last executing test programs: 5.722665069s ago: executing program 2 (id=946): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.723011144s ago: executing program 1 (id=951): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0xfffffffffffffce8, 0xa]}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) close_range(r0, 0xffffffffffffffff, 0x0) 4.480727295s ago: executing program 1 (id=952): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) open(0x0, 0x145142, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pread64(r2, &(0x7f00000014c0)=""/4104, 0x1008, 0x10000) 4.208799877s ago: executing program 2 (id=953): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x1, 0x2, 0x4, &(0x7f0000000080)={0x5, "4a86091a8f3fee380d56cc063e78cc065c6c6ae17dfa92017cfe97e0b8c57af8cc"}}) 3.618993181s ago: executing program 1 (id=957): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 3.433275571s ago: executing program 1 (id=959): syz_io_uring_setup(0x49a, &(0x7f0000000200)={0x0, 0xb6b8, 0x80, 0x2, 0x1}, &(0x7f00000000c0), &(0x7f0000000280)) 3.359333082s ago: executing program 1 (id=960): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d1050120001001020301090212"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000640)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) 2.896509364s ago: executing program 0 (id=962): set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000b5000/0x2000)=nil, 0x2000, 0x100000c, 0x4010, 0xffffffffffffffff, 0xbe15f000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0c0100001a0001000000000000000000e0000002000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = epoll_create1(0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffffe3, &(0x7f0000000240)={&(0x7f0000002440)=ANY=[@ANYRESDEC=r2, @ANYRES32=r0, @ANYBLOB="a65a26d5b594e0b20f89cabfb7e8e8595f3535590705000f58ee44237f7859c04cf7a303722c057b5e77796a6acbe31031294581653593011369af77863d33f8ecf0adb06875639b0ad06e4ef9f5b52543d7f672163a3fa7d47c8d4e2a3646b60c1b83ffb5bde5a6b9503abdd84b293a3f1e7906325e6bef72691da958366924aa798b3dff6159462c1d92b9b95f80893ba661ce568d4d"], 0x54}, 0x1, 0x0, 0x0, 0x14000082}, 0x80) r4 = syz_open_dev$vim2m(&(0x7f0000000180), 0x20000000204, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x24, 0x2, 0x0, "114101000014000000000000000900004000", 0x31384142}) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r5 = fanotify_init(0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x61, 0x4800102a, r6, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r5, 0x61, 0x40001002, r7, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) setsockopt$sock_timeval(r8, 0x1, 0x14, &(0x7f0000000a80)={0x0, 0xea60}, 0x10) recvmsg(r8, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001880)=""/216, 0xd8}], 0x1}, 0x2) epoll_wait(r1, &(0x7f0000000480)=[{}], 0x1, 0x10020200) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x9d32f4b220c67360}) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r9, 0x541b, &(0x7f0000000080)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00@\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fdff7fff4e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800ab00fcffffff08000b006b0b00000600110003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000050}, 0x4044040) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffffffc0, 0x800, 0x25, 0x7, 0x3, "178ff74c9dd96735dd788f3d8b3ba149104452047cb805c420a97841ea6f73d9da676d56e0c946f19366a583cb88b32f7eda77f85e3528839c1542dcc5d5577343155fcf4f54d1f2e19fae20f9fb15e09d08cbba9dbb9b75be4cd23ee3a77747b3eaa69bd3c54a83fa784593344a0cb53f57b5fa8e31b2f2da2a60d4d968c712"}) 2.018701899s ago: executing program 0 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x80}}, 0x0) 1.920595579s ago: executing program 0 (id=965): openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x789d2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x9, 0x4cca}, {0x6, 0x1, 0x5, 0x10, 0x7, 0x312}, 0x3, 0x10, 0xd1d}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xa89d84ea6e694e0f}, @TCA_TBF_BURST={0x8, 0x6, 0xb1a}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x80000406, 0xffff, 0xfdffffff, 0x9}, [@TCA_NETEM_RATE={0x14, 0x6, {0x6, 0x80000000, 0x9, 0x6}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x2000c031}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.77826976s ago: executing program 0 (id=966): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x7800, 0x0, 0x0, 0x8f2, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}}}}) 1.699354451s ago: executing program 2 (id=967): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 1.637689131s ago: executing program 2 (id=968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x46, &(0x7f0000000140)=[@cr0={0x0, 0x80000020}], 0x1) 1.580711352s ago: executing program 0 (id=969): syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r2) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32=r0]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.554760821s ago: executing program 3 (id=970): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x2, 0x2, 0x7, 0x1ffd, 0x2}, 0x14) listen(r0, 0x1ff) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="02", 0x1, 0x4000000, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) 1.396838652s ago: executing program 2 (id=971): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT=r0], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peekuser(0x3, r1, 0x38d) ptrace(0x8, r1) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x115) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) 1.309040923s ago: executing program 0 (id=972): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) 1.252592113s ago: executing program 3 (id=973): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x40, 0x2) 1.179559943s ago: executing program 3 (id=974): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5", 0x4) 1.127467964s ago: executing program 3 (id=975): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x2, {0x7b, 0x5, 0xff, 0x8}}) 1.036527424s ago: executing program 3 (id=976): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) 1.034127034s ago: executing program 3 (id=977): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRES8], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) poll(&(0x7f00000000c0)=[{r1, 0x2405}], 0x1, 0x2) 268.930169ms ago: executing program 1 (id=978): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x4}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r2, 0x18, &(0x7f0000000140)={0x5, r2, 0x1c, {0x9, 0x1}, 0x6}, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r5, &(0x7f0000000000), 0x10) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000002c0)) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0), 0xf00) keyctl$set_reqkey_keyring(0xe, 0x7) request_key(&(0x7f0000000240)='rxrpc_s\x00', 0x0, 0x0, 0x0) close(r5) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0x90, 0x24, 0xf0b, 0x4070bd28, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFCONF(r5, 0x8912, &(0x7f0000000180)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x14d802, 0x0) dup(r7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) 0s ago: executing program 2 (id=979): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x3, 0xffffffff, 0x1, 0xc, 0x12, 0x4, 0xd, 0xfffffffc, 0x2, 0x1, 0xfffffffe, 0xffffffff, 0x2, 0x101, 0x14, 0x9, 0x3, 0x352f, 0x19, 0xcaa7, 0x80, 0x20001e58, 0x7, 0x2000e67, 0x3c, 0x8, 0xfffffffe, 0x0, 0xfffffff8]}) kernel console output (not intermixed with test programs): r after parsing attributes in process `syz.0.122'. [ 112.632981][ T6297] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.642232][ T6297] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.651042][ T6297] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.659811][ T6297] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.717731][ T6297] Zero length message leads to an empty skb [ 112.795530][ T5794] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 114.131189][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 114.855798][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 115.055297][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 116.013863][ T5794] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 116.975518][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 117.505564][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.535620][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 117.706885][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.738296][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.784461][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 117.796149][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.831479][ T9] usb 2-1: config 0 descriptor?? [ 118.045825][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 118.268711][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.284796][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.307172][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.324722][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.341490][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.361670][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.381083][ T9] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 118.409238][ T9] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 118.519390][ T9] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 118.734541][ T5794] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 120.127130][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 120.215009][ T9] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 120.235970][ T9] usb 2-1: USB disconnect, device number 3 [ 120.390812][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.153'. [ 120.742916][ T6398] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.765946][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 121.592448][ T5793] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 122.721012][ T6411] sched: RT throttling activated [ 122.846851][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 123.232437][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 123.775584][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 124.447158][ T6437] binder: BINDER_SET_CONTEXT_MGR already set [ 124.454693][ T6437] binder: 6436:6437 ioctl 4018620d 200000004a80 returned -16 [ 124.552816][ T8] IPVS: starting estimator thread 0... [ 124.615968][ T5794] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 124.755626][ T6441] IPVS: using max 19 ests per chain, 45600 per kthread [ 125.935541][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 126.075775][ T6450] netlink: 'syz.1.172': attribute type 21 has an invalid length. [ 126.106068][ T6450] netlink: 128 bytes leftover after parsing attributes in process `syz.1.172'. [ 126.127321][ T6450] netlink: 'syz.1.172': attribute type 4 has an invalid length. [ 126.135104][ T6450] netlink: 'syz.1.172': attribute type 3 has an invalid length. [ 126.174272][ T6450] netlink: 3 bytes leftover after parsing attributes in process `syz.1.172'. [ 126.626130][ T6467] tipc: Enabling of bearer rejected, failed to enable media [ 126.648167][ T6467] syzkaller0: entered promiscuous mode [ 126.698688][ T6467] syzkaller0: entered allmulticast mode [ 127.144944][ T5793] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 127.966153][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 128.700248][ T2130] IPVS: starting estimator thread 0... [ 129.165570][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 129.359414][ T5794] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 129.375008][ T5794] CPU: 1 PID: 5794 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 129.382616][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.392718][ T5794] Workqueue: hci0 hci_rx_work [ 129.397457][ T5794] Call Trace: [ 129.400749][ T5794] [ 129.403703][ T5794] dump_stack_lvl+0x16c/0x230 [ 129.408414][ T5794] ? show_regs_print_info+0x20/0x20 [ 129.413646][ T5794] ? load_image+0x3b0/0x3b0 [ 129.418197][ T5794] sysfs_create_dir_ns+0x256/0x280 [ 129.423339][ T5794] ? hci_rx_work+0x43a/0xd80 [ 129.427964][ T5794] ? sysfs_warn_dup+0xa0/0xa0 [ 129.432678][ T5794] ? do_raw_spin_unlock+0x121/0x230 [ 129.437907][ T5794] kobject_add_internal+0x6b8/0xc70 [ 129.443149][ T5794] kobject_add+0x156/0x220 [ 129.447601][ T5794] ? __rwlock_init+0x150/0x150 [ 129.452402][ T5794] ? kobject_init+0x1e0/0x1e0 [ 129.457099][ T5794] ? _raw_spin_unlock+0x28/0x40 [ 129.462008][ T5794] ? get_device_parent+0x366/0x390 [ 129.467269][ T5794] device_add+0x408/0xc20 [ 129.471846][ T5794] hci_conn_add_sysfs+0xd5/0x1e0 [ 129.477055][ T5794] le_conn_complete_evt+0xf36/0x1500 [ 129.482693][ T5794] ? hci_event_packet+0x4a7/0x1210 [ 129.487820][ T5794] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 129.494068][ T5794] ? __copy_skb_header+0xa7/0x550 [ 129.499102][ T5794] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 129.504742][ T5794] ? skb_pull_data+0xfb/0x200 [ 129.509435][ T5794] hci_le_enh_conn_complete_evt+0x189/0x460 [ 129.515352][ T5794] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 129.521944][ T5794] ? hci_remote_host_features_evt+0x160/0x160 [ 129.528108][ T5794] hci_event_packet+0x795/0x1210 [ 129.533049][ T5794] ? bis_list+0x290/0x290 [ 129.537464][ T5794] ? lockdep_hardirqs_on+0x98/0x150 [ 129.542661][ T5794] ? hci_send_to_monitor+0xd7/0x4f0 [ 129.547858][ T5794] hci_rx_work+0x43a/0xd80 [ 129.552277][ T5794] ? process_scheduled_works+0x957/0x15b0 [ 129.557992][ T5794] process_scheduled_works+0xa45/0x15b0 [ 129.563556][ T5794] ? assign_work+0x400/0x400 [ 129.568186][ T5794] ? assign_work+0x39e/0x400 [ 129.572801][ T5794] worker_thread+0xa55/0xfc0 [ 129.577436][ T5794] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 129.583334][ T5794] ? _raw_spin_unlock+0x40/0x40 [ 129.588179][ T5794] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 129.594085][ T5794] kthread+0x2fa/0x390 [ 129.598148][ T5794] ? pr_cont_work+0x560/0x560 [ 129.602995][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 129.607575][ T5794] ret_from_fork+0x48/0x80 [ 129.611988][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 129.616567][ T5794] ret_from_fork_asm+0x11/0x20 [ 129.621342][ T5794] [ 129.627273][ T6516] IPVS: using max 34 ests per chain, 81600 per kthread [ 129.635232][ T5794] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 129.649154][ T5794] Bluetooth: hci0: failed to register connection device [ 129.668350][ T5794] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 130.045507][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 130.663168][ T6539] netlink: 28 bytes leftover after parsing attributes in process `syz.1.198'. [ 130.898796][ T5794] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 130.908573][ T5794] CPU: 1 PID: 5794 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 130.916150][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 130.926227][ T5794] Workqueue: hci3 hci_rx_work [ 130.930910][ T5794] Call Trace: [ 130.934178][ T5794] [ 130.937098][ T5794] dump_stack_lvl+0x16c/0x230 [ 130.941767][ T5794] ? show_regs_print_info+0x20/0x20 [ 130.946961][ T5794] ? load_image+0x3b0/0x3b0 [ 130.951465][ T5794] sysfs_create_dir_ns+0x256/0x280 [ 130.956607][ T5794] ? hci_rx_work+0x43a/0xd80 [ 130.961195][ T5794] ? sysfs_warn_dup+0xa0/0xa0 [ 130.965870][ T5794] ? do_raw_spin_unlock+0x121/0x230 [ 130.971068][ T5794] kobject_add_internal+0x6b8/0xc70 [ 130.976270][ T5794] kobject_add+0x156/0x220 [ 130.980670][ T5794] ? __rwlock_init+0x150/0x150 [ 130.985436][ T5794] ? kobject_init+0x1e0/0x1e0 [ 130.990115][ T5794] ? _raw_spin_unlock+0x28/0x40 [ 130.994954][ T5794] ? get_device_parent+0x366/0x390 [ 131.000076][ T5794] device_add+0x408/0xc20 [ 131.004436][ T5794] hci_conn_add_sysfs+0xd5/0x1e0 [ 131.009393][ T5794] le_conn_complete_evt+0xf36/0x1500 [ 131.014721][ T5794] ? hci_event_packet+0x4a7/0x1210 [ 131.019844][ T5794] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 131.026093][ T5794] ? __copy_skb_header+0xa7/0x550 [ 131.031112][ T5794] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 131.036738][ T5794] ? skb_pull_data+0xfb/0x200 [ 131.041405][ T5794] hci_le_enh_conn_complete_evt+0x189/0x460 [ 131.047292][ T5794] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 131.053705][ T5794] ? hci_remote_host_features_evt+0x160/0x160 [ 131.059763][ T5794] hci_event_packet+0x795/0x1210 [ 131.064704][ T5794] ? bis_list+0x290/0x290 [ 131.069030][ T5794] ? lockdep_hardirqs_on+0x98/0x150 [ 131.074217][ T5794] ? hci_send_to_monitor+0xd7/0x4f0 [ 131.079417][ T5794] hci_rx_work+0x43a/0xd80 [ 131.083848][ T5794] ? process_scheduled_works+0x957/0x15b0 [ 131.089579][ T5794] process_scheduled_works+0xa45/0x15b0 [ 131.095154][ T5794] ? assign_work+0x400/0x400 [ 131.099745][ T5794] ? assign_work+0x39e/0x400 [ 131.104339][ T5794] worker_thread+0xa55/0xfc0 [ 131.108938][ T5794] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 131.114846][ T5794] ? _raw_spin_unlock+0x40/0x40 [ 131.119689][ T5794] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 131.125583][ T5794] kthread+0x2fa/0x390 [ 131.129659][ T5794] ? pr_cont_work+0x560/0x560 [ 131.134345][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 131.138940][ T5794] ret_from_fork+0x48/0x80 [ 131.143340][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 131.147919][ T5794] ret_from_fork_asm+0x11/0x20 [ 131.152713][ T5794] [ 131.159328][ T5794] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 131.174339][ T5794] Bluetooth: hci3: failed to register connection device [ 131.221266][ T5794] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 131.275834][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 133.095785][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.102099][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.178181][ T5848] IPVS: starting estimator thread 0... [ 133.250224][ T5787] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 133.255626][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 133.325515][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 133.422395][ T6582] IPVS: using max 20 ests per chain, 48000 per kthread [ 135.245482][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 135.325499][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 136.199332][ T5794] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 136.209086][ T5794] CPU: 1 PID: 5794 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 136.216661][ T5794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 136.226719][ T5794] Workqueue: hci3 hci_rx_work [ 136.231407][ T5794] Call Trace: [ 136.234682][ T5794] [ 136.237606][ T5794] dump_stack_lvl+0x16c/0x230 [ 136.242286][ T5794] ? show_regs_print_info+0x20/0x20 [ 136.247486][ T5794] ? load_image+0x3b0/0x3b0 [ 136.252086][ T5794] sysfs_create_dir_ns+0x256/0x280 [ 136.257212][ T5794] ? hci_rx_work+0x43a/0xd80 [ 136.261804][ T5794] ? sysfs_warn_dup+0xa0/0xa0 [ 136.266484][ T5794] ? do_raw_spin_unlock+0x121/0x230 [ 136.271680][ T5794] kobject_add_internal+0x6b8/0xc70 [ 136.276884][ T5794] kobject_add+0x156/0x220 [ 136.281295][ T5794] ? __rwlock_init+0x150/0x150 [ 136.286079][ T5794] ? kobject_init+0x1e0/0x1e0 [ 136.290776][ T5794] ? _raw_spin_unlock+0x28/0x40 [ 136.295737][ T5794] ? get_device_parent+0x366/0x390 [ 136.300883][ T5794] device_add+0x408/0xc20 [ 136.305233][ T5794] hci_conn_add_sysfs+0xd5/0x1e0 [ 136.310198][ T5794] le_conn_complete_evt+0xf36/0x1500 [ 136.315493][ T5794] ? hci_event_packet+0x4a7/0x1210 [ 136.320630][ T5794] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 136.326973][ T5794] ? __copy_skb_header+0xa7/0x550 [ 136.332028][ T5794] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 136.337668][ T5794] ? skb_pull_data+0xfb/0x200 [ 136.342346][ T5794] hci_le_enh_conn_complete_evt+0x189/0x460 [ 136.348248][ T5794] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 136.354665][ T5794] ? hci_remote_host_features_evt+0x160/0x160 [ 136.360728][ T5794] hci_event_packet+0x795/0x1210 [ 136.365673][ T5794] ? bis_list+0x290/0x290 [ 136.370014][ T5794] ? lockdep_hardirqs_on+0x98/0x150 [ 136.375209][ T5794] ? hci_send_to_monitor+0xd7/0x4f0 [ 136.380412][ T5794] hci_rx_work+0x43a/0xd80 [ 136.384840][ T5794] ? process_scheduled_works+0x957/0x15b0 [ 136.390562][ T5794] process_scheduled_works+0xa45/0x15b0 [ 136.396132][ T5794] ? assign_work+0x400/0x400 [ 136.400758][ T5794] ? assign_work+0x39e/0x400 [ 136.405446][ T5794] worker_thread+0xa55/0xfc0 [ 136.410037][ T5794] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 136.415998][ T5794] ? _raw_spin_unlock+0x40/0x40 [ 136.420892][ T5794] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 136.426829][ T5794] kthread+0x2fa/0x390 [ 136.430911][ T5794] ? pr_cont_work+0x560/0x560 [ 136.435589][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 136.440174][ T5794] ret_from_fork+0x48/0x80 [ 136.444592][ T5794] ? kthread_blkcg+0xd0/0xd0 [ 136.449184][ T5794] ret_from_fork_asm+0x11/0x20 [ 136.453972][ T5794] [ 136.457062][ C1] vkms_vblank_simulate: vblank timer overrun [ 136.464695][ T5794] kobject: kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 136.475312][ T6612] syzkaller0: entered promiscuous mode [ 136.478596][ T5794] Bluetooth: hci3: failed to register connection device [ 136.531335][ T6612] syzkaller0: entered allmulticast mode [ 136.558042][ T5793] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 136.730293][ T6612] tipc: Enabled bearer , priority 0 [ 136.760533][ T6610] tipc: Resetting bearer [ 136.840991][ T6610] tipc: Disabling bearer [ 137.435512][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 138.525492][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 138.550511][ T6634] cgroup: fork rejected by pids controller in /syz0 [ 138.728741][ T5794] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 139.653050][ T6647] tipc: Enabling of bearer rejected, failed to enable media [ 139.821508][ T6651] syzkaller0: entered promiscuous mode [ 139.840322][ T6651] syzkaller0: entered allmulticast mode [ 140.695755][ T5794] Bluetooth: hci3: command 0x0406 tx timeout [ 140.768097][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 141.245030][ T6676] syz.3.245 uses obsolete (PF_INET,SOCK_PACKET) [ 141.980351][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.019811][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.086017][ T6689] tipc: Enabled bearer , priority 0 [ 142.106138][ T6687] syzkaller0: entered promiscuous mode [ 142.125851][ T6687] syzkaller0: entered allmulticast mode [ 142.179092][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.203224][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.250516][ T6683] tipc: Resetting bearer [ 142.306919][ T6683] tipc: Disabling bearer [ 142.521207][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 142.558787][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.575565][ T28] audit: type=1326 audit(1762611139.516:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 142.723702][ T28] audit: type=1326 audit(1762611139.516:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 142.845583][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 143.008289][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 143.047585][ T28] audit: type=1326 audit(1762611139.516:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 143.170285][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.418482][ T28] audit: type=1326 audit(1762611139.516:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 143.440514][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.463930][ T28] audit: type=1326 audit(1762611139.516:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 143.486620][ T28] audit: type=1326 audit(1762611139.516:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 143.508916][ T28] audit: type=1326 audit(1762611139.516:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6700 comm="syz.1.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 143.767056][ T5787] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 143.777952][ T5787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 143.794668][ T5787] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 143.803447][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 143.812120][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 143.824560][ T5787] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 143.955816][ T12] tipc: Left network mode [ 144.415776][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 144.538680][ T6714] chnl_net:caif_netlink_parms(): no params data found [ 144.633501][ T8] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 144.655142][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.684954][ T8] usb 4-1: config 0 descriptor?? [ 144.929018][ T8] [drm] vendor descriptor length:6 data:06 5f 01 2f 00 65 00 00 00 00 00 [ 144.963734][ T6714] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.975603][ T6714] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.975733][ T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 144.982949][ T6714] bridge_slave_0: entered allmulticast mode [ 145.007128][ T6714] bridge_slave_0: entered promiscuous mode [ 145.053909][ T6751] syzkaller0: entered promiscuous mode [ 145.066477][ T6751] syzkaller0: entered allmulticast mode [ 145.088532][ T6714] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.106636][ T6714] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.113971][ T6714] bridge_slave_1: entered allmulticast mode [ 145.129851][ T8] [drm:udl_init] *ERROR* Selecting channel failed [ 145.134831][ T6714] bridge_slave_1: entered promiscuous mode [ 145.214397][ T8] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 145.241016][ T8] [drm] Initialized udl on minor 2 [ 145.265811][ T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 145.290432][ T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 145.317869][ T5848] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 145.336257][ T8] usb 4-1: USB disconnect, device number 3 [ 145.378751][ T5848] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 145.400591][ T6714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.562172][ T6714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.633894][ T6714] team0: Port device team_slave_0 added [ 145.892043][ T5787] Bluetooth: hci3: command tx timeout [ 145.977382][ T6714] team0: Port device team_slave_1 added [ 146.372135][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.417879][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.417904][ T6714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.420072][ T6714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.420086][ T6714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.420107][ T6714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.672717][ T6714] hsr_slave_0: entered promiscuous mode [ 146.673367][ T6714] hsr_slave_1: entered promiscuous mode [ 146.673847][ T6714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.673890][ T6714] Cannot create hsr debugfs directory [ 146.708801][ T12] hsr_slave_0: left promiscuous mode [ 146.709311][ T12] hsr_slave_1: left promiscuous mode [ 146.709923][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.709964][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.711057][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.711072][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.711517][ T12] bridge_slave_1: left allmulticast mode [ 146.711529][ T12] bridge_slave_1: left promiscuous mode [ 146.712833][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.836430][ T12] bridge_slave_0: left allmulticast mode [ 146.842639][ T12] bridge_slave_0: left promiscuous mode [ 146.854768][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.904884][ T12] veth1_macvtap: left promiscuous mode [ 146.921198][ T12] veth0_macvtap: left promiscuous mode [ 146.929112][ T12] veth1_vlan: left promiscuous mode [ 146.946568][ T12] veth0_vlan: left promiscuous mode [ 146.971525][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 146.996052][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.003860][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.045572][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.053372][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.080631][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.103171][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.128000][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.146318][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.154117][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.173826][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.211332][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.228909][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.246908][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.254702][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.302641][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.326844][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.348770][ T5788] hid-generic 0003:80000004:0000.0003: unknown main item tag 0x0 [ 147.379523][ T5788] hid-generic 0003:80000004:0000.0003: hidraw0: USB HID v0.00 Device [syz1] on syz0 [ 147.585892][ T6797] fido_id[6797]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 147.967266][ T5787] Bluetooth: hci3: command tx timeout [ 147.979265][ T5771] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x4 [ 148.003852][ T5771] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x2 [ 148.215202][ T5771] hid-generic 0000:3000000:0000.0004: unknown main item tag 0x3 [ 148.241632][ T5771] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 149.066065][ T6820] fido_id[6820]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 149.250921][ T12] team0 (unregistering): Port device team_slave_1 removed [ 149.302708][ T12] team0 (unregistering): Port device team_slave_0 removed [ 149.357814][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.422191][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.531174][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 149.737897][ T8] usb 2-1: config 0 has no interfaces? [ 149.760702][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 149.779702][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.805526][ T8] usb 2-1: config 0 descriptor?? [ 150.032461][ T5848] usb 2-1: USB disconnect, device number 4 [ 150.045516][ T5787] Bluetooth: hci3: command tx timeout [ 150.119585][ T12] bond0 (unregistering): Released all slaves [ 150.258092][ T6800] syzkaller0: entered promiscuous mode [ 150.264157][ T6800] syzkaller0: entered allmulticast mode [ 150.423355][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.288'. [ 150.440590][ T6838] netlink: 24 bytes leftover after parsing attributes in process `syz.3.288'. [ 150.603193][ T6840] vlan2: entered allmulticast mode [ 150.645585][ T5848] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 150.684038][ T28] audit: type=1326 audit(1762611147.616:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6845 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fa98f6c9 code=0x7ffc0000 [ 150.710589][ T28] audit: type=1326 audit(1762611147.616:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6845 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fa98f6c9 code=0x7ffc0000 [ 150.739771][ T28] audit: type=1326 audit(1762611147.626:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6845 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8fa98df10 code=0x7ffc0000 [ 150.829509][ T28] audit: type=1326 audit(1762611147.636:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6845 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fa98f6c9 code=0x7ffc0000 [ 150.875887][ T28] audit: type=1326 audit(1762611147.636:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6845 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fa98f6c9 code=0x7ffc0000 [ 150.923912][ T5848] usb 2-1: config 0 has no interfaces? [ 150.930007][ T5848] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 150.954499][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.963248][ T28] audit: type=1326 audit(1762611147.636:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6845 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fd8fa98f6c9 code=0x7ffc0000 [ 150.995920][ T5848] usb 2-1: config 0 descriptor?? [ 151.022124][ T12] IPVS: stop unused estimator thread 0... [ 151.031954][ T28] audit: type=1326 audit(1762611147.636:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6845 comm="syz.3.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fa98f6c9 code=0x7ffc0000 [ 151.228973][ T8] usb 2-1: USB disconnect, device number 5 [ 151.577811][ T6714] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.600075][ T6714] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.621256][ T6714] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.646907][ T6714] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.901015][ T6714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.916814][ T788] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.962760][ T6714] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.986378][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.993589][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.038123][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.045339][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.128547][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 152.140043][ T5787] Bluetooth: hci3: command tx timeout [ 152.155666][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.166086][ T788] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 152.180574][ T788] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 152.205447][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.236353][ T788] usb 2-1: Product: syz [ 152.240567][ T788] usb 2-1: Manufacturer: syz [ 152.264262][ T788] usb 2-1: SerialNumber: syz [ 152.278220][ T788] usb 2-1: config 0 descriptor?? [ 152.517720][ T788] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 152.589982][ T6714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.721339][ T5848] usb 2-1: USB disconnect, device number 6 [ 152.754197][ T6714] veth0_vlan: entered promiscuous mode [ 152.783019][ T6714] veth1_vlan: entered promiscuous mode [ 152.847283][ T6714] veth0_macvtap: entered promiscuous mode [ 152.872883][ T6714] veth1_macvtap: entered promiscuous mode [ 152.907675][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.921295][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.942874][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.959571][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.974337][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.007977][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.029303][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.060687][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.088389][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.098654][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.109368][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.119914][ T6714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.131225][ T6714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.148561][ T6714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.219987][ T6714] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.265484][ T6714] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.325629][ T6714] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.334382][ T6714] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.455834][ T6907] syzkaller0: entered promiscuous mode [ 153.461362][ T6907] syzkaller0: entered allmulticast mode [ 153.615669][ T5848] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 153.687641][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.706740][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.802070][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.819511][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.839483][ T5848] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.882203][ T5848] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 153.900867][ T5848] usb 2-1: config 179 has no interface number 0 [ 153.911410][ T5848] usb 2-1: config 179 interface 65 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 153.941866][ T11] nci: nci_ntf_packet: unknown ntf opcode 0x808 [ 153.959253][ T5848] usb 2-1: config 179 interface 65 has no altsetting 0 [ 153.986685][ T5848] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 154.009497][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.244421][ T788] usb 2-1: USB disconnect, device number 7 [ 155.936480][ T6964] netlink: 48 bytes leftover after parsing attributes in process `syz.1.310'. [ 156.105769][ T6968] syzkaller0: entered promiscuous mode [ 156.114858][ T6968] syzkaller0: entered allmulticast mode [ 159.164150][ T7024] syzkaller0: entered promiscuous mode [ 159.174707][ T7024] syzkaller0: entered allmulticast mode [ 159.293464][ T7028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.640775][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 160.846608][ T7061] syzkaller0: entered promiscuous mode [ 160.882077][ T7061] syzkaller0: entered allmulticast mode [ 160.943895][ T7063] syzkaller0: entered promiscuous mode [ 160.951692][ T7063] syzkaller0: entered allmulticast mode [ 161.092061][ T7069] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 161.100426][ T7069] netlink: 2 bytes leftover after parsing attributes in process `syz.1.340'. [ 161.109547][ T7069] team0: entered promiscuous mode [ 161.114617][ T7069] team_slave_0: entered promiscuous mode [ 161.120761][ T7069] team_slave_1: entered promiscuous mode [ 161.127981][ T7069] bridge0: port 3(team0) entered blocking state [ 161.134535][ T7069] bridge0: port 3(team0) entered disabled state [ 161.142180][ T7069] team0: entered allmulticast mode [ 161.147770][ T7069] team_slave_0: entered allmulticast mode [ 161.153648][ T7069] team_slave_1: entered allmulticast mode [ 161.178459][ T7069] bridge0: port 3(team0) entered blocking state [ 161.185164][ T7069] bridge0: port 3(team0) entered forwarding state [ 161.390022][ T5787] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 163.097334][ T7096] syzkaller0: entered promiscuous mode [ 163.130591][ T7096] syzkaller0: entered allmulticast mode [ 163.406200][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 163.779663][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 163.790038][ T5787] CPU: 0 PID: 5787 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 163.797641][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.807721][ T5787] Workqueue: hci0 hci_rx_work [ 163.812440][ T5787] Call Trace: [ 163.815737][ T5787] [ 163.818697][ T5787] dump_stack_lvl+0x16c/0x230 [ 163.823501][ T5787] ? show_regs_print_info+0x20/0x20 [ 163.828823][ T5787] ? load_image+0x3b0/0x3b0 [ 163.833381][ T5787] sysfs_create_dir_ns+0x256/0x280 [ 163.838534][ T5787] ? hci_rx_work+0x43a/0xd80 [ 163.843149][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 163.847861][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 163.853111][ T5787] kobject_add_internal+0x6b8/0xc70 [ 163.858356][ T5787] kobject_add+0x156/0x220 [ 163.862790][ T5787] ? __rwlock_init+0x150/0x150 [ 163.867580][ T5787] ? kobject_init+0x1e0/0x1e0 [ 163.872280][ T5787] ? _raw_spin_unlock+0x28/0x40 [ 163.877160][ T5787] ? get_device_parent+0x366/0x390 [ 163.882299][ T5787] device_add+0x408/0xc20 [ 163.886663][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 163.891655][ T5787] le_conn_complete_evt+0xf36/0x1500 [ 163.896982][ T5787] ? hci_event_packet+0x4a7/0x1210 [ 163.902133][ T5787] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 163.908404][ T5787] ? __copy_skb_header+0xa7/0x550 [ 163.913459][ T5787] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 163.919122][ T5787] ? skb_pull_data+0xfb/0x200 [ 163.923820][ T5787] hci_le_enh_conn_complete_evt+0x189/0x460 [ 163.929744][ T5787] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 163.936294][ T5787] ? hci_remote_host_features_evt+0x160/0x160 [ 163.942417][ T5787] hci_event_packet+0x795/0x1210 [ 163.947679][ T5787] ? bis_list+0x290/0x290 [ 163.952138][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 163.957360][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 163.962584][ T5787] hci_rx_work+0x43a/0xd80 [ 163.967040][ T5787] ? process_scheduled_works+0x957/0x15b0 [ 163.972782][ T5787] process_scheduled_works+0xa45/0x15b0 [ 163.978393][ T5787] ? assign_work+0x400/0x400 [ 163.983031][ T5787] ? assign_work+0x39e/0x400 [ 163.987678][ T5787] worker_thread+0xa55/0xfc0 [ 163.992421][ T5787] kthread+0x2fa/0x390 [ 163.996508][ T5787] ? pr_cont_work+0x560/0x560 [ 164.001206][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 164.005796][ T5787] ret_from_fork+0x48/0x80 [ 164.010236][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 164.014825][ T5787] ret_from_fork_asm+0x11/0x20 [ 164.019603][ T5787] [ 164.022658][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.038076][ T5787] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 164.053239][ T5787] Bluetooth: hci0: failed to register connection device [ 164.061306][ T5787] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 164.874426][ T7121] syzkaller0: entered promiscuous mode [ 164.935431][ T7121] syzkaller0: entered allmulticast mode [ 165.495640][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 165.602973][ T7129] syzkaller0: entered promiscuous mode [ 165.616950][ T7129] syzkaller0: entered allmulticast mode [ 166.014250][ T7147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.364'. [ 166.144717][ T5787] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 166.317867][ T28] audit: type=1326 audit(1762611163.256:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 166.355287][ T7158] ip6t_srh: unknown srh match flags 4000 [ 166.377789][ T28] audit: type=1326 audit(1762611163.296:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 166.435635][ T28] audit: type=1326 audit(1762611163.296:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 166.533560][ T28] audit: type=1326 audit(1762611163.296:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 166.568157][ T28] audit: type=1326 audit(1762611163.296:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 166.591722][ T28] audit: type=1326 audit(1762611163.296:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 166.617214][ T28] audit: type=1326 audit(1762611163.296:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 166.640403][ T28] audit: type=1326 audit(1762611163.296:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 166.664185][ T28] audit: type=1326 audit(1762611163.296:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 166.687056][ T28] audit: type=1326 audit(1762611163.296:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7157 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 167.565657][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 168.208052][ T5787] Bluetooth: hci3: command tx timeout [ 168.385884][ T7175] [U]  [ 168.564808][ T7179] syzkaller0: entered promiscuous mode [ 168.578857][ T7179] syzkaller0: entered allmulticast mode [ 169.137453][ T7191] capability: warning: `syz.3.379' uses 32-bit capabilities (legacy support in use) [ 169.645533][ T5787] Bluetooth: hci0: command 0x0406 tx timeout [ 170.176911][ T7207] overlayfs: failed to clone upperpath [ 170.192698][ T7205] syzkaller0: entered promiscuous mode [ 170.201940][ T7205] syzkaller0: entered allmulticast mode [ 170.286631][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 170.437862][ T5793] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 172.183642][ T7239] process 'syz.3.393' launched '/dev/fd/6' with NULL argv: empty string added [ 172.366616][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 173.688380][ T7253] syzkaller0: entered promiscuous mode [ 173.698384][ T7253] syzkaller0: entered allmulticast mode [ 174.527240][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 174.625541][ T5848] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 175.171177][ T5848] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.184893][ T5848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.205157][ T5848] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.214442][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.234767][ T5848] usb 4-1: Product: syz [ 175.245168][ T5848] usb 4-1: Manufacturer: syz [ 175.269035][ T5848] usb 4-1: SerialNumber: syz [ 175.497019][ T5848] usb 4-1: 0:2 : does not exist [ 175.507564][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 175.534737][ T5848] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 175.697924][ T5848] usb 4-1: USB disconnect, device number 4 [ 175.769210][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 175.935880][ T7280] syzkaller0: entered promiscuous mode [ 175.947897][ T7280] syzkaller0: entered allmulticast mode [ 176.307523][ T5793] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 176.339949][ T7291] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 178.373839][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 178.781685][ T7323] syzkaller0: entered promiscuous mode [ 178.875627][ T7323] syzkaller0: entered allmulticast mode [ 180.365968][ T2130] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 180.447650][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 180.569827][ T2130] usb 1-1: Using ep0 maxpacket: 32 [ 180.588084][ T2130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.609303][ T2130] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.619302][ T2130] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 180.640278][ T2130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.666494][ T2130] usb 1-1: config 0 descriptor?? [ 180.679113][ T2130] hub 1-1:0.0: USB hub found [ 180.921244][ T2130] hub 1-1:0.0: 1 port detected [ 181.504133][ T7390] ======================================================= [ 181.504133][ T7390] WARNING: The mand mount option has been deprecated and [ 181.504133][ T7390] and is ignored by this kernel. Remove the mand [ 181.504133][ T7390] option from the mount to silence this warning. [ 181.504133][ T7390] ======================================================= [ 181.539039][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.563352][ T2130] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 181.799200][ T7400] syz_tun: entered allmulticast mode [ 181.814920][ T7400] pimreg: entered allmulticast mode [ 181.862641][ T7399] syz_tun: left allmulticast mode [ 181.875859][ T5788] usb 1-1: USB disconnect, device number 3 [ 182.394475][ T7419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.451'. [ 182.588279][ T7430] dlm: non-version read from control device 0 [ 184.130553][ T7404] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 184.272602][ T7454] netlink: 64 bytes leftover after parsing attributes in process `syz.2.464'. [ 184.575697][ T788] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 184.775696][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 184.801964][ T788] usb 2-1: config 0 has an invalid interface number: 72 but max is 16 [ 184.821676][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.838917][ T788] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 184.849034][ T788] usb 2-1: config 0 has no interface number 0 [ 184.858158][ T788] usb 2-1: config 0 interface 72 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.868815][ T788] usb 2-1: config 0 interface 72 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 184.878979][ T788] usb 2-1: config 0 interface 72 has no altsetting 0 [ 184.888905][ T788] usb 2-1: New USB device found, idVendor=6069, idProduct=0f39, bcdDevice=e8.f9 [ 184.898671][ T788] usb 2-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 184.907764][ T788] usb 2-1: Product: syz [ 184.912131][ T788] usb 2-1: Manufacturer: syz [ 184.917389][ T788] usb 2-1: SerialNumber: syz [ 184.927119][ T788] usb 2-1: config 0 descriptor?? [ 185.893450][ T788] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 185.909426][ T788] usb 2-1: MIDIStreaming interface descriptor not found [ 185.981557][ T788] usb 2-1: USB disconnect, device number 8 [ 186.649615][ T6718] udevd[6718]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.72/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.648949][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 188.648964][ T28] audit: type=1326 audit(1762611185.586:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b838f6c9 code=0x7ffc0000 [ 188.773107][ T28] audit: type=1326 audit(1762611185.616:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b838f6c9 code=0x7ffc0000 [ 188.856532][ T28] audit: type=1326 audit(1762611185.626:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fe0b838f6c9 code=0x7ffc0000 [ 188.925534][ T28] audit: type=1326 audit(1762611185.626:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b838f6c9 code=0x7ffc0000 [ 189.019141][ T28] audit: type=1326 audit(1762611185.626:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7517 comm="syz.0.485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b838f6c9 code=0x7ffc0000 [ 189.705754][ T788] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 190.585466][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 190.613389][ T788] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 190.628196][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.669653][ T788] usb 2-1: Product: syz [ 190.684059][ T788] usb 2-1: Manufacturer: syz [ 190.702892][ T788] usb 2-1: SerialNumber: syz [ 190.736691][ T788] usb 2-1: config 0 descriptor?? [ 190.907175][ T7566] tipc: Enabled bearer , priority 0 [ 190.957281][ T7566] syzkaller0: entered promiscuous mode [ 190.963066][ T7566] syzkaller0: entered allmulticast mode [ 191.046415][ T7566] tipc: Resetting bearer [ 191.061822][ T7565] tipc: Resetting bearer [ 191.190227][ T788] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 191.262832][ T7565] tipc: Disabling bearer [ 191.303390][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 191.545610][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 191.557852][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 191.571882][ T7547] dtv5100: wlen = 0, aborting. [ 192.036210][ T788] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 192.093714][ T788] usb 2-1: media controller created [ 192.122293][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.177561][ T788] zl10353_read_register: readreg error (reg=127, ret==0) [ 192.200530][ T788] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 192.208628][ T788] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 192.223698][ T788] usb 2-1: USB disconnect, device number 9 [ 192.363746][ T788] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 193.485245][ T7600] tipc: Enabled bearer , priority 0 [ 193.493207][ T7600] syzkaller0: entered promiscuous mode [ 193.502521][ T7600] syzkaller0: entered allmulticast mode [ 193.528039][ T7600] tipc: Resetting bearer [ 193.556193][ T7598] tipc: Resetting bearer [ 193.673726][ T7598] tipc: Disabling bearer [ 194.265518][ T5848] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 194.451248][ T5848] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 194.483341][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.572007][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.580271][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.588099][ T5848] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 194.648620][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 194.692338][ T5848] usb 2-1: Product: syz [ 194.703750][ T5848] usb 2-1: Manufacturer: syz [ 194.725598][ T5848] usb 2-1: SerialNumber: syz [ 194.739043][ T5848] usb 2-1: config 0 descriptor?? [ 194.767831][ T5848] usb 2-1: selecting invalid altsetting 0 [ 195.034097][ T5848] usb 2-1: USB disconnect, device number 10 [ 196.625652][ T7641] tipc: Enabled bearer , priority 0 [ 196.633234][ T7641] syzkaller0: entered promiscuous mode [ 196.640392][ T7641] syzkaller0: entered allmulticast mode [ 196.664501][ T7641] tipc: Resetting bearer [ 196.715854][ T7638] tipc: Resetting bearer [ 196.868292][ T7638] tipc: Disabling bearer [ 198.962665][ T7684] netlink: 108 bytes leftover after parsing attributes in process `syz.0.540'. [ 199.257882][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 199.664644][ T28] audit: type=1326 audit(1762611196.586:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b838f6c9 code=0x7ffc0000 [ 200.770034][ T28] audit: type=1326 audit(1762611196.586:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b838f6c9 code=0x7ffc0000 [ 200.916808][ T28] audit: type=1326 audit(1762611196.586:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe0b838f6c9 code=0x7ffc0000 [ 200.997948][ T28] audit: type=1326 audit(1762611196.696:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b838f6c9 code=0x7ffc0000 [ 201.056749][ T28] audit: type=1326 audit(1762611196.696:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7698 comm="syz.0.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0b838f6c9 code=0x7ffc0000 [ 201.228178][ T7712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.550'. [ 201.325575][ T5787] Bluetooth: hci4: command 0x1003 tx timeout [ 201.325750][ T5793] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 202.285618][ T788] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 202.674832][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.955554][ T788] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.056030][ T788] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 203.065631][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.073638][ T788] usb 4-1: Product: syz [ 203.081016][ T788] usb 4-1: Manufacturer: syz [ 203.085726][ T788] usb 4-1: SerialNumber: syz [ 203.092694][ T788] usb 4-1: config 0 descriptor?? [ 203.101426][ T788] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 203.110046][ T788] usb 4-1: No valid video chain found. [ 203.308144][ T27] usb 4-1: USB disconnect, device number 5 [ 203.925620][ T788] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 204.262931][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 204.346781][ T788] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 204.424273][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.534011][ T788] usb 3-1: Product: syz [ 204.578757][ T788] usb 3-1: Manufacturer: syz [ 204.631674][ T788] usb 3-1: SerialNumber: syz [ 204.894524][ T788] usb 3-1: config 0 descriptor?? [ 204.911361][ T788] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 205.468792][ T788] gspca_sonixj: reg_w1 err -110 [ 205.508488][ T788] sonixj: probe of 3-1:0.0 failed with error -110 [ 205.705657][ T27] usb 3-1: USB disconnect, device number 10 [ 208.072667][ T7804] random: crng reseeded on system resumption [ 208.155638][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 208.355611][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 208.364144][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.380028][ T27] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 208.389405][ T27] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.403270][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.417578][ T27] usb 3-1: config 0 descriptor?? [ 208.684504][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.741462][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.788674][ T7800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.832101][ T7800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.861705][ T5788] usb 3-1: USB disconnect, device number 11 [ 211.365498][ T5788] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.609832][ T5788] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 211.647378][ T5788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.709542][ T5788] usb 3-1: config 0 descriptor?? [ 211.923945][ T5788] [drm] vendor descriptor length:6 data:06 5f 01 00 00 00 00 00 00 00 00 [ 211.933119][ T5788] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 212.125292][ T5788] [drm:udl_init] *ERROR* Selecting channel failed [ 212.170122][ T5788] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 212.196773][ T5788] [drm] Initialized udl on minor 2 [ 212.217286][ T5788] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.236088][ T5788] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 212.250164][ T27] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.280546][ T5788] usb 3-1: USB disconnect, device number 12 [ 212.287817][ T27] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 212.317772][ T27] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 213.005941][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 213.196738][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 213.213410][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.235602][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 213.259023][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 213.281417][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.308727][ T9] usb 4-1: config 0 descriptor?? [ 213.552378][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.581473][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.640919][ T7866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.667724][ T7866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.684698][ T5788] usb 4-1: USB disconnect, device number 6 [ 214.011494][ T7900] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 214.031815][ T7900] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 214.142925][ T7900] syz.0.608 (7900) used greatest stack depth: 20720 bytes left [ 214.282440][ T7902] netlink: 'syz.0.609': attribute type 13 has an invalid length. [ 214.319989][ T7902] gretap0: refused to change device tx_queue_len [ 214.327203][ T7902] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 216.630457][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 216.851598][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 216.871864][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.893724][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.915636][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 216.939608][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.963957][ T8] usb 3-1: config 0 descriptor?? [ 217.219626][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.229665][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.247837][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.284860][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.751310][ T28] audit: type=1326 audit(1762611214.686:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7962 comm="syz.3.629" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8fa98f6c9 code=0x0 [ 218.415723][ T788] usb 3-1: USB disconnect, device number 13 [ 218.495510][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 218.675954][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 218.706353][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 218.728629][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 218.742883][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.760924][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.794739][ T8] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 218.816132][ T8] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 218.835893][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.844518][ T8] usb 1-1: Product: syz [ 218.850469][ T8] usb 1-1: Manufacturer: syz [ 218.855279][ T8] usb 1-1: SerialNumber: syz [ 218.869566][ T8] usb 1-1: config 0 descriptor?? [ 218.878895][ T7970] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 218.889589][ T8] iuu_phoenix 1-1:0.0: required endpoints missing [ 219.095661][ T8] usb 1-1: USB disconnect, device number 4 [ 220.346854][ T5771] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 220.385726][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 220.539949][ T5771] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 220.549291][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.557414][ T5771] usb 3-1: Product: syz [ 220.561985][ T5771] usb 3-1: Manufacturer: syz [ 220.566710][ T5771] usb 3-1: SerialNumber: syz [ 220.574012][ T5771] usb 3-1: config 0 descriptor?? [ 220.580384][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 220.593157][ T5771] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 220.593526][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.608027][ T5771] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.622401][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 220.622682][ T5771] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 220.641034][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 220.641064][ T5771] usb 3-1: media controller created [ 220.655873][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.673331][ T8] usb 1-1: config 0 descriptor?? [ 220.679846][ T5771] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.733112][ T5771] DVB: Unable to find symbol mt352_attach() [ 220.768617][ T5771] DVB: Unable to find symbol nxt6000_attach() [ 220.774863][ T5771] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 220.788671][ T5771] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 220.790377][ T8000] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 220.809040][ T5771] dvb-usb: schedule remote query interval to 1000 msecs. [ 220.816510][ T5771] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 220.827162][ T5771] dvb-usb: bulk message failed: -22 (7/0) [ 220.834284][ T5771] dvb-usb: bulk message failed: -22 (7/0) [ 220.841738][ T8000] dvb-usb: bulk message failed: -22 (7/0) [ 220.881861][ T8] usb 3-1: USB disconnect, device number 14 [ 220.918844][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.930076][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.945833][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.954772][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.970475][ T5771] usb 1-1: USB disconnect, device number 5 [ 221.001662][ T8] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 221.637260][ T8022] could not allocate digest TFM handle cryptd(blake2b-160) [ 222.011829][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 222.225363][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.256413][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.280939][ T8] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 222.305633][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.333101][ T8] usb 1-1: config 0 descriptor?? [ 222.774279][ T8] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 222.782871][ T8] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 222.794143][ T8] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 222.802962][ T8] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 222.815090][ T8] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 222.822676][ T8] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 222.830499][ T8] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 222.837946][ T788] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 222.851467][ T8] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 222.970900][ T8] cp2112 0003:10C4:EA90.0005: error requesting version [ 222.992711][ T8] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 223.023433][ T8] usb 1-1: USB disconnect, device number 6 [ 223.035483][ T788] usb 2-1: Using ep0 maxpacket: 16 [ 223.047056][ T788] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.068255][ T788] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.077395][ T788] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 223.106823][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.142811][ T788] usb 2-1: config 0 descriptor?? [ 223.374286][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.389449][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.403229][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.414315][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.441609][ T8] usb 2-1: USB disconnect, device number 11 [ 225.804356][ T5793] Bluetooth: hci2: unexpected cc 0x2003 length: 2 < 9 [ 225.812954][ T5793] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 225.909885][ T8100] tmpfs: Unknown parameter 'tmpfs' [ 226.063455][ T8107] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 226.245621][ T788] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 226.435507][ T788] usb 3-1: Using ep0 maxpacket: 16 [ 226.444758][ T788] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.458527][ T788] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.468733][ T788] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 226.478441][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.489771][ T788] usb 3-1: config 0 descriptor?? [ 226.739053][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.765528][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.797733][ T8105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.830911][ T8105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.965590][ T2130] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 228.982077][ T5788] usb 3-1: USB disconnect, device number 15 [ 229.023045][ T5793] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 229.365553][ T2130] usb 1-1: Using ep0 maxpacket: 32 [ 229.380507][ T2130] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 229.389060][ T2130] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 229.400363][ T2130] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 229.411725][ T2130] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 229.424931][ T2130] usb 1-1: config 0 interface 0 has no altsetting 0 [ 229.433958][ T2130] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 229.498110][ T2130] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 229.506788][ T2130] usb 1-1: Product: syz [ 229.511323][ T2130] usb 1-1: Manufacturer: syz [ 229.520715][ T2130] usb 1-1: SerialNumber: syz [ 229.531690][ T2130] usb 1-1: config 0 descriptor?? [ 229.540936][ T2130] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 229.558208][ T2130] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 229.835758][ T5848] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 229.870631][ T8] usb 1-1: USB disconnect, device number 7 [ 229.876663][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 229.886508][ T8] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 230.665646][ T5848] usb 3-1: Using ep0 maxpacket: 16 [ 230.686982][ T5848] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 230.726304][ T5848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 230.768039][ T5848] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 230.817452][ T5848] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 230.831718][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.850014][ T5848] usb 3-1: Product: syz [ 230.872455][ T5848] usb 3-1: Manufacturer: syz [ 230.885516][ T5848] usb 3-1: SerialNumber: syz [ 230.913733][ T5848] usb 3-1: config 0 descriptor?? [ 230.942236][ T8160] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 230.998686][ T5793] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 231.006904][ T5848] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 231.028134][ T5848] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 231.034708][ T5848] mcba_usb 3-1:0.0 can0: failed tx_urb -90 [ 231.040867][ T5848] mcba_usb 3-1:0.0 can0: Failed to send cmd (169) [ 231.047352][ T5848] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 231.088206][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 231.098661][ T8179] team0: left allmulticast mode [ 231.128720][ T8179] team_slave_0: left allmulticast mode [ 231.134241][ T8179] team_slave_1: left allmulticast mode [ 231.179276][ T8179] bridge0: port 3(team0) entered disabled state [ 231.224152][ T5848] usb 3-1: USB disconnect, device number 16 [ 231.236875][ T5848] mcba_usb 3-1:0.0 can0: device disconnected [ 231.264970][ T8179] bridge_slave_0: left allmulticast mode [ 231.273204][ T8179] bridge_slave_0: left promiscuous mode [ 231.292587][ T8179] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.313000][ T8179] bridge_slave_1: left allmulticast mode [ 231.323271][ T8179] bridge_slave_1: left promiscuous mode [ 231.334385][ T8179] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.471582][ T8179] bond0: (slave bond_slave_0): Releasing backup interface [ 231.484292][ T8179] bond0: (slave bond_slave_1): Releasing backup interface [ 231.500382][ T8179] team_slave_0: left promiscuous mode [ 231.527478][ T8179] team0: Port device team_slave_0 removed [ 231.534103][ T8179] team_slave_1: left promiscuous mode [ 231.559375][ T8179] team0: Port device team_slave_1 removed [ 231.623645][ T8179] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.645294][ T8179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.654864][ T8179] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.668837][ T8179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.678779][ T8191] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.847480][ T8179] syz.1.704 (8179) used greatest stack depth: 20624 bytes left [ 231.982238][ T28] audit: type=1326 audit(1762611228.916:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 232.043137][ T28] audit: type=1326 audit(1762611228.916:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 232.117487][ T28] audit: type=1326 audit(1762611228.916:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 232.200527][ T28] audit: type=1326 audit(1762611228.916:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 232.300297][ T28] audit: type=1326 audit(1762611228.916:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 232.330427][ T28] audit: type=1326 audit(1762611228.946:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 232.521140][ T5793] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 232.763532][ T28] audit: type=1326 audit(1762611228.946:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 233.005790][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 233.152997][ T28] audit: type=1326 audit(1762611228.946:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 233.176512][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 233.192026][ T28] audit: type=1326 audit(1762611228.946:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 233.259206][ T28] audit: type=1326 audit(1762611228.946:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8196 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbee318f6c9 code=0x7ffc0000 [ 233.585597][ T2130] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 233.777555][ T2130] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.788465][ T2130] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 233.803368][ T2130] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 233.812911][ T2130] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.824551][ T2130] usb 4-1: config 0 descriptor?? [ 233.885696][ T5771] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 233.929192][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 233.938768][ T5787] CPU: 0 PID: 5787 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 233.946358][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.956425][ T5787] Workqueue: hci0 hci_rx_work [ 233.961135][ T5787] Call Trace: [ 233.964431][ T5787] [ 233.967368][ T5787] dump_stack_lvl+0x16c/0x230 [ 233.972071][ T5787] ? show_regs_print_info+0x20/0x20 [ 233.977280][ T5787] ? load_image+0x3b0/0x3b0 [ 233.981821][ T5787] sysfs_create_dir_ns+0x256/0x280 [ 233.986945][ T5787] ? hci_rx_work+0x43a/0xd80 [ 233.991530][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 233.996208][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 234.001403][ T5787] kobject_add_internal+0x6b8/0xc70 [ 234.006615][ T5787] kobject_add+0x156/0x220 [ 234.011032][ T5787] ? __rwlock_init+0x150/0x150 [ 234.015800][ T5787] ? kobject_init+0x1e0/0x1e0 [ 234.020470][ T5787] ? _raw_spin_unlock+0x28/0x40 [ 234.025325][ T5787] ? get_device_parent+0x366/0x390 [ 234.030445][ T5787] device_add+0x408/0xc20 [ 234.034779][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 234.039725][ T5787] le_conn_complete_evt+0xf36/0x1500 [ 234.045010][ T5787] ? hci_event_packet+0x4a7/0x1210 [ 234.050125][ T5787] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 234.056369][ T5787] ? __copy_skb_header+0xa7/0x550 [ 234.061396][ T5787] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 234.067030][ T5787] ? skb_pull_data+0xfb/0x200 [ 234.071699][ T5787] hci_le_enh_conn_complete_evt+0x189/0x460 [ 234.077602][ T5787] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 234.084017][ T5787] ? hci_remote_host_features_evt+0x160/0x160 [ 234.090080][ T5787] hci_event_packet+0x795/0x1210 [ 234.095030][ T5787] ? bis_list+0x290/0x290 [ 234.099352][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 234.104544][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 234.109830][ T5787] hci_rx_work+0x43a/0xd80 [ 234.114250][ T5787] ? process_scheduled_works+0x957/0x15b0 [ 234.119985][ T5787] process_scheduled_works+0xa45/0x15b0 [ 234.125550][ T5787] ? assign_work+0x400/0x400 [ 234.130141][ T5787] ? assign_work+0x39e/0x400 [ 234.134735][ T5787] worker_thread+0xa55/0xfc0 [ 234.139339][ T5787] kthread+0x2fa/0x390 [ 234.143398][ T5787] ? pr_cont_work+0x560/0x560 [ 234.148074][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 234.152660][ T5787] ret_from_fork+0x48/0x80 [ 234.157072][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 234.161653][ T5787] ret_from_fork_asm+0x11/0x20 [ 234.166426][ T5787] [ 234.171365][ T5787] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 234.186329][ T5787] Bluetooth: hci0: failed to register connection device [ 234.194278][ T5787] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 234.417607][ T5771] usb 3-1: Using ep0 maxpacket: 16 [ 234.434438][ T5771] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.445267][ T5771] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.454553][ T5771] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 234.463786][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.477474][ T5771] usb 3-1: config 0 descriptor?? [ 234.485545][ T2130] kovaplus 0003:1E7D:2D50.0006: item fetching failed at offset 2/5 [ 234.499368][ T2130] kovaplus 0003:1E7D:2D50.0006: parse failed [ 234.507200][ T2130] kovaplus: probe of 0003:1E7D:2D50.0006 failed with error -22 [ 234.680578][ T788] usb 4-1: USB disconnect, device number 7 [ 234.717094][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.738628][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.753855][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.848785][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.085615][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 235.955073][ T5787] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 236.634466][ T8] usb 3-1: USB disconnect, device number 17 [ 237.485860][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 237.685694][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 237.713217][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.732034][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 237.742148][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 237.752015][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.772471][ T8] usb 1-1: config 0 descriptor?? [ 237.967311][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 237.984376][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.994543][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.013947][ T8308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.024616][ T8308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.039419][ T5771] usb 1-1: USB disconnect, device number 8 [ 238.121253][ T5787] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 239.332813][ T8330] netlink: 88 bytes leftover after parsing attributes in process `syz.0.754'. [ 240.047455][ T5793] Bluetooth: hci2: command 0x0406 tx timeout [ 240.285071][ T5102] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 241.344791][ T8359] tipc: Started in network mode [ 241.419597][ T8359] tipc: Node identity 4a96fa7d7585, cluster identity 4711 [ 241.455720][ T8359] tipc: Enabled bearer , priority 0 [ 241.488057][ T8360] syzkaller0: entered promiscuous mode [ 241.495696][ T8360] syzkaller0: entered allmulticast mode [ 241.526210][ T8359] tipc: Resetting bearer [ 241.533607][ T8358] tipc: Resetting bearer [ 241.627264][ T8358] tipc: Disabling bearer [ 242.250705][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 242.974568][ T5102] Bluetooth: hci1: unexpected event 0x06 length: 4 > 3 [ 244.285553][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 245.027113][ T5102] Bluetooth: hci1: command 0x0406 tx timeout [ 245.119016][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 245.172768][ T8415] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 245.181819][ T5848] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 245.311012][ T23] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 245.317862][ T5787] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 245.377416][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.399504][ T5848] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.415037][ T5848] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 245.431694][ T5848] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 245.442653][ T5848] usb 2-1: Manufacturer: syz [ 245.457577][ T5848] usb 2-1: config 0 descriptor?? [ 245.476589][ T5848] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 245.491535][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.500655][ T23] usb 1-1: Product: syz [ 245.504854][ T23] usb 1-1: Manufacturer: syz [ 245.509726][ T23] usb 1-1: SerialNumber: syz [ 245.758854][ T5848] usb 2-1: USB disconnect, device number 12 [ 245.949703][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 245.962864][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 245.974610][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 245.986829][ T23] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 245.998693][ T23] lan78xx: probe of 1-1:1.0 failed with error -71 [ 246.011100][ T23] usb 1-1: USB disconnect, device number 9 [ 246.903780][ T5787] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 247.097406][ T5787] Bluetooth: hci1: command 0x0406 tx timeout [ 247.325818][ T5787] Bluetooth: hci2: command 0x0406 tx timeout [ 248.205794][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 248.435458][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 248.474733][ T23] usb 1-1: no configurations [ 248.507159][ T23] usb 1-1: can't read configurations, error -22 [ 248.665539][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 248.868696][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 248.881290][ T23] usb 1-1: no configurations [ 248.895207][ T23] usb 1-1: can't read configurations, error -22 [ 248.905156][ T23] usb usb1-port1: attempt power cycle [ 248.922257][ T8495] syzkaller1: entered promiscuous mode [ 248.928126][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 248.935080][ T8495] syzkaller1: entered allmulticast mode [ 249.335720][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 249.375518][ T5771] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 249.384653][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 249.391555][ T23] usb 1-1: no configurations [ 249.396235][ T23] usb 1-1: can't read configurations, error -22 [ 249.405794][ T5102] Bluetooth: hci2: command 0x0406 tx timeout [ 249.555511][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 249.595537][ T5771] usb 3-1: Using ep0 maxpacket: 8 [ 249.603351][ T5771] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 249.611737][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 249.617110][ T5771] usb 3-1: config 0 has no interface number 0 [ 249.623269][ T5771] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 249.634123][ T23] usb 1-1: no configurations [ 249.638784][ T5771] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 249.649905][ T23] usb 1-1: can't read configurations, error -22 [ 249.656521][ T23] usb usb1-port1: unable to enumerate USB device [ 249.662976][ T5771] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.679654][ T5771] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 249.688791][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.696829][ T5771] usb 3-1: Product: syz [ 249.700992][ T5771] usb 3-1: Manufacturer: syz [ 249.705638][ T5771] usb 3-1: SerialNumber: syz [ 249.713621][ T5771] usb 3-1: config 0 descriptor?? [ 249.721971][ T5771] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 249.951507][ T5787] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 249.961375][ T5787] CPU: 0 PID: 5787 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 249.968941][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.978993][ T5787] Workqueue: hci0 hci_rx_work [ 249.983683][ T5787] Call Trace: [ 249.986950][ T5787] [ 249.989879][ T5787] dump_stack_lvl+0x16c/0x230 [ 249.994546][ T5787] ? show_regs_print_info+0x20/0x20 [ 249.999733][ T5787] ? load_image+0x3b0/0x3b0 [ 250.004236][ T5787] sysfs_create_dir_ns+0x256/0x280 [ 250.009346][ T5787] ? hci_rx_work+0x43a/0xd80 [ 250.013920][ T5787] ? sysfs_warn_dup+0xa0/0xa0 [ 250.018584][ T5787] ? do_raw_spin_unlock+0x121/0x230 [ 250.023766][ T5787] kobject_add_internal+0x6b8/0xc70 [ 250.028951][ T5787] kobject_add+0x156/0x220 [ 250.033351][ T5787] ? __rwlock_init+0x150/0x150 [ 250.038100][ T5787] ? kobject_init+0x1e0/0x1e0 [ 250.042755][ T5787] ? _raw_spin_unlock+0x28/0x40 [ 250.047591][ T5787] ? get_device_parent+0x366/0x390 [ 250.052698][ T5787] device_add+0x408/0xc20 [ 250.057023][ T5787] hci_conn_add_sysfs+0xd5/0x1e0 [ 250.061956][ T5787] le_conn_complete_evt+0xf36/0x1500 [ 250.067228][ T5787] ? hci_event_packet+0x4a7/0x1210 [ 250.072327][ T5787] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 250.078556][ T5787] ? __copy_skb_header+0xa7/0x550 [ 250.083568][ T5787] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 250.089188][ T5787] ? skb_pull_data+0xfb/0x200 [ 250.093848][ T5787] hci_le_enh_conn_complete_evt+0x189/0x460 [ 250.099730][ T5787] ? hci_le_remote_conn_param_req_evt+0xcc0/0xcc0 [ 250.106146][ T5787] ? hci_remote_host_features_evt+0x160/0x160 [ 250.112193][ T5787] hci_event_packet+0x795/0x1210 [ 250.117118][ T5787] ? bis_list+0x290/0x290 [ 250.121434][ T5787] ? lockdep_hardirqs_on+0x98/0x150 [ 250.126618][ T5787] ? hci_send_to_monitor+0xd7/0x4f0 [ 250.131803][ T5787] hci_rx_work+0x43a/0xd80 [ 250.136212][ T5787] ? process_scheduled_works+0x957/0x15b0 [ 250.141915][ T5787] process_scheduled_works+0xa45/0x15b0 [ 250.147475][ T5787] ? assign_work+0x400/0x400 [ 250.152053][ T5787] ? assign_work+0x39e/0x400 [ 250.156635][ T5787] worker_thread+0xa55/0xfc0 [ 250.161232][ T5787] kthread+0x2fa/0x390 [ 250.165279][ T5787] ? pr_cont_work+0x560/0x560 [ 250.169940][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 250.174509][ T5787] ret_from_fork+0x48/0x80 [ 250.178924][ T5787] ? kthread_blkcg+0xd0/0xd0 [ 250.183497][ T5787] ret_from_fork_asm+0x11/0x20 [ 250.188272][ T5787] [ 250.210842][ T5787] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 250.227298][ T5787] Bluetooth: hci0: failed to register connection device [ 250.235810][ T5787] Bluetooth: hci0: unexpected event 0x06 length: 4 > 3 [ 251.005666][ T5102] Bluetooth: hci3: command 0x0406 tx timeout [ 252.185980][ T5771] usb 3-1: USB disconnect, device number 18 [ 252.363806][ T8534] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 252.575502][ T5848] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 252.758312][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.787459][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.819893][ T5848] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 252.850552][ T5848] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.863651][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.872704][ T5848] usb 2-1: Product: syz [ 252.877331][ T5848] usb 2-1: Manufacturer: syz [ 252.881980][ T5848] usb 2-1: SerialNumber: syz [ 252.892825][ T5848] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 252.925972][ T5848] cdc_ncm 2-1:1.0: bind() failure [ 253.128932][ T5771] usb 2-1: USB disconnect, device number 13 [ 253.305291][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 253.435545][ T5848] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 253.615456][ T5848] usb 4-1: Using ep0 maxpacket: 8 [ 253.615686][ T23] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 253.627489][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.640041][ T5848] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 253.653052][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.672393][ T5848] usb 4-1: config 0 descriptor?? [ 253.699664][ T5848] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 253.815503][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 253.822865][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.835470][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.849250][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 253.862191][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 253.871416][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.902250][ T23] usb 3-1: config 0 descriptor?? [ 254.131637][ T8562] tipc: Enabled bearer , priority 0 [ 254.140952][ T8562] syzkaller0: entered promiscuous mode [ 254.148989][ T8562] syzkaller0: entered allmulticast mode [ 254.165907][ T8562] tipc: Resetting bearer [ 254.176512][ T8561] tipc: Resetting bearer [ 254.194457][ T8561] tipc: Disabling bearer [ 254.339700][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.348298][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.360421][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.394766][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.402251][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.410186][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.419457][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.427580][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.434848][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.437385][ T8566] binder: 8565:8566 ioctl c0046209 0 returned -22 [ 254.442241][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.456950][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.460211][ T8566] 9pnet: Unknown protocol version 9x2000 [ 254.464178][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.464210][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.464234][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.476534][ T8566] fuse: Invalid rootmode [ 254.482309][ T23] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 254.521012][ T23] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input14 [ 254.805856][ T23] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 254.821994][ T23] usb 3-1: USB disconnect, device number 19 [ 255.016361][ T2130] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 255.205511][ T2130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.216575][ T2130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.226457][ T2130] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 255.235841][ T2130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.246639][ T2130] usb 2-1: config 0 descriptor?? [ 255.324439][ T5848] gspca_vc032x: reg_w err -71 [ 255.329840][ T5848] vc032x: probe of 4-1:0.0 failed with error -71 [ 255.351722][ T5848] usb 4-1: USB disconnect, device number 8 [ 255.968465][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.974889][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.700909][ T5102] Bluetooth: hci2: unexpected event for opcode 0x2035 [ 257.716612][ T2130] usbhid 2-1:0.0: can't add hid device: -71 [ 257.723480][ T2130] usbhid: probe of 2-1:0.0 failed with error -71 [ 257.734320][ T2130] usb 2-1: USB disconnect, device number 14 [ 259.075529][ T5870] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 259.305515][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 259.322356][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 259.350795][ T5870] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 259.363390][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.380843][ T5870] usb 4-1: Product: syz [ 259.392230][ T5870] usb 4-1: Manufacturer: syz [ 259.403619][ T5870] usb 4-1: SerialNumber: syz [ 259.425785][ T5870] usb 4-1: config 0 descriptor?? [ 260.125570][ T2130] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 260.335618][ T2130] usb 2-1: Using ep0 maxpacket: 16 [ 260.343914][ T2130] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 260.376007][ T2130] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 260.403019][ T2130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.412260][ T2130] usb 2-1: Product: syz [ 260.416835][ T2130] usb 2-1: Manufacturer: syz [ 260.421538][ T2130] usb 2-1: SerialNumber: syz [ 260.434227][ T2130] usb 2-1: config 0 descriptor?? [ 260.465509][ T5771] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 260.529461][ T8585] Set syz1 is full, maxelem 65536 reached [ 260.655630][ T5771] usb 3-1: Using ep0 maxpacket: 8 [ 260.663147][ T5771] usb 3-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 260.674080][ T5771] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.685103][ T5771] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 260.695344][ T5771] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 260.709035][ T5771] usb 3-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 260.722555][ T5771] usb 3-1: config 1 interface 0 has no altsetting 0 [ 260.734741][ T5771] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.743887][ T5771] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 260.752076][ T5771] usb 3-1: SerialNumber: syz [ 260.760030][ T8628] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 260.772734][ T8628] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 260.990123][ T5771] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 261.001690][ T5771] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 261.012983][ T5771] usb 3-1: USB disconnect, device number 20 [ 261.727553][ T5102] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 261.736619][ T5102] Bluetooth: hci2: Injecting HCI hardware error event [ 261.746299][ T5787] Bluetooth: hci2: hardware error 0x00 [ 261.821183][ T5848] usb 4-1: USB disconnect, device number 9 [ 261.895582][ T5771] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 262.715676][ T5771] usb 3-1: Using ep0 maxpacket: 8 [ 262.750197][ T5771] usb 3-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 262.775769][ T5771] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.783874][ T5771] usb 3-1: Product: syz [ 262.797356][ T5771] usb 3-1: Manufacturer: syz [ 262.802011][ T5771] usb 3-1: SerialNumber: syz [ 262.832151][ T5771] usb 3-1: config 0 descriptor?? [ 262.861709][ T5771] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 262.916009][ T788] usb 2-1: USB disconnect, device number 15 [ 263.395752][ T5771] gspca_sonixj: reg_w1 err -110 [ 263.805638][ T5787] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 263.915513][ T5771] sonixj: probe of 3-1:0.0 failed with error -110 [ 264.297234][ T788] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 264.506888][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 264.518612][ T788] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 264.528432][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.545520][ T788] usb 2-1: Product: syz [ 264.550631][ T788] usb 2-1: Manufacturer: syz [ 264.568559][ T788] usb 2-1: SerialNumber: syz [ 264.595189][ T788] usb 2-1: config 0 descriptor?? [ 264.608008][ T788] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 265.541464][ T2130] usb 3-1: USB disconnect, device number 21 [ 267.918511][ T788] gspca_stk1135: reg_w 0x300 err -71 [ 267.953522][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 268.020832][ T788] gspca_stk1135: Sensor write failed [ 268.071770][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 268.144276][ T788] gspca_stk1135: Sensor write failed [ 268.180126][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 268.231691][ T788] gspca_stk1135: Sensor read failed [ 268.267949][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 268.274323][ T788] gspca_stk1135: Sensor read failed [ 268.525742][ T788] gspca_stk1135: Detected sensor type unknown (0x0) [ 268.532409][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 268.640571][ T788] gspca_stk1135: Sensor read failed [ 268.656222][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 268.717956][ T788] gspca_stk1135: Sensor read failed [ 268.723233][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 268.943677][ T788] gspca_stk1135: Sensor write failed [ 268.957848][ T8702] random: crng reseeded on system resumption [ 268.973184][ T788] gspca_stk1135: serial bus timeout: status=0x00 [ 268.994313][ T788] gspca_stk1135: Sensor write failed [ 269.034819][ T788] stk1135: probe of 2-1:0.0 failed with error -71 [ 269.338827][ T788] usb 2-1: USB disconnect, device number 16 [ 271.415630][ T5848] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 271.453895][ T5771] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 271.615496][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 271.626530][ T5848] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 271.637577][ T5848] usb 4-1: config 0 has no interface number 0 [ 271.648384][ T5848] usb 4-1: config 0 interface 184 has no altsetting 0 [ 271.668380][ T5771] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 271.676303][ T5848] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 271.679665][ T5771] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.687553][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.704950][ T5848] usb 4-1: Product: syz [ 271.706763][ T5771] usb 2-1: Product: syz [ 271.710727][ T5848] usb 4-1: Manufacturer: syz [ 271.714076][ T5771] usb 2-1: Manufacturer: syz [ 271.719104][ T5848] usb 4-1: SerialNumber: syz [ 271.731813][ T5771] usb 2-1: SerialNumber: syz [ 271.742610][ T5848] usb 4-1: config 0 descriptor?? [ 271.771874][ T5848] smsc75xx v1.0.0 [ 272.231120][ T5771] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 272.391659][ T5848] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 272.435497][ T5848] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 272.700953][ T8691] Set syz1 is full, maxelem 65536 reached [ 273.464036][ T5771] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 273.482859][ T5771] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 273.500777][ T5771] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 273.545521][ T8] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 273.771196][ T8] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 273.783026][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.791512][ T8] usb 3-1: Product: syz [ 273.796191][ T8] usb 3-1: Manufacturer: syz [ 273.800903][ T8] usb 3-1: SerialNumber: syz [ 273.812198][ T8] usb 3-1: config 0 descriptor?? [ 273.827714][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 274.336076][ T5771] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 274.357378][ T5771] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 274.395337][ T5771] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 274.425163][ T5771] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 274.467851][ T5771] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 274.493364][ T5848] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000304: -71 [ 274.554699][ T5771] lan78xx: probe of 2-1:1.0 failed with error -71 [ 274.672120][ T5771] usb 2-1: USB disconnect, device number 17 [ 275.169300][ T5848] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write ADDR_FILTX+4: -71 [ 275.180110][ T5848] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 275.189881][ T5848] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 275.199863][ T5848] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 275.217455][ T5848] usb 4-1: USB disconnect, device number 10 [ 275.776990][ T5848] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 275.972260][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.983570][ T5848] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.993439][ T5848] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.006674][ T5848] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.015894][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.026940][ T5848] usb 1-1: config 0 descriptor?? [ 276.472330][ T5848] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 276.509649][ T5848] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 277.100261][ C1] plantronics 0003:047F:FFFF.0008: hid_field_extract() called with n (132) > 32! (syz.0.909) [ 277.275578][ T788] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 277.348133][ T5848] usb 1-1: USB disconnect, device number 14 [ 277.415533][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 277.461014][ T788] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 277.470430][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.478601][ T788] usb 4-1: Product: syz [ 277.482824][ T788] usb 4-1: Manufacturer: syz [ 277.487541][ T788] usb 4-1: SerialNumber: syz [ 277.607567][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.617761][ T9] usb 2-1: config 0 has no interfaces? [ 277.623349][ T9] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 277.632586][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.643328][ T9] usb 2-1: config 0 descriptor?? [ 277.874065][ T8784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.917'. [ 277.883696][ T8784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.917'. [ 277.895869][ T8784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.917'. [ 277.913928][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 278.024551][ T5771] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 278.035127][ T8] gspca_stk1135: reg_w 0x1c err -71 [ 278.048171][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 278.054570][ T8] gspca_stk1135: Sensor write failed [ 278.061303][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 278.065713][ T5771] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 278.082724][ T8] gspca_stk1135: Sensor write failed [ 278.101027][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 278.115513][ T8] gspca_stk1135: Sensor read failed [ 278.120801][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 278.141646][ T8] gspca_stk1135: Sensor read failed [ 278.157359][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 278.174432][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 278.185502][ T8] gspca_stk1135: Sensor read failed [ 278.190783][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 278.210381][ T8] gspca_stk1135: Sensor read failed [ 278.224711][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 278.231604][ T8] gspca_stk1135: Sensor write failed [ 278.237336][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 278.243825][ T8] gspca_stk1135: Sensor write failed [ 278.249706][ T8] stk1135: probe of 3-1:0.0 failed with error -71 [ 278.265892][ T8] usb 3-1: USB disconnect, device number 22 [ 279.745503][ T5771] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 279.932887][ T5771] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.944179][ T5771] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.967511][ T5771] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 279.981408][ T5771] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 279.990155][ T5771] usb 3-1: Manufacturer: syz [ 280.004949][ T5771] usb 3-1: config 0 descriptor?? [ 280.018254][ T5771] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 280.167715][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 280.191081][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 280.208427][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 280.213105][ T5771] usb 2-1: USB disconnect, device number 18 [ 280.230871][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 280.250071][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 280.269752][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 280.292965][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 280.307112][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 280.322751][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 280.344416][ T788] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 280.364247][ T788] lan78xx: probe of 4-1:1.0 failed with error -71 [ 280.401169][ T788] usb 4-1: USB disconnect, device number 11 [ 280.431430][ T8] usb 3-1: USB disconnect, device number 23 [ 280.516792][ T8811] syz.1.925 (8811) used greatest stack depth: 20040 bytes left [ 280.798903][ T8820] tipc: Enabled bearer , priority 0 [ 280.810478][ T8820] syzkaller0: entered promiscuous mode [ 280.816519][ T8820] syzkaller0: entered allmulticast mode [ 280.830353][ T8819] tipc: Resetting bearer [ 280.856432][ T8819] tipc: Disabling bearer [ 281.054631][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.933'. [ 281.149798][ T8835] netlink: 277 bytes leftover after parsing attributes in process `syz.0.934'. [ 281.214166][ T5787] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7 [ 281.222232][ T5787] Bluetooth: hci1: unexpected event for opcode 0x042d [ 281.451189][ T8845] tipc: Enabled bearer , priority 0 [ 281.459282][ T8845] syzkaller0: entered promiscuous mode [ 281.464851][ T8845] syzkaller0: entered allmulticast mode [ 281.474994][ T8844] tipc: Resetting bearer [ 281.513714][ T8844] tipc: Disabling bearer [ 282.045520][ T9] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 282.145538][ T8] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 282.228426][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.241361][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.254401][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.270376][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.284555][ T9] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 282.303541][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.323114][ T9] usb 2-1: config 0 descriptor?? [ 282.345483][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.354382][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 282.363705][ T8] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 282.377275][ T8] usb 1-1: config 1 interface 0 has no altsetting 1 [ 282.390814][ T8] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 282.400449][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.411278][ T8] usb 1-1: Product: syz [ 282.418379][ T8] usb 1-1: Manufacturer: syz [ 282.423120][ T8] usb 1-1: SerialNumber: syz [ 282.437632][ T8] smsusb:smsusb_probe: board id=8, interface number 0 [ 282.635170][ T8] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 282.642464][ T8] smsusb: probe of 1-1:1.0 failed with error -71 [ 282.652705][ T8] usb 1-1: USB disconnect, device number 15 [ 282.748084][ T9] hid-u2fzero 0003:10C4:8ACF.000A: item fetching failed at offset 1/5 [ 282.757484][ T9] hid-u2fzero: probe of 0003:10C4:8ACF.000A failed with error -22 [ 282.815520][ T788] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 282.951597][ T8] usb 2-1: USB disconnect, device number 19 [ 282.999618][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 283.007065][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.018096][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.028738][ T788] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 283.037847][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.048221][ T788] usb 3-1: config 0 descriptor?? [ 283.055966][ T788] hub 3-1:0.0: USB hub found [ 283.193470][ T8860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.947'. [ 283.203225][ T8860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.947'. [ 283.214888][ T8860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.947'. [ 283.270746][ T788] hub 3-1:0.0: 1 port detected [ 283.364895][ T8864] tipc: Enabled bearer , priority 0 [ 283.374835][ T8864] tipc: Resetting bearer [ 283.382827][ T8863] tipc: Disabling bearer [ 283.487456][ T788] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 283.494294][ T788] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 283.540638][ T788] usbhid 3-1:0.0: can't add hid device: -71 [ 283.551568][ T788] usbhid: probe of 3-1:0.0 failed with error -71 [ 283.559242][ T8869] loop5: detected capacity change from 0 to 7 [ 283.572611][ T8869] Dev loop5: unable to read RDB block 7 [ 283.580320][ T8869] loop5: unable to read partition table [ 283.586619][ T8869] loop5: partition table beyond EOD, truncated [ 283.595831][ T8869] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 283.598819][ T788] usb 3-1: USB disconnect, device number 24 [ 284.345549][ T788] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 284.422505][ T8879] tipc: Enabled bearer , priority 0 [ 284.433860][ T8879] syzkaller0: entered promiscuous mode [ 284.441453][ T8879] syzkaller0: entered allmulticast mode [ 284.477635][ T8879] tipc: Resetting bearer [ 284.485767][ T9] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 284.495883][ T8878] tipc: Resetting bearer [ 284.520626][ T8878] tipc: Disabling bearer [ 284.535491][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 284.542066][ T788] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.550237][ T788] usb 3-1: config 0 has no interface number 0 [ 284.559412][ T788] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 284.571117][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.595520][ T788] usb 3-1: Product: syz [ 284.599748][ T788] usb 3-1: Manufacturer: syz [ 284.604352][ T788] usb 3-1: SerialNumber: syz [ 284.623151][ T788] usb 3-1: config 0 descriptor?? [ 284.632842][ T788] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 284.649085][ T788] usb 3-1: selecting invalid altsetting 1 [ 284.654857][ T788] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 284.677941][ T788] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 284.697051][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 284.713287][ T788] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 284.722476][ T9] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 284.749402][ T788] usb 3-1: media controller created [ 284.765556][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 284.774907][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 284.807234][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.818695][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 284.849405][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 284.877104][ T9] usb 4-1: Product: syz [ 284.881446][ T9] usb 4-1: Manufacturer: syz [ 284.904151][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 284.909824][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 284.922921][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 284.942599][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 284.942757][ T8886] tipc: Enabled bearer , priority 0 [ 284.964048][ T8886] tipc: Resetting bearer [ 284.981867][ T8884] tipc: Disabling bearer [ 285.246790][ T5787] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 285.256782][ T5787] Bluetooth: hci1: Injecting HCI hardware error event [ 285.266919][ T5102] Bluetooth: hci1: hardware error 0x00 [ 285.305529][ T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 285.363159][ T5870] usb 4-1: USB disconnect, device number 12 [ 285.421184][ T8898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.962'. [ 285.505754][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 285.513215][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.528889][ T23] usb 2-1: config 0 has no interfaces? [ 285.542054][ T23] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 285.551301][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.559859][ T23] usb 2-1: Product: syz [ 285.564053][ T23] usb 2-1: Manufacturer: syz [ 285.568841][ T23] usb 2-1: SerialNumber: syz [ 285.586237][ T23] usb 2-1: config 0 descriptor?? [ 285.966562][ T788] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 285.974938][ T8875] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 285.982701][ T788] zl10353_read_register: readreg error (reg=127, ret==-110) [ 285.993335][ T788] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 286.031599][ T788] usb 3-1: USB disconnect, device number 25 [ 286.323124][ T8910] tipc: Enabled bearer , priority 0 [ 286.331246][ T8910] syzkaller0: entered promiscuous mode [ 286.336920][ T8910] syzkaller0: entered allmulticast mode [ 286.362432][ T8910] tipc: Resetting bearer [ 286.371604][ T8909] tipc: Resetting bearer [ 286.391797][ T8909] tipc: Disabling bearer [ 286.760797][ T8921] tipc: Enabled bearer , priority 0 [ 286.773660][ T8921] tipc: Resetting bearer [ 286.787902][ T8920] tipc: Disabling bearer [ 287.175903][ T788] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 287.285871][ T23] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 287.325871][ T5102] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 287.379258][ T788] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.388012][ T788] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 287.398367][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.407410][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 287.420612][ T788] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.430438][ T788] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.438656][ T788] usb 3-1: Product: syz [ 287.442828][ T788] usb 3-1: Manufacturer: syz [ 287.455881][ T788] cdc_wdm 3-1:1.0: skipping garbage [ 287.461133][ T788] cdc_wdm 3-1:1.0: skipping garbage [ 287.468794][ T788] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 287.474737][ T788] cdc_wdm 3-1:1.0: Unknown control protocol [ 287.475550][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 287.493937][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.505789][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 287.514688][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 287.526518][ T5870] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 287.534454][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 287.547237][ T23] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 287.558874][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.572217][ T23] hub 1-1:1.0: bad descriptor, ignoring hub [ 287.582661][ T23] hub: probe of 1-1:1.0 failed with error -5 [ 287.589043][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 287.594253][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 287.601116][ T23] cdc_wdm 1-1:1.0: cdc-wdm1: USB WDM device [ 287.607170][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 287.684945][ T23] usb 3-1: USB disconnect, device number 26 [ 287.737312][ T5870] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.746415][ T5870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.756660][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.765729][ T5870] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.788267][ T5870] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.806374][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.819189][ T5870] usb 4-1: Product: syz [ 287.823430][ T5870] usb 4-1: Manufacturer: syz [ 287.834121][ T5870] cdc_wdm 4-1:1.0: skipping garbage [ 287.840226][ T5870] cdc_wdm 4-1:1.0: skipping garbage [ 287.848743][ T5870] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 287.854693][ T5870] cdc_wdm 4-1:1.0: Unknown control protocol [ 287.937714][ T8] usb 1-1: USB disconnect, device number 16 [ 287.959928][ T23] usb 2-1: USB disconnect, device number 20 [ 288.039198][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 288.046069][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 288.052897][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 288.059511][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 288.065924][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 288.072535][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 288.079025][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 288.085646][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 288.091970][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 288.098579][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 288.105328][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 288.111949][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 288.118324][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 288.124958][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 288.135531][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 288.142147][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 288.149245][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 288.155847][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 288.162216][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 288.168818][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 288.177030][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 288.186059][ T788] usb 4-1: USB disconnect, device number 13 [ 288.262433][ T8944] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 288.270666][ T8944] general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] PREEMPT SMP KASAN [ 288.282388][ T8944] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 288.290780][ T8944] CPU: 1 PID: 8944 Comm: syz.2.979 Not tainted syzkaller #0 [ 288.298054][ T8944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.308273][ T8944] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 288.313814][ T8944] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 59 96 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 38 96 df f9 4d 8b 24 24 48 83 c3 [ 288.333413][ T8944] RSP: 0018:ffffc9000c3a7a18 EFLAGS: 00010206 [ 288.339478][ T8944] RAX: 0000000000000005 RBX: ffff88807f902c00 RCX: 0000000000080000 [ 288.347445][ T8944] RDX: ffffc9000d85c000 RSI: 0000000000006ab5 RDI: 0000000000006ab6 [ 288.355420][ T8944] RBP: 0000000000000001 R08: ffff88802b84212f R09: 1ffff11005708425 [ 288.363382][ T8944] R10: dffffc0000000000 R11: ffffed1005708426 R12: 0000000000000028 [ 288.365617][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 288.371332][ T8944] R13: dffffc0000000000 R14: ffff88802b842000 R15: dffffc0000000000 [ 288.371350][ T8944] FS: 00007f0425cdb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 288.395746][ T8944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.402323][ T8944] CR2: 0000001b2e322ff8 CR3: 0000000023744000 CR4: 00000000003506e0 [ 288.410291][ T8944] Call Trace: [ 288.413567][ T8944] [ 288.416487][ T8944] pcl818_detach+0x66/0xd0 [ 288.420898][ T8944] comedi_device_detach_locked+0x172/0x710 [ 288.426717][ T8944] comedi_device_attach+0x5cd/0x710 [ 288.431912][ T8944] comedi_unlocked_ioctl+0x606/0xfe0 [ 288.437184][ T8944] ? tomoyo_path_number_perm+0x477/0x590 [ 288.442803][ T8944] ? comedi_poll+0x8c0/0x8c0 [ 288.447515][ T8944] ? __fget_files+0x28/0x4d0 [ 288.452099][ T8944] ? bpf_lsm_file_ioctl+0x9/0x10 [ 288.457075][ T8944] ? security_file_ioctl+0x80/0xa0 [ 288.462383][ T8944] ? comedi_poll+0x8c0/0x8c0 [ 288.467043][ T8944] __se_sys_ioctl+0xfd/0x170 [ 288.471630][ T8944] do_syscall_64+0x55/0xb0 [ 288.476063][ T8944] ? clear_bhb_loop+0x40/0x90 [ 288.480991][ T8944] ? clear_bhb_loop+0x40/0x90 [ 288.485665][ T8944] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.491559][ T8944] RIP: 0033:0x7f0424d8f6c9 [ 288.495969][ T8944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.515574][ T8944] RSP: 002b:00007f0425cdb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.523970][ T8944] RAX: ffffffffffffffda RBX: 00007f0424fe5fa0 RCX: 00007f0424d8f6c9 [ 288.531930][ T8944] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 288.539905][ T8944] RBP: 00007f0424e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 288.547883][ T8944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.555930][ T8944] R13: 00007f0424fe6038 R14: 00007f0424fe5fa0 R15: 00007ffebfe1d6b8 [ 288.563919][ T8944] [ 288.566926][ T8944] Modules linked in: [ 288.575555][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 288.577645][ T8944] ---[ end trace 0000000000000000 ]--- [ 288.586588][ T8944] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 288.588640][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.592495][ T8944] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 59 96 df f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 38 96 df f9 4d 8b 24 24 48 83 c3 [ 288.622524][ T8944] RSP: 0018:ffffc9000c3a7a18 EFLAGS: 00010206 [ 288.624364][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.628987][ T8944] RAX: 0000000000000005 RBX: ffff88807f902c00 RCX: 0000000000080000 [ 288.645936][ T8944] RDX: ffffc9000d85c000 RSI: 0000000000006ab5 RDI: 0000000000006ab6 [ 288.647088][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 288.654015][ T8944] RBP: 0000000000000001 R08: ffff88802b84212f R09: 1ffff11005708425 [ 288.674008][ T8944] R10: dffffc0000000000 R11: ffffed1005708426 R12: 0000000000000028 [ 288.682736][ T8944] R13: dffffc0000000000 R14: ffff88802b842000 R15: dffffc0000000000 [ 288.691262][ T8944] FS: 00007f0425cdb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 288.700540][ T8944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 288.707535][ T8944] CR2: 00007fd8fb77bd58 CR3: 0000000023744000 CR4: 00000000003506e0 [ 288.707721][ T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 288.715897][ T8944] Kernel panic - not syncing: Fatal exception [ 288.726950][ T8944] Kernel Offset: disabled