x1d0 [ 332.061448][ C0] serio_handle_event+0x335/0xc30 [ 332.068025][ C0] process_one_work+0x9cf/0x1b70 [ 332.074508][ C0] worker_thread+0x6c8/0xf10 [ 332.080639][ C0] kthread+0x3c5/0x780 [ 332.086251][ C0] ret_from_fork+0x5d7/0x6f0 [ 332.092471][ C0] ret_from_fork_asm+0x1a/0x30 [ 332.098790][ C0] } [ 332.101269][ C0] ... key at: [] __key.7+0x0/0x40 [ 332.108363][ C0] ... acquired at: [ 332.112143][ C0] __lock_acquire+0x8b7/0x1ce0 [ 332.117071][ C0] lock_acquire+0x179/0x350 [ 332.121732][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 332.127085][ C0] input_event+0x74/0xd0 [ 332.131509][ C0] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 332.137304][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 332.142836][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 332.148203][ C0] dummy_timer+0x1814/0x3a30 [ 332.152947][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 332.158304][ C0] hrtimer_run_softirq+0x17d/0x350 [ 332.163570][ C0] handle_softirqs+0x216/0x8e0 [ 332.168490][ C0] __irq_exit_rcu+0x109/0x170 [ 332.173320][ C0] irq_exit_rcu+0x9/0x30 [ 332.177717][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 332.183503][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.189638][ C0] _raw_spin_unlock_irqrestore+0x31/0x80 [ 332.195423][ C0] dummy_urb_enqueue+0x558/0x920 [ 332.200516][ C0] usb_hcd_submit_urb+0x25b/0x1c60 [ 332.205811][ C0] usb_submit_urb+0x890/0x1770 [ 332.210734][ C0] atp_open+0x60/0xd0 [ 332.214869][ C0] input_open_device+0x249/0x3d0 [ 332.219965][ C0] mousedev_open_device+0xe0/0x140 [ 332.225334][ C0] mousedev_open+0x2fd/0x580 [ 332.230079][ C0] chrdev_open+0x234/0x6a0 [ 332.234649][ C0] do_dentry_open+0x97f/0x1530 [ 332.239655][ C0] vfs_open+0x82/0x3f0 [ 332.243882][ C0] path_openat+0x1de4/0x2cb0 [ 332.248725][ C0] do_filp_open+0x20b/0x470 [ 332.253383][ C0] do_sys_openat2+0x11b/0x1d0 [ 332.258225][ C0] __x64_sys_openat+0x174/0x210 [ 332.263235][ C0] do_syscall_64+0xcd/0x4c0 [ 332.267904][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.273952][ C0] [ 332.276352][ C0] [ 332.276352][ C0] stack backtrace: [ 332.282249][ C0] CPU: 0 UID: 0 PID: 5206 Comm: acpid Not tainted syzkaller #0 PREEMPT(full) [ 332.282280][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 332.282290][ C0] Call Trace: [ 332.282298][ C0] [ 332.282305][ C0] dump_stack_lvl+0x116/0x1f0 [ 332.282329][ C0] print_irq_inversion_bug.part.0+0x212/0x270 [ 332.282357][ C0] mark_lock+0x2e5/0x610 [ 332.282382][ C0] __lock_acquire+0x8b7/0x1ce0 [ 332.282404][ C0] ? stack_depot_save_flags+0x29/0x9c0 [ 332.282422][ C0] ? __lock_acquire+0xb97/0x1ce0 [ 332.282446][ C0] lock_acquire+0x179/0x350 [ 332.282468][ C0] ? input_event+0x74/0xd0 [ 332.282492][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 332.282507][ C0] ? input_event+0x74/0xd0 [ 332.282526][ C0] input_event+0x74/0xd0 [ 332.282547][ C0] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 332.282567][ C0] ? find_held_lock+0x2b/0x80 [ 332.282584][ C0] ? __pfx_atp_complete_geyser_3_4+0x10/0x10 [ 332.282605][ C0] __usb_hcd_giveback_urb+0x38b/0x610 [ 332.282630][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 332.282653][ C0] dummy_timer+0x1814/0x3a30 [ 332.282680][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 332.282694][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 332.282708][ C0] ? mark_held_locks+0x49/0x80 [ 332.282730][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 332.282746][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 332.282761][ C0] __hrtimer_run_queues+0x1ff/0xad0 [ 332.282783][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 332.282800][ C0] ? read_tsc+0x9/0x20 [ 332.282823][ C0] hrtimer_run_softirq+0x17d/0x350 [ 332.282842][ C0] handle_softirqs+0x216/0x8e0 [ 332.282863][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 332.282883][ C0] __irq_exit_rcu+0x109/0x170 [ 332.282907][ C0] irq_exit_rcu+0x9/0x30 [ 332.282924][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 332.282943][ C0] [ 332.282947][ C0] [ 332.282953][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 332.282971][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 332.282988][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 1c 01 f6 48 89 df e8 2e 70 01 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 6f f1 f5 65 8b 05 0e dc 3f 08 85 c0 74 16 5b [ 332.283003][ C0] RSP: 0018:ffffc9000466f720 EFLAGS: 00000246 [ 332.283017][ C0] RAX: 0000000000000002 RBX: ffff888145738000 RCX: 0000000000000006 [ 332.283027][ C0] RDX: 0000000000000000 RSI: ffffffff8de50a40 RDI: ffffffff8c162980 [ 332.283037][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001 [ 332.283046][ C0] R10: ffffffff90ab5297 R11: 0000000000000000 R12: 0000000000000001 [ 332.283055][ C0] R13: ffff8881457c1470 R14: ffff8881457c1408 R15: 0000000000000000 [ 332.283071][ C0] dummy_urb_enqueue+0x558/0x920 [ 332.283088][ C0] usb_hcd_submit_urb+0x25b/0x1c60 [ 332.283116][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 332.283134][ C0] usb_submit_urb+0x890/0x1770 [ 332.283152][ C0] ? __pfx_atp_open+0x10/0x10 [ 332.283166][ C0] atp_open+0x60/0xd0 [ 332.283179][ C0] input_open_device+0x249/0x3d0 [ 332.283201][ C0] mousedev_open_device+0xe0/0x140 [ 332.283220][ C0] mousedev_open+0x2fd/0x580 [ 332.283238][ C0] ? __pfx_mousedev_open+0x10/0x10 [ 332.283256][ C0] chrdev_open+0x234/0x6a0 [ 332.283276][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 332.283296][ C0] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 332.283317][ C0] do_dentry_open+0x97f/0x1530 [ 332.283334][ C0] ? __pfx_chrdev_open+0x10/0x10 [ 332.283355][ C0] vfs_open+0x82/0x3f0 [ 332.283376][ C0] path_openat+0x1de4/0x2cb0 [ 332.283397][ C0] ? __pfx_path_openat+0x10/0x10 [ 332.283417][ C0] do_filp_open+0x20b/0x470 [ 332.283434][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 332.283457][ C0] ? alloc_fd+0x471/0x7d0 [ 332.283477][ C0] do_sys_openat2+0x11b/0x1d0 [ 332.283497][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 332.283516][ C0] ? sigprocmask+0xef/0x330 [ 332.283535][ C0] __x64_sys_openat+0x174/0x210 [ 332.283555][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 332.283575][ C0] ? ksys_read+0x1ac/0x250 [ 332.283593][ C0] do_syscall_64+0xcd/0x4c0 [ 332.283611][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.283626][ C0] RIP: 0033:0x7f954ee34407 [ 332.283639][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 332.283653][ C0] RSP: 002b:00007fffef83f8e0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 332.283666][ C0] RAX: ffffffffffffffda RBX: 00007f954edaa740 RCX: 00007f954ee34407 [ 332.283676][ C0] RDX: 0000000000080800 RSI: 00007fffef83faf0 RDI: ffffffffffffff9c [ 332.283685][ C0] RBP: 00007fffef83faf0 R08: 0000000000000000 R09: 0000000000000000 [ 332.283695][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000040 [ 332.283704][ C0] R13: 00007fffef83fbf0 R14: 000055b19bda57fe R15: 00007fffef83fbf0 [ 332.283718][ C0] [ 332.871433][ T48] usb 2-1: USB disconnect, device number 30 [ 332.882336][ T48] appletouch 2-1:0.85: input: appletouch disconnected