last executing test programs: 13.69982407s ago: executing program 3 (id=2156): syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x0, 0x5}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x7, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000500)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000240)={0x80081, 0x7a}, 0x20) 10.89517298s ago: executing program 0 (id=2161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020480)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) openat$zero(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$unix(r4, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x80047437, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf"}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, 0x0, 0xc881) 9.671305664s ago: executing program 0 (id=2163): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) close_range(r3, 0xffffffffffffffff, 0x0) 9.082967178s ago: executing program 3 (id=2166): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f008004d", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.992325334s ago: executing program 1 (id=2167): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xff0f}], 0x1}, 0x0) 8.680409196s ago: executing program 1 (id=2169): r0 = socket(0x1e, 0x805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000044) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2000000000000196, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) stat(0x0, 0x0) sendto$unix(r0, &(0x7f0000000080)="c63f79f08f", 0x5, 0x40000010, 0x0, 0x0) 8.483507875s ago: executing program 3 (id=2170): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 8.407829633s ago: executing program 4 (id=2171): socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYRESOCT], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)}, 0x5}], 0x1, 0x2000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f00001ef000/0x4000)=nil, 0x4000, 0x1000, 0x2, &(0x7f000095f000/0x1000)=nil) 7.678891869s ago: executing program 1 (id=2172): syz_open_dev$vim2m(0x0, 0x9, 0x2) prlimit64(0x0, 0xe, &(0x7f0000001380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x0, 0x5}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x7, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000500)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 6.924022672s ago: executing program 4 (id=2174): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004740)=@delchain={0x24, 0x65, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfff1, 0xf}, {0x1, 0x6}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"]) 5.797246511s ago: executing program 4 (id=2175): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x24, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33976a3f6fe6e98a3d70"}, &(0x7f0000000200)=0x2c) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000280)={r6, 0xa508}, &(0x7f0000000340)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5.504003834s ago: executing program 1 (id=2176): syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) prlimit64(0x0, 0xe, &(0x7f0000001380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x0, 0x5}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x7, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000500)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1100, &(0x7f0000000240)={0x80081, 0x7a}, 0x20) 5.455663122s ago: executing program 0 (id=2177): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) write$cgroup_subtree(r0, 0x0, 0x0) 5.455000902s ago: executing program 2 (id=2178): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)=""/61, &(0x7f0000000280)=0x3d) 5.156042268s ago: executing program 0 (id=2179): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x296) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) r1 = getuid() ioprio_set$uid(0x0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4.217812164s ago: executing program 2 (id=2180): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180b000000030000000000000000000004000000bb7f1a00c600feff0000000a9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 4.047936942s ago: executing program 4 (id=2181): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 3.931902169s ago: executing program 0 (id=2182): r0 = socket(0x1e, 0x805, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000044) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x2000000000000196, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) stat(0x0, 0x0) sendto$unix(r0, &(0x7f0000000080)="c63f79f08f", 0x5, 0x40000010, 0x0, 0x0) 3.874608231s ago: executing program 4 (id=2183): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0x0, 0xffbfffff}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x7e00, 0x0) write$snapshot(r2, &(0x7f0000000300)="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", 0x5dd) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect(0x5, 0x36, 0x0, 0x0) r3 = getpid() prlimit64(r3, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.parent_freezing\x00', 0x0, 0x0) preadv2(r4, &(0x7f0000000280)=[{&(0x7f0000000340)=""/205, 0xcd}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) 3.755183513s ago: executing program 2 (id=2184): bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="00000012000000000000000000bb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) listen(r1, 0xda90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00'}, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20048004}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}}, 0x0) 3.056714608s ago: executing program 1 (id=2185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004740)=@delchain={0x24, 0x65, 0x800, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0xfff1, 0xf}, {0x1, 0x6}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004804) getsockname$qrtr(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000001c0)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$nfs4(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6673633d8f"]) 2.93499399s ago: executing program 0 (id=2186): syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e23, @loopback}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x0, 0x5}}}, 0x118) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000140), r4}}, 0x18) socket$key(0xf, 0x3, 0x2) socket$kcm(0x10, 0x7, 0x0) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000500)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 2.05476168s ago: executing program 1 (id=2187): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) close_range(r3, 0xffffffffffffffff, 0x0) 1.55792457s ago: executing program 3 (id=2188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=@framed={{}, [@map_idx_val, @tail_call, @printk={@d}, @initr0]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1.504687616s ago: executing program 2 (id=2189): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lblcr\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x3c, 0x0, @void}, 0x10) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x44}}, 0x0) 1.307993134s ago: executing program 3 (id=2190): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x73, &(0x7f00000002c0)=""/61, &(0x7f0000000280)=0x3d) 251.958551ms ago: executing program 3 (id=2191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 244.216371ms ago: executing program 2 (id=2192): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x296) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) r1 = getuid() ioprio_set$uid(0x0, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 66.968405ms ago: executing program 4 (id=2193): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4004) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, 0x0, 0x100000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='netlink_extack\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'erspan0\x00'}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0x24, "bdbc11f4c2474f7ca8934dcf68b2aa1753c31dbe11a2e0202e3d33976a3f6fe6e98a3d70"}, &(0x7f0000000200)=0x2c) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000280)={r6, 0xa508}, &(0x7f0000000340)=0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 2 (id=2194): socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x10000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="4bbf622b20d2538e6e1f445b7795aa93c004bbb74ebdde873aa40cfdb8d06aefde8880cf4a22212c23b7c448cd514212f3419dcccde3ae9debb21b3ee10fdf63d3e7583e6702b0e9a49174a54c8fc2394f74d8c60dd96a7d41cebaaa10e0fe4fb36d1d8c9ff5984eea66eb54ff774e7af403c61eb7963e0bd5b1370d56b3a9efdaabcb8c2d20c39e64de366fce7e9c408b86db8a782f306a3e186d49e5f92e8a46d4ef2b353b7082844034eb36e4df5d2bf8b6635dd0f7a4d05bc0e9c33dffa2e74c75962dc70ea1"}}) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)}, 0x5}], 0x1, 0x2000, 0x0) kernel console output (not intermixed with test programs): "syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 494.663734][ T30] audit: type=1326 audit(1747245450.200:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9867 comm="syz.4.1184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 494.830017][ T5869] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 495.022141][ T5869] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 495.039034][ T5869] usb 3-1: config 2 has no interface number 0 [ 495.060762][ T5869] usb 3-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 495.079438][ T5869] usb 3-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid maxpacket 1023, setting to 64 [ 495.092412][ T5869] usb 3-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 495.109726][ T5869] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 495.119901][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.128001][ T5869] usb 3-1: Product: syz [ 495.136194][ T5869] usb 3-1: Manufacturer: syz [ 495.141768][ T5869] usb 3-1: SerialNumber: syz [ 495.150179][ T9870] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 495.422897][ T5869] usb 3-1: probing VID:PID(0424:012C) [ 495.441920][ T5869] usb 3-1: vub300 testing BULK IN EndPoint(0) 8E [ 495.448320][ T5869] usb 3-1: vub300 testing BULK IN EndPoint(1) 82 [ 495.460923][ T5869] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 495.487771][ T5869] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 495.673582][ T5869] usb 3-1: USB disconnect, device number 11 [ 497.703570][ T5878] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 497.838081][ T9914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 497.982800][ T5878] usb 2-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 498.201806][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.321646][ T5878] usb 2-1: config 0 descriptor?? [ 498.914889][ T9919] syzkaller0: entered promiscuous mode [ 498.998829][ T9919] syzkaller0: entered allmulticast mode [ 500.479701][ T5878] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 500.906410][ T5878] asix 2-1:0.0: probe with driver asix failed with error -71 [ 500.980886][ T5878] usb 2-1: USB disconnect, device number 18 [ 501.230369][ T9946] netlink: 'syz.1.1207': attribute type 10 has an invalid length. [ 501.701809][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.709348][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.362647][ T9956] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1210'. [ 503.831863][ T9939] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1204'. [ 503.842215][ T9946] team0: left allmulticast mode [ 503.849255][ T9946] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.856840][ T9946] team0: entered allmulticast mode [ 503.862436][ T9946] bond0: (slave team0): Enslaving as an active interface with an up link [ 505.937569][ T9988] hub 9-0:1.0: USB hub found [ 505.943691][ T9988] hub 9-0:1.0: 1 port detected [ 506.673988][ T9993] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1222'. [ 506.690311][ T9992] block nbd4: NBD_DISCONNECT [ 506.697773][ T9992] block nbd4: Send disconnect failed -107 [ 507.806802][ T9985] block nbd4: Disconnected due to user request. [ 507.813416][ T9985] block nbd4: shutting down sockets [ 508.447629][T10029] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1235'. [ 509.739869][T10040] netlink: 'syz.4.1239': attribute type 10 has an invalid length. [ 510.771137][T10055] hub 9-0:1.0: USB hub found [ 510.776157][T10055] hub 9-0:1.0: 1 port detected [ 511.870124][T10066] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 513.039507][T10084] ubi31: attaching mtd0 [ 513.047079][T10084] ubi31: scanning is finished [ 513.058056][T10084] ubi31: empty MTD device detected [ 513.300540][T10084] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 513.321411][T10084] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 513.329399][T10084] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 513.336732][T10084] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 513.345060][T10084] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 513.352392][T10084] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 513.360762][T10084] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1915768005 [ 513.371381][T10084] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 513.382965][T10088] ubi31: background thread "ubi_bgt31d" started, PID 10088 [ 514.595739][T10102] binder: 10101:10102 ioctl c0306201 0 returned -14 [ 514.668091][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1259'. [ 515.897021][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1263'. [ 516.988099][T10128] ubi: mtd0 is already attached to ubi31 [ 517.078110][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 517.357217][T10133] hub 9-0:1.0: USB hub found [ 517.362352][T10133] hub 9-0:1.0: 1 port detected [ 517.653015][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.181066][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.231655][ T9] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 518.257444][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.315796][ T9] usb 1-1: config 0 descriptor?? [ 518.489028][T10140] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 520.396322][ T9] hid-led 0003:0FC5:B080.000D: probe with driver hid-led failed with error -71 [ 520.414604][ T9] usb 1-1: USB disconnect, device number 9 [ 520.444106][T10150] binder: 10149:10150 ioctl c0306201 0 returned -14 [ 520.948280][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1275'. [ 522.308061][T10176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.194693][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1291'. [ 525.936662][T10216] hub 9-0:1.0: USB hub found [ 525.941679][T10216] hub 9-0:1.0: 1 port detected [ 526.411061][T10219] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 527.178807][T10227] netlink: 'syz.3.1296': attribute type 10 has an invalid length. [ 528.257547][T10248] binder: 10245:10248 ioctl c0306201 0 returned -14 [ 529.432108][T10257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 530.156660][T10263] block nbd4: NBD_DISCONNECT [ 530.161930][T10263] block nbd4: Send disconnect failed -107 [ 530.947561][T10262] block nbd4: Disconnected due to user request. [ 530.953987][T10262] block nbd4: shutting down sockets [ 533.161644][T10289] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 533.784721][T10296] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1320'. [ 534.747173][T10290] udevd[10290]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 534.829437][T10295] udevd[10295]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 535.041394][T10315] block nbd0: NBD_DISCONNECT [ 535.065545][T10315] block nbd0: Send disconnect failed -107 [ 535.819880][T10314] block nbd0: Disconnected due to user request. [ 535.826686][T10314] block nbd0: shutting down sockets [ 535.911836][T10324] overlayfs: failed to resolve './file1': -2 [ 536.135488][T10328] netlink: 'syz.3.1330': attribute type 10 has an invalid length. [ 536.153707][T10328] syz_tun: entered promiscuous mode [ 536.180055][T10328] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 538.270307][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 538.279902][T10360] bridge_slave_1: left promiscuous mode [ 538.286663][T10360] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.764117][T10360] bridge_slave_0: left promiscuous mode [ 538.770704][T10360] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.249605][T10386] block nbd4: NBD_DISCONNECT [ 539.274651][T10386] block nbd4: Send disconnect failed -107 [ 539.970995][T10385] block nbd4: Disconnected due to user request. [ 539.977369][T10385] block nbd4: shutting down sockets [ 541.357470][T10402] bridge0: port 3(gretap0) entered blocking state [ 541.386034][T10402] bridge0: port 3(gretap0) entered disabled state [ 541.418242][T10402] gretap0: entered promiscuous mode [ 542.924662][ T5878] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 543.110413][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.137544][ T5878] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 543.166917][ T5878] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 543.192187][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.207995][ T5878] usb 2-1: config 0 descriptor?? [ 543.219691][ T5878] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 543.237035][ T5878] dvb-usb: bulk message failed: -22 (3/0) [ 543.416196][ T5878] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 543.455037][ T5878] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 543.463542][ T5878] usb 2-1: media controller created [ 543.472465][ T5878] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.490608][ T5878] dvb-usb: bulk message failed: -22 (6/0) [ 543.499895][ T5878] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 543.510985][ T5878] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 544.281659][ T5878] dvb-usb: schedule remote query interval to 150 msecs. [ 544.407698][ T5878] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 544.566697][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 544.582029][ T5878] dvb-usb: error while querying for an remote control event. [ 544.756570][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 544.762434][ T5878] dvb-usb: error while querying for an remote control event. [ 544.944477][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 544.998446][ T5878] dvb-usb: error while querying for an remote control event. [ 545.224501][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 545.232519][ T5878] dvb-usb: error while querying for an remote control event. [ 545.317735][T10456] binder: 10455:10456 ioctl c0306201 0 returned -14 [ 545.773822][T10469] netlink: 'syz.4.1371': attribute type 10 has an invalid length. [ 545.832492][T10469] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.870461][T10469] bond0: (slave team0): Enslaving as an active interface with an up link [ 546.284340][ T5878] dvb-usb: bulk message failed: -22 (1/0) [ 546.290242][ T5878] dvb-usb: error while querying for an remote control event. [ 546.298513][ T9] usb 2-1: USB disconnect, device number 19 [ 546.407022][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 548.353993][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 548.976450][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 549.015151][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 549.039319][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.068716][ T9] usb 4-1: Product: syz [ 549.076779][ T9] usb 4-1: Manufacturer: syz [ 549.098083][ T9] usb 4-1: SerialNumber: syz [ 549.121035][ T9] usb 4-1: config 0 descriptor?? [ 549.276874][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 549.794429][ T9] gspca_sonixj: reg_w1 err -110 [ 549.822911][ T9] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 551.356711][ T5881] usb 4-1: USB disconnect, device number 12 [ 552.338418][ T5881] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 552.700121][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 552.717592][ T5881] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.186379][ T5881] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 553.195925][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.305626][ T5881] usb 4-1: config 0 descriptor?? [ 554.073496][ T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 554.233375][ T47] usb 1-1: Using ep0 maxpacket: 8 [ 554.249715][ T5881] usbhid 4-1:0.0: can't add hid device: -71 [ 554.256007][ T5881] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 554.267445][ T5881] usb 4-1: USB disconnect, device number 13 [ 554.282508][ T47] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 554.320705][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.338298][ T47] usb 1-1: Product: syz [ 554.343098][ T47] usb 1-1: Manufacturer: syz [ 554.349826][ T47] usb 1-1: SerialNumber: syz [ 554.361935][ T47] usb 1-1: config 0 descriptor?? [ 554.371823][ T47] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 554.538140][T10587] binder: 10586:10587 ioctl c0306201 0 returned -14 [ 554.544918][ T5878] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 554.900262][ T47] gspca_sonixj: reg_r err -32 [ 554.936502][ T47] sonixj 1-1:0.0: probe with driver sonixj failed with error -32 [ 554.940651][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 554.984721][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 554.995635][ T5878] usb 2-1: config 191 has an invalid interface number: 134 but max is 0 [ 555.004379][ T5878] usb 2-1: config 191 has no interface number 0 [ 555.010947][ T5878] usb 2-1: config 191 interface 134 has no altsetting 0 [ 555.070405][ T5878] usb 2-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice=f6.34 [ 555.088912][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 555.097684][ T5878] usb 2-1: Product: syz [ 555.101888][ T5878] usb 2-1: Manufacturer: syz [ 555.114274][ T5878] usb 2-1: SerialNumber: syz [ 555.928057][T10603] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1417' sets config #1 [ 556.829795][T10612] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 557.736395][ T47] usb 1-1: USB disconnect, device number 10 [ 559.001763][ T5878] ftdi_sio 2-1:191.134: FTDI USB Serial Device converter detected [ 559.349514][ T5878] ftdi_sio ttyUSB0: unknown device type: 0xf634 [ 559.425464][ T5878] usb 2-1: USB disconnect, device number 20 [ 559.464354][ T5878] ftdi_sio 2-1:191.134: device disconnected [ 559.510764][T10640] binder: 10636:10640 ioctl c0306201 0 returned -14 [ 560.002934][T10646] binder: 10645:10646 ioctl c0306201 0 returned -14 [ 560.078566][T10648] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1431'. [ 561.196046][T10656] vcan1: entered promiscuous mode [ 561.962611][ T5878] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 562.152949][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 562.175629][ T5878] usb 1-1: unable to get BOS descriptor or descriptor too short [ 562.203603][ T5878] usb 1-1: config 191 has an invalid interface number: 134 but max is 0 [ 562.221489][ T5878] usb 1-1: config 191 has no interface number 0 [ 562.235978][ T5878] usb 1-1: config 191 interface 134 has no altsetting 0 [ 562.512653][T10681] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1442'. [ 562.848927][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.855715][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.009027][ T5878] usb 1-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice=f6.34 [ 563.018345][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 563.026454][ T5878] usb 1-1: Product: syz [ 563.031073][ T5878] usb 1-1: Manufacturer: syz [ 563.036254][ T5878] usb 1-1: SerialNumber: syz [ 563.509137][T10716] binder: 10715:10716 ioctl c0306201 0 returned -14 [ 563.622939][T10717] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1445'. [ 564.406573][ T5878] ftdi_sio 1-1:191.134: FTDI USB Serial Device converter detected [ 564.439274][ T5878] ftdi_sio ttyUSB0: unknown device type: 0xf634 [ 564.477997][ T5878] usb 1-1: USB disconnect, device number 11 [ 564.498426][ T5878] ftdi_sio 1-1:191.134: device disconnected [ 564.506892][ T977] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 564.682310][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 564.706180][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.785162][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.797746][ T977] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 564.808581][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.908759][ T977] usb 4-1: config 0 descriptor?? [ 565.592479][ T977] usbhid 4-1:0.0: can't add hid device: -32 [ 565.598546][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 565.900767][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1455'. [ 567.232025][ T5878] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 567.311538][ T47] usb 4-1: USB disconnect, device number 14 [ 567.402836][ T5878] usb 3-1: Using ep0 maxpacket: 8 [ 567.436429][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 567.451680][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 567.464654][ T5878] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 567.477678][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 567.490613][ T5878] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 567.507192][ T5878] usb 3-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 567.521928][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.531742][ T5878] usb 3-1: Product: syz [ 567.540221][ T5878] usb 3-1: Manufacturer: syz [ 567.546027][ T5878] usb 3-1: SerialNumber: syz [ 567.559697][ T5878] usb 3-1: config 0 descriptor?? [ 567.581570][ T5878] kvaser_usb 3-1:0.0: error -EMSGSIZE: Cannot get software info [ 567.589791][ T5878] kvaser_usb 3-1:0.0: probe with driver kvaser_usb failed with error -90 [ 567.681840][ T47] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 567.813709][ T5878] usb 3-1: USB disconnect, device number 12 [ 567.841969][ T47] usb 4-1: device descriptor read/64, error -71 [ 568.112615][ T47] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 568.187633][T10788] binder: 10787:10788 ioctl c0306201 0 returned -14 [ 568.292016][ T47] usb 4-1: device descriptor read/64, error -71 [ 568.337993][T10790] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1462'. [ 568.593439][ T47] usb usb4-port1: attempt power cycle [ 568.790219][T10796] binder: 10795:10796 ioctl c0306201 0 returned -14 [ 568.924400][ T5904] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 569.001907][ T47] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 569.079053][ T47] usb 4-1: device descriptor read/8, error -71 [ 569.121881][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 569.140196][ T5904] usb 3-1: unable to get BOS descriptor or descriptor too short [ 569.160459][ T5904] usb 3-1: config 191 has an invalid interface number: 134 but max is 0 [ 569.171480][ T5904] usb 3-1: config 191 has no interface number 0 [ 569.227850][ T5904] usb 3-1: config 191 interface 134 has no altsetting 0 [ 569.297798][ T5904] usb 3-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice=f6.34 [ 569.326205][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 569.337969][ T5904] usb 3-1: Product: syz [ 569.344473][ T47] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 569.353145][ T5904] usb 3-1: Manufacturer: syz [ 569.358702][ T5904] usb 3-1: SerialNumber: syz [ 569.482288][ T47] usb 4-1: device descriptor read/8, error -71 [ 569.601447][ T47] usb usb4-port1: unable to enumerate USB device [ 569.801773][ T5878] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 569.962965][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 569.980464][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 569.996288][ T5904] ftdi_sio 3-1:191.134: FTDI USB Serial Device converter detected [ 570.013678][ T5904] ftdi_sio ttyUSB0: unknown device type: 0xf634 [ 570.020327][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.024152][ T5904] usb 3-1: USB disconnect, device number 13 [ 570.063242][ T5904] ftdi_sio 3-1:191.134: device disconnected [ 570.068724][ T5878] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 570.088559][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.112713][ T5878] usb 2-1: config 0 descriptor?? [ 570.553038][ T5878] usbhid 2-1:0.0: can't add hid device: -32 [ 570.559082][ T5878] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 570.561241][T10819] overlayfs: missing 'lowerdir' [ 570.623107][T10821] binder: 10820:10821 ioctl c0306201 0 returned -14 [ 570.783045][T10823] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1474'. [ 571.952936][T10834] loop6: detected capacity change from 0 to 524287999 [ 571.976022][T10834] buffer_io_error: 7 callbacks suppressed [ 571.976038][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.077158][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.108236][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.181929][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.190686][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.236034][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.284788][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.295920][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.305364][T10834] ldm_validate_partition_table(): Disk read failed. [ 572.325518][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.372480][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 572.380778][T10834] Dev loop6: unable to read RDB block 0 [ 572.389371][T10834] loop6: unable to read partition table [ 572.402283][T10838] binder: 10835:10838 ioctl c0306201 0 returned -14 [ 572.418004][T10834] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 572.886211][ T47] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 573.072166][ T5904] usb 2-1: USB disconnect, device number 21 [ 573.145081][ T47] usb 1-1: device descriptor read/64, error -71 [ 573.401244][ T47] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 573.622199][ T47] usb 1-1: device descriptor read/64, error -71 [ 573.839939][ T47] usb usb1-port1: attempt power cycle [ 574.019199][T10855] xt_CT: You must specify a L4 protocol and not use inversions on it [ 574.951030][ T47] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 574.981614][ T47] usb 1-1: device descriptor read/8, error -71 [ 575.232092][ T47] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 575.286513][ T47] usb 1-1: device descriptor read/8, error -71 [ 575.430523][ T47] usb usb1-port1: unable to enumerate USB device [ 575.857913][ T977] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 576.022028][ T977] usb 2-1: Using ep0 maxpacket: 16 [ 576.043842][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.132577][ T977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.339112][ T977] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 576.348840][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.378256][ T977] usb 2-1: config 0 descriptor?? [ 576.488451][T10882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1494'. [ 576.498665][T10882] bridge_slave_1: left allmulticast mode [ 576.504437][T10882] bridge_slave_1: left promiscuous mode [ 576.510296][T10882] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.053491][T10882] bridge_slave_0: left allmulticast mode [ 577.059239][T10882] bridge_slave_0: left promiscuous mode [ 577.065161][T10882] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.083543][ T977] usbhid 2-1:0.0: can't add hid device: -32 [ 577.121167][ T977] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 578.150176][ T5904] usb 2-1: USB disconnect, device number 22 [ 578.569580][T10932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 579.280814][ T5881] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 579.656955][T10942] hub 9-0:1.0: USB hub found [ 579.661996][T10942] hub 9-0:1.0: 1 port detected [ 579.706287][ T5881] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 579.727198][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 579.758388][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.360527][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1507'. [ 581.900302][T10982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1510'. [ 581.909668][T10982] gretap0: left promiscuous mode [ 581.915873][T10982] bridge0: port 3(gretap0) entered disabled state [ 582.450065][T10982] bridge_slave_1: left promiscuous mode [ 582.456529][T10982] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.523733][ T47] usb 3-1: USB disconnect, device number 14 [ 582.592404][T10982] bridge_slave_0: left promiscuous mode [ 582.598220][T10982] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.824753][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1519'. [ 586.443983][T11056] hub 9-0:1.0: USB hub found [ 586.449116][T11056] hub 9-0:1.0: 1 port detected [ 587.224001][T11061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 588.728606][T11073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 592.034773][T11128] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 592.128730][T11124] vcan1: entered promiscuous mode [ 593.387392][T11147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1545'. [ 594.260277][T11179] netlink: 'syz.4.1555': attribute type 10 has an invalid length. [ 594.703485][T11181] hub 9-0:1.0: USB hub found [ 594.708538][T11181] hub 9-0:1.0: 1 port detected [ 595.607836][T11209] netlink: 'syz.0.1561': attribute type 4 has an invalid length. [ 595.628900][T11209] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1561'. [ 596.613797][T11209] : renamed from bond0 (while UP) [ 598.815948][T11239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.824652][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.835521][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.844207][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.149948][T11239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.159359][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.395845][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.396099][T11258] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 599.436354][T11258] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 599.489211][T11239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.497517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.516538][T11258] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 599.642672][T11239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.816531][ T5834] Bluetooth: hci1: unexpected event for opcode 0x0c58 [ 600.461317][T11284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 602.507564][T11322] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 602.523051][T11322] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 602.535849][T11322] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 603.038419][T11334] hub 9-0:1.0: USB hub found [ 603.043686][T11334] hub 9-0:1.0: 1 port detected [ 603.888604][T11228] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 603.897250][T11228] Bluetooth: hci1: Injecting HCI hardware error event [ 603.906807][T11228] Bluetooth: hci1: hardware error 0x00 [ 603.942908][ T47] net_ratelimit: 5 callbacks suppressed [ 603.942950][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.427961][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.756110][T11358] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 604.966196][T11360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'. [ 605.025040][T11358] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 605.058108][T11358] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 605.598043][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.612859][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1599'. [ 605.728720][T11367] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 606.128797][T11228] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 606.386373][T11372] No source specified [ 606.899446][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.907847][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.469800][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.857561][ T5904] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 607.961640][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.028893][ T5904] usb 2-1: device descriptor read/64, error -71 [ 608.342377][T11393] hub 9-0:1.0: USB hub found [ 608.347442][T11393] hub 9-0:1.0: 1 port detected [ 608.467550][ T5904] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 608.639755][ T5904] usb 2-1: device descriptor read/64, error -71 [ 608.768542][ T5904] usb usb2-port1: attempt power cycle [ 609.044188][T11402] netlink: 'syz.4.1609': attribute type 10 has an invalid length. [ 609.529702][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.588214][ T5904] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 610.219009][ T5904] usb 2-1: device descriptor read/8, error -71 [ 610.507375][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.642982][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.789738][ T5904] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 611.490677][ T5904] usb 2-1: device not accepting address 26, error -71 [ 611.497604][ T47] IPVS: starting estimator thread 0... [ 611.507467][ T5904] usb usb2-port1: unable to enumerate USB device [ 611.520030][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 611.520049][ T30] audit: type=1326 audit(1747245566.773:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 611.595112][ T30] audit: type=1326 audit(1747245567.273:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 611.628922][ T30] audit: type=1326 audit(1747245567.323:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 611.637551][T11418] IPVS: using max 28 ests per chain, 67200 per kthread [ 611.654615][ T30] audit: type=1326 audit(1747245567.323:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 611.727683][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.731940][ T30] audit: type=1326 audit(1747245567.323:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 611.739650][ T5869] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 611.843800][ T30] audit: type=1326 audit(1747245567.333:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 611.908297][ T30] audit: type=1326 audit(1747245567.333:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 611.932215][ T5869] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 611.978497][ T5869] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 612.099301][ T30] audit: type=1326 audit(1747245567.333:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 612.155160][ T5869] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 2 [ 612.292565][ T5869] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 612.407449][ T30] audit: type=1326 audit(1747245567.333:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 612.522632][ T5869] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.619789][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.682477][ T30] audit: type=1326 audit(1747245567.333:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 612.740517][ T5869] usb 5-1: Product: syz [ 612.822622][ T5869] usb 5-1: Manufacturer: syz [ 612.872064][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.896319][ T5869] usb 5-1: SerialNumber: syz [ 613.273928][T11414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 613.556362][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.932707][T11414] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 613.952383][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.996796][ T47] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 614.159283][ T47] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 614.170066][ T47] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 614.196816][ T47] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 614.206597][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.486022][T11449] netlink: 'syz.3.1623': attribute type 10 has an invalid length. [ 615.059642][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.089192][ T47] usbtmc 2-1:16.0: bulk endpoints not found [ 615.183691][ T5869] cdc_mbim 5-1:1.0: bind() failure [ 615.296704][ T5869] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 615.317508][ T5869] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 615.430063][ T5869] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 615.461828][ T5869] usb 5-1: USB disconnect, device number 13 [ 615.466746][ T977] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 616.159815][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.194457][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.296576][ T977] usb 1-1: device descriptor read/64, error -71 [ 617.106324][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.233266][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.270892][ T47] usb 2-1: USB disconnect, device number 27 [ 617.990554][ T977] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 618.206583][ T977] usb 1-1: device descriptor read/64, error -71 [ 618.271766][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.049540][ T977] usb usb1-port1: attempt power cycle [ 619.319481][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.331406][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1634'. [ 619.670462][T11490] netlink: 'syz.3.1635': attribute type 10 has an invalid length. [ 620.751301][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.762023][T11491] batman_adv: batadv0: Adding interface: dummy0 [ 620.766990][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.768340][T11491] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.803296][T11491] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 624.267473][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.395722][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.404131][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.404612][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.425690][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.581148][ T30] kauditd_printk_skb: 49 callbacks suppressed [ 624.581165][ T30] audit: type=1326 audit(1747245580.354:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 624.651130][ T30] audit: type=1326 audit(1747245580.384:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 624.767968][ T30] audit: type=1326 audit(1747245580.384:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 625.225056][ T5881] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 625.443559][T11508] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1644'. [ 625.454043][ T30] audit: type=1326 audit(1747245580.384:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 625.487572][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.521865][ T30] audit: type=1326 audit(1747245580.394:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 625.548865][ T30] audit: type=1326 audit(1747245580.394:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 625.574693][ T30] audit: type=1326 audit(1747245580.394:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 625.627283][ T5881] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 625.646300][ T5881] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 625.663682][ T5881] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 625.685033][ T5881] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 625.689248][ T30] audit: type=1326 audit(1747245580.394:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 625.694596][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.775543][ T30] audit: type=1326 audit(1747245580.394:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 625.786529][ T5881] usbtmc 5-1:16.0: bulk endpoints not found [ 625.810605][ T30] audit: type=1326 audit(1747245580.394:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11500 comm="syz.3.1642" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 626.805776][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.272605][T11122] udevd[11122]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 627.499275][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.521296][T11122] udevd[11122]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 627.637296][T11541] block nbd2: NBD_DISCONNECT [ 627.655449][T11541] block nbd2: Send disconnect failed -107 [ 627.860463][T11543] netlink: 'syz.0.1649': attribute type 10 has an invalid length. [ 627.880998][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.885450][T11543] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.897065][T11543] : (slave team0): Enslaving as an active interface with an up link [ 629.368433][T11536] block nbd2: Disconnected due to user request. [ 629.374708][T11536] block nbd2: shutting down sockets [ 629.395192][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.427990][ T47] usb 5-1: USB disconnect, device number 14 [ 630.435483][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.532406][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.699133][T11228] Bluetooth: hci3: unexpected event for opcode 0x0c58 [ 632.280780][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.544870][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.838098][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.874679][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.241069][T11587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 634.764786][T11228] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 634.773465][T11228] Bluetooth: hci3: Injecting HCI hardware error event [ 634.782992][T11228] Bluetooth: hci3: hardware error 0x00 [ 634.830053][ T47] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 634.854753][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.040094][ T47] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 635.176363][ T47] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 635.314311][ T47] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 635.511314][ T47] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 635.655135][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.859294][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.144375][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.294441][ T47] usb 5-1: can't set config #16, error -71 [ 636.372333][ T47] usb 5-1: USB disconnect, device number 15 [ 636.644982][T11611] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1669'. [ 636.913105][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.914370][T11228] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 638.044806][ T9384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.053074][ T1150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.138115][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.554382][ T977] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 638.784297][ T977] usb 4-1: Using ep0 maxpacket: 16 [ 638.857318][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 638.997671][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.154066][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.162337][ T977] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 639.231347][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.305495][ T977] usb 4-1: config 0 descriptor?? [ 639.464391][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 639.715894][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 639.926569][ T977] usbhid 4-1:0.0: can't add hid device: -32 [ 639.945436][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.987547][ T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 640.053621][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 640.153004][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.188133][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.226410][ T9] usb 5-1: Product: syz [ 640.233630][ T9] usb 5-1: Manufacturer: syz [ 640.241018][ T9] usb 5-1: SerialNumber: syz [ 640.257974][ T9] usb 5-1: config 0 descriptor?? [ 640.280988][ T9] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 640.282783][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.729577][T11656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1683'. [ 641.158888][ T9382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.184071][ T9] gp8psk: usb in 146 operation failed. [ 641.207845][ T9] gp8psk: failed to get FW version [ 641.219168][ T9] gp8psk: usb in 149 operation failed. [ 641.231372][ T9] gp8psk: failed to get FPGA version [ 641.236902][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.241499][ T9] gp8psk: usb out operation failed. [ 641.261052][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 641.282870][ T9] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 641.416691][ T9] usb 5-1: media controller created [ 641.425358][ T883] usb 4-1: USB disconnect, device number 19 [ 641.691409][T11660] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1685'. [ 642.352243][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.357129][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 642.548807][ T9] gp8psk_fe: Frontend revision 1 attached [ 642.566703][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 642.642847][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 642.782548][T11686] loop6: detected capacity change from 0 to 524287999 [ 642.791243][T11686] buffer_io_error: 7 callbacks suppressed [ 642.791273][T11686] Buffer I/O error on dev loop6, logical block 0, async page read [ 642.917799][ T9] gp8psk: usb in 138 operation failed. [ 642.933758][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 643.014173][T11686] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.040210][ T9] gp8psk: found Genpix USB device pID = 201 (hex) [ 643.295496][ T9384] net_ratelimit: 1 callbacks suppressed [ 643.295515][ T9384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.651389][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.734460][ T9] usb 5-1: USB disconnect, device number 16 [ 643.755904][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.764305][T11686] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.783707][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.829546][T11686] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.864568][T11686] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.929384][T11686] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.985310][T11686] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.995628][T11686] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.009156][T11686] ldm_validate_partition_table(): Disk read failed. [ 644.019479][T11686] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.032799][T11686] Buffer I/O error on dev loop6, logical block 0, async page read [ 644.048264][T11686] Dev loop6: unable to read RDB block 0 [ 644.070755][T11686] loop6: unable to read partition table [ 644.083865][ T47] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 644.097198][T11686] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 644.456464][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 644.601889][ T47] usb 3-1: unable to get BOS descriptor or descriptor too short [ 644.692125][ T47] usb 3-1: config 191 has an invalid interface number: 134 but max is 0 [ 644.737321][ T47] usb 3-1: config 191 has no interface number 0 [ 644.755620][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.766369][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.770161][ T9] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 644.782017][ T47] usb 3-1: config 191 interface 134 has no altsetting 0 [ 644.816779][ T5904] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.838354][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.863639][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.884065][ T47] usb 3-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice=f6.34 [ 644.901892][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 644.924202][T11703] block nbd3: NBD_DISCONNECT [ 644.932665][T11703] block nbd3: Send disconnect failed -107 [ 644.937884][ T47] usb 3-1: Product: syz [ 644.942637][ T47] usb 3-1: Manufacturer: syz [ 644.947404][ T47] usb 3-1: SerialNumber: syz [ 645.113500][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 645.313583][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 645.325330][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.352295][ T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 645.384715][ T9382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.402684][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.442125][T11701] block nbd3: Disconnected due to user request. [ 645.454475][ T9] usb 5-1: config 0 descriptor?? [ 645.459713][T11701] block nbd3: shutting down sockets [ 645.744200][ T47] ftdi_sio 3-1:191.134: FTDI USB Serial Device converter detected [ 645.776806][ T47] ftdi_sio ttyUSB0: unknown device type: 0xf634 [ 645.908460][ T9] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 645.962426][ T47] usb 3-1: USB disconnect, device number 15 [ 645.990231][ T47] ftdi_sio 3-1:191.134: device disconnected [ 646.379613][ T47] usb 5-1: USB disconnect, device number 17 [ 646.719231][T11724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1699'. [ 646.787525][T11727] hub 9-0:1.0: USB hub found [ 646.793300][T11727] hub 9-0:1.0: 1 port detected [ 648.393390][ T5869] net_ratelimit: 16 callbacks suppressed [ 648.393411][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.407926][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.423486][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.809627][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.994089][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.005846][ T9394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.235829][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.244748][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.155420][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.164450][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.362748][ T5869] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 651.488878][T11772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1712'. [ 651.532808][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 651.535734][ T5869] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 651.535765][ T5869] usb 2-1: config 0 has no interface number 0 [ 651.537788][ T5869] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 651.537817][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.537837][ T5869] usb 2-1: Product: syz [ 651.537851][ T5869] usb 2-1: Manufacturer: syz [ 651.537866][ T5869] usb 2-1: SerialNumber: syz [ 651.541708][ T5869] usb 2-1: config 0 descriptor?? [ 651.574575][ T5869] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 651.847607][T11780] tty tty3: ldisc open failed (-12), clearing slot 2 [ 652.300876][T11789] binder: 11788:11789 ioctl c0306201 0 returned -14 [ 652.459498][ T5869] gspca_spca1528: reg_w err -71 [ 652.494386][ T5869] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 652.664617][ T5869] usb 2-1: USB disconnect, device number 28 [ 653.462677][ T47] net_ratelimit: 9 callbacks suppressed [ 653.462692][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.535576][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.924412][T11808] hub 9-0:1.0: USB hub found [ 653.929406][T11808] hub 9-0:1.0: 1 port detected [ 653.939209][T11807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 654.434413][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.466445][T11814] ubi: mtd0 is already attached to ubi31 [ 654.545593][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.893445][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.632455][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.655135][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.663857][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.692579][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.176917][T11832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'. [ 658.612076][ T47] net_ratelimit: 10 callbacks suppressed [ 658.612095][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.858541][T11228] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 659.003596][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.012685][T11870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.021258][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.188339][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1738'. [ 659.275807][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.302587][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.352449][T11870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.360807][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.689978][T11870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.698426][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.533450][T11897] ubi: mtd0 is already attached to ubi31 [ 661.460888][T11905] input: syz0 as /devices/virtual/input/input8 [ 662.940928][ T5834] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 662.949684][ T5834] Bluetooth: hci0: Injecting HCI hardware error event [ 662.959517][ T5834] Bluetooth: hci0: hardware error 0x00 [ 663.878126][ T5869] net_ratelimit: 22 callbacks suppressed [ 663.878146][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.031786][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.394712][T11942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1758'. [ 664.627182][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1756'. [ 664.902996][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.914471][T11953] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 665.065715][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.071413][ T5834] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 665.080600][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.216926][ T5834] Bluetooth: hci4: unexpected event for opcode 0x200a [ 665.221938][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.232743][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.385818][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.324540][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.344018][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.521206][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 668.691024][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 669.072187][ T9386] net_ratelimit: 9 callbacks suppressed [ 669.072229][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.386171][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 669.396855][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 669.412312][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 669.424845][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.447980][ T9] usb 4-1: Product: syz [ 669.464720][ T9] usb 4-1: Manufacturer: syz [ 669.469367][ T9] usb 4-1: SerialNumber: syz [ 669.625553][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.711226][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.751296][ T9] usb 4-1: 0:2 : does not exist [ 669.809817][ T9] usb 4-1: USB disconnect, device number 20 [ 669.896841][T11122] udevd[11122]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.076784][T12009] binder_alloc: 12008: binder_alloc_buf, no vma [ 670.721481][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.756993][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.883093][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 671.022949][T12029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1790'. [ 671.140775][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.780789][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.909511][T12032] xt_CT: You must specify a L4 protocol and not use inversions on it [ 671.932979][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.006456][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.307343][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 673.180683][ T5881] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 673.360656][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 673.377447][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 673.406859][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 673.453310][ T5881] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 673.479216][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.506135][ T5881] usb 4-1: Product: syz [ 673.515692][ T5881] usb 4-1: Manufacturer: syz [ 673.525619][ T5881] usb 4-1: SerialNumber: syz [ 673.836984][ T5881] usb 4-1: 0:2 : does not exist [ 674.025314][ T5881] usb 4-1: USB disconnect, device number 21 [ 674.127749][T11702] net_ratelimit: 6 callbacks suppressed [ 674.127769][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.686521][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.695401][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.146330][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.670500][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.683039][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.691218][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.514270][T11122] udevd[11122]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.664764][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 677.097648][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.107673][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.728754][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.963344][T12103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 679.061102][T12107] overlayfs: failed to resolve './file1': -2 [ 679.359839][T11702] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 679.395157][T10847] net_ratelimit: 6 callbacks suppressed [ 679.395176][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.529966][T11702] usb 5-1: Using ep0 maxpacket: 16 [ 679.550852][T11702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.563537][T11702] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.659823][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.704314][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1816'. [ 680.054503][T11702] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 680.135647][T11702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.174846][T11702] usb 5-1: Product: syz [ 680.185621][T11702] usb 5-1: Manufacturer: syz [ 680.192378][T11702] usb 5-1: SerialNumber: syz [ 680.455891][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.484084][T11702] usb 5-1: 0:2 : does not exist [ 680.530736][T10847] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 680.601710][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.688026][T12133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1819'. [ 680.740293][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.750257][T10847] usb 4-1: Using ep0 maxpacket: 16 [ 680.751757][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.816199][T10847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.027479][T11702] usb 5-1: USB disconnect, device number 18 [ 681.087312][T10847] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 681.131257][T10847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.207167][T10847] usb 4-1: config 0 descriptor?? [ 681.477693][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.479998][T11389] udevd[11389]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 681.573533][T11122] udevd[11122]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 681.740332][T10847] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 681.783505][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 681.859691][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.113009][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 682.166552][ T977] usb 4-1: USB disconnect, device number 22 [ 683.114283][T12169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1832'. [ 683.418841][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1831'. [ 683.810482][T11122] udevd[11122]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 684.196583][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1836'. [ 684.771356][T10847] net_ratelimit: 8 callbacks suppressed [ 684.771377][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.982175][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.078748][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.144163][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.412748][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1841'. [ 685.713665][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.720535][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.785235][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.355460][ T9382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.363980][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.825003][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.947174][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.379310][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 688.960356][T12222] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1847'. [ 689.891101][T12244] net_ratelimit: 8 callbacks suppressed [ 689.891119][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.905257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.031035][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.250351][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.258967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.368345][T12256] ubi: mtd0 is already attached to ubi31 [ 690.600736][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.609185][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.939956][T12244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.948366][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.969136][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.353387][T12268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1857'. [ 693.047079][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1865'. [ 695.158960][T11702] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 695.301998][ T6538] net_ratelimit: 21 callbacks suppressed [ 695.302016][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.304206][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.351711][T11702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.378208][T11702] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 695.390301][T11702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 695.401360][T11702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 695.411191][T11702] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 695.427046][T11702] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 695.436367][T11702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 695.445325][T11702] usb 2-1: Product: syz [ 695.455500][T11702] usb 2-1: Manufacturer: syz [ 695.460989][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.469229][T11702] usb 2-1: SerialNumber: syz [ 695.486255][T11702] usb 2-1: config 0 descriptor?? [ 695.582449][ T5881] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 695.891773][T11702] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 695.933728][T11702] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 696.038367][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 696.056528][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.094602][T11702] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 696.102108][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.112376][T11702] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 696.128090][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.149021][ T5881] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 696.165289][T11702] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 696.183541][ T5881] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 696.212190][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.238368][ T47] IPVS: starting estimator thread 0... [ 696.465147][ T5881] usb 1-1: config 0 descriptor?? [ 696.518269][T11702] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 696.527294][T11702] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 696.540247][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.557967][T11702] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 696.574794][T12327] IPVS: using max 30 ests per chain, 72000 per kthread [ 696.692560][T12333] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1877'. [ 696.825632][T12334] macsec0: entered promiscuous mode [ 697.455914][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.480783][ T5881] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 697.538091][T11702] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 697.553790][T11702] usb 2-1: USB disconnect, device number 29 [ 697.573041][ T5881] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 697.611028][ T5881] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 697.638024][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1879'. [ 697.674758][ T5881] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 697.700808][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.718074][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.727926][ T5881] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 697.858237][ T9394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 697.872013][ T5881] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 697.887798][ T5881] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 697.906999][ T5881] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 697.921661][ T5881] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 697.929259][ T5881] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 697.944916][ T5881] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0010/input/input9 [ 697.996173][ T5881] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 698.048923][ T5881] usb 1-1: USB disconnect, device number 19 [ 698.332910][T12349] fido_id[12349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 698.499380][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.997756][ T5881] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 700.187686][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 700.603799][ T9382] net_ratelimit: 130 callbacks suppressed [ 700.603818][ T9382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.607935][ T5881] usb 1-1: unable to get BOS descriptor or descriptor too short [ 700.609969][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.635393][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.635588][ T5881] usb 1-1: config 191 has an invalid interface number: 134 but max is 0 [ 700.654050][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.657263][ T5881] usb 1-1: config 191 has no interface number 0 [ 700.677549][ T5881] usb 1-1: config 191 interface 134 has no altsetting 0 [ 700.701057][ T5881] usb 1-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice=f6.34 [ 700.719057][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 700.737585][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.763596][ T5881] usb 1-1: Product: syz [ 700.783365][ T5881] usb 1-1: Manufacturer: syz [ 700.788389][T12371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.797148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.805567][ T5881] usb 1-1: SerialNumber: syz [ 700.823615][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.857059][T12371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.865272][T12372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.532659][T12395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.906764][ T5881] ftdi_sio 1-1:191.134: FTDI USB Serial Device converter detected [ 701.918114][ T5881] ftdi_sio ttyUSB0: unknown device type: 0xf634 [ 701.977788][ T5881] usb 1-1: USB disconnect, device number 20 [ 702.000825][ T5881] ftdi_sio 1-1:191.134: device disconnected [ 706.079155][ T5879] net_ratelimit: 27 callbacks suppressed [ 706.079175][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.091496][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.101284][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.946036][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.958867][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.967433][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.015402][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.024486][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.033777][ T9382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.042471][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.349670][T12434] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.666778][ T5879] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 707.960572][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 708.052691][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 708.145466][ T5879] usb 3-1: config 191 has an invalid interface number: 134 but max is 0 [ 708.243755][ T5879] usb 3-1: config 191 has no interface number 0 [ 708.308833][ T5879] usb 3-1: config 191 interface 134 has no altsetting 0 [ 708.446211][ T5879] usb 3-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice=f6.34 [ 708.519221][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 708.671726][ T5879] usb 3-1: Product: syz [ 708.676373][ T5879] usb 3-1: Manufacturer: syz [ 708.681132][ T5879] usb 3-1: SerialNumber: syz [ 709.786751][ T5881] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 709.880173][ T5879] ftdi_sio 3-1:191.134: FTDI USB Serial Device converter detected [ 709.911409][ T5879] ftdi_sio ttyUSB0: unknown device type: 0xf634 [ 709.946817][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 709.952558][ T5879] usb 3-1: USB disconnect, device number 16 [ 710.000982][ T5879] ftdi_sio 3-1:191.134: device disconnected [ 710.012461][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.030193][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.061275][ T5881] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.074349][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.996503][ T5881] usb 4-1: Product: syz [ 712.000817][ T5881] usb 4-1: Manufacturer: syz [ 712.005538][ T5881] usb 4-1: SerialNumber: syz [ 712.022678][T10847] net_ratelimit: 20 callbacks suppressed [ 712.022697][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.037103][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.180170][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.227774][T12467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1919'. [ 712.505502][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.518924][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.530600][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.579688][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.596777][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.608752][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.651183][ T5881] usb 4-1: 0:2 : does not exist [ 712.697811][ T5881] usb 4-1: USB disconnect, device number 23 [ 712.724210][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 713.062189][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.809879][T12311] udevd[12311]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.094695][T12312] udevd[12312]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 714.171161][T12311] udevd[12311]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 716.376529][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1929'. [ 718.206248][T12076] net_ratelimit: 14 callbacks suppressed [ 718.206269][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.264994][ T1150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.276274][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.299227][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.308896][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.325931][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.346047][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.346829][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.363544][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.112662][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.785125][ T5878] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 723.195074][T12548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1940'. [ 723.212922][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1940'. [ 723.318645][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 723.486243][ T5878] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 723.667360][ T5881] net_ratelimit: 10 callbacks suppressed [ 723.667380][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.708857][ T5878] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 723.753498][ T5878] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 723.777877][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.796055][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.840240][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.869880][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.979607][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.084584][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.093058][T10847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.104553][T12552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.123813][ T9384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.285568][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.750694][ T5878] usb 1-1: usb_control_msg returned -32 [ 725.756342][ T5878] usbtmc 1-1:16.0: can't read capabilities [ 727.898418][ T5878] usb 1-1: USB disconnect, device number 21 [ 728.705947][T12571] net_ratelimit: 12 callbacks suppressed [ 728.705961][T12571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.720452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.768265][T12571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.776809][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.787987][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1947'. [ 729.738201][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.740994][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.754872][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.495233][ T1150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.928648][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.136786][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.298545][ T5878] net_ratelimit: 10 callbacks suppressed [ 734.298565][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.249688][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.049522][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.127600][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.256821][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.265720][ T9384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.335295][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.894264][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.168420][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.293424][T12640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.115887][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1964'. [ 738.207966][T12653] Driver unsupported XDP return value 0 on prog (id 653) dev N/A, expect packet loss! [ 739.365109][ T5878] net_ratelimit: 8 callbacks suppressed [ 739.365126][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.521017][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.531050][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.413805][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.574020][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.618287][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.613582][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.998116][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.024695][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.033870][ T9382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.930287][ T47] net_ratelimit: 8 callbacks suppressed [ 744.930300][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.944218][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.452924][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 745.966555][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.016421][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.432749][ T5881] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 746.494190][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.502701][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.744869][T12710] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 746.962049][ T5881] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 747.015403][ T5881] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 747.016343][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.138560][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.161254][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.381141][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.397003][ T5881] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 747.412617][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 747.420742][ T5881] usb 4-1: SerialNumber: syz [ 747.676757][ T5881] usb 4-1: 0:2 : does not exist [ 747.781523][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.813357][ T5881] usb 4-1: USB disconnect, device number 24 [ 748.799240][T12716] udevd[12716]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.834481][T12736] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.866279][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 748.866301][ T30] audit: type=1326 audit(1747245704.648:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 748.966311][ T30] audit: type=1326 audit(1747245704.648:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 749.010352][ T30] audit: type=1326 audit(1747245704.688:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 749.057019][ T5878] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 749.065259][ T30] audit: type=1326 audit(1747245704.688:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 749.117773][ T30] audit: type=1326 audit(1747245704.688:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 749.142787][ T30] audit: type=1326 audit(1747245704.688:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 749.165124][ T30] audit: type=1326 audit(1747245704.698:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 749.187869][ T30] audit: type=1326 audit(1747245704.698:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 749.215541][ T30] audit: type=1326 audit(1747245704.698:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 749.237448][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 749.242699][ T5881] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 749.250552][ T30] audit: type=1326 audit(1747245704.708:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12739 comm="syz.3.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 749.275388][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.286752][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.300185][ T5878] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 749.309639][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.321215][ T5878] usb 3-1: config 0 descriptor?? [ 749.434939][ T5881] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 40, changing to 9 [ 749.476557][ T5881] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 749.488240][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.686379][ T5881] usb 5-1: Product: syz [ 749.690801][ T5881] usb 5-1: Manufacturer: syz [ 749.696617][ T5881] usb 5-1: SerialNumber: syz [ 749.971257][T12755] net_ratelimit: 12 callbacks suppressed [ 749.971276][T12755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.985482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.165106][ T5878] letsketch 0003:6161:4D15.0011: Device info: è±§ [ 750.278566][T12761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.155795][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.162923][ T5878] letsketch 0003:6161:4D15.0011: Device info: 꿨 [ 751.172306][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.535970][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.632315][ T5878] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 751.672679][ T5878] letsketch 0003:6161:4D15.0011: probe with driver letsketch failed with error -71 [ 752.063857][ T5878] usb 3-1: USB disconnect, device number 17 [ 752.070057][ T5881] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 752.082846][ T5881] cdc_ncm 5-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 752.090383][ T5881] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 752.107992][T12769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 752.258486][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.264320][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.277434][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.875756][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.945971][ T5881] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 753.029004][ T5881] usb 5-1: USB disconnect, device number 19 [ 753.071770][ T5881] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 753.377658][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.501535][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2013'. [ 754.311986][T12787] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 754.321645][T12787] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 754.331279][T12787] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 754.595013][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 754.595030][ T30] audit: type=1326 audit(1747245710.388:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12794 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 754.731029][ T30] audit: type=1326 audit(1747245710.388:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12794 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 754.753404][ T30] audit: type=1326 audit(1747245710.418:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12794 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 754.775333][ T30] audit: type=1326 audit(1747245710.418:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12794 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 754.812891][ T30] audit: type=1326 audit(1747245710.568:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12794 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 755.378963][ T30] audit: type=1326 audit(1747245710.568:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12794 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 755.400964][ T30] audit: type=1326 audit(1747245710.568:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12794 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 755.499653][ T30] audit: type=1326 audit(1747245710.608:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12794 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 755.522454][ T30] audit: type=1326 audit(1747245710.608:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12794 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 755.545945][T11702] net_ratelimit: 8 callbacks suppressed [ 755.545964][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.560251][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 755.737332][ T30] audit: type=1326 audit(1747245710.608:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12794 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f667158e969 code=0x7ffc0000 [ 755.932335][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.100279][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.577984][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.591655][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.729681][T12817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 757.146837][ T5878] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 757.172079][T12818] block nbd4: NBD_DISCONNECT [ 757.186065][T12818] block nbd4: Send disconnect failed -107 [ 757.373307][ T5878] usb 3-1: Using ep0 maxpacket: 16 [ 757.947667][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.086745][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 758.117180][T12816] block nbd4: Disconnected due to user request. [ 758.136081][T12816] block nbd4: shutting down sockets [ 758.943870][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.821356][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 761.195898][ T5878] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 761.205026][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.215989][ T5878] usb 3-1: config 0 descriptor?? [ 761.262817][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.293787][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.322124][ T9382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.322176][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.330723][ T9382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.346465][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.346899][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.377688][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.454762][ T5878] usbhid 3-1:0.0: can't add hid device: -71 [ 761.460828][ T5878] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 761.657913][ T5878] usb 3-1: USB disconnect, device number 18 [ 761.783002][T12844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2027'. [ 762.302867][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.417210][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.902402][T12850] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 762.930377][T12850] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 763.153192][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 763.153210][ T30] audit: type=1326 audit(1747245718.939:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 763.182272][ T30] audit: type=1326 audit(1747245718.939:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 763.204326][ T30] audit: type=1326 audit(1747245718.939:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 763.227399][ T30] audit: type=1326 audit(1747245718.939:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 763.249377][ T30] audit: type=1326 audit(1747245718.939:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 763.271732][ T30] audit: type=1326 audit(1747245718.969:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 763.294475][ T30] audit: type=1326 audit(1747245718.969:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 764.044756][ T30] audit: type=1326 audit(1747245718.969:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 764.121053][ T30] audit: type=1326 audit(1747245718.979:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 764.164416][ T30] audit: type=1326 audit(1747245718.979:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12853 comm="syz.3.2033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc958e969 code=0x7ffc0000 [ 764.646636][ T5881] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 764.779343][T12873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2039'. [ 764.839459][T12875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 764.848747][ T5881] usb 1-1: Using ep0 maxpacket: 16 [ 764.861741][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.889922][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 765.042920][ T5881] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 765.123985][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.269297][ T5881] usb 1-1: config 0 descriptor?? [ 765.379218][T12887] binder: 12886:12887 ioctl c0306201 0 returned -14 [ 766.222190][ T5881] letsketch 0003:6161:4D15.0012: Device info: è±§ [ 766.931631][ T47] net_ratelimit: 11 callbacks suppressed [ 766.931650][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.075068][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.090854][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.101095][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.169041][ T5881] letsketch 0003:6161:4D15.0012: Device info: 꿨 [ 767.175891][ T9382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.450989][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.462363][ T5881] usb 1-1: Max retries (5) exceeded reading string descriptor 202 [ 767.579989][ T5881] letsketch 0003:6161:4D15.0012: probe with driver letsketch failed with error -71 [ 767.815567][ T5881] usb 1-1: USB disconnect, device number 22 [ 768.010819][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.306500][T12923] macsec0: entered promiscuous mode [ 768.313061][T12923] macsec0: entered allmulticast mode [ 768.318416][T12923] veth1_macvtap: entered allmulticast mode [ 769.060725][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.433023][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.498912][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.728527][T12947] pim6reg1: entered promiscuous mode [ 770.762632][T12947] pim6reg1: entered allmulticast mode [ 770.937502][ T5869] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 771.114406][ T30] kauditd_printk_skb: 70 callbacks suppressed [ 771.114424][ T30] audit: type=1326 audit(1747245726.900:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 771.149550][ T30] audit: type=1326 audit(1747245726.940:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 771.171806][ T30] audit: type=1326 audit(1747245726.940:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 771.196041][ T30] audit: type=1326 audit(1747245726.940:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 771.219323][ T30] audit: type=1326 audit(1747245726.940:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 771.241541][ T30] audit: type=1326 audit(1747245726.940:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 771.255259][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 771.264593][ T30] audit: type=1326 audit(1747245726.940:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 771.299531][ T30] audit: type=1326 audit(1747245726.940:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 771.324905][ T30] audit: type=1326 audit(1747245726.940:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 771.350637][ T30] audit: type=1326 audit(1747245726.940:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12955 comm="syz.1.2065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc74b78e969 code=0x7ffc0000 [ 771.350926][ T5869] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.383362][ T5869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.393421][ T5869] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 771.403454][ T5869] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.416891][ T5869] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 771.426069][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.439984][T11702] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 771.620189][T11702] usb 3-1: Using ep0 maxpacket: 16 [ 771.628425][T11702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.639772][T11702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 771.649772][T11702] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 771.658971][T11702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.694879][T11702] usb 3-1: config 0 descriptor?? [ 771.735790][ T5869] usb 4-1: GET_CAPABILITIES returned 0 [ 771.748780][ T5869] usbtmc 4-1:16.0: can't read capabilities [ 772.829828][ T6538] net_ratelimit: 5 callbacks suppressed [ 772.829847][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.908030][ T1150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.977124][ T5869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.986355][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.004008][ T1150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.989516][ T47] usb 4-1: USB disconnect, device number 25 [ 774.141934][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.161088][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.186376][T11702] letsketch 0003:6161:4D15.0013: Device info: è±§ [ 774.421222][T11702] letsketch 0003:6161:4D15.0013: Device info: 꿨 [ 774.636307][ T5881] IPVS: starting estimator thread 0... [ 774.653720][T11702] usb 3-1: Max retries (5) exceeded reading string descriptor 202 [ 774.775460][T12995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2076'. [ 774.779531][T11702] letsketch 0003:6161:4D15.0013: probe with driver letsketch failed with error -71 [ 774.944702][T12997] macsec0: entered promiscuous mode [ 774.955616][T12997] macsec0: entered allmulticast mode [ 774.961024][T12997] veth1_macvtap: entered allmulticast mode [ 775.010459][T12993] IPVS: using max 29 ests per chain, 69600 per kthread [ 775.412637][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.574897][T11702] usb 3-1: USB disconnect, device number 19 [ 775.838942][T12716] udevd[12716]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 775.901303][T12774] udevd[12774]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 776.514932][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.209638][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.490292][ T1150] net_ratelimit: 1 callbacks suppressed [ 778.490310][ T1150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.505140][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.513286][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.526753][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.575596][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.689380][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.772662][T13033] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'. [ 780.255030][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.049284][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.380120][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.456274][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 781.456294][ T30] audit: type=1326 audit(1747245737.221:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13048 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1b8e969 code=0x7ffc0000 [ 781.550593][ T30] audit: type=1326 audit(1747245737.221:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13048 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1b8e969 code=0x7ffc0000 [ 781.606829][ T30] audit: type=1326 audit(1747245737.221:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13048 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdfd1b8e969 code=0x7ffc0000 [ 781.635732][ T30] audit: type=1326 audit(1747245737.221:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13048 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1b8e969 code=0x7ffc0000 [ 781.664501][ T30] audit: type=1326 audit(1747245737.221:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13048 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1b8e969 code=0x7ffc0000 [ 781.713339][ T30] audit: type=1326 audit(1747245737.221:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13048 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfd1b8e969 code=0x7ffc0000 [ 781.738453][ T30] audit: type=1326 audit(1747245737.231:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13048 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1b8e969 code=0x7ffc0000 [ 781.768320][ T30] audit: type=1326 audit(1747245737.231:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13048 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1b8e969 code=0x7ffc0000 [ 781.800785][ T30] audit: type=1326 audit(1747245737.231:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13048 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfd1b8e969 code=0x7ffc0000 [ 781.828257][ T30] audit: type=1326 audit(1747245737.231:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13048 comm="syz.0.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfd1b8e969 code=0x7ffc0000 [ 782.246983][T13071] sctp: [Deprecated]: syz.1.2102 (pid 13071) Use of int in max_burst socket option. [ 782.246983][T13071] Use struct sctp_assoc_value instead [ 782.431566][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.715716][ T36] net_ratelimit: 2 callbacks suppressed [ 783.715736][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.275421][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.283610][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.494127][T11702] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.636853][T13071] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2102'. [ 784.647440][T13071] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2102'. [ 784.657130][T13071] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2102'. [ 784.666512][T13079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2104'. [ 784.899463][ T9386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.813914][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.983069][T13097] pim6reg1: entered promiscuous mode [ 786.026479][T13097] pim6reg1: entered allmulticast mode [ 786.364831][T13104] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 786.386127][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2107'. [ 786.411368][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.076085][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.326927][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.399835][T13128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 789.374944][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.425049][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.433222][ T9384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.448284][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.919422][T13166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 789.936147][T13166] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.009074][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.495130][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.648422][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.657443][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.738544][T13181] binder: 13179:13181 ioctl c0306201 0 returned -14 [ 790.770734][T13181] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2136'. [ 791.528308][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.688216][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2131'. [ 793.148028][T12076] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 793.558117][T12076] usb 4-1: Using ep0 maxpacket: 16 [ 793.568121][T12076] usb 4-1: unable to get BOS descriptor or descriptor too short [ 793.578384][T12076] usb 4-1: config 191 has an invalid interface number: 134 but max is 0 [ 793.602604][T12076] usb 4-1: config 191 has no interface number 0 [ 793.624182][T12076] usb 4-1: config 191 interface 134 has no altsetting 0 [ 793.646194][T12076] usb 4-1: New USB device found, idVendor=1b3d, idProduct=011c, bcdDevice=f6.34 [ 793.692673][T12076] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 793.736202][T12076] usb 4-1: Product: syz [ 793.747789][T12076] usb 4-1: Manufacturer: syz [ 793.756616][T12076] usb 4-1: SerialNumber: syz [ 793.830279][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2145'. [ 794.809837][ T883] net_ratelimit: 3 callbacks suppressed [ 794.809856][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.240989][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.308571][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.742302][T12076] ftdi_sio 4-1:191.134: FTDI USB Serial Device converter detected [ 795.792385][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.792705][T12076] ftdi_sio ttyUSB0: unknown device type: 0xf634 [ 795.815033][ T5881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.823659][T12076] usb 4-1: USB disconnect, device number 26 [ 795.858292][T12076] ftdi_sio 4-1:191.134: device disconnected [ 795.877583][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.408138][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.024151][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.384249][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.857929][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2158'. [ 799.253085][T12076] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.892350][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.252459][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.716258][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.728955][T13282] netlink: 'syz.2.2162': attribute type 9 has an invalid length. [ 800.770879][T13282] netlink: 'syz.2.2162': attribute type 6 has an invalid length. [ 800.779551][T13283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2165'. [ 800.850222][T13272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 800.858991][T13272] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 800.889271][ T6538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.902573][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.968144][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.009962][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.018892][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.197742][T13272] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 801.206432][T13272] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 801.549663][ T9380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.155041][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.812236][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 803.129564][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2172'. [ 803.360428][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 804.956548][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 804.967413][ T47] net_ratelimit: 4 callbacks suppressed [ 804.967430][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.448664][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 805.616937][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 805.779912][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.087566][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.718718][ T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.728469][ T9384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.737416][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.965834][T13350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 807.751427][ T9384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.760857][ T6684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.780150][T13350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 807.816794][ T5878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.834168][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.866066][T13350] netlink: 'syz.4.2183': attribute type 9 has an invalid length. [ 807.874083][T13350] netlink: 'syz.4.2183': attribute type 6 has an invalid length. [ 808.686644][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.976407][ T5834] Bluetooth: hci2: command 0x0406 tx timeout [ 809.754003][T13375] pim6reg1: entered promiscuous mode [ 809.762979][T13375] pim6reg1: entered allmulticast mode [ 809.849939][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 809.935356][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2186'. [ 810.103435][T13381] page: refcount:3 mapcount:0 mapping:ffff8880228541f8 index:0x2 pfn:0x11746 [ 810.112436][T13381] memcg:ffff888029c38000 [ 810.116951][T13381] aops:def_blk_aops ino:fa00000 [ 810.121840][T13381] flags: 0xfff00000000039(locked|uptodate|dirty|lru|node=0|zone=1|lastcpupid=0x7ff) [ 810.131284][T13381] raw: 00fff00000000039 ffffea000045d1c8 ffff8880298b7868 ffff8880228541f8 [ 810.140187][T13381] raw: 0000000000000002 0000000000000000 00000003ffffffff ffff888029c38000 [ 810.148936][T13381] page dumped because: VM_BUG_ON_FOLIO(!folio_contains(folio, index)) [ 810.157160][T13381] page_owner tracks the page as allocated [ 810.162900][T13381] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 13380, tgid 13380 (syz.4.2193), ts 809835396149, free_ts 808234382816 [ 810.183709][T13381] post_alloc_hook+0x1d8/0x230 [ 810.188510][T13381] get_page_from_freelist+0x21c7/0x22a0 [ 810.194097][T13381] __alloc_frozen_pages_noprof+0x181/0x370 [ 810.199989][T13381] alloc_pages_mpol+0x232/0x4a0 [ 810.204895][T13381] alloc_pages_noprof+0xa9/0x190 [ 810.209893][T13381] folio_alloc_noprof+0x1e/0x30 [ 810.214779][T13381] filemap_alloc_folio_noprof+0xdf/0x470 [ 810.220748][T13381] page_cache_ra_order+0x5e5/0xc70 [ 810.225961][T13381] do_sync_mmap_readahead+0x4b5/0x5f0 [ 810.231376][T13381] filemap_fault+0x62a/0x1200 [ 810.236093][T13381] __do_fault+0x138/0x390 [ 810.240743][T13381] __handle_mm_fault+0x17f9/0x5380 [ 810.245930][T13381] handle_mm_fault+0x2d5/0x7f0 [ 810.250729][T13381] do_user_addr_fault+0xa81/0x1390 [ 810.255949][T13381] exc_page_fault+0x68/0x110 [ 810.260556][T13381] asm_exc_page_fault+0x26/0x30 [ 810.265430][T13381] page last free pid 13298 tgid 13295 stack trace: [ 810.271979][T13381] free_unref_folios+0xb70/0x1490 [ 810.277057][T13381] folios_put_refs+0x559/0x640 [ 810.281843][T13381] free_pages_and_swap_cache+0x277/0x520 [ 810.287525][T13381] tlb_flush_mmu+0x3a0/0x680 [ 810.292136][T13381] unmap_page_range+0x37fd/0x4210 [ 810.297221][T13381] unmap_vmas+0x25d/0x3c0 [ 810.301567][T13381] exit_mmap+0x245/0xba0 [ 810.305829][T13381] __mmput+0x118/0x410 [ 810.309956][T13381] exit_mm+0x1da/0x2c0 [ 810.314036][T13381] do_exit+0x859/0x2550 [ 810.318240][T13381] do_group_exit+0x21c/0x2d0 [ 810.323092][T13381] get_signal+0x125e/0x1310 [ 810.327695][T13381] arch_do_signal_or_restart+0x95/0x780 [ 810.333266][T13381] syscall_exit_to_user_mode+0x8b/0x120 [ 810.338877][T13381] do_syscall_64+0x103/0x210 [ 810.343779][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.349827][T13381] ------------[ cut here ]------------ [ 810.355298][T13381] kernel BUG at mm/filemap.c:3433! [ 810.360475][T13381] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 810.366736][T13381] CPU: 1 UID: 0 PID: 13381 Comm: syz.4.2193 Not tainted 6.15.0-rc6-syzkaller-00052-g9f35e33144ae #0 PREEMPT(full) [ 810.378797][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 810.388850][T13381] RIP: 0010:filemap_fault+0x1181/0x1200 [ 810.394381][T13381] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 b9 64 28 00 e9 81 fc ff ff e8 cf 91 c8 ff 48 89 df 48 c7 c6 80 09 74 8b e8 50 a6 0d 00 90 <0f> 0b e8 b8 91 c8 ff 48 8b 3c 24 48 c7 c6 00 10 74 8b e8 38 a6 0d [ 810.414069][T13381] RSP: 0018:ffffc9000bc073e0 EFLAGS: 00010246 [ 810.420138][T13381] RAX: 362fdc82e5093200 RBX: ffffea000045d180 RCX: 362fdc82e5093200 [ 810.428103][T13381] RDX: 0000000000000000 RSI: ffffffff8d9226fd RDI: ffff888011a08000 [ 810.436062][T13381] RBP: ffffc9000bc07518 R08: 0000000000000003 R09: 0000000000000004 [ 810.444014][T13381] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: dffffc0000000000 [ 810.451967][T13381] R13: 1ffffd400008ba31 R14: ffffea000045d198 R15: ffffea000045d188 [ 810.459922][T13381] FS: 00007f667248d6c0(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000 [ 810.468834][T13381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.475396][T13381] CR2: 0000200000001a94 CR3: 000000004545a000 CR4: 00000000003526f0 [ 810.483350][T13381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 810.491302][T13381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 810.499256][T13381] Call Trace: [ 810.502528][T13381] [ 810.505444][T13381] ? __pfx_filemap_fault+0x10/0x10 [ 810.510537][T13381] ? __handle_mm_fault+0x280a/0x5380 [ 810.515814][T13381] __do_fault+0x138/0x390 [ 810.520129][T13381] __handle_mm_fault+0x363e/0x5380 [ 810.525246][T13381] ? __pfx___handle_mm_fault+0x10/0x10 [ 810.530736][T13381] ? find_vma+0xe7/0x160 [ 810.534985][T13381] ? __pfx_find_vma+0x10/0x10 [ 810.539655][T13381] handle_mm_fault+0x2d5/0x7f0 [ 810.544410][T13381] do_user_addr_fault+0x764/0x1390 [ 810.549514][T13381] exc_page_fault+0x68/0x110 [ 810.554088][T13381] asm_exc_page_fault+0x26/0x30 [ 810.558921][T13381] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 810.564628][T13381] Code: c4 10 c3 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 810.584226][T13381] RSP: 0018:ffffc9000bc07998 EFLAGS: 00050202 [ 810.590277][T13381] RAX: 00007ffffffff001 RBX: 0000000000000001 RCX: 0000000000000001 [ 810.598231][T13381] RDX: 0000000000000001 RSI: 0000200000001a94 RDI: ffff888020f207d4 [ 810.606188][T13381] RBP: 000000000000d82c R08: ffff888020f207d4 R09: 1ffff110041e40fa [ 810.614160][T13381] R10: dffffc0000000000 R11: ffffed10041e40fb R12: 0000000000000000 [ 810.622117][T13381] R13: 0000000000000001 R14: ffff888020f207d4 R15: 0000200000001a94 [ 810.630084][T13381] _copy_from_user+0x7a/0xb0 [ 810.634667][T13381] snd_rawmidi_kernel_write1+0x3ab/0x650 [ 810.640288][T13381] snd_rawmidi_write+0x5ad/0xbd0 [ 810.645237][T13381] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 810.650718][T13381] ? __pfx_default_wake_function+0x10/0x10 [ 810.656515][T13381] ? __import_iovec+0x40e/0x7f0 [ 810.661358][T13381] ? bpf_lsm_file_permission+0x9/0x20 [ 810.666714][T13381] ? security_file_permission+0x75/0x290 [ 810.672326][T13381] ? rw_verify_area+0x258/0x650 [ 810.677182][T13381] vfs_writev+0x4a5/0x9a0 [ 810.681490][T13381] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 810.686932][T13381] ? __pfx_vfs_writev+0x10/0x10 [ 810.691771][T13381] ? __fget_files+0x2a/0x420 [ 810.696337][T13381] ? __fget_files+0x3a0/0x420 [ 810.700989][T13381] ? __fget_files+0x2a/0x420 [ 810.705555][T13381] do_writev+0x14d/0x2d0 [ 810.709777][T13381] ? __pfx_do_writev+0x10/0x10 [ 810.714518][T13381] ? do_syscall_64+0xba/0x210 [ 810.719179][T13381] do_syscall_64+0xf6/0x210 [ 810.723661][T13381] ? clear_bhb_loop+0x60/0xb0 [ 810.728329][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.734223][T13381] RIP: 0033:0x7f667158e969 [ 810.738637][T13381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 810.758222][T13381] RSP: 002b:00007f667248d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 810.766615][T13381] RAX: ffffffffffffffda RBX: 00007f66717b5fa0 RCX: 00007f667158e969 [ 810.774563][T13381] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 810.782513][T13381] RBP: 00007f6671610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 810.790460][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.798438][T13381] R13: 0000000000000000 R14: 00007f66717b5fa0 R15: 00007ffe28580d08 [ 810.806392][T13381] [ 810.809416][T13381] Modules linked in: [ 810.814018][T13381] ---[ end trace 0000000000000000 ]--- [ 810.819499][T13381] RIP: 0010:filemap_fault+0x1181/0x1200 [ 810.825030][T13381] Code: 38 c1 0f 8c 8e fc ff ff 4c 89 e7 e8 b9 64 28 00 e9 81 fc ff ff e8 cf 91 c8 ff 48 89 df 48 c7 c6 80 09 74 8b e8 50 a6 0d 00 90 <0f> 0b e8 b8 91 c8 ff 48 8b 3c 24 48 c7 c6 00 10 74 8b e8 38 a6 0d [ 810.844802][T13381] RSP: 0018:ffffc9000bc073e0 EFLAGS: 00010246 [ 810.851135][T13381] RAX: 362fdc82e5093200 RBX: ffffea000045d180 RCX: 362fdc82e5093200 [ 810.859261][T13381] RDX: 0000000000000000 RSI: ffffffff8d9226fd RDI: ffff888011a08000 [ 810.867248][T13381] RBP: ffffc9000bc07518 R08: 0000000000000003 R09: 0000000000000004 [ 810.875196][T13381] R10: dffffc0000000000 R11: fffffbfff1bba944 R12: dffffc0000000000 [ 810.883163][T13381] R13: 1ffffd400008ba31 R14: ffffea000045d198 R15: ffffea000045d188 [ 810.891129][T13381] FS: 00007f667248d6c0(0000) GS:ffff8881261fb000(0000) knlGS:0000000000000000 [ 810.900053][T13381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 810.906630][T13381] CR2: 0000200000001a94 CR3: 000000004545a000 CR4: 00000000003526f0 [ 810.914581][T13381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 810.922555][T13381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 810.930574][T13381] Kernel panic - not syncing: Fatal exception [ 810.936876][T13381] Kernel Offset: disabled [ 810.941189][T13381] Rebooting in 86400 seconds..