last executing test programs: 22m28.143262799s ago: executing program 1 (id=617): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xfffffffe, @mcast2, 0xb}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x500, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r5, &(0x7f00000007c0)="25d7fe75fa3496bb8e75411fe8ffffffffffffff000000000020ded4c9310457da979fa4388dd60154c2", 0x2a, 0xe044, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) socket(0x840000000002, 0x3, 0x1) 22m26.363913031s ago: executing program 1 (id=623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION2(0xffffffffffffffff, 0x40a0ae49, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r0, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 22m21.469776652s ago: executing program 1 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10122, 0x0) 22m19.608045941s ago: executing program 1 (id=634): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffcd1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) semget$private(0x0, 0x4, 0x0) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) 22m16.084101567s ago: executing program 1 (id=638): syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$search(0xa, r4, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0xffffff83}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 22m14.343470749s ago: executing program 1 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000007080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a0000000900010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d3000000000000014000100766513fbb96d84c2ef9700000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) 21m58.561559288s ago: executing program 32 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000007080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000000a0000000900010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d3000000000000014000100766513fbb96d84c2ef9700000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x0) 15m29.771548825s ago: executing program 4 (id=1432): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', 0x0, 0xc8030, 0x0) (fail_nth: 6) 15m28.611974389s ago: executing program 4 (id=1435): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000010000904040000000000080000000000", @ANYRES32=r2, @ANYBLOB="00000000000000003c001280110001006272696467655f736c6176650000000024000580050009000000000005000a000000000005001e"], 0x5c}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$9p_fd(0x0, &(0x7f00000004c0)='./bus\x00', 0x0, 0xc8030, 0x0) 15m27.480159049s ago: executing program 4 (id=1439): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x88f, 0x0, &(0x7f0000000000), &(0x7f0000000280)) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 15m24.411882759s ago: executing program 4 (id=1446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x43, 0x0, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x80}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x31cf}]}}]}, 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000004f40)=[@text16={0x10, &(0x7f0000000080)="3e0f38037b0bb857000f00d0ac0f300f32baf80c66b889e5d68f66efbafc0cb000ee8bb0e3070f350f01c965360f56290f08", 0x32}], 0x1, 0x56, &(0x7f0000000b00)=[@vmwrite={0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}], 0x1) sendmsg$NL80211_CMD_SET_REG(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf010000000008009a000200000008000100730000ed0500920008000000"], 0x2c}}, 0x4000080) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m20.862924772s ago: executing program 4 (id=1451): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000480)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x11, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ptrace$poke(0x4, r1, &(0x7f0000000040), 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000440)='oom_score_adj_update\x00', r0}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) 15m16.908689312s ago: executing program 4 (id=1454): r0 = socket$igmp6(0xa, 0x3, 0x2) fsetxattr$smack_xattr_label(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)={'#(]+@'}, 0x6, 0x1) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x80) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x13, 0x10, "347d5fb88cfa7aaf64c937e0b8876409b12ab56013d727d19a11efff2e8327a56904087cb0611fc22240f7cee4d0a1d42ce18b04ddff1f6f6efa493e35e90624", "ae680ade771ef140fd2c3ffd200050ffe5e64889682451d1b6a87a8cb965b982e642d3ce8ee249f739b5968647635ae82f62f1154dfbab9ed3aa8d63c968adb6", "c775dcd7c7edb41024b927ed5a01a7413fbf1434683c9e8feb4c40ed69f7d010", [0xd99, 0x4]}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) copy_file_range(r3, 0x0, r3, 0x0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0xf0f029}) syz_usb_connect(0x5, 0x46, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x6e, 0x96, 0x4e, 0x20, 0xf11, 0x2060, 0x9059, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x50, 0x9, 0x20, 0x4, [{{0x9, 0x4, 0xcf, 0x3, 0x3, 0x8a, 0x87, 0x84, 0x4, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0xbc, 0x4, [@generic={0x7, 0x5, "eba7c5b6c9"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x1, 0x2, 0xf}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x5, 0xff, 0x5}}]}}]}}]}}, 0x0) 15m1.687441002s ago: executing program 33 (id=1454): r0 = socket$igmp6(0xa, 0x3, 0x2) fsetxattr$smack_xattr_label(r0, &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)={'#(]+@'}, 0x6, 0x1) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x4, 0x80) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x13, 0x10, "347d5fb88cfa7aaf64c937e0b8876409b12ab56013d727d19a11efff2e8327a56904087cb0611fc22240f7cee4d0a1d42ce18b04ddff1f6f6efa493e35e90624", "ae680ade771ef140fd2c3ffd200050ffe5e64889682451d1b6a87a8cb965b982e642d3ce8ee249f739b5968647635ae82f62f1154dfbab9ed3aa8d63c968adb6", "c775dcd7c7edb41024b927ed5a01a7413fbf1434683c9e8feb4c40ed69f7d010", [0xd99, 0x4]}) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) copy_file_range(r3, 0x0, r3, 0x0, 0x0, 0x0) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0xf0f029}) syz_usb_connect(0x5, 0x46, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x6e, 0x96, 0x4e, 0x20, 0xf11, 0x2060, 0x9059, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x50, 0x9, 0x20, 0x4, [{{0x9, 0x4, 0xcf, 0x3, 0x3, 0x8a, 0x87, 0x84, 0x4, [], [{{0x9, 0x5, 0x7, 0x0, 0x20, 0x0, 0xbc, 0x4, [@generic={0x7, 0x5, "eba7c5b6c9"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x1, 0x2, 0xf}}, {{0x9, 0x5, 0xa, 0x3, 0x400, 0x5, 0xff, 0x5}}]}}]}}]}}, 0x0) 12.23210496s ago: executing program 5 (id=3751): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x599, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r3, 0x0, 0x1ba8847c99}, 0x38) 7.331342297s ago: executing program 2 (id=3762): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) mknod$loop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000040)={0x1, @raw_data="dfab4d85d47fab3f5852323481422e0f382a7fff4f2f6544e6018dbd8ab7448ced0cb6d971aa93e8b234fd2ceb6c160545bc47d95cb6f68a98ee9ea4686093a60d1e90430c08857fd0c428cdd40ea133631f9993733758d144b78ac24b59a54138ada8c18089c1250c7de9ef6ad3b2f7f28322211b5313b263f34c07a174f7d1d0f000f2bd2a60f9e4f18a82318f990d85778a2b77c73764d2d187c87800f0905ca84dbdd9002b572b0928a92da591fbaa566464e5cb6dbaf6a6945d91b66259944c62c5090ca50c"}) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 7.153542008s ago: executing program 6 (id=3764): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x24040841) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x2820920) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x3, 0xa, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x40002042, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) r3 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) wait4(r3, 0x0, 0x8, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 7.094478147s ago: executing program 2 (id=3765): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x63, 0x78, 0x2f, 0x10, 0x1395, 0x300, 0x1fc5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x2a, 0x10, 0x0, [{{0x9, 0x4, 0x50, 0x5, 0x1, 0x84, 0x77, 0x61, 0xf8, [], [{{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x24, 0x4, 0x3}}]}}, {{0x9, 0x4, 0xf3, 0x6, 0x0, 0x6a, 0x5d, 0xd9}}]}}]}}, 0x0) 6.796156528s ago: executing program 5 (id=3766): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000000c0)={0x1, 0x4000001, 0x24e, 0x20, 0x2f, &(0x7f0000000e40)}) 6.692970221s ago: executing program 0 (id=3768): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x0, 0x4d, 0x0, 0x1}, 0x28) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1, 0x200, &(0x7f0000000080)="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"}) 6.600279722s ago: executing program 5 (id=3769): pipe2$9p(&(0x7f0000001900), 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 6.528567225s ago: executing program 5 (id=3771): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1a34, 0xf705, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="40031600000016304ff643"], 0x0, 0x0, 0x0, 0x0}, 0x0) 6.370841701s ago: executing program 6 (id=3773): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04130902c8"], 0xc) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) 6.366376602s ago: executing program 2 (id=3774): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2087}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 6.255427843s ago: executing program 0 (id=3775): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000780)="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", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="03062fbd7000fedbdf25030000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="050002000000eac102c49187c959b3353649845bdb8800"], 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000300)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782c4a11d54d266bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c7f624020b79000200001c24", 0x51}], 0xaaaaaaaaaaaacad, 0x1, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x81, "42a8a45d8d000000000500000000000000000000c2bf330e00"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0x1, 0x5479, 0x103d, 0x200000000006, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.250646473s ago: executing program 2 (id=3776): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x39f) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r6, 0x439, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8110}, 0x8000) r8 = dup(r4) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x208}) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r9, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, "2634784b05261d387c9201200000000000000080000000000600", 0x0, 0xffffffff, 0x2005, 0xf6}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r9, 0x0, 0xd2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x100) 6.218424403s ago: executing program 6 (id=3777): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0x2d59, 0x2, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 6.065260712s ago: executing program 2 (id=3778): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req={0x1, 0x45, 0xe052}, 0x10) 5.875851439s ago: executing program 2 (id=3779): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) shutdown(r1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 5.858243228s ago: executing program 0 (id=3780): semop(0x0, &(0x7f00000000c0)=[{0x0, 0xc63e}, {0x1, 0x4, 0x1800}], 0x2) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) 5.458152298s ago: executing program 0 (id=3781): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYRESHEX, @ANYBLOB="010000000000000000", @ANYRESDEC=r5, @ANYBLOB="0c009900f400000017000000080026007f1700000800270001"], 0x40}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) r7 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r8, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{}, {{}, {0x80000000}}]}) syz_open_procfs(0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000500)={r9}) 4.319575311s ago: executing program 3 (id=3783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000180)={0x3, 0x98f904, 0x3}) 3.311668877s ago: executing program 3 (id=3784): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0702200c"], 0xa) 3.108310123s ago: executing program 3 (id=3785): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) 3.107830035s ago: executing program 0 (id=3786): mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 3.050442573s ago: executing program 6 (id=3787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) r3 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f0000000040)={0xa, @sliced={0x1, [0x4, 0x7, 0x7, 0xc, 0x6, 0x1, 0x4, 0x2, 0xc46d, 0x6, 0x200, 0x4, 0xe5, 0x80, 0xa104, 0x400, 0x6e, 0xea, 0x400, 0xd, 0x8, 0x7f, 0x3, 0x7ff, 0x0, 0x3ff, 0x77, 0x3, 0xfe34, 0x9b1a, 0x0, 0x4c4d, 0x7, 0x4000, 0x85, 0x5, 0x1, 0x3ff, 0x0, 0x5da4, 0x4, 0x7f, 0xffff, 0x2, 0x9, 0x8, 0x4, 0x81], 0x2}}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x120800000, 0x0, 0x0, 0x0, {0x36}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.023590139s ago: executing program 3 (id=3788): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0xf8) 2.923158839s ago: executing program 5 (id=3789): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000440)={0xa, 0x0, 0x3, @remote, 0x200, 0x1}, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_AUDIO(r5, 0x40345622, &(0x7f0000000040)={0x2, "984c323de8fed63723b821c9a59a4006f7fe408ee3314cad6c8ad393b58ba111", 0x2}) 1.971976386s ago: executing program 6 (id=3790): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x89, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000200000800040001000000", 0x24) 1.971543835s ago: executing program 3 (id=3791): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'ipvlan0\x00', {0x2, 0x0, @private}}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffff7f, 0x5b81, 0xc0, 0x2, 0x9, 0x9, 0x0, 0x0, 0x101}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r7 = dup(r6) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r7, {0xfffffffffffffffe}}, './file0\x00'}) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) ioctl$BLKRRPART(r7, 0x125f, 0x0) kexec_load(0x0, 0x2, &(0x7f00000002c0)=[{0x0, 0x0, 0x1000000, 0x10000}, {0x0, 0x0, 0x3e0000}], 0x0) 1.080393877s ago: executing program 0 (id=3792): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a0000000200"], 0x48) openat$rfkill(0xffffffffffffff9c, 0x0, 0x80100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000540)='.\x00', 0x2) 908.445516ms ago: executing program 5 (id=3793): r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000039c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 188.397µs ago: executing program 3 (id=3794): syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201010200000010ac0547024000010203010902240001010b180a0904000401030102ad092109000701220308090581031000080b097ab1e35ae18115ab530000000000000000c6023062cb771e510b03eeeef48a25eeadc7a1397878"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 6 (id=3795): r0 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r0, 0x0) kernel console output (not intermixed with test programs): 401.256224][T16710] genl_rcv_msg+0x60e/0x790 [ 1401.256251][T16710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1401.256270][T16710] ? ref_tracker_free+0x63a/0x7d0 [ 1401.256291][T16710] ? __pfx_ovs_flow_cmd_set+0x10/0x10 [ 1401.256313][T16710] ? __pfx_ref_tracker_free+0x10/0x10 [ 1401.256345][T16710] netlink_rcv_skb+0x205/0x470 [ 1401.256374][T16710] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1401.256396][T16710] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1401.256440][T16710] ? down_read+0x1ad/0x2e0 [ 1401.256467][T16710] genl_rcv+0x28/0x40 [ 1401.256485][T16710] netlink_unicast+0x75c/0x8e0 [ 1401.256520][T16710] netlink_sendmsg+0x805/0xb30 [ 1401.256557][T16710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1401.256593][T16710] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1401.256613][T16710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1401.256641][T16710] __sock_sendmsg+0x21c/0x270 [ 1401.256668][T16710] ____sys_sendmsg+0x505/0x830 [ 1401.256703][T16710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1401.256743][T16710] ? import_iovec+0x74/0xa0 [ 1401.256774][T16710] ___sys_sendmsg+0x21f/0x2a0 [ 1401.256806][T16710] ? __pfx____sys_sendmsg+0x10/0x10 [ 1401.256872][T16710] ? __fget_files+0x2a/0x420 [ 1401.256893][T16710] ? __fget_files+0x3a0/0x420 [ 1401.256926][T16710] __x64_sys_sendmsg+0x19b/0x260 [ 1401.256958][T16710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1401.257003][T16710] ? __pfx_ksys_write+0x10/0x10 [ 1401.257020][T16710] ? rcu_is_watching+0x15/0xb0 [ 1401.257046][T16710] ? do_syscall_64+0xbe/0x3b0 [ 1401.257072][T16710] do_syscall_64+0xfa/0x3b0 [ 1401.257093][T16710] ? lockdep_hardirqs_on+0x9c/0x150 [ 1401.257113][T16710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.257132][T16710] ? clear_bhb_loop+0x60/0xb0 [ 1401.257156][T16710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.257176][T16710] RIP: 0033:0x7fd1d358ebe9 [ 1401.257193][T16710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.257211][T16710] RSP: 002b:00007fd1d4380038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1401.257231][T16710] RAX: ffffffffffffffda RBX: 00007fd1d37b6180 RCX: 00007fd1d358ebe9 [ 1401.257246][T16710] RDX: 0000000000044000 RSI: 0000200000000080 RDI: 0000000000000005 [ 1401.257259][T16710] RBP: 00007fd1d4380090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.257271][T16710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.257283][T16710] R13: 00007fd1d37b6218 R14: 00007fd1d37b6180 R15: 00007ffc1c82a1b8 [ 1401.257313][T16710] [ 1402.539454][T16721] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2656'. [ 1403.796683][T16735] No control pipe specified [ 1404.209178][T16743] netlink: 'syz.2.2663': attribute type 3 has an invalid length. [ 1405.681837][T16760] FAULT_INJECTION: forcing a failure. [ 1405.681837][T16760] name failslab, interval 1, probability 0, space 0, times 0 [ 1405.694608][T16760] CPU: 1 UID: 0 PID: 16760 Comm: syz.6.2666 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1405.694637][T16760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1405.694651][T16760] Call Trace: [ 1405.694661][T16760] [ 1405.694671][T16760] dump_stack_lvl+0x189/0x250 [ 1405.694702][T16760] ? __pfx____ratelimit+0x10/0x10 [ 1405.694727][T16760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1405.694752][T16760] ? __pfx__printk+0x10/0x10 [ 1405.694787][T16760] ? __pfx___might_resched+0x10/0x10 [ 1405.694811][T16760] ? fs_reclaim_acquire+0x7d/0x100 [ 1405.694844][T16760] should_fail_ex+0x414/0x560 [ 1405.694873][T16760] should_failslab+0xa8/0x100 [ 1405.694900][T16760] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1405.694923][T16760] ? __alloc_skb+0x112/0x2d0 [ 1405.694958][T16760] __alloc_skb+0x112/0x2d0 [ 1405.694994][T16760] netlink_ack+0x146/0xa50 [ 1405.695021][T16760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1405.695043][T16760] ? ref_tracker_free+0x63a/0x7d0 [ 1405.695082][T16760] ? __pfx_ref_tracker_free+0x10/0x10 [ 1405.695117][T16760] netlink_rcv_skb+0x28c/0x470 [ 1405.695147][T16760] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1405.695170][T16760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1405.695217][T16760] ? down_read+0x1ad/0x2e0 [ 1405.695244][T16760] genl_rcv+0x28/0x40 [ 1405.695264][T16760] netlink_unicast+0x75c/0x8e0 [ 1405.695307][T16760] netlink_sendmsg+0x805/0xb30 [ 1405.695365][T16760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1405.695406][T16760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1405.695432][T16760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1405.695465][T16760] __sock_sendmsg+0x21c/0x270 [ 1405.695494][T16760] ____sys_sendmsg+0x505/0x830 [ 1405.695533][T16760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1405.695577][T16760] ? import_iovec+0x74/0xa0 [ 1405.695623][T16760] ___sys_sendmsg+0x21f/0x2a0 [ 1405.695666][T16760] ? __pfx____sys_sendmsg+0x10/0x10 [ 1405.695731][T16760] ? __fget_files+0x2a/0x420 [ 1405.695752][T16760] ? __fget_files+0x3a0/0x420 [ 1405.695785][T16760] __x64_sys_sendmsg+0x19b/0x260 [ 1405.695817][T16760] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1405.695857][T16760] ? __pfx_ksys_write+0x10/0x10 [ 1405.695872][T16760] ? rcu_is_watching+0x15/0xb0 [ 1405.695900][T16760] ? do_syscall_64+0xbe/0x3b0 [ 1405.695925][T16760] do_syscall_64+0xfa/0x3b0 [ 1405.695945][T16760] ? lockdep_hardirqs_on+0x9c/0x150 [ 1405.695965][T16760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.695984][T16760] ? clear_bhb_loop+0x60/0xb0 [ 1405.696008][T16760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.696027][T16760] RIP: 0033:0x7f9ded58ebe9 [ 1405.696044][T16760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1405.696062][T16760] RSP: 002b:00007f9dee3b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1405.696082][T16760] RAX: ffffffffffffffda RBX: 00007f9ded7b6180 RCX: 00007f9ded58ebe9 [ 1405.696097][T16760] RDX: 0000000000044000 RSI: 0000200000000080 RDI: 0000000000000005 [ 1405.696109][T16760] RBP: 00007f9dee3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1405.696122][T16760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1405.696133][T16760] R13: 00007f9ded7b6218 R14: 00007f9ded7b6180 R15: 00007ffc9c331198 [ 1405.696164][T16760] [ 1406.779508][T16769] fuse: Bad value for 'fd' [ 1406.799627][T16769] FAULT_INJECTION: forcing a failure. [ 1406.799627][T16769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1406.812810][T16769] CPU: 1 UID: 0 PID: 16769 Comm: syz.6.2668 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1406.812835][T16769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1406.812847][T16769] Call Trace: [ 1406.812857][T16769] [ 1406.812865][T16769] dump_stack_lvl+0x189/0x250 [ 1406.812891][T16769] ? __pfx____ratelimit+0x10/0x10 [ 1406.812913][T16769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1406.812936][T16769] ? __pfx__printk+0x10/0x10 [ 1406.812964][T16769] ? __might_fault+0xb0/0x130 [ 1406.812992][T16769] should_fail_ex+0x414/0x560 [ 1406.813016][T16769] _copy_from_user+0x2d/0xb0 [ 1406.813045][T16769] sock_do_ioctl+0x182/0x300 [ 1406.813070][T16769] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1406.813096][T16769] ? preempt_schedule_irq+0xde/0x150 [ 1406.813117][T16769] ? preempt_schedule_notrace+0xf0/0x110 [ 1406.813135][T16769] ? smack_file_ioctl+0x24a/0x340 [ 1406.813160][T16769] sock_ioctl+0x576/0x790 [ 1406.813183][T16769] ? __pfx_sock_ioctl+0x10/0x10 [ 1406.813211][T16769] ? __se_sys_ioctl+0x90/0x170 [ 1406.813242][T16769] ? __pfx_sock_ioctl+0x10/0x10 [ 1406.813263][T16769] __se_sys_ioctl+0xfc/0x170 [ 1406.813294][T16769] do_syscall_64+0xfa/0x3b0 [ 1406.813317][T16769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.813336][T16769] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1406.813354][T16769] ? clear_bhb_loop+0x60/0xb0 [ 1406.813378][T16769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1406.813397][T16769] RIP: 0033:0x7f9ded58ebe9 [ 1406.813414][T16769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1406.813431][T16769] RSP: 002b:00007f9dee3b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1406.813457][T16769] RAX: ffffffffffffffda RBX: 00007f9ded7b6180 RCX: 00007f9ded58ebe9 [ 1406.813472][T16769] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000008 [ 1406.813485][T16769] RBP: 00007f9dee3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1406.813498][T16769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1406.813509][T16769] R13: 00007f9ded7b6218 R14: 00007f9ded7b6180 R15: 00007ffc9c331198 [ 1406.813539][T16769] [ 1407.028510][T13469] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1407.206292][T13469] usb 6-1: Using ep0 maxpacket: 8 [ 1407.216777][T13469] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1407.235282][T13469] usb 6-1: config 179 has no interface number 0 [ 1407.242357][T13469] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1407.263974][T13469] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1407.285898][T13469] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1407.356374][ T9464] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1407.416725][T13469] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1407.439434][T13469] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1407.452966][T13469] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1407.461238][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 1407.471103][T16765] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1407.506629][ T9464] usb 1-1: Using ep0 maxpacket: 16 [ 1407.523144][ T9464] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1407.550512][ T9464] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1407.594734][ T9464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1407.626242][ T9464] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1407.668596][ T9464] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1407.720218][T12170] usb 6-1: USB disconnect, device number 24 [ 1408.369807][ T9464] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1408.393812][ T9464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.405432][ T9464] usb 1-1: Product: syz [ 1408.413866][ T9464] usb 1-1: Manufacturer: syz [ 1408.441351][ T9464] usb 1-1: SerialNumber: syz [ 1408.487992][ T9464] usb 1-1: config 0 descriptor?? [ 1408.532599][ T9464] xbox_remote_probe: endpoint_in message size==0? [ 1408.768408][ T9464] usb 1-1: USB disconnect, device number 41 [ 1408.888408][T16793] No control pipe specified [ 1410.962950][T16796] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2673'. [ 1411.328766][ T9464] usb 1-1: new full-speed USB device number 42 using dummy_hcd [ 1411.365236][T16811] netlink: 'syz.5.2680': attribute type 3 has an invalid length. [ 1411.540263][ T9464] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1411.584876][ T9464] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1411.645950][ T9464] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1411.692562][ T9464] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.748917][ T9464] usb 1-1: Product: syz [ 1411.753142][ T9464] usb 1-1: Manufacturer: syz [ 1412.466068][ T9464] usb 1-1: SerialNumber: syz [ 1412.849307][ T9464] usb 1-1: 0:2 : does not exist [ 1412.873552][ T9464] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1412.952031][T16817] fuse: Bad value for 'fd' [ 1412.970569][T16817] FAULT_INJECTION: forcing a failure. [ 1412.970569][T16817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.984583][T16817] CPU: 1 UID: 0 PID: 16817 Comm: syz.6.2682 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1412.984611][T16817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1412.984626][T16817] Call Trace: [ 1412.984635][T16817] [ 1412.984645][T16817] dump_stack_lvl+0x189/0x250 [ 1412.984675][T16817] ? __pfx____ratelimit+0x10/0x10 [ 1412.984699][T16817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1412.984724][T16817] ? __pfx__printk+0x10/0x10 [ 1412.984753][T16817] ? __might_fault+0xb0/0x130 [ 1412.984788][T16817] should_fail_ex+0x414/0x560 [ 1412.984817][T16817] _copy_from_user+0x2d/0xb0 [ 1412.984849][T16817] dev_ethtool+0xd0/0x1990 [ 1412.984868][T16817] ? rcu_is_watching+0x15/0xb0 [ 1412.984903][T16817] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 1412.984934][T16817] ? irqentry_exit+0x74/0x90 [ 1412.984957][T16817] ? lockdep_hardirqs_on+0x9c/0x150 [ 1412.984982][T16817] ? __pfx_dev_ethtool+0x10/0x10 [ 1412.985019][T16817] ? __rcu_read_unlock+0x84/0xe0 [ 1412.985050][T16817] ? dev_load+0x21/0x1f0 [ 1412.985080][T16817] dev_ioctl+0x392/0x1150 [ 1412.985112][T16817] sock_do_ioctl+0x22c/0x300 [ 1412.985140][T16817] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1412.985169][T16817] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1412.985189][T16817] ? __asan_memset+0x22/0x50 [ 1412.985231][T16817] sock_ioctl+0x576/0x790 [ 1412.985257][T16817] ? __pfx_sock_ioctl+0x10/0x10 [ 1412.985283][T16817] ? security_file_ioctl+0x107/0x2d0 [ 1412.985311][T16817] ? __x86_indirect_its_thunk_r15+0x80/0x80 [ 1412.985345][T16817] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1412.985370][T16817] ? __pfx_sock_ioctl+0x10/0x10 [ 1412.985393][T16817] __se_sys_ioctl+0xfc/0x170 [ 1412.985429][T16817] do_syscall_64+0xfa/0x3b0 [ 1412.985455][T16817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.985477][T16817] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1412.985498][T16817] ? clear_bhb_loop+0x60/0xb0 [ 1412.985525][T16817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.985547][T16817] RIP: 0033:0x7f9ded58ebe9 [ 1412.985566][T16817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1412.985587][T16817] RSP: 002b:00007f9dee3b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1412.985611][T16817] RAX: ffffffffffffffda RBX: 00007f9ded7b6180 RCX: 00007f9ded58ebe9 [ 1412.985628][T16817] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000008 [ 1412.985642][T16817] RBP: 00007f9dee3b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.985670][T16817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.985683][T16817] R13: 00007f9ded7b6218 R14: 00007f9ded7b6180 R15: 00007ffc9c331198 [ 1412.985715][T16817] [ 1413.245418][ C1] vkms_vblank_simulate: vblank timer overrun [ 1413.386239][ T9464] usb 1-1: USB disconnect, device number 42 [ 1414.224065][T16828] loop2: detected capacity change from 0 to 7 [ 1414.372046][T16828] loop2: [ 1414.376461][T16828] loop2: partition table partially beyond EOD, truncated [ 1418.016309][T16870] loop2: detected capacity change from 0 to 7 [ 1418.018392][T16865] overlayfs: failed to resolve './file0': -2 [ 1418.040552][T16862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1418.050449][T16870] loop2: [ 1418.053529][T16870] loop2: partition table partially beyond EOD, truncated [ 1418.402375][T13469] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1418.452816][T16878] openvswitch: netlink: Message has 16 unknown bytes. [ 1418.582676][T13469] usb 4-1: Using ep0 maxpacket: 32 [ 1418.595847][T13469] usb 4-1: config 0 has an invalid interface number: 183 but max is 0 [ 1418.605517][T13469] usb 4-1: config 0 has no interface number 0 [ 1418.612848][T13469] usb 4-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1419.195805][T13469] usb 4-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1419.277196][T13469] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.285986][T13469] usb 4-1: Product: syz [ 1419.290291][T13469] usb 4-1: Manufacturer: syz [ 1419.299920][T13469] usb 4-1: SerialNumber: syz [ 1419.483283][T13469] usb 4-1: config 0 descriptor?? [ 1419.572877][T16865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1420.749778][T16865] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1420.776415][T13469] net1080 4-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, 06:07:b0:8b:8c:f2 [ 1421.284122][T12170] usb 4-1: USB disconnect, device number 54 [ 1421.999923][T12170] net1080 4-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 1422.210917][T16901] erspan0: entered promiscuous mode [ 1422.256777][T16906] loop2: detected capacity change from 0 to 7 [ 1422.295238][T16901] erspan0: left promiscuous mode [ 1422.340998][T16906] loop2: [ 1422.344290][T16906] loop2: partition table partially beyond EOD, truncated [ 1422.712323][T16918] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1422.743827][ T43] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1424.723964][T16928] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2714'. [ 1425.041062][ T43] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1425.065359][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.074160][ T43] usb 3-1: Product: syz [ 1425.078663][ T43] usb 3-1: Manufacturer: syz [ 1425.083295][ T43] usb 3-1: SerialNumber: syz [ 1425.106248][ T43] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1426.392899][ T43] usb 3-1: USB disconnect, device number 41 [ 1426.399582][T13469] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 1426.531839][ T43] usb 3-1: ath9k_htc: USB layer deinitialized [ 1426.548203][T16940] loop6: detected capacity change from 0 to 7 [ 1426.559285][T16940] Dev loop6: unable to read RDB block 7 [ 1426.582861][T16940] loop6: unable to read partition table [ 1426.676553][T16940] loop6: partition table beyond EOD, truncated [ 1426.682790][T16940] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1427.234708][T14384] Bluetooth: hci3: unexpected cc 0x203e length: 2 > 1 [ 1427.243033][T14384] Bluetooth: hci3: unexpected event for opcode 0x203e [ 1427.269336][T16943] 9pnet_fd: Insufficient options for proto=fd [ 1427.297009][T16948] loop2: detected capacity change from 0 to 7 [ 1427.344454][T16948] loop2: [ 1427.347950][T16948] loop2: partition table partially beyond EOD, truncated [ 1427.547526][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2723'. [ 1428.887800][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1429.152797][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.104932][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2734'. [ 1431.215109][T17001] loop2: detected capacity change from 0 to 7 [ 1431.284337][T17001] loop2: [ 1431.287357][T17001] loop2: partition table partially beyond EOD, truncated [ 1431.309592][T17003] 9pnet_fd: Insufficient options for proto=fd [ 1431.321060][T14384] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1431.329678][T14384] Bluetooth: hci3: Injecting HCI hardware error event [ 1431.338791][T14384] Bluetooth: hci3: hardware error 0x00 [ 1431.350815][T17003] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1432.459013][ T43] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1433.399510][T14384] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1435.209495][T17034] bond2 (unregistering): Released all slaves [ 1435.919064][T17053] loop2: detected capacity change from 0 to 7 [ 1435.970708][T17053] loop2: [ 1435.987754][T17053] loop2: partition table partially beyond EOD, truncated [ 1436.167663][T17059] input: syz0 as /devices/virtual/input/input17 [ 1436.203457][T17061] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2754'. [ 1436.397853][T17061] netlink: 'syz.2.2754': attribute type 4 has an invalid length. [ 1436.418986][T17061] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2754'. [ 1436.561209][T12170] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1436.931668][T17084] lo speed is unknown, defaulting to 1000 [ 1437.838212][T12170] usb 3-1: config 2 interface 0 altsetting 185 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1437.849797][T12170] usb 3-1: config 2 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1437.860311][T12170] usb 3-1: config 2 interface 0 has no altsetting 0 [ 1437.867017][T12170] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1437.876916][T12170] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.411978][ T9464] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1438.589324][T12170] apple 0003:05AC:027A.0010: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 1438.762044][ T9464] usb 4-1: Using ep0 maxpacket: 16 [ 1438.797942][ T9464] usb 4-1: config 0 has an invalid interface number: 194 but max is 0 [ 1438.836881][ T9464] usb 4-1: config 0 has no interface number 0 [ 1438.847053][T12170] usb 3-1: USB disconnect, device number 42 [ 1438.900192][ T9464] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25 [ 1438.968910][ T9464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.990637][ T9464] usb 4-1: Product: syz [ 1439.001835][ T9464] usb 4-1: Manufacturer: syz [ 1439.017014][ T9464] usb 4-1: SerialNumber: syz [ 1439.053979][ T9464] usb 4-1: config 0 descriptor?? [ 1440.123533][ T9464] cypress_cy7c63 4-1:0.194: Cypress CY7C63xxx device now attached [ 1441.041112][T17116] ip_vti0: entered promiscuous mode [ 1441.064220][T17116] netlink: 'syz.0.2770': attribute type 10 has an invalid length. [ 1441.099591][T17116] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.107739][T17116] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.342345][T13469] usb 4-1: USB disconnect, device number 55 [ 1441.360423][T17119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2770'. [ 1441.364149][T13469] cypress_cy7c63 4-1:0.194: Cypress CY7C63xxx device now disconnected [ 1441.408574][T17116] bridge0: port 2(bridge_slave_1) entered blocking state [ 1441.415864][T17116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1441.423491][T17116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1441.430602][T17116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1441.803073][T17116] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1441.993968][T17119] bridge_slave_1: left allmulticast mode [ 1441.999689][T17119] bridge_slave_1: left promiscuous mode [ 1442.008401][T17119] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.243902][T10822] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1442.728210][T17119] bridge_slave_0: left allmulticast mode [ 1442.760463][T17119] bridge_slave_0: left promiscuous mode [ 1442.824973][T17119] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.864129][T10822] usb 4-1: Using ep0 maxpacket: 8 [ 1442.902267][T10822] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1442.994183][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 1443.015901][T10822] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1443.044366][T10822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.053013][T10822] usb 4-1: Product: syz [ 1443.057488][T10822] usb 4-1: Manufacturer: syz [ 1443.062191][T10822] usb 4-1: SerialNumber: syz [ 1443.093829][T10822] usb 4-1: config 0 descriptor?? [ 1443.324966][T10822] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1443.398415][T10822] usb 4-1: setting power ON [ 1443.435069][T17119] bond0: (slave bridge0): Releasing backup interface [ 1443.479358][T10822] dvb-usb: bulk message failed: -22 (2/0) [ 1443.712777][T10822] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1443.749096][T10822] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1443.764296][T10822] usb 4-1: media controller created [ 1443.791453][T10822] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1443.875174][T10822] usb 4-1: selecting invalid altsetting 6 [ 1443.881766][T10822] usb 4-1: digital interface selection failed (-22) [ 1443.905019][T10822] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1443.922573][T10822] usb 4-1: setting power OFF [ 1443.929505][T10822] dvb-usb: bulk message failed: -22 (2/0) [ 1443.947684][T10822] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1443.968033][T10822] (NULL device *): no alternate interface [ 1443.997420][T17142] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2777'. [ 1444.007365][T10822] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1444.074529][T17144] loop6: detected capacity change from 0 to 7 [ 1444.081809][T17144] Dev loop6: unable to read RDB block 7 [ 1444.091336][T17144] loop6: unable to read partition table [ 1444.099065][T17144] loop6: partition table beyond EOD, truncated [ 1444.110186][T17144] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1444.228180][T10822] usb 4-1: USB disconnect, device number 56 [ 1445.290566][T17159] netdevsim netdevsim6: Firmware load for '..' refused, path contains '..' component [ 1447.708517][T17175] kthread_run failed with err -4 [ 1447.721766][T14126] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1447.890458][T14126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1448.056968][T14126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1448.067015][T14126] usb 3-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 1448.076152][T14126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.147991][T14126] usb 3-1: config 0 descriptor?? [ 1449.788816][T14126] usbhid 3-1:0.0: can't add hid device: -71 [ 1449.796217][T14126] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1449.832210][T14126] usb 3-1: USB disconnect, device number 43 [ 1455.960164][T17266] kthread_run failed with err -4 [ 1457.143066][T17271] loop6: detected capacity change from 0 to 7 [ 1457.355204][T17271] Dev loop6: unable to read RDB block 7 [ 1457.375313][T17278] kthread_run failed with err -4 [ 1457.423711][T17271] loop6: unable to read partition table [ 1457.517714][T17271] loop6: partition table beyond EOD, truncated [ 1457.542421][T17271] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1457.660425][T17291] loop1: detected capacity change from 0 to 53 [ 1458.506377][T17287] delete_channel: no stack [ 1459.160749][T17310] loop2: detected capacity change from 0 to 7 [ 1459.177215][T17310] loop2: [ 1459.180327][T17310] loop2: partition table partially beyond EOD, truncated [ 1459.226923][T17301] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1459.237389][T17301] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1459.248036][T17301] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1459.258779][T17301] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1459.272054][T17301] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1459.282534][T17301] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1459.293297][T17301] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1459.303769][T17301] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1459.314316][T17301] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1459.325876][T17301] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 1459.888397][T17325] Invalid source name [ 1459.892517][T17325] UBIFS error (pid: 17325): cannot open "./file0", error -22 [ 1459.915666][T17325] binder: 17316:17325 ioctl 40046210 0 returned -14 [ 1459.934707][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2823'. [ 1460.044770][T14384] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 1460.470836][T17325] team0: Port device team_slave_1 removed [ 1461.733745][T10822] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1461.816472][T17338] kthread_run failed with err -4 [ 1461.934681][T10822] usb 4-1: Using ep0 maxpacket: 16 [ 1461.973972][T10822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1461.980677][T10822] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 1462.126802][T10822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.307128][T10822] usb 4-1: config 0 descriptor?? [ 1463.099665][T10822] hid (null): global environment stack underflow [ 1463.751248][T10822] megaworld 0003:07B5:0312.0011: global environment stack underflow [ 1463.769231][T10822] megaworld 0003:07B5:0312.0011: item 0 0 1 11 parsing failed [ 1463.781317][T10822] megaworld 0003:07B5:0312.0011: parse failed [ 1463.793425][T10822] megaworld 0003:07B5:0312.0011: probe with driver megaworld failed with error -22 [ 1464.008462][T17359] loop2: detected capacity change from 0 to 7 [ 1464.019750][T17359] loop2: [ 1464.022835][T17359] loop2: partition table partially beyond EOD, truncated [ 1464.038285][T17343] netlink: 'syz.0.2828': attribute type 28 has an invalid length. [ 1464.283264][T17374] netlink: 'syz.5.2836': attribute type 3 has an invalid length. [ 1464.466860][T10822] usb 4-1: USB disconnect, device number 57 [ 1464.898814][T17379] syzkaller0: entered promiscuous mode [ 1464.904424][T17379] syzkaller0: entered allmulticast mode [ 1465.116829][T17377] fuse: Unknown parameter 'r\8 ode' [ 1465.356342][ T43] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1466.010858][ T43] usb 6-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67 [ 1466.063420][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.095306][ T43] usb 6-1: Product: syz [ 1466.441848][ T43] usb 6-1: Manufacturer: syz [ 1466.496181][ T43] usb 6-1: SerialNumber: syz [ 1466.736661][ T43] usb 6-1: config 0 descriptor?? [ 1466.745321][ T43] pwc: Philips PCA645VC USB webcam detected. [ 1468.200839][ T43] pwc: send_video_command error -71 [ 1468.207253][ T43] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1468.214976][ T43] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1468.244853][ T43] usb 6-1: USB disconnect, device number 25 [ 1468.956158][T17421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2846'. [ 1468.985715][T17421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2846'. [ 1471.502628][T12170] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1471.589910][ T9464] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1471.684051][T12170] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 192, changing to 11 [ 1471.728566][ T9464] usb 3-1: device descriptor read/64, error -71 [ 1471.737002][T12170] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1471.746823][T12170] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1471.755294][T12170] usb 7-1: Manufacturer: syz [ 1471.766791][T12170] usb 7-1: SerialNumber: syz [ 1471.818670][T10822] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1471.969819][T10822] usb 6-1: device descriptor read/64, error -71 [ 1472.009195][ T9464] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1472.210697][ T9464] usb 3-1: device descriptor read/64, error -71 [ 1472.249100][T10822] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1472.392944][ T9464] usb usb3-port1: attempt power cycle [ 1472.440044][T10822] usb 6-1: device descriptor read/64, error -71 [ 1472.574327][T10822] usb usb6-port1: attempt power cycle [ 1472.877521][T17469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2862'. [ 1472.971869][ T9464] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1473.030655][T10822] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1473.045739][ T9464] usb 3-1: device descriptor read/8, error -71 [ 1473.091568][T10822] usb 6-1: device descriptor read/8, error -71 [ 1473.344251][ T9464] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1473.371168][T10822] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1473.420741][T10822] usb 6-1: device descriptor read/8, error -71 [ 1473.423759][ T9464] usb 3-1: device descriptor read/8, error -71 [ 1473.565999][T10822] usb usb6-port1: unable to enumerate USB device [ 1473.586030][ T9464] usb usb3-port1: unable to enumerate USB device [ 1473.859619][T10822] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1474.047599][T10822] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 1474.056894][T10822] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 1474.067018][T10822] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.079162][T10822] usb 4-1: config 8 has no interface number 0 [ 1474.085412][T10822] usb 4-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 1474.096573][T10822] usb 4-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1474.119441][T10822] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1474.128888][T10822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.137258][T10822] usb 4-1: Product: syz [ 1474.143149][T10822] usb 4-1: Manufacturer: syz [ 1474.148167][T10822] usb 4-1: SerialNumber: syz [ 1474.487100][T10822] usb 4-1: USB disconnect, device number 58 [ 1474.624441][T12170] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 1474.646875][T12170] usb 7-1: USB disconnect, device number 20 [ 1475.352888][T12170] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1475.675102][T12170] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1475.743343][T12170] usb 7-1: New USB device found, idVendor=06a3, idProduct=0cd7, bcdDevice= 0.00 [ 1475.780319][T12170] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.829786][T12170] usb 7-1: config 0 descriptor?? [ 1476.143985][T17505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2876'. [ 1476.572063][T12170] saitek 0003:06A3:0CD7.0012: item fetching failed at offset 0/3 [ 1476.659724][T17485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.671693][T12170] saitek 0003:06A3:0CD7.0012: parse failed [ 1476.677638][T12170] saitek 0003:06A3:0CD7.0012: probe with driver saitek failed with error -22 [ 1476.682239][T17485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.747993][T12170] usb 7-1: USB disconnect, device number 21 [ 1477.000917][T17521] 9pnet_fd: Insufficient options for proto=fd [ 1477.040949][T17515] nvme_fabrics: missing parameter 'transport=%s' [ 1477.182721][T17515] nvme_fabrics: missing parameter 'nqn=%s' [ 1477.951816][T13469] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1478.881339][T13469] usb 6-1: config 0 has an invalid interface number: 160 but max is 0 [ 1478.902041][T13469] usb 6-1: config 0 has no interface number 0 [ 1478.912132][T13469] usb 6-1: config 0 interface 160 altsetting 64 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1478.932284][T13469] usb 6-1: config 0 interface 160 has no altsetting 0 [ 1478.958768][T13469] usb 6-1: New USB device found, idVendor=3612, idProduct=d032, bcdDevice=56.e4 [ 1478.987128][T13469] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.021068][T13469] usb 6-1: Product: syz [ 1479.041667][T13469] usb 6-1: Manufacturer: syz [ 1479.103052][T13469] usb 6-1: SerialNumber: syz [ 1479.284630][T13469] usb 6-1: config 0 descriptor?? [ 1479.404728][T13469] usb-storage 6-1:0.160: USB Mass Storage device detected [ 1479.543070][ T9464] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 1479.618323][T13469] usb 6-1: USB disconnect, device number 30 [ 1479.634087][T17546] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2888'. [ 1479.643691][T17545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2889'. [ 1479.759426][ T9464] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 1479.767964][ T9464] usb 4-1: config 0 has no interface number 0 [ 1479.782136][ T9464] usb 4-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2 [ 1479.791404][ T9464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.813713][ T9464] usb 4-1: config 0 descriptor?? [ 1479.827477][ T9464] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 1479.836929][ T9464] usb 4-1: setting power ON [ 1479.841487][ T9464] dvb-usb: bulk message failed: -22 (2/0) [ 1479.904159][T17552] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2890'. [ 1479.982620][ T9464] dvb-usb: bulk message failed: -22 (1/0) [ 1480.142359][ T9464] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1480.541483][ T9464] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19) [ 1480.583099][ T9464] dvb_usb_cxusb 4-1:0.30: probe with driver dvb_usb_cxusb failed with error -22 [ 1480.612487][ T9464] usb 4-1: USB disconnect, device number 59 [ 1480.667008][T17565] loop6: detected capacity change from 0 to 7 [ 1480.676857][T17565] Dev loop6: unable to read RDB block 7 [ 1480.682522][T17565] loop6: unable to read partition table [ 1480.688717][T17565] loop6: partition table beyond EOD, truncated [ 1480.701932][T17565] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1480.833647][ T43] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1481.296078][ T43] usb 3-1: config 3 has an invalid interface number: 216 but max is 0 [ 1481.358548][ T43] usb 3-1: config 3 has no interface number 0 [ 1481.374906][ T43] usb 3-1: config 3 interface 216 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1481.403309][ T43] usb 3-1: config 3 interface 216 has no altsetting 0 [ 1481.422407][ T43] usb 3-1: New USB device found, idVendor=2c24, idProduct=ab13, bcdDevice=ac.4a [ 1481.438755][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.454708][ T43] usb 3-1: Product: syz [ 1481.463320][ T43] usb 3-1: Manufacturer: syz [ 1481.473146][ T43] usb 3-1: SerialNumber: syz [ 1481.492908][T17561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1481.858240][ T43] usb 3-1: bad CDC descriptors [ 1482.498072][T17584] syzkaller0: entered promiscuous mode [ 1482.503603][T17584] syzkaller0: entered allmulticast mode [ 1482.839332][ T43] usb 3-1: USB disconnect, device number 48 [ 1484.539020][T17613] loop2: detected capacity change from 0 to 7 [ 1484.746991][T17613] loop2: [ 1484.887880][T17613] loop2: partition table partially beyond EOD, truncated [ 1485.446708][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 1486.763772][T17646] misc userio: Invalid payload size [ 1486.956310][ T43] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1487.129178][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 1487.341378][ T43] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1487.353910][ T43] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 1487.363964][ T43] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 1487.371797][T17659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2923'. [ 1487.372649][ T43] usb 3-1: Product: syz [ 1487.395827][ T43] usb 3-1: Manufacturer: syz [ 1487.410676][ T43] usb 3-1: SerialNumber: syz [ 1487.451574][ T43] usb 3-1: config 0 descriptor?? [ 1487.704585][ T43] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1487.720638][ T43] gspca_sunplus: reg_w_riv err -71 [ 1487.725887][ T43] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1487.758910][ T43] usb 3-1: USB disconnect, device number 49 [ 1487.796585][ T9464] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 1488.866010][T17690] syzkaller0: entered promiscuous mode [ 1488.871622][T17690] syzkaller0: entered allmulticast mode [ 1488.999634][ T9464] usb 6-1: not running at top speed; connect to a high speed hub [ 1489.013162][ T9464] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.035715][ T9464] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1489.064988][ T9464] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1489.109790][ T9464] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1489.125241][ T9464] usb 6-1: New USB device strings: Mfr=1, Product=9, SerialNumber=3 [ 1489.147175][ T9464] usb 6-1: Product: syz [ 1489.152331][ T9464] usb 6-1: Manufacturer: syz [ 1489.170583][ T9464] usb 6-1: SerialNumber: syz [ 1489.195345][T17695] misc userio: Invalid payload size [ 1489.432946][ T9464] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found [ 1489.465997][ T9464] cdc_ncm 6-1:1.0: bind() failure [ 1489.493276][ T9464] usb 6-1: USB disconnect, device number 31 [ 1489.657767][T17707] netlink: 'syz.5.2936': attribute type 1 has an invalid length. [ 1489.665598][T17707] netlink: 'syz.5.2936': attribute type 10 has an invalid length. [ 1489.673491][T17707] netlink: 236 bytes leftover after parsing attributes in process `syz.5.2936'. [ 1490.368264][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.387350][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.456945][T17746] netlink: 'syz.3.2947': attribute type 3 has an invalid length. [ 1493.497018][T17746] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2947'. [ 1494.549975][ T9464] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1494.703009][ T9464] usb 4-1: too many configurations: 151, using maximum allowed: 8 [ 1494.734465][ T9464] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1494.777923][ T9464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1494.838007][ T9464] usb 4-1: Product: syz [ 1494.855071][ T9464] usb 4-1: Manufacturer: syz [ 1494.872874][ T9464] usb 4-1: SerialNumber: syz [ 1494.895590][ T9464] usb 4-1: config 0 descriptor?? [ 1494.912338][ T9464] ims_pcu 4-1:0.0: Zero length descriptor [ 1494.919576][ T9464] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 1495.117001][T10822] usb 4-1: USB disconnect, device number 60 [ 1495.129265][ T5911] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1495.364906][ T5911] usb 7-1: Using ep0 maxpacket: 8 [ 1495.403910][ T5911] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 1495.438648][ T5911] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1495.468576][ T5911] usb 7-1: config 0 has no interface number 0 [ 1495.476963][ T5911] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1495.570466][ T5911] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1496.015840][T17776] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2956'. [ 1496.025348][ T5911] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1496.039975][T17774] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 1496.192615][ T5911] usb 7-1: config 0 interface 52 has no altsetting 0 [ 1496.225282][ T5911] usb 7-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 1496.261253][ T5911] usb 7-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 1496.279564][ T5911] usb 7-1: Manufacturer: syz [ 1496.315418][ T5911] usb 7-1: config 0 descriptor?? [ 1496.583506][T17784] input: syz0 as /devices/virtual/input/input18 [ 1497.307105][ T5911] synaptics_usb 7-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 1497.327394][ T5911] synaptics_usb 7-1:0.52: probe with driver synaptics_usb failed with error -5 [ 1497.757820][ T5911] usb 7-1: USB disconnect, device number 22 [ 1498.738476][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1498.738496][ T30] audit: type=1326 audit(3511277830.310:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1498.865759][ T30] audit: type=1326 audit(3511277830.310:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1498.951927][T17805] loop2: detected capacity change from 0 to 7 [ 1499.096420][ T30] audit: type=1326 audit(3511277830.310:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1499.132151][ T30] audit: type=1326 audit(3511277830.310:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1499.180441][T17805] Dev loop2: unable to read RDB block 7 [ 1499.186806][ T30] audit: type=1326 audit(3511277830.310:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1499.217115][T17805] loop2: unable to read partition table [ 1499.224572][ T30] audit: type=1326 audit(3511277830.310:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1499.266451][T17811] netlink: 384 bytes leftover after parsing attributes in process `syz.6.2966'. [ 1499.276722][T17811] netlink: 'syz.6.2966': attribute type 2 has an invalid length. [ 1499.328055][T17805] loop2: partition table beyond EOD, truncated [ 1499.712588][T17805] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1499.908820][ T30] audit: type=1326 audit(3511277830.310:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1499.931469][ T30] audit: type=1326 audit(3511277830.310:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1499.966664][ T30] audit: type=1326 audit(3511277830.310:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1500.003584][ T30] audit: type=1326 audit(3511277830.310:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17797 comm="syz.3.2963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1501.386251][T17821] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1501.398314][T17821] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1504.318243][ T5911] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1505.135289][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 1505.152247][ T5911] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1505.182272][ T5911] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1505.191387][ T5911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1505.235228][ T5911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1505.290136][ T5911] usb 3-1: string descriptor 0 read error: -22 [ 1505.305392][ T5911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1505.345339][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.466519][ T5911] usb 3-1: 0:2 : does not exist [ 1505.646544][T17851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.663269][T17851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1505.712893][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1505.712911][ T30] audit: type=1800 audit(3511277837.297:266): pid=17880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.2986" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1505.750074][T17851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1505.806869][T17851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.060974][T17851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.137631][T17886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.224447][T17851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.279087][T17887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1506.363453][T17886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.379009][T17887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1506.434799][T10822] usb 3-1: USB disconnect, device number 50 [ 1506.818605][T17889] loop2: detected capacity change from 0 to 7 [ 1506.827180][T17889] loop2: [ 1506.840620][T17889] loop2: partition table partially beyond EOD, truncated [ 1507.666762][ T9464] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1508.291641][ T9464] usb 7-1: Using ep0 maxpacket: 32 [ 1508.300740][ T9464] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 1508.313534][ T9464] usb 7-1: config 0 has no interface number 0 [ 1508.322392][ T9464] usb 7-1: config 0 interface 29 has no altsetting 0 [ 1508.958585][ T9464] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1509.044784][ T9464] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.054211][ T9464] usb 7-1: Product: syz [ 1509.059460][ T9464] usb 7-1: Manufacturer: syz [ 1509.064688][ T9464] usb 7-1: SerialNumber: syz [ 1509.078305][ T9464] usb 7-1: config 0 descriptor?? [ 1509.143734][T17923] Bluetooth: MGMT ver 1.23 [ 1509.296301][ T9464] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1509.754620][ T9464] peak_usb 7-1:0.29 can0: sending command failure: -8 [ 1509.823548][ T9464] peak_usb 7-1:0.29 can0: sending command failure: -8 [ 1509.904022][ T9464] peak_usb 7-1:0.29 can0: sending command failure: -8 [ 1510.309880][ T9464] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -8 [ 1510.477903][ T9464] usb 7-1: USB disconnect, device number 23 [ 1510.908570][T10822] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 1511.694724][T10822] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1511.704056][T10822] usb 3-1: config 1 has no interface number 1 [ 1511.718666][T10822] usb 3-1: too many endpoints for config 1 interface 2 altsetting 251: 232, using maximum allowed: 30 [ 1511.816727][T10822] usb 3-1: config 1 interface 2 altsetting 251 endpoint 0x1 has an invalid bInterval 22, changing to 4 [ 1511.828969][T10822] usb 3-1: config 1 interface 2 altsetting 251 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 1511.843370][T10822] usb 3-1: config 1 interface 2 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 232 [ 1512.621123][T10822] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 1512.658620][T10822] usb 3-1: config 1 interface 2 has no altsetting 2 [ 1512.674929][T10822] usb 3-1: string descriptor 0 read error: -22 [ 1512.812345][T10822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1512.822188][T10822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.136989][T10822] usb 3-1: USB disconnect, device number 51 [ 1514.837619][T17983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3014'. [ 1514.886472][ T6572] Bluetooth: hci5: Frame reassembly failed (-84) [ 1514.976993][T17986] loop2: detected capacity change from 0 to 7 [ 1515.003163][T17986] loop2: [ 1515.006205][T17986] loop2: partition table partially beyond EOD, truncated [ 1515.357802][T17993] ptrace attach of "./syz-executor exec"[14619] was attempted by " [ 1516.852888][T18006] openvswitch: netlink: Message has -3 unknown bytes. [ 1516.968034][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1516.975331][T14384] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1516.984709][T18006] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1519.473944][T18030] 9pnet_fd: Insufficient options for proto=fd [ 1520.207812][ T5911] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1521.745026][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 1521.775773][ T5911] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1521.799488][ T5911] usb 4-1: config 0 has no interface number 0 [ 1521.820233][ T5911] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1522.029168][ T5911] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1522.086379][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.115478][ T5911] usb 4-1: Product: syz [ 1522.133742][ T5911] usb 4-1: Manufacturer: syz [ 1522.138430][ T5911] usb 4-1: SerialNumber: syz [ 1522.159276][ T5911] usb 4-1: config 0 descriptor?? [ 1522.173860][ T5911] smsc75xx v1.0.0 [ 1522.177702][ T5911] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1522.198705][ T5911] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 1522.394113][ T5911] usb 4-1: USB disconnect, device number 61 [ 1522.834784][T18068] netlink: 'syz.5.3038': attribute type 10 has an invalid length. [ 1522.842955][T18068] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3038'. [ 1523.414121][ T122] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1523.564534][ T5911] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1523.605825][ T122] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1523.624775][ T122] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1523.636027][ T122] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1523.649568][ T122] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1523.658337][ T122] usb 7-1: Product: syz [ 1523.662648][ T122] usb 7-1: Manufacturer: syz [ 1523.667386][ T122] usb 7-1: SerialNumber: syz [ 1523.697374][ T122] usb 7-1: config 0 descriptor?? [ 1523.730148][ T122] usb 7-1: selecting invalid altsetting 0 [ 1523.738610][ T5911] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 1523.767147][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1523.781089][ T5911] usb 4-1: config 0 has no interface number 0 [ 1523.810533][ T5911] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1523.838452][ T5911] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1523.871992][ T5911] usb 4-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1523.901849][ T5911] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1523.915798][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.928563][ T122] usb 7-1: USB disconnect, device number 24 [ 1523.946925][ T5911] usb 4-1: config 0 descriptor?? [ 1523.957213][ T5911] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1524.915274][ T5911] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 1524.924264][ T5911] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1524.955632][ T5911] usb 4-1: MIDIStreaming interface descriptor not found [ 1525.080160][ T5911] usb 4-1: USB disconnect, device number 62 [ 1526.474898][T18104] 9pnet: Unknown protocol version 9p2000;]| 1 V3 [ 1526.474898][T18104] 010000E0 1 0:00000000 0 [ 1526.474898][T18104] 5 ersp [ 1527.554602][T18111] loop6: detected capacity change from 0 to 7 [ 1527.613920][T18111] Dev loop6: unable to read RDB block 7 [ 1527.643820][T18111] loop6: unable to read partition table [ 1527.662804][T18111] loop6: partition table beyond EOD, truncated [ 1527.710659][T18111] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1527.993935][ T30] audit: type=1800 audit(3511277859.585:267): pid=18123 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.3058" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1528.024020][ T43] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1528.087726][T18127] loop2: detected capacity change from 0 to 7 [ 1528.103458][T18127] loop2: [ 1528.110771][T18127] loop2: partition table partially beyond EOD, truncated [ 1528.208753][ T43] usb 7-1: config 0 has an invalid interface number: 191 but max is 0 [ 1528.240321][ T43] usb 7-1: config 0 has no interface number 0 [ 1528.263392][ T43] usb 7-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=f5.41 [ 1528.284874][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1528.310991][ T43] usb 7-1: Product: syz [ 1528.337872][ T43] usb 7-1: Manufacturer: syz [ 1528.360493][ T43] usb 7-1: SerialNumber: syz [ 1528.444826][ T43] usb 7-1: config 0 descriptor?? [ 1528.497124][ T5911] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1528.502489][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 1528.667076][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 1528.676031][ T5911] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1528.676725][T18140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3064'. [ 1528.713487][ T5911] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1528.713908][ T43] usb 7-1: MBOX3: Invalid descriptor size=18. [ 1528.853714][ T43] usb 7-1: USB disconnect, device number 25 [ 1529.027748][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.042553][ T5911] usb 4-1: config 0 descriptor?? [ 1529.477145][ T5911] hid-u2fzero 0003:20A0:4287.0013: unknown main item tag 0x0 [ 1529.498557][ T5911] hid-u2fzero 0003:20A0:4287.0013: unknown main item tag 0x0 [ 1529.507198][ T5911] hid-u2fzero 0003:20A0:4287.0013: unknown main item tag 0x0 [ 1529.527115][ T5911] hid-u2fzero 0003:20A0:4287.0013: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0 [ 1529.549067][ T5911] hid-u2fzero 0003:20A0:4287.0013: NitroKey U2F LED initialised [ 1529.573794][ T5911] hid-u2fzero 0003:20A0:4287.0013: NitroKey U2F RNG initialised [ 1529.697633][ T9464] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1529.909493][ T3501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.927615][ T3501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1529.973953][ T43] usb 4-1: USB disconnect, device number 63 [ 1530.037828][ T9464] usb 3-1: Using ep0 maxpacket: 8 [ 1530.095561][ T9464] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1530.107254][ T9464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.122664][ T9464] usb 3-1: Product: syz [ 1530.146141][ T9464] usb 3-1: Manufacturer: syz [ 1530.155527][ T9464] usb 3-1: SerialNumber: syz [ 1530.176717][ T9464] usb 3-1: config 0 descriptor?? [ 1530.202626][ T9464] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1531.272129][T18178] input: syz1 as /devices/virtual/input/input20 [ 1531.280926][ T9464] gspca_sq930x: reg_w 0305 fd00 failed -71 [ 1531.287947][ T9464] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 1531.343734][ T9464] usb 3-1: USB disconnect, device number 52 [ 1532.152246][T18186] input: syz1 as /devices/virtual/input/input21 [ 1533.114168][ T9464] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1533.404933][ T9464] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 1533.532428][T18233] input: syz0 as /devices/virtual/input/input22 [ 1533.936159][ T9464] usb 6-1: config 0 has no interface number 0 [ 1533.943214][ T9464] usb 6-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 16672, setting to 64 [ 1533.958223][ T9464] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1533.967501][ T9464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.977098][ T9464] usb 6-1: Product: syz [ 1533.981816][ T9464] usb 6-1: Manufacturer: syz [ 1533.986630][ T9464] usb 6-1: SerialNumber: syz [ 1534.016481][ T9464] usb 6-1: config 0 descriptor?? [ 1534.022696][T18213] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1534.279826][T18242] random: crng reseeded on system resumption [ 1535.112210][ T9464] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 1535.126796][ T9464] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 1535.190445][ T9464] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 1535.208800][ T9464] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 1535.292993][T18213] loop6: detected capacity change from 0 to 2560 [ 1535.308987][ T9464] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1535.330750][T18213] Buffer I/O error on dev loop6, logical block 0, async page read [ 1535.358413][T18242] Restarting kernel threads ... [ 1535.364224][T18242] Done restarting kernel threads. [ 1535.379888][T18213] Buffer I/O error on dev loop6, logical block 0, async page read [ 1535.390009][T18213] Buffer I/O error on dev loop6, logical block 0, async page read [ 1535.420385][T18213] Buffer I/O error on dev loop6, logical block 0, async page read [ 1535.428593][T18213] Buffer I/O error on dev loop6, logical block 0, async page read [ 1535.453620][T18213] Buffer I/O error on dev loop6, logical block 0, async page read [ 1535.488929][T18213] Buffer I/O error on dev loop6, logical block 0, async page read [ 1535.500689][T18213] Buffer I/O error on dev loop6, logical block 0, async page read [ 1535.512340][T18213] ldm_validate_partition_table(): Disk read failed. [ 1535.762342][T18213] Buffer I/O error on dev loop6, logical block 0, async page read [ 1535.793092][T18213] Buffer I/O error on dev loop6, logical block 0, async page read [ 1536.649914][T18213] Dev loop6: unable to read RDB block 0 [ 1536.660395][T18213] loop6: unable to read partition table [ 1536.668464][T18213] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 1536.824901][ T43] usb 6-1: USB disconnect, device number 32 [ 1538.623949][ T43] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1538.668636][ T43] keyspan 6-1:0.133: device disconnected [ 1540.965208][T18281] CIFS: iocharset name too long [ 1543.714042][T18302] input: syz1 as /devices/virtual/input/input23 [ 1545.411957][T18321] overlayfs: failed to resolve './file1/file0': -2 [ 1546.789179][T18330] loop2: detected capacity change from 0 to 7 [ 1546.811168][T18330] Dev loop2: unable to read RDB block 7 [ 1546.976750][T18330] loop2: AHDI p1 p2 [ 1546.983676][T18330] loop2: partition table partially beyond EOD, truncated [ 1547.041441][T18330] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 1548.555080][T18352] netlink: 'syz.5.3125': attribute type 4 has an invalid length. [ 1548.565156][T18352] netlink: 'syz.5.3125': attribute type 2 has an invalid length. [ 1549.234895][T18357] tmpfs: Bad value for 'mpol' [ 1549.395985][ T122] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 1549.905076][T18366] zonefs (nullb0) ERROR: Not a zoned block device [ 1549.969387][ T122] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1549.977837][ T122] usb 4-1: config 0 has no interface number 0 [ 1549.989132][ T122] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1550.158648][ T122] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1550.169251][ T122] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1550.178396][ T122] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1550.209329][ T122] usb 4-1: config 0 descriptor?? [ 1550.249176][ T122] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1550.310616][T18366] netlink: 'syz.2.3130': attribute type 3 has an invalid length. [ 1551.005525][ T122] usb 4-1: USB disconnect, device number 64 [ 1552.120707][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1552.127128][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1552.834194][T18391] loop2: detected capacity change from 0 to 7 [ 1552.849420][T18391] loop2: [ 1552.852486][T18391] loop2: partition table partially beyond EOD, truncated [ 1552.989973][T18394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 1553.039333][ T122] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1553.666695][ T122] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 1553.683381][T18405] netlink: 'syz.5.3139': attribute type 10 has an invalid length. [ 1553.691845][ T122] usb 3-1: config 0 has no interface number 0 [ 1553.699977][ T122] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1553.719725][ T122] usb 3-1: config 0 interface 11 altsetting 253 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1553.754622][ T122] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1553.784622][T18405] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1553.793346][ T122] usb 3-1: config 0 interface 11 altsetting 253 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1553.793384][ T122] usb 3-1: config 0 interface 11 has no altsetting 0 [ 1553.793427][ T122] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1553.793454][ T122] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.846324][ T122] usb 3-1: config 0 descriptor?? [ 1553.870007][T18388] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1553.887163][ T122] keyspan 3-1:0.11: Keyspan 2 port adapter converter detected [ 1553.897218][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 87 [ 1553.906463][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 81 [ 1553.923353][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 82 [ 1553.939714][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 1 [ 1553.958088][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 2 [ 1553.971558][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 85 [ 1553.988687][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 5 [ 1554.007207][ T122] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1554.034750][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 83 [ 1554.054613][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 84 [ 1554.064433][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 3 [ 1554.072496][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 4 [ 1554.099840][ T122] keyspan 3-1:0.11: found no endpoint descriptor for endpoint 6 [ 1554.107832][T18414] misc userio: Invalid payload size [ 1554.118315][ T122] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1554.138723][ T122] usb 3-1: USB disconnect, device number 53 [ 1554.154373][ T122] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1554.197373][ T122] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1554.219427][ T122] keyspan 3-1:0.11: device disconnected [ 1554.593781][T18426] netlink: 'syz.5.3145': attribute type 3 has an invalid length. [ 1554.750915][T18427] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1554.909385][T18429] loop2: detected capacity change from 0 to 7 [ 1554.943303][T18429] Dev loop2: unable to read RDB block 7 [ 1554.961807][T18429] loop2: AHDI p1 p2 [ 1554.972435][T18429] loop2: partition table partially beyond EOD, truncated [ 1554.988624][T18429] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 1555.192632][T18432] loop2: detected capacity change from 0 to 7 [ 1555.202820][T18432] Dev loop2: unable to read RDB block 7 [ 1555.208590][T18432] loop2: AHDI p1 p2 [ 1555.214272][T18432] loop2: partition table partially beyond EOD, truncated [ 1555.225334][T18432] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 1555.251593][T18430] 9pnet_fd: Insufficient options for proto=fd [ 1555.655120][T18438] loop2: detected capacity change from 0 to 7 [ 1555.703064][T18438] loop2: [ 1555.706346][T18438] loop2: partition table partially beyond EOD, truncated [ 1556.606668][T18445] 9pnet_fd: Insufficient options for proto=fd [ 1557.806653][T18452] syz.6.3156: attempt to access beyond end of device [ 1557.806653][T18452] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1558.041817][T18452] bridge1: entered promiscuous mode [ 1558.234042][T18461] netlink: 'syz.0.3157': attribute type 10 has an invalid length. [ 1558.242327][T18461] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3157'. [ 1558.448803][T18452] bridge1: entered allmulticast mode [ 1558.760749][T18452] team0: Port device bridge1 added [ 1560.005407][T18478] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3162'. [ 1562.105148][T18495] bad cache= option: no%e [ 1562.105148][T18495] [ 1562.112112][T18495] CIFS: VFS: bad cache= option: no%e [ 1562.946075][T18510] FAULT_INJECTION: forcing a failure. [ 1562.946075][T18510] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.979474][T18510] CPU: 1 UID: 0 PID: 18510 Comm: syz.6.3172 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1562.979509][T18510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1562.979526][T18510] Call Trace: [ 1562.979536][T18510] [ 1562.979548][T18510] dump_stack_lvl+0x189/0x250 [ 1562.979582][T18510] ? __pfx____ratelimit+0x10/0x10 [ 1562.979607][T18510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1562.979633][T18510] ? __pfx__printk+0x10/0x10 [ 1562.979669][T18510] ? __pfx___might_resched+0x10/0x10 [ 1562.979700][T18510] should_fail_ex+0x414/0x560 [ 1562.979730][T18510] should_failslab+0xa8/0x100 [ 1562.979758][T18510] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 1562.979784][T18510] ? __get_vm_area_node+0x13f/0x300 [ 1562.979813][T18510] __get_vm_area_node+0x13f/0x300 [ 1562.979844][T18510] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1562.979871][T18510] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1562.979908][T18510] ? is_bpf_text_address+0x26/0x2b0 [ 1562.979959][T18510] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1562.979984][T18510] ? __might_fault+0xb0/0x130 [ 1562.980008][T18510] ? _parse_integer_limit+0x1ae/0x1f0 [ 1562.980061][T18510] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1562.980092][T18510] __vmalloc_noprof+0xb1/0xf0 [ 1562.980116][T18510] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1562.980154][T18510] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1562.980208][T18510] bpf_prog_alloc+0x3c/0x1a0 [ 1562.980247][T18510] bpf_prog_load+0x735/0x1930 [ 1562.980295][T18510] ? __pfx_bpf_prog_load+0x10/0x10 [ 1562.980356][T18510] ? bpf_lsm_bpf+0x9/0x20 [ 1562.980382][T18510] ? security_bpf+0x7e/0x300 [ 1562.980413][T18510] __sys_bpf+0x5f1/0x860 [ 1562.980449][T18510] ? __pfx___sys_bpf+0x10/0x10 [ 1562.980497][T18510] ? ksys_write+0x22a/0x250 [ 1562.980523][T18510] ? __pfx_ksys_write+0x10/0x10 [ 1562.980541][T18510] ? rcu_is_watching+0x15/0xb0 [ 1562.980574][T18510] __x64_sys_bpf+0x7c/0x90 [ 1562.980606][T18510] do_syscall_64+0xfa/0x3b0 [ 1562.980631][T18510] ? lockdep_hardirqs_on+0x9c/0x150 [ 1562.980656][T18510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.980678][T18510] ? clear_bhb_loop+0x60/0xb0 [ 1562.980706][T18510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.980729][T18510] RIP: 0033:0x7f9ded58ebe9 [ 1562.980751][T18510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.980772][T18510] RSP: 002b:00007f9dee3f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1562.980796][T18510] RAX: ffffffffffffffda RBX: 00007f9ded7b5fa0 RCX: 00007f9ded58ebe9 [ 1562.980831][T18510] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1562.980846][T18510] RBP: 00007f9dee3f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.980861][T18510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.980875][T18510] R13: 00007f9ded7b6038 R14: 00007f9ded7b5fa0 R15: 00007ffc9c331198 [ 1562.980911][T18510] [ 1562.980925][T18510] syz.6.3172: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1563.173323][T14384] Bluetooth: hci2: command 0x0405 tx timeout [ 1563.189896][T18510] ,cpuset= [ 1563.545452][ T43] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1563.708200][T18510] /,mems_allowed=0-1 [ 1563.712316][T18510] CPU: 1 UID: 0 PID: 18510 Comm: syz.6.3172 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1563.712347][T18510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1563.712361][T18510] Call Trace: [ 1563.712374][T18510] [ 1563.712385][T18510] dump_stack_lvl+0x189/0x250 [ 1563.712417][T18510] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1563.712454][T18510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1563.712480][T18510] ? __pfx__printk+0x10/0x10 [ 1563.712510][T18510] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1563.712539][T18510] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1563.712576][T18510] warn_alloc+0x214/0x310 [ 1563.712610][T18510] ? __pfx_warn_alloc+0x10/0x10 [ 1563.712640][T18510] ? __get_vm_area_node+0x13f/0x300 [ 1563.712669][T18510] ? __get_vm_area_node+0x2b5/0x300 [ 1563.712701][T18510] __vmalloc_node_range_noprof+0x326/0x12f0 [ 1563.712729][T18510] ? is_bpf_text_address+0x26/0x2b0 [ 1563.712782][T18510] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1563.712807][T18510] ? __might_fault+0xb0/0x130 [ 1563.712832][T18510] ? _parse_integer_limit+0x1ae/0x1f0 [ 1563.712864][T18510] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1563.712912][T18510] __vmalloc_noprof+0xb1/0xf0 [ 1563.712938][T18510] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1563.712977][T18510] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 1563.713019][T18510] bpf_prog_alloc+0x3c/0x1a0 [ 1563.713057][T18510] bpf_prog_load+0x735/0x1930 [ 1563.713106][T18510] ? __pfx_bpf_prog_load+0x10/0x10 [ 1563.713166][T18510] ? bpf_lsm_bpf+0x9/0x20 [ 1563.713192][T18510] ? security_bpf+0x7e/0x300 [ 1563.713222][T18510] __sys_bpf+0x5f1/0x860 [ 1563.713258][T18510] ? __pfx___sys_bpf+0x10/0x10 [ 1563.713306][T18510] ? ksys_write+0x22a/0x250 [ 1563.713330][T18510] ? __pfx_ksys_write+0x10/0x10 [ 1563.713352][T18510] ? rcu_is_watching+0x15/0xb0 [ 1563.713385][T18510] __x64_sys_bpf+0x7c/0x90 [ 1563.713417][T18510] do_syscall_64+0xfa/0x3b0 [ 1563.713443][T18510] ? lockdep_hardirqs_on+0x9c/0x150 [ 1563.713468][T18510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.713490][T18510] ? clear_bhb_loop+0x60/0xb0 [ 1563.713518][T18510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.713542][T18510] RIP: 0033:0x7f9ded58ebe9 [ 1563.713562][T18510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1563.713583][T18510] RSP: 002b:00007f9dee3f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1563.713607][T18510] RAX: ffffffffffffffda RBX: 00007f9ded7b5fa0 RCX: 00007f9ded58ebe9 [ 1563.713624][T18510] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1563.713640][T18510] RBP: 00007f9dee3f8090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.713655][T18510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1563.713669][T18510] R13: 00007f9ded7b6038 R14: 00007f9ded7b5fa0 R15: 00007ffc9c331198 [ 1563.713705][T18510] [ 1564.118040][ T43] usb 6-1: device descriptor read/64, error -71 [ 1564.229165][T18517] netlink: 'syz.0.3173': attribute type 10 has an invalid length. [ 1564.237323][T18517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3173'. [ 1564.331930][T18510] Mem-Info: [ 1564.364468][T18510] active_anon:3128 inactive_anon:10925 isolated_anon:0 [ 1564.364468][T18510] active_file:25906 inactive_file:36548 isolated_file:0 [ 1564.364468][T18510] unevictable:793 dirty:104 writeback:0 [ 1564.364468][T18510] slab_reclaimable:11241 slab_unreclaimable:108829 [ 1564.364468][T18510] mapped:38867 shmem:9965 pagetables:1029 [ 1564.364468][T18510] sec_pagetables:0 bounce:0 [ 1564.364468][T18510] kernel_misc_reclaimable:0 [ 1564.364468][T18510] free:1285443 free_pcp:10761 free_cma:0 [ 1564.810079][T18510] Node 0 active_anon:12520kB inactive_anon:20560kB active_file:103396kB inactive_file:146192kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:124200kB dirty:432kB writeback:0kB shmem:15452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11692kB pagetables:3868kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1564.821548][ C1] vcan0: j1939_tp_rxtimer: 0xffff888065bec000: rx timeout, send abort [ 1564.853120][ T43] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1564.890220][T18510] Node 1 active_anon:0kB inactive_anon:0kB active_file:228kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1564.969160][T18510] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1565.019747][ T43] usb 6-1: device descriptor read/64, error -71 [ 1565.055374][T18510] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 1565.061258][T18510] Node 0 DMA32 free:1208060kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12516kB inactive_anon:20516kB active_file:101632kB inactive_file:146124kB unevictable:1544kB writepending:432kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:58392kB local_pcp:21600kB free_cma:0kB [ 1565.102273][T18510] lowmem_reserve[]: 0 0 1 1 1 [ 1565.108145][T18510] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1764kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1565.120611][T10822] kernel write not supported for file /721/loginuid (pid: 10822 comm: kworker/1:0) [ 1565.149027][ T43] usb usb6-port1: attempt power cycle [ 1565.158429][T18510] lowmem_reserve[]: 0 0 0 0 0 [ 1565.163306][T18510] Node 1 Normal free:3922360kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:228kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4224kB local_pcp:4224kB free_cma:0kB [ 1565.200955][T18510] lowmem_reserve[]: 0 0 0 0 0 [ 1565.206449][T18510] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1565.227980][T18510] Node 0 DMA32: 1015*4kB (UME) 218*8kB (UME) 243*16kB (UME) 555*32kB (UME) 393*64kB (UM) 137*128kB (UM) 73*256kB (UME) 46*512kB (UME) 22*1024kB (ME) 3*2048kB (M) 260*4096kB (UM) = 1206012kB [ 1565.352643][ C1] vcan0: j1939_tp_rxtimer: 0xffff888065bec000: abort rx timeout. Force session deactivation [ 1565.365494][T18510] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1565.476006][T18510] Node 1 Normal: 170*4kB (U) 42*8kB (UME) 50*16kB (UE) 221*32kB (UME) 108*64kB (UME) 24*128kB (UME) 14*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 949*4096kB (ME) = 3922360kB [ 1565.494501][T18530] binder: BINDER_SET_CONTEXT_MGR already set [ 1565.500585][T18510] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1565.516847][T18530] binder: 18522:18530 ioctl 4018620d 200000000040 returned -16 [ 1565.522300][T18510] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1565.704361][T18510] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1565.715154][ T43] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1565.741223][ T43] usb 6-1: device descriptor read/8, error -71 [ 1566.534098][T18510] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1566.636484][ T43] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1566.717855][T18510] 69568 total pagecache pages [ 1566.803231][T18510] 0 pages in swap cache [ 1566.856648][T18510] Free swap = 124996kB [ 1566.917352][T18510] Total swap = 124996kB [ 1566.993771][ T43] usb 6-1: device descriptor read/8, error -71 [ 1567.001126][T18510] 2097051 pages RAM [ 1567.005016][T18510] 0 pages HighMem/MovableOnly [ 1567.118791][T18510] 424695 pages reserved [ 1567.156327][T18510] 0 pages cma reserved [ 1567.266536][ T43] usb usb6-port1: unable to enumerate USB device [ 1570.182767][T18587] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1570.205634][T18587] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1570.242279][T18587] overlayfs: missing 'lowerdir' [ 1570.338268][ T5911] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1570.502360][ T5911] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1570.520233][ T5911] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1570.547429][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.584445][ T5911] usb 7-1: config 0 descriptor?? [ 1571.377902][ T5911] video4linux radio48: keene_cmd_set failed (-71) [ 1571.407634][ T5911] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 1571.430810][ T5911] usb 7-1: USB disconnect, device number 26 [ 1571.871227][T18617] netlink: 'syz.3.3200': attribute type 10 has an invalid length. [ 1571.879267][T18617] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3200'. [ 1571.895408][T18617] batman_adv: batadv0: Adding interface: vlan1 [ 1571.901747][T18617] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1571.927929][T18617] batman_adv: batadv0: Interface activated: vlan1 [ 1572.373166][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1572.597692][T18622] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1573.438768][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1573.459375][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.467457][ T9] usb 3-1: Product: syz [ 1573.487199][ T9] usb 3-1: Manufacturer: syz [ 1573.492789][ T9] usb 3-1: SerialNumber: syz [ 1573.506682][T18628] loop2: detected capacity change from 0 to 7 [ 1573.524583][ T9] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1573.543194][T18628] loop2: [ 1573.546260][T18628] loop2: partition table partially beyond EOD, truncated [ 1573.561621][ T5911] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1574.028925][T18611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1574.038665][T18611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1574.089692][T18643] /dev/nullb0: Can't open blockdev [ 1574.673340][ T5911] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1574.682519][ T5911] ath9k_htc: Failed to initialize the device [ 1574.708549][T18642] /dev/nullb0: Can't open blockdev [ 1574.743354][ T5911] usb 3-1: ath9k_htc: USB layer deinitialized [ 1575.070376][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3209'. [ 1575.079431][T18646] nbd: couldn't find a device at index 65546 [ 1575.205529][T18650] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1576.732826][ T43] usb 3-1: USB disconnect, device number 54 [ 1577.809302][T18666] netlink: 'syz.5.3213': attribute type 10 has an invalid length. [ 1577.817647][T18666] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3213'. [ 1577.834190][T18666] batman_adv: batadv0: Adding interface: vlan1 [ 1577.840568][T18666] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1577.866040][ C1] vkms_vblank_simulate: vblank timer overrun [ 1577.873372][T18666] batman_adv: batadv0: Interface activated: vlan1 [ 1578.472010][ T5911] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1578.672043][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 1578.684183][ T5911] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1578.701085][ T5911] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1578.755122][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.790520][ T5911] usb 7-1: Product: syz [ 1578.799992][ T5911] usb 7-1: Manufacturer: syz [ 1578.810432][ T5911] usb 7-1: SerialNumber: syz [ 1578.841415][ T5911] usb 7-1: config 0 descriptor?? [ 1578.922120][ T9464] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1579.082315][ T9464] usb 6-1: Using ep0 maxpacket: 16 [ 1579.111824][ T9464] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 78, changing to 10 [ 1579.152272][ T9464] usb 6-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 1579.177225][ T9464] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.213385][ T9464] usb 6-1: config 0 descriptor?? [ 1579.230667][T18674] trusted_key: encrypted_key: insufficient parameters specified [ 1579.278103][ T5911] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 1579.675064][ T9464] uclogic 0003:5543:0781.0014: hidraw0: USB HID v0.04 Device [HID 5543:0781] on usb-dummy_hcd.5-1/input0 [ 1580.162324][T18688] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3220'. [ 1580.344964][ T5911] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-ETIMEDOUT) [ 1580.366481][ T5911] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -110 [ 1580.646964][T18692] loop2: detected capacity change from 0 to 7 [ 1580.674147][T18692] Dev loop2: unable to read RDB block 7 [ 1580.679841][T18692] loop2: AHDI p1 p2 [ 1580.694759][T18692] loop2: partition table partially beyond EOD, truncated [ 1580.720465][T18692] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 1581.902234][ T5911] usb 6-1: USB disconnect, device number 38 [ 1581.987295][T13469] usb 7-1: USB disconnect, device number 27 [ 1583.011312][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3226'. [ 1584.162736][T18730] overlayfs: failed to clone upperpath [ 1584.178329][T18728] loop2: detected capacity change from 0 to 7 [ 1584.189439][T18728] Dev loop2: unable to read RDB block 7 [ 1584.196583][T18728] loop2: AHDI p1 p2 [ 1584.210620][T18728] loop2: partition table partially beyond EOD, truncated [ 1584.955337][T18728] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 1585.080716][T18736] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3237'. [ 1585.750486][T18751] 9pnet_fd: Insufficient options for proto=fd [ 1587.406086][T18759] syzkaller0: entered promiscuous mode [ 1587.411836][T18759] syzkaller0: entered allmulticast mode [ 1590.498995][T18778] 9pnet_fd: Insufficient options for proto=fd [ 1595.436239][T18769] tipc: Enabling of bearer rejected, failed to enable media [ 1595.710510][T18771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3246'. [ 1595.719953][T18771] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3246'. [ 1596.549846][T18791] kAFS: unable to lookup cell '' [ 1596.639698][T18794] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1598.042149][T18809] netlink: 'syz.0.3251': attribute type 10 has an invalid length. [ 1598.050351][T18809] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3251'. [ 1598.060139][T18809] batman_adv: batadv0: Interface deactivated: vlan1 [ 1598.067520][T18809] batman_adv: batadv0: Removing interface: vlan1 [ 1598.635788][T18803] openvswitch: netlink: IPv4 tun info is not correct [ 1598.656909][T18809] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 1598.903608][T18812] netlink: 'syz.6.3255': attribute type 2 has an invalid length. [ 1598.932335][T18812] netlink: 784 bytes leftover after parsing attributes in process `syz.6.3255'. [ 1599.453763][T18830] 9pnet_fd: Insufficient options for proto=fd [ 1600.072487][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 1602.046348][T18821] 9pnet_fd: Insufficient options for proto=fd [ 1602.167598][T18857] FAULT_INJECTION: forcing a failure. [ 1602.167598][T18857] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.187469][T18857] CPU: 0 UID: 0 PID: 18857 Comm: syz.2.3268 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1602.187504][T18857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1602.187520][T18857] Call Trace: [ 1602.187530][T18857] [ 1602.187541][T18857] dump_stack_lvl+0x189/0x250 [ 1602.187573][T18857] ? __pfx____ratelimit+0x10/0x10 [ 1602.187598][T18857] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1602.187631][T18857] ? __pfx__printk+0x10/0x10 [ 1602.187664][T18857] ? __pfx___might_resched+0x10/0x10 [ 1602.187696][T18857] ? fs_reclaim_acquire+0x7d/0x100 [ 1602.187731][T18857] should_fail_ex+0x414/0x560 [ 1602.187784][T18857] should_failslab+0xa8/0x100 [ 1602.187812][T18857] __kmalloc_noprof+0xcb/0x4f0 [ 1602.187835][T18857] ? tomoyo_encode+0x28b/0x550 [ 1602.187869][T18857] tomoyo_encode+0x28b/0x550 [ 1602.187906][T18857] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1602.187948][T18857] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1602.187973][T18857] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1602.188002][T18857] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1602.188047][T18857] ? __lock_acquire+0xab9/0xd20 [ 1602.188093][T18857] ? __fget_files+0x2a/0x420 [ 1602.188122][T18857] ? __fget_files+0x2a/0x420 [ 1602.188153][T18857] ? __fget_files+0x3a0/0x420 [ 1602.188182][T18857] ? __fget_files+0x2a/0x420 [ 1602.188214][T18857] security_file_ioctl+0xcb/0x2d0 [ 1602.188243][T18857] __se_sys_ioctl+0x47/0x170 [ 1602.188280][T18857] do_syscall_64+0xfa/0x3b0 [ 1602.188304][T18857] ? lockdep_hardirqs_on+0x9c/0x150 [ 1602.188328][T18857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.188351][T18857] ? clear_bhb_loop+0x60/0xb0 [ 1602.188379][T18857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.188401][T18857] RIP: 0033:0x7fd545f8ebe9 [ 1602.188421][T18857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1602.188449][T18857] RSP: 002b:00007fd5441f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1602.188473][T18857] RAX: ffffffffffffffda RBX: 00007fd5461b5fa0 RCX: 00007fd545f8ebe9 [ 1602.188491][T18857] RDX: 00002000000006c0 RSI: 000000000000560a RDI: 0000000000000004 [ 1602.188505][T18857] RBP: 00007fd5441f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1602.188519][T18857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1602.188533][T18857] R13: 00007fd5461b6038 R14: 00007fd5461b5fa0 R15: 00007ffd746a96c8 [ 1602.188570][T18857] [ 1602.188593][T18857] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1603.371889][ T30] audit: type=1326 audit(3511277935.920:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.3.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1603.594486][ T30] audit: type=1326 audit(3511277935.980:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.3.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1604.005402][ T43] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1604.014811][ T30] audit: type=1326 audit(3511277935.980:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.3.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1604.196955][ T30] audit: type=1326 audit(3511277935.990:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.3.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1604.254841][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 1604.274944][ T43] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1604.293965][ T30] audit: type=1326 audit(3511277935.990:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.3.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1604.325027][ T43] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1604.336342][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1604.366030][ T43] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1604.377885][ T30] audit: type=1326 audit(3511277936.030:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.3.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1604.423342][ T43] usb 7-1: config 0 has no interface number 0 [ 1604.463591][ T43] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1604.484004][ T30] audit: type=1326 audit(3511277936.120:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.3.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1604.513665][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.541304][ T43] usb 7-1: Product: syz [ 1604.708829][ T30] audit: type=1326 audit(3511277936.120:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.3.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1604.732340][ T30] audit: type=1326 audit(3511277936.140:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.3.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1604.734131][ T43] usb 7-1: Manufacturer: syz [ 1605.177854][ T43] usb 7-1: SerialNumber: syz [ 1605.215919][ T30] audit: type=1326 audit(3511277936.140:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18868 comm="syz.3.3270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f052bb8ebe9 code=0x7ffc0000 [ 1605.397696][ T43] usb 7-1: config 0 descriptor?? [ 1606.026139][ T43] usb 7-1: USB disconnect, device number 28 [ 1606.128838][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a15c400: rx timeout, send abort [ 1606.445210][T18894] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1606.457029][T18894] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1606.472734][T18894] fuse: Bad value for 'max_read' [ 1606.637618][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a15c400: abort rx timeout. Force session deactivation [ 1607.657933][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3282'. [ 1610.803576][T18916] syz.5.3284 (18916) used greatest stack depth: 15960 bytes left [ 1611.171340][ T43] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1611.346067][ T43] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1611.346112][ T43] usb 6-1: config 0 has no interface number 0 [ 1611.346177][ T43] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1611.346212][ T43] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1611.349068][ T43] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1611.349111][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.349138][ T43] usb 6-1: Product: syz [ 1611.349161][ T43] usb 6-1: Manufacturer: syz [ 1611.349182][ T43] usb 6-1: SerialNumber: syz [ 1611.379884][ T43] usb 6-1: config 0 descriptor?? [ 1611.381989][T18932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1611.384461][ T43] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1611.404651][ T43] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1611.550647][T18947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3296'. [ 1611.593271][T18950] openvswitch: netlink: Flow actions attr not present in new flow. [ 1613.252033][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1613.260434][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1613.748731][T18970] netlink: 'syz.2.3304': attribute type 10 has an invalid length. [ 1613.756983][T18970] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3304'. [ 1614.618839][T10822] libceph: connect (1)[c::]:6789 error -101 [ 1614.782236][T10822] libceph: mon0 (1)[c::]:6789 connect error [ 1614.802616][T18977] ceph: No mds server is up or the cluster is laggy [ 1614.829552][ T43] libceph: connect (1)[c::]:6789 error -101 [ 1614.871787][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 1615.380813][T18976] dlm: no local IP address has been set [ 1615.442599][T18976] dlm: cannot start dlm midcomms -107 [ 1615.626367][T10822] libceph: connect (1)[c::]:6789 error -101 [ 1615.654085][T10822] libceph: mon0 (1)[c::]:6789 connect error [ 1619.674074][ T43] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1620.203249][ T43] usb 7-1: device descriptor read/64, error -71 [ 1620.272347][T10822] usb 6-1: USB disconnect, device number 39 [ 1620.339696][T10822] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1620.364144][T10822] cyberjack 6-1:0.69: device disconnected [ 1620.444598][ T43] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1620.594740][ T43] usb 7-1: device descriptor read/64, error -71 [ 1620.649502][T19025] loop9: detected capacity change from 0 to 7 [ 1620.675829][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3318'. [ 1620.704920][T19025] Dev loop9: unable to read RDB block 7 [ 1620.727091][ T43] usb usb7-port1: attempt power cycle [ 1620.734576][T19029] vlan2: entered allmulticast mode [ 1620.742473][T19025] loop9: unable to read partition table [ 1620.763440][T19029] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1620.767526][T19025] loop9: partition table beyond EOD, truncated [ 1620.784557][T19025] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1621.037267][T19039] netlink: 'syz.3.3321': attribute type 58 has an invalid length. [ 1621.057307][T19039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3321'. [ 1621.244159][ T43] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1621.253448][ T5911] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1621.462975][ T5911] usb 3-1: Using ep0 maxpacket: 16 [ 1621.997516][ T5911] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.021674][ T43] usb 7-1: device descriptor read/8, error -71 [ 1622.043874][ T5911] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1622.053280][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1622.074227][ T5911] usb 3-1: Product: syz [ 1622.079219][ T5911] usb 3-1: Manufacturer: syz [ 1622.090645][ T5911] usb 3-1: SerialNumber: syz [ 1622.358589][ T5911] usb 3-1: config 0 descriptor?? [ 1622.398041][T19051] overlayfs: failed to resolve './file1': -2 [ 1622.754357][T19062] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1623.110024][T19067] netlink: 'syz.5.3327': attribute type 3 has an invalid length. [ 1623.402135][ T43] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1624.195758][ T43] usb 7-1: device descriptor read/8, error -71 [ 1624.325429][ T43] usb usb7-port1: unable to enumerate USB device [ 1624.387573][T10822] usb 3-1: USB disconnect, device number 55 [ 1625.331959][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1625.332381][ T30] audit: type=1326 audit(3511277957.869:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19077 comm="syz.2.3333" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd545f8ebe9 code=0x0 [ 1626.301271][T19089] sctp: [Deprecated]: syz.3.3335 (pid 19089) Use of int in max_burst socket option deprecated. [ 1626.301271][T19089] Use struct sctp_assoc_value instead [ 1627.379241][T19078] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1627.393944][T19091] loop2: detected capacity change from 0 to 7 [ 1627.411763][T19078] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1627.417517][T19091] Dev loop2: unable to read RDB block 7 [ 1627.417554][T19091] loop2: AHDI p1 p2 [ 1627.417587][T19091] loop2: partition table partially beyond EOD, truncated [ 1627.417686][T19091] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 1627.997364][T19099] lo speed is unknown, defaulting to 1000 [ 1630.004214][T19111] vlan2: entered promiscuous mode [ 1630.286646][T19111] gretap0: entered promiscuous mode [ 1630.698394][T10822] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1630.948205][ T9464] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1630.968071][T10822] usb 7-1: device descriptor read/64, error -71 [ 1631.439055][T10822] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1631.529113][ T9464] usb 6-1: Using ep0 maxpacket: 32 [ 1631.546397][ T9464] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1631.572227][ T9464] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1631.598423][T10822] usb 7-1: device descriptor read/64, error -71 [ 1631.604171][ T9464] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.626011][ T9464] usb 6-1: Product: syz [ 1631.637772][ T9464] usb 6-1: Manufacturer: syz [ 1631.959434][T10822] usb usb7-port1: attempt power cycle [ 1631.985985][ T9464] usb 6-1: SerialNumber: syz [ 1632.323177][ T9464] usb 6-1: config 0 descriptor?? [ 1632.331753][ T9464] gs_usb 6-1:0.0: Required endpoints not found [ 1632.681000][ T5911] usb 6-1: USB disconnect, device number 40 [ 1633.790832][T10822] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1634.107647][T10822] usb 7-1: device descriptor read/8, error -71 [ 1634.781048][T19172] vivid-003: disconnect [ 1635.397996][T19167] vivid-003: reconnect [ 1637.443644][T19192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1637.454219][T19192] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1639.169914][T19209] netlink: 'syz.2.3366': attribute type 10 has an invalid length. [ 1639.178362][T19209] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3366'. [ 1640.135342][T19211] netlink: 'syz.2.3368': attribute type 10 has an invalid length. [ 1640.148133][T19211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.155675][T19211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1640.173885][T19211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.181702][T19211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.190141][T19211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.198926][T19211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.312055][T19211] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1641.018559][T19211] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1641.086512][T19211] qnx6: wrong signature (magic) in superblock #1. [ 1641.108402][T19211] qnx6: unable to read the first superblock [ 1643.100121][T19228] kthread_run failed with err -4 [ 1647.193794][T19256] loop6: detected capacity change from 0 to 7 [ 1647.209875][T19256] Dev loop6: unable to read RDB block 7 [ 1647.220771][T19256] loop6: unable to read partition table [ 1647.248668][T19256] loop6: partition table beyond EOD, truncated [ 1647.289001][T19256] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1647.962735][T19266] 9pnet_fd: Insufficient options for proto=fd [ 1648.072892][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c43f000: rx timeout, send abort [ 1648.447356][T19269] @: renamed from vlan0 (while UP) [ 1648.581784][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c43f000: abort rx timeout. Force session deactivation [ 1651.573670][T19298] lo speed is unknown, defaulting to 1000 [ 1652.379416][T12170] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1652.548292][T12170] usb 3-1: Using ep0 maxpacket: 8 [ 1652.627266][T12170] usb 3-1: config 0 has no interfaces? [ 1652.920710][T12170] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc [ 1653.094644][T12170] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.230551][T12170] usb 3-1: Product: syz [ 1653.258295][T12170] usb 3-1: Manufacturer: syz [ 1653.549522][T12170] usb 3-1: SerialNumber: syz [ 1653.766334][T12170] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1653.988495][T12170] r8152-cfgselector 3-1: config 0 descriptor?? [ 1654.019147][T12170] r8152-cfgselector 3-1: can't set config #0, error -71 [ 1654.047988][T12170] r8152-cfgselector 3-1: USB disconnect, device number 56 [ 1654.995240][T19341] loop2: detected capacity change from 0 to 7 [ 1655.166754][T19341] Dev loop2: unable to read RDB block 7 [ 1655.173239][T19341] loop2: AHDI p1 p2 [ 1655.203955][T19341] loop2: partition table partially beyond EOD, truncated [ 1655.230939][T19341] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 1656.051941][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3405'. [ 1656.065929][T19352] loop6: detected capacity change from 0 to 7 [ 1656.074558][T19352] Dev loop6: unable to read RDB block 7 [ 1656.080380][T19352] loop6: unable to read partition table [ 1656.101317][T19352] loop6: partition table beyond EOD, truncated [ 1656.107769][T19352] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1659.812673][T19384] comedi comedi3: 8255: I/O port conflict (0x404f26,4) [ 1659.822899][T19375] delete_channel: no stack [ 1659.903022][T19384] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1659.943924][T19384] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1659.950547][T19384] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 1660.000931][T19384] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 1660.043478][T19384] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1660.054149][T19384] comedi comedi3: 8255: I/O port conflict (0x3bf,4) [ 1660.079507][T19384] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1660.321066][T19384] comedi comedi3: 8255: I/O port conflict (0x20000001,4) [ 1660.333155][T19384] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 1661.333412][T19384] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1661.340051][T19384] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1661.648178][T19398] overlayfs: failed to clone upperpath [ 1661.700649][T19384] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 1661.758128][T19384] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1661.998072][T19401] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3420'. [ 1662.665391][T19413] 9pnet_fd: Insufficient options for proto=fd [ 1665.681821][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062fbc800: rx timeout, send abort [ 1665.846088][T19442] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1666.190508][ C0] vcan0: j1939_tp_rxtimer: 0xffff888062fbc800: abort rx timeout. Force session deactivation [ 1668.847058][T19464] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3436'. [ 1669.568626][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 1671.564212][T19500] loop6: detected capacity change from 0 to 7 [ 1671.581613][T19500] Dev loop6: unable to read RDB block 7 [ 1671.607886][T19500] loop6: unable to read partition table [ 1671.623632][T19500] loop6: partition table beyond EOD, truncated [ 1671.642026][T19500] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1671.714032][T19506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1674.599441][T19533] netlink: 'syz.2.3459': attribute type 10 has an invalid length. [ 1674.665972][T19533] geneve0: entered promiscuous mode [ 1674.752381][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.752461][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.764384][T19533] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1675.110204][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1675.172130][T19549] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1675.191221][T19550] loop6: detected capacity change from 0 to 7 [ 1675.231925][T19550] Dev loop6: unable to read RDB block 7 [ 1675.248522][T19550] loop6: unable to read partition table [ 1675.263522][T19550] loop6: partition table beyond EOD, truncated [ 1675.269941][T19550] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1676.349722][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3469'. [ 1677.375845][T19587] 9pnet_fd: Insufficient options for proto=fd [ 1677.591627][ T51] Bluetooth: hci0: command 0x0c20 tx timeout [ 1678.127936][ T30] audit: type=1326 audit(3511278010.632:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19589 comm="syz.2.3479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd545f8ebe9 code=0x0 [ 1678.447687][T19588] syzkaller0: entered promiscuous mode [ 1678.633274][T19588] syzkaller0: entered allmulticast mode [ 1679.674575][T10822] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1679.740716][T19616] loop6: detected capacity change from 0 to 7 [ 1679.753594][T19616] Dev loop6: unable to read RDB block 7 [ 1679.760038][T19616] loop6: unable to read partition table [ 1679.766535][T19616] loop6: partition table beyond EOD, truncated [ 1679.773196][T19616] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1679.878021][T10822] usb 3-1: Using ep0 maxpacket: 16 [ 1679.897051][T10822] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1679.924814][T10822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.937557][T10822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1679.953161][T10822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1679.962297][T10822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.202673][T10822] usb 3-1: Product: syz [ 1680.210096][T10822] usb 3-1: Manufacturer: syz [ 1680.221363][T10822] usb 3-1: SerialNumber: syz [ 1680.675433][T10822] usb 3-1: 0:2 : does not exist [ 1682.827161][T10822] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 1682.903799][T10822] usb 3-1: USB disconnect, device number 57 [ 1686.758199][T19660] loop6: detected capacity change from 0 to 7 [ 1686.805825][T19660] Dev loop6: unable to read RDB block 7 [ 1686.841560][T19660] loop6: unable to read partition table [ 1686.888913][T19660] loop6: partition table beyond EOD, truncated [ 1687.084495][T19660] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1692.337028][T19709] xt_TCPMSS: Only works on TCP SYN packets [ 1692.775151][T19710] loop6: detected capacity change from 0 to 7 [ 1692.823108][T19710] Dev loop6: unable to read RDB block 7 [ 1692.838104][T19710] loop6: unable to read partition table [ 1692.899237][T19710] loop6: partition table beyond EOD, truncated [ 1692.905545][T19710] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1693.183413][T19719] netlink: 'syz.0.3516': attribute type 10 has an invalid length. [ 1693.217096][T19719] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1694.458327][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 1697.785276][ T9] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1698.156574][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.185216][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1698.215717][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 1698.228800][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.254994][T19757] loop6: detected capacity change from 0 to 7 [ 1698.255768][ T9] usb 3-1: config 0 descriptor?? [ 1698.270361][T19757] Dev loop6: unable to read RDB block 7 [ 1698.279043][T19757] loop6: unable to read partition table [ 1698.290482][T19757] loop6: partition table beyond EOD, truncated [ 1698.321028][T19757] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1698.778867][T19737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1698.906780][T19737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1698.976070][T19733] Bluetooth: hci4: command 0x0405 tx timeout [ 1699.215693][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1699.244461][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1699.555338][ T9] usb 3-1: USB disconnect, device number 58 [ 1699.851397][T19774] loop2: detected capacity change from 0 to 7 [ 1699.867682][T19774] loop2: [ 1699.870726][T19774] loop2: partition table partially beyond EOD, truncated [ 1700.124492][T19778] 9pnet_fd: Insufficient options for proto=fd [ 1700.885017][T19733] Bluetooth: hci1: command 0x0406 tx timeout [ 1705.041298][T19733] Bluetooth: hci2: command 0x0405 tx timeout [ 1706.347428][T19825] 9pnet_fd: Insufficient options for proto=fd [ 1707.320741][T19846] netlink: 'syz.2.3546': attribute type 1 has an invalid length. [ 1707.341529][T19857] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3547'. [ 1707.441573][T19846] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3546'. [ 1707.634467][T19857] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3547'. [ 1708.768448][T19881] No control pipe specified [ 1710.570274][T19733] Bluetooth: hci1: command 0x0406 tx timeout [ 1712.189724][T19920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3561'. [ 1712.244152][T19920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3561'. [ 1712.303896][ T30] audit: type=1326 audit(3511278044.805:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19921 comm="syz.0.3563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f738398ebe9 code=0x0 [ 1713.499387][ T9] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 1713.830576][ T9] usb 7-1: config 1 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1713.859854][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1713.895589][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 1713.910958][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.930352][ T9] usb 7-1: Product: syz [ 1713.939336][ T9] usb 7-1: Manufacturer: 뭇⳷턚鏓㿵䤸ၿ栘㪃ꯋ퀬俺Օཇ懖楣쭲웩析㈷⍱쒭瀦率ꔎ쒐닐ɒ뭅诡꽿ᶹ뫐몠䴩⛕珂ឣ꩖擻癑峠ᰂ㄃⭱㬛Ủ䢮奆滤濋믠颜Ԙ౻ওÞ먯꽨ᠵ죖蓁䢠ﭻ醭瘽螫￾꫃壽믏跓垟訮蕾䐎⸙螮 [ 1714.032156][ T9] usb 7-1: SerialNumber: syz [ 1714.067861][T19936] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1714.376606][ T9] usbhid 7-1:1.0: can't add hid device: -71 [ 1714.389851][ T9] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 1714.413597][ T9] usb 7-1: USB disconnect, device number 37 [ 1715.770674][T19733] Bluetooth: hci1: command 0x0406 tx timeout [ 1716.545203][T19972] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1716.744667][T19978] nfs4: Unknown parameter 'rootcontext' [ 1718.206434][T20011] kvm: pic: non byte write [ 1720.470149][T20052] input: syz0 as /devices/virtual/input/input27 [ 1721.269754][T20084] netlink: 'syz.5.3620': attribute type 1 has an invalid length. [ 1721.295610][T20080] syzkaller0: entered promiscuous mode [ 1721.301378][T20080] syzkaller0: entered allmulticast mode [ 1722.857742][T20109] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96 [ 1732.936057][T20169] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1735.666736][T20217] 9pnet_fd: Insufficient options for proto=fd [ 1736.186485][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.194078][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.719151][T20234] trusted_key: encrypted_key: insufficient parameters specified [ 1738.642637][T20261] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1742.528458][T20291] caif0: entered allmulticast mode [ 1742.919677][T20297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3688'. [ 1742.985543][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3688'. [ 1745.836691][T20336] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3702'. [ 1745.951850][T20339] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3705'. [ 1746.053500][T20339] vlan3: entered promiscuous mode [ 1746.084180][T20339] syz_tun: entered promiscuous mode [ 1747.597722][T20356] netlink: 'syz.5.3708': attribute type 3 has an invalid length. [ 1747.606020][T20356] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3708'. [ 1747.945224][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3709'. [ 1747.985118][T20358] bridge0: port 2(bridge_slave_1) entered disabled state [ 1747.993032][T20358] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.734273][T20370] ieee802154 phy0 wpan0: encryption failed: -22 [ 1750.504793][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3720'. [ 1750.514275][T20400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3720'. [ 1750.701707][T20400] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1750.710668][T20400] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1750.719681][T20400] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1750.728494][T20400] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1751.268731][T20403] bridge0: port 2(bridge_slave_1) entered disabled state [ 1751.287153][T20403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1751.294544][T20403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1751.779347][T20424] tipc: Started in network mode [ 1751.784894][T20424] tipc: Node identity 061d730ee7b9, cluster identity 4711 [ 1751.795254][T20424] tipc: Enabled bearer , priority 0 [ 1751.825809][T20418] tipc: Resetting bearer [ 1752.861598][T12170] tipc: Node number set to 3785650958 [ 1754.259297][ T30] audit: type=1326 audit(3511278086.734:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20449 comm="syz.0.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398ebe9 code=0x7ffc0000 [ 1754.299020][ T30] audit: type=1326 audit(3511278086.764:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20449 comm="syz.0.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398ebe9 code=0x7ffc0000 [ 1754.340113][ T30] audit: type=1326 audit(3511278086.764:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20449 comm="syz.0.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f738398ebe9 code=0x7ffc0000 [ 1754.387216][ T30] audit: type=1326 audit(3511278086.764:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20449 comm="syz.0.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398ebe9 code=0x7ffc0000 [ 1754.413277][ T30] audit: type=1326 audit(3511278086.764:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20449 comm="syz.0.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398ebe9 code=0x7ffc0000 [ 1754.441153][ T30] audit: type=1326 audit(3511278086.764:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20449 comm="syz.0.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f738398ebe9 code=0x7ffc0000 [ 1754.470419][ T30] audit: type=1326 audit(3511278086.764:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20449 comm="syz.0.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398ebe9 code=0x7ffc0000 [ 1754.504192][ T30] audit: type=1326 audit(3511278086.764:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20449 comm="syz.0.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398ebe9 code=0x7ffc0000 [ 1754.526323][ T30] audit: type=1326 audit(3511278086.764:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20449 comm="syz.0.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f738398ebe9 code=0x7ffc0000 [ 1754.549626][ T30] audit: type=1326 audit(3511278086.764:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20449 comm="syz.0.3740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f738398ebe9 code=0x7ffc0000 [ 1755.200420][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3743'. [ 1755.981052][T20418] tipc: Disabling bearer [ 1756.579272][T20480] @: renamed from vlan0 (while UP) [ 1757.041314][T19733] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1757.781042][T20497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1761.577105][T20511] netlink: 'syz.3.3761': attribute type 12 has an invalid length. [ 1762.233361][T20534] ptrace attach of "./syz-executor exec"[15069] was attempted by " [ 1762.554885][T13469] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1762.906838][T13469] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1762.932802][T13469] usb 6-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 1762.992901][T13469] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.009037][T13469] usb 6-1: config 0 descriptor?? [ 1763.605433][T20566] netlink: 'syz.0.3781': attribute type 1 has an invalid length. [ 1764.288552][T20566] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1764.426786][T13469] acrux 0003:1A34:F705.0015: item fetching failed at offset 3/7 [ 1764.445724][T13469] acrux 0003:1A34:F705.0015: parse failed [ 1764.451706][T13469] acrux 0003:1A34:F705.0015: probe with driver acrux failed with error -22 [ 1764.677969][T13469] usb 6-1: USB disconnect, device number 41 [ 1765.510804][T19733] Bluetooth: hci0: unexpected cc 0x0c20 length: 4 > 1 [ 1768.941880][T20605] [ 1768.944308][T20605] ====================================================== [ 1768.951420][T20605] WARNING: possible circular locking dependency detected [ 1768.958504][T20605] 6.16.0-syzkaller #0 Not tainted [ 1768.963572][T20605] ------------------------------------------------------ [ 1768.970643][T20605] syz.5.3793/20605 is trying to acquire lock: [ 1768.976755][T20605] ffff8880259e5988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1768.987947][T20605] [ 1768.987947][T20605] but task is already holding lock: [ 1768.995354][T20605] ffff8880259e5a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 1769.004394][T20605] [ 1769.004394][T20605] which lock already depends on the new lock. [ 1769.004394][T20605] [ 1769.014848][T20605] [ 1769.014848][T20605] the existing dependency chain (in reverse order) is: [ 1769.023887][T20605] [ 1769.023887][T20605] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 1769.031752][T20605] lock_acquire+0x120/0x360 [ 1769.036810][T20605] __mutex_lock+0x182/0xe80 [ 1769.041872][T20605] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1769.048071][T20605] nbd_config_put+0x2c/0x790 [ 1769.053252][T20605] nbd_release+0xfe/0x140 [ 1769.058181][T20605] bdev_release+0x533/0x650 [ 1769.063261][T20605] blkdev_release+0x15/0x20 [ 1769.068320][T20605] __fput+0x449/0xa70 [ 1769.072848][T20605] fput_close_sync+0x119/0x200 [ 1769.078155][T20605] __x64_sys_close+0x7f/0x110 [ 1769.083378][T20605] do_syscall_64+0xfa/0x3b0 [ 1769.088427][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.094866][T20605] [ 1769.094866][T20605] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 1769.102723][T20605] lock_acquire+0x120/0x360 [ 1769.107773][T20605] __mutex_lock+0x182/0xe80 [ 1769.112816][T20605] __del_gendisk+0x129/0x9e0 [ 1769.117952][T20605] del_gendisk+0xe8/0x160 [ 1769.122855][T20605] nbd_dev_remove_work+0x47/0xe0 [ 1769.128381][T20605] process_scheduled_works+0xade/0x17b0 [ 1769.134505][T20605] worker_thread+0x8a0/0xda0 [ 1769.139658][T20605] kthread+0x70e/0x8a0 [ 1769.144277][T20605] ret_from_fork+0x3fc/0x770 [ 1769.149637][T20605] ret_from_fork_asm+0x1a/0x30 [ 1769.154975][T20605] [ 1769.154975][T20605] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1769.163471][T20605] validate_chain+0xb9b/0x2140 [ 1769.168794][T20605] __lock_acquire+0xab9/0xd20 [ 1769.174014][T20605] lock_acquire+0x120/0x360 [ 1769.179061][T20605] down_write+0x96/0x1f0 [ 1769.183897][T20605] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1769.190268][T20605] nbd_start_device+0x16c/0xac0 [ 1769.195680][T20605] nbd_ioctl+0x636/0xeb0 [ 1769.200479][T20605] blkdev_ioctl+0x5a8/0x6d0 [ 1769.205526][T20605] __se_sys_ioctl+0xfc/0x170 [ 1769.210678][T20605] do_syscall_64+0xfa/0x3b0 [ 1769.215727][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.222164][T20605] [ 1769.222164][T20605] other info that might help us debug this: [ 1769.222164][T20605] [ 1769.232409][T20605] Chain exists of: [ 1769.232409][T20605] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 1769.232409][T20605] [ 1769.246655][T20605] Possible unsafe locking scenario: [ 1769.246655][T20605] [ 1769.254176][T20605] CPU0 CPU1 [ 1769.259602][T20605] ---- ---- [ 1769.265013][T20605] lock(&nbd->config_lock); [ 1769.269657][T20605] lock(&disk->open_mutex); [ 1769.276805][T20605] lock(&nbd->config_lock); [ 1769.283966][T20605] lock(&set->update_nr_hwq_lock); [ 1769.289195][T20605] [ 1769.289195][T20605] *** DEADLOCK *** [ 1769.289195][T20605] [ 1769.297354][T20605] 1 lock held by syz.5.3793/20605: [ 1769.302485][T20605] #0: ffff8880259e5a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 1769.311866][T20605] [ 1769.311866][T20605] stack backtrace: [ 1769.317773][T20605] CPU: 0 UID: 0 PID: 20605 Comm: syz.5.3793 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1769.317800][T20605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1769.317816][T20605] Call Trace: [ 1769.317828][T20605] [ 1769.317840][T20605] dump_stack_lvl+0x189/0x250 [ 1769.317874][T20605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1769.317896][T20605] ? __pfx__printk+0x10/0x10 [ 1769.317925][T20605] ? print_lock_name+0xde/0x100 [ 1769.317952][T20605] print_circular_bug+0x2ee/0x310 [ 1769.317980][T20605] check_noncircular+0x134/0x160 [ 1769.318005][T20605] validate_chain+0xb9b/0x2140 [ 1769.318027][T20605] ? stack_depot_save_flags+0x40/0x900 [ 1769.318056][T20605] __lock_acquire+0xab9/0xd20 [ 1769.318076][T20605] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1769.318102][T20605] lock_acquire+0x120/0x360 [ 1769.318118][T20605] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1769.318144][T20605] ? __mutex_trylock_common+0x153/0x260 [ 1769.318168][T20605] down_write+0x96/0x1f0 [ 1769.318197][T20605] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1769.318223][T20605] ? __pfx_down_write+0x10/0x10 [ 1769.318245][T20605] ? rcu_is_watching+0x15/0xb0 [ 1769.318268][T20605] ? trace_contention_end+0x39/0x120 [ 1769.318295][T20605] ? __mutex_lock+0x330/0xe80 [ 1769.318318][T20605] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1769.318346][T20605] ? blkdev_common_ioctl+0xfc3/0x2450 [ 1769.318369][T20605] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1769.318387][T20605] ? nbd_ioctl+0x131/0xeb0 [ 1769.318413][T20605] ? __pfx___mutex_lock+0x10/0x10 [ 1769.318435][T20605] nbd_start_device+0x16c/0xac0 [ 1769.318472][T20605] ? security_capable+0x7e/0x2e0 [ 1769.318503][T20605] nbd_ioctl+0x636/0xeb0 [ 1769.318532][T20605] ? __pfx_nbd_ioctl+0x10/0x10 [ 1769.318555][T20605] ? __asan_memset+0x22/0x50 [ 1769.318584][T20605] ? smack_file_ioctl+0x24a/0x340 [ 1769.318604][T20605] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1769.318621][T20605] ? __pfx_nbd_ioctl+0x10/0x10 [ 1769.318644][T20605] blkdev_ioctl+0x5a8/0x6d0 [ 1769.318667][T20605] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1769.318688][T20605] ? __fget_files+0x2a/0x420 [ 1769.318714][T20605] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1769.318735][T20605] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1769.318755][T20605] __se_sys_ioctl+0xfc/0x170 [ 1769.318785][T20605] do_syscall_64+0xfa/0x3b0 [ 1769.318808][T20605] ? lockdep_hardirqs_on+0x9c/0x150 [ 1769.318826][T20605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.318855][T20605] ? clear_bhb_loop+0x60/0xb0 [ 1769.318877][T20605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1769.318899][T20605] RIP: 0033:0x7fd1d358ebe9 [ 1769.318922][T20605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1769.318939][T20605] RSP: 002b:00007fd1d43c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1769.318961][T20605] RAX: ffffffffffffffda RBX: 00007fd1d37b5fa0 RCX: 00007fd1d358ebe9 [ 1769.318978][T20605] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 1769.318991][T20605] RBP: 00007fd1d3611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1769.319004][T20605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1769.319018][T20605] R13: 00007fd1d37b6038 R14: 00007fd1d37b5fa0 R15: 00007ffc1c82a1b8 [ 1769.319042][T20605] [ 1770.100511][T20605] block nbd5: shutting down sockets