last executing test programs: 3m38.617492884s ago: executing program 2 (id=17750): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 3m38.518265885s ago: executing program 2 (id=17752): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000007c0)=0x1) close(r0) 3m38.321800938s ago: executing program 2 (id=17755): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) 3m38.124675635s ago: executing program 2 (id=17757): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x344, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x330, 0x1, [@m_gact={0x170, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x8, 0x7, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xaeb, 0x20000000}}]}, {0xe1, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0xac, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x75, 0x6, "bd3a5376a2440c64d6314cc7f446e251aa486d1931d16d2a624d085a1be90b436fdedf917b760ef37b4272893313d629bb02bcd42142bb0469eba6b0eddd9bc3612d9b46c64f145f45c89cb5bb716f4a44dc897bd951f9775a35dd8303b774f0c02924dc414d297ae96eb8e36c2dfb53b2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xb4, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x1, 0x7, 0x187e, 0x8}}]}, {0x35, 0x6, "644cfabbe56834b72d4965b0f9c601f7e7e0a903f719e150808ef459921b7b7a784878285ded9060f2020ae3e0393a0927"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x344}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 3m38.058866156s ago: executing program 2 (id=17759): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f00000005c0)={&(0x7f0000000480)=@canfd={{0x2, 0x0, 0x1}, 0x15, 0x0, 0x0, 0x0, "de0b96d21c4e359772d6cbbf0426147c4744ad84e121bf488ef7efd1a014600ec93ae88433b425c0dd7f2528ba7fcc798aedcf2486a62dbcba99c836f511d700"}, 0x48}}, 0x0) 3m37.925222694s ago: executing program 2 (id=17761): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0x7ffc0000) 3m22.839170259s ago: executing program 32 (id=17761): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0x7ffc0000) 4.655178592s ago: executing program 0 (id=20113): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x20000000000008, 0x200000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}}) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x2, 0xe00) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000001c0)={r1, 0x1000, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x6, 0x1, 0x1, "b4fd8fc7627dac52d8cb59ee041bece67299bdef67e9fc8e7e824b0ee88aacece3eb96c6842f8d2a80b5f3897ed9694cb579bc9d2dc4a03da37ece06c23c4690", "2a311000ed7b4a6b872ec9dae68e9751a3e1a54df95160706589e73e0954dccb6c2cc6e27e976150dc31e9795f1ae61dd3feeff948c39595aa6b2d190a133d89", "6f03a17381447970d2c4d3571fcef5725ae3f19589c3cdbdf2e4459ff08c8044", [0x1, 0x1]}}) 4.580951226s ago: executing program 5 (id=20114): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) sendfile(r1, r1, 0x0, 0x7ff) 4.565625618s ago: executing program 4 (id=20115): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 4.500409532s ago: executing program 0 (id=20116): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) 4.416794641s ago: executing program 5 (id=20117): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/50}], 0x0, &(0x7f0000000340)=""/225}}, {{&(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/203}], 0x0, &(0x7f0000001880)=""/225}, 0x8}, {{&(0x7f0000000540)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)=""/186}], 0x0, &(0x7f00000007c0)=""/4096}, 0x9}], 0x30, 0x40010121, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x7fffffff, 0x4) 4.346362516s ago: executing program 0 (id=20119): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x70f9a000) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_DESTROY(r1, &(0x7f0000000540), 0xff35) 4.021706832s ago: executing program 5 (id=20122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800003a"]) 3.954269901s ago: executing program 4 (id=20124): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 3.754256649s ago: executing program 4 (id=20126): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x63, 0x4200, 0x0, 0x0}], 0x1}) 3.728930719s ago: executing program 5 (id=20127): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) exit(0x6) 3.254584883s ago: executing program 0 (id=20130): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x40000071, 0x0, 0x40700}]}) 2.879312881s ago: executing program 0 (id=20131): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 2.751900144s ago: executing program 5 (id=20133): r0 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x59fa, 0x400, 0x8, 0x2}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x4000000000000209}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2.584860412s ago: executing program 0 (id=20134): sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40008041) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="28400103"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.551913933s ago: executing program 5 (id=20136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 2.271192538s ago: executing program 4 (id=20138): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000011c0)={0x7, 0x0, 0xfd}) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xab00000000000000, 0xd000, 0x0, 0x3be66fef576f3e54}) 2.15692226s ago: executing program 1 (id=20139): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x80503d0a, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000280)={0x0, 0x1}, 0x0) 1.986429321s ago: executing program 1 (id=20140): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) read(r0, 0x0, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.857372416s ago: executing program 4 (id=20141): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r1, r0, 0x0, 0x8010002b) 1.774139947s ago: executing program 1 (id=20142): sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x4}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0585609, &(0x7f0000000040)={0x0, 0xa}) 1.528815498s ago: executing program 4 (id=20143): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000140)={0x20, 0x1, 0x4, "691522a4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.495843259s ago: executing program 1 (id=20144): unshare(0x400) r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x19) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100}, 0x50) 1.428266194s ago: executing program 1 (id=20145): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) close(r0) 1.3681523s ago: executing program 1 (id=20146): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f0000000100)={0x0, 0x31, 0x7, {0x7, 0xc, "5dfc000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0xc0000) ioctl$HIDIOCGRAWNAME(r1, 0x80404804, &(0x7f0000000040)) 1.107946961s ago: executing program 3 (id=20148): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000002c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@my=0x1}) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 965.55053ms ago: executing program 3 (id=20149): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x4) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x4c000) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 509.832719ms ago: executing program 3 (id=20150): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000006c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 420.691999ms ago: executing program 3 (id=20151): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x202, &(0x7f0000000100)={0x0}) 271.347195ms ago: executing program 3 (id=20152): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {0x0, 0x401, 0x1, 0xfffc}, 0xf, [0x4, 0x101, 0x0, 0x0, 0x800, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x10, 0x4, 0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800, 0x1, 0x3, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10000, 0x5f1], [0xfffffff8, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8eb1baa, 0x81, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000, 0x0, 0xfffffffc, 0x6, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x200, 0x0, 0x2, 0x26, 0x0, 0xeae2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x9, 0xffff], [0x4, 0xfc, 0x8f58, 0x465b, 0x0, 0xb67f75c, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x9, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80, 0x100, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff, 0x71f, 0xa5f, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x4, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x41, 0x0, 0x0, 0xbd, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0xb, 0x0, 0x0, 0x4000, 0xdffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 0s ago: executing program 3 (id=20153): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fcntl$setstatus(r1, 0x4, 0x2400) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x57, 0xffff, 0x0, {0x7, 0x1}, {0x50, 0x2}, @period={0x59, 0x7, 0xc1f, 0x6773, 0x8000, {0x9, 0x9, 0x1, 0x1}, 0x0, 0x0}}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) kernel console output (not intermixed with test programs): im netdevsim5 netdevsim2: renamed from eth2 [ 1220.611046][T21877] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1220.994226][T21877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.096830][T21877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.150558][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.157834][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.282363][T22525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18428'. [ 1221.348984][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.356894][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.657464][T22546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18434'. [ 1221.673549][T21877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1221.817562][T21877] veth0_vlan: entered promiscuous mode [ 1221.895282][T21877] veth1_vlan: entered promiscuous mode [ 1222.019649][T22561] pim6reg0: tun_chr_ioctl cmd 1074025680 [ 1222.071316][T21877] veth0_macvtap: entered promiscuous mode [ 1222.099713][T21877] veth1_macvtap: entered promiscuous mode [ 1222.144756][ T6378] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1222.210154][T21877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1222.245408][T21877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1222.288713][T21877] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.313135][ T6378] usb 4-1: Using ep0 maxpacket: 8 [ 1222.318140][T21877] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.332965][ T6378] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1222.342124][T21877] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.342164][T21877] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1222.396069][ T6378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.412618][ T6378] usb 4-1: Product: syz [ 1222.416946][ T6378] usb 4-1: Manufacturer: syz [ 1222.421581][ T6378] usb 4-1: SerialNumber: syz [ 1222.456296][ T6378] usb 4-1: config 0 descriptor?? [ 1222.675462][ T6378] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1222.749808][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.789686][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.102721][ T6378] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1223.154774][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1223.177370][ T6378] usb 4-1: USB disconnect, device number 112 [ 1223.204688][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1223.649304][T22661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18454'. [ 1223.764194][ T6326] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1223.972924][ T6326] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1223.981293][ T6326] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.020281][ T6326] usb 5-1: config 220 has no interface number 2 [ 1224.034812][ T6326] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1224.054052][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18459'. [ 1224.058894][ T6326] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1224.083552][ T6326] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1224.093230][ T6326] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1224.109572][ T6326] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1224.115187][T22679] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 1224.142719][ T6326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.168287][ T6326] usb 5-1: Product: syz [ 1224.173624][T22679] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 1224.178214][ T6326] usb 5-1: Manufacturer: syz [ 1224.191343][T22685] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18461'. [ 1224.202806][ T6326] usb 5-1: SerialNumber: syz [ 1224.214332][T22685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18461'. [ 1224.233403][T22685] netlink: 52 bytes leftover after parsing attributes in process `syz.1.18461'. [ 1224.466127][ T6326] usb 5-1: selecting invalid altsetting 0 [ 1224.485772][ T6326] usb 5-1: selecting invalid altsetting 0 [ 1224.528660][ T6326] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1224.557874][ T6326] usb 5-1: No valid video chain found. [ 1224.601618][ T6326] usb 5-1: selecting invalid altsetting 0 [ 1224.625299][ T6326] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1224.691259][ T6326] usb 5-1: USB disconnect, device number 109 [ 1225.133978][T22732] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1225.149025][T22729] netlink: 'syz.0.18473': attribute type 9 has an invalid length. [ 1225.183605][T22729] netlink: 146708 bytes leftover after parsing attributes in process `syz.0.18473'. [ 1226.461896][T22798] netlink: 'syz.4.18494': attribute type 1 has an invalid length. [ 1227.372295][ T24] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1227.543264][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 1227.563121][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1227.585562][ T24] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1227.613126][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1227.650945][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1227.674126][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1227.702225][ T24] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1227.732722][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1227.767363][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1227.836974][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1227.867156][ T24] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1227.917187][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1227.959276][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1228.003220][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1228.025108][ T24] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1228.057266][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1228.112894][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1228.151884][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1228.174182][ T24] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1228.206327][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1228.237271][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1228.240865][T22856] bridge_slave_0: default FDB implementation only supports local addresses [ 1228.258371][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1228.269360][ T24] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1228.306837][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1228.320171][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1228.340726][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1228.362186][ T24] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1228.392585][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1228.412249][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1228.433908][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1228.454292][ T24] usb 5-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC5, changing to 0x85 [ 1228.472307][ T24] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1228.502226][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1228.521465][ T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1228.542472][ T24] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1228.563184][ T24] usb 5-1: Product: syz [ 1228.567514][ T24] usb 5-1: Manufacturer: syz [ 1228.572624][ T24] usb 5-1: SerialNumber: syz [ 1228.591313][ T24] usb 5-1: config 0 descriptor?? [ 1228.623635][ T24] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 1228.827645][T17941] usb 5-1: USB disconnect, device number 110 [ 1228.844568][T17941] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 1230.102200][ T6328] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1230.242626][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18540'. [ 1230.272404][ T6328] usb 6-1: Using ep0 maxpacket: 8 [ 1230.285503][ T6328] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1230.308475][T22960] binder: 22956:22960 ioctl c0306201 200000000100 returned -14 [ 1230.319471][ T6328] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1230.330454][ T6328] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1230.351466][ T6328] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1230.382222][ T6328] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1230.391988][ T6328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.503505][T17941] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1230.622478][ T6328] usb 6-1: GET_CAPABILITIES returned 0 [ 1230.628114][ T6328] usbtmc 6-1:16.0: can't read capabilities [ 1230.676801][T17941] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1230.691832][T17941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.707457][T17941] usb 2-1: Product: syz [ 1230.712005][T17941] usb 2-1: Manufacturer: syz [ 1230.718336][T17941] usb 2-1: SerialNumber: syz [ 1230.722228][T25238] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1230.737218][T17941] usb 2-1: config 0 descriptor?? [ 1230.751523][T17941] ch341 2-1:0.0: ch341-uart converter detected [ 1230.838073][ T24] usb 6-1: USB disconnect, device number 6 [ 1230.882625][T25238] usb 5-1: Using ep0 maxpacket: 16 [ 1230.897797][T25238] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 1230.917504][T25238] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 1230.928336][T25238] usb 5-1: config 166 has no interface number 0 [ 1230.939830][T25238] usb 5-1: config 166 has no interface number 1 [ 1230.946445][T25238] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1230.963199][T25238] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1230.978498][T25238] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1230.989614][T25238] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1231.007587][T25238] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 1231.020128][T25238] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1231.034100][T23001] delete_channel: no stack [ 1231.038869][T25238] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1231.050865][T25238] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1231.065984][T25238] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1231.087522][T25238] usb 5-1: config 166 interface 177 has no altsetting 0 [ 1231.094681][T25238] usb 5-1: config 166 interface 34 has no altsetting 0 [ 1231.110755][T25238] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 1231.121031][T25238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.145101][T25238] usb 5-1: Product: syz [ 1231.149353][T25238] usb 5-1: Manufacturer: syz [ 1231.176451][T25238] usb 5-1: SerialNumber: syz [ 1231.277391][T23011] erspan0: entered promiscuous mode [ 1231.285436][T23011] macsec2: entered allmulticast mode [ 1231.291036][T23011] erspan0: entered allmulticast mode [ 1231.306248][T23011] erspan0: left allmulticast mode [ 1231.314685][T23011] erspan0: left promiscuous mode [ 1231.414943][T25238] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 1231.574491][T17941] usb 2-1: failed to send control message: -71 [ 1231.591059][T17941] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 1231.606410][T25238] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 1231.623900][T17941] usb 2-1: USB disconnect, device number 4 [ 1231.691635][T17941] ch341 2-1:0.0: device disconnected [ 1231.849252][T25238] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 1231.974891][T23053] loop4: detected capacity change from 0 to 7 [ 1231.987408][T18312] Dev loop4: unable to read RDB block 7 [ 1231.996340][T18312] loop4: unable to read partition table [ 1232.008904][T25238] usb 5-1: Found UVC 0.00 device syz (0bda:0138) [ 1232.019258][T18312] loop4: partition table beyond EOD, truncated [ 1232.033329][T25238] usb 5-1: No valid video chain found. [ 1232.044002][T23053] Dev loop4: unable to read RDB block 7 [ 1232.051356][T23053] loop4: unable to read partition table [ 1232.063719][T25238] usb 5-1: USB disconnect, device number 111 [ 1232.089320][T23053] loop4: partition table beyond EOD, truncated [ 1232.096594][T23053] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 1234.192975][T17941] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1234.252695][T25238] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1234.359866][T17941] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1234.382873][T17941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.396564][T17941] usb 4-1: Product: syz [ 1234.401748][T17941] usb 4-1: Manufacturer: syz [ 1234.416095][T17941] usb 4-1: SerialNumber: syz [ 1234.528927][T17941] usb 4-1: config 0 descriptor?? [ 1234.549108][T25238] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1234.582573][T25238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.600516][T25238] usb 6-1: Product: syz [ 1234.622625][T25238] usb 6-1: Manufacturer: syz [ 1234.642123][T25238] usb 6-1: SerialNumber: syz [ 1234.678725][T25238] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1234.772282][ T6326] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1234.867594][T17941] usb 4-1: USB disconnect, device number 113 [ 1235.642921][T23196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.652432][T23196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.872572][ T6326] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1235.881179][ T6326] ath9k_htc: Failed to initialize the device [ 1235.936935][ T6326] usb 6-1: ath9k_htc: USB layer deinitialized [ 1236.039895][T25238] usb 6-1: USB disconnect, device number 7 [ 1236.399489][T23237] syz.4.18609 (23237): drop_caches: 2 [ 1236.410888][T23237] syz.4.18609 (23237): drop_caches: 2 [ 1236.842372][T25238] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1237.012445][T25238] usb 5-1: Using ep0 maxpacket: 32 [ 1237.028726][T25238] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1237.062839][T25238] usb 5-1: config 0 has no interface number 0 [ 1237.084298][T25238] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1237.102315][T25238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.121938][T25238] usb 5-1: Product: syz [ 1237.132880][T25238] usb 5-1: Manufacturer: syz [ 1237.149524][T25238] usb 5-1: SerialNumber: syz [ 1237.163540][T25238] usb 5-1: config 0 descriptor?? [ 1237.201599][T25238] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1237.418938][T25238] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1237.461968][T25238] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1237.480564][T23271] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1237.489592][T23271] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1237.498977][T23271] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1237.507899][T23271] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1237.600693][T23246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1237.613359][T23246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1237.884439][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1237.900458][T25238] usb 5-1: USB disconnect, device number 112 [ 1237.942802][T25238] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1237.999809][T25238] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1238.051121][T25238] quatech2 5-1:0.51: device disconnected [ 1239.229405][T23365] @: renamed from vlan0 [ 1239.997748][T23375] input: syz0 as /devices/virtual/input/input154 [ 1240.387887][T23391] netlink: 18 bytes leftover after parsing attributes in process `syz.0.18647'. [ 1240.715544][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18651'. [ 1240.924641][T23412] netlink: 27 bytes leftover after parsing attributes in process `syz.1.18653'. [ 1241.155667][T23422] : renamed from bond0 (while UP) [ 1241.388918][T23434] netlink: 'syz.4.18660': attribute type 4 has an invalid length. [ 1241.974375][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1242.052538][T25238] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1242.156881][ T30] audit: type=1326 audit(1748786525.370:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23485 comm="syz.3.18677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae4f8e969 code=0x7ffc0000 [ 1242.179510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.188262][ T30] audit: type=1326 audit(1748786525.400:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23485 comm="syz.3.18677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fcae4f8e969 code=0x7ffc0000 [ 1242.210970][ C0] vkms_vblank_simulate: vblank timer overrun [ 1242.264627][ T30] audit: type=1326 audit(1748786525.400:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23485 comm="syz.3.18677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae4f8e969 code=0x7ffc0000 [ 1242.291549][ T30] audit: type=1326 audit(1748786525.400:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23485 comm="syz.3.18677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcae4f8e969 code=0x7ffc0000 [ 1242.316941][T25238] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1242.326675][T25238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.335830][T25238] usb 2-1: Product: syz [ 1242.340342][T25238] usb 2-1: Manufacturer: syz [ 1242.356740][T25238] usb 2-1: SerialNumber: syz [ 1242.386565][T25238] usb 2-1: config 0 descriptor?? [ 1242.610880][T25238] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 1243.017728][T25238] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1243.231482][T25238] usb 2-1: USB disconnect, device number 5 [ 1243.621460][T23531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18689'. [ 1244.128153][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.134968][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.842201][T25238] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1245.022544][T25238] usb 6-1: Using ep0 maxpacket: 32 [ 1245.036102][T25238] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1245.056818][T25238] usb 6-1: config 0 has no interface number 0 [ 1245.082342][T25238] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1245.112327][T25238] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1245.139642][T25238] usb 6-1: config 0 interface 126 has no altsetting 0 [ 1245.181410][T25238] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1245.210631][T25238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.231441][T25238] usb 6-1: Product: syz [ 1245.262239][T25238] usb 6-1: Manufacturer: syz [ 1245.266937][T25238] usb 6-1: SerialNumber: syz [ 1245.299449][T25238] usb 6-1: config 0 descriptor?? [ 1245.317621][T23577] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1245.326673][T23577] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1245.361842][T23611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18716'. [ 1245.774882][T25238] ir_usb 6-1:0.126: IR Dongle converter detected [ 1245.907820][ T6326] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1245.978030][T25238] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 1246.082433][ T6326] usb 2-1: Using ep0 maxpacket: 8 [ 1246.094295][ T6326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.114963][ T6326] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1246.137208][ T6326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1246.162520][ T6326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1246.186022][ T6328] usb 6-1: USB disconnect, device number 8 [ 1246.209453][ T6326] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1246.230107][ T6328] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 1246.250560][ T6326] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1246.278769][ T6328] ir_usb 6-1:0.126: device disconnected [ 1246.288241][ T6326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1246.308988][ T6326] usb 2-1: Product: syz [ 1246.320757][ T6326] usb 2-1: Manufacturer: syz [ 1246.327069][ T6326] usb 2-1: SerialNumber: syz [ 1246.358197][ T6326] usb 2-1: config 0 descriptor?? [ 1246.580831][ T6326] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1246.595130][ T6326] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1246.780286][ T6326] radio-si470x 2-1:0.0: software version 253, hardware version 55 [ 1246.824567][ T6326] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1246.903561][T23665] netlink: 'syz.5.18728': attribute type 5 has an invalid length. [ 1246.986025][ T6326] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1247.019726][ T6326] radio-si470x 2-1:0.0: submitting int urb failed (-90) [ 1247.045528][ T6326] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1247.078582][ T6326] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 1247.112728][ T6326] usb 2-1: USB disconnect, device number 6 [ 1247.752192][ T6328] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1247.953965][ T6328] usb 5-1: Using ep0 maxpacket: 16 [ 1247.969696][ T6328] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1247.992552][ T6328] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1248.018315][T23728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1248.026319][ T6328] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1248.046904][ T6328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.073597][ T6328] usb 5-1: config 0 descriptor?? [ 1248.495065][ T6328] microsoft 0003:045E:07DA.0080: No inputs registered, leaving [ 1248.519946][ T6328] microsoft 0003:045E:07DA.0080: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1248.575281][ T6328] microsoft 0003:045E:07DA.0080: no inputs found [ 1248.581705][ T6328] microsoft 0003:045E:07DA.0080: could not initialize ff, continuing anyway [ 1248.936128][ T6328] usb 5-1: USB disconnect, device number 113 [ 1248.986843][T23756] fido_id[23756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1249.092200][T17941] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1249.252347][T17941] usb 2-1: Using ep0 maxpacket: 16 [ 1249.259562][T17941] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1249.272212][T17941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.292896][T17941] usb 2-1: config 0 has no interface number 0 [ 1249.302245][T17941] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1249.311841][T17941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.320037][T17941] usb 2-1: Product: syz [ 1249.325221][T17941] usb 2-1: Manufacturer: syz [ 1249.329875][T17941] usb 2-1: SerialNumber: syz [ 1249.346050][T17941] usb 2-1: config 0 descriptor?? [ 1249.358446][T17941] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1249.365560][T17941] usb 2-1: No valid video chain found. [ 1249.412290][ T6328] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1249.534921][T23796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1249.583159][ T24] usb 2-1: USB disconnect, device number 7 [ 1249.593696][ T6328] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.616164][ T6328] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1249.669572][ T6328] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1249.692139][ T6328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.720443][ T6328] usb 6-1: Product: syz [ 1249.732809][ T6328] usb 6-1: Manufacturer: syz [ 1249.737640][ T6328] usb 6-1: SerialNumber: syz [ 1249.965067][ T6328] usb 6-1: 0:2 : does not exist [ 1250.005731][ T6328] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1250.057453][ T6328] usb 6-1: USB disconnect, device number 9 [ 1250.165715][T18312] udevd[18312]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1251.572875][T17941] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1251.744857][T17941] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.774885][T17941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1251.823509][T17941] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1251.838679][T17941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1251.856632][T17941] usb 5-1: SerialNumber: syz [ 1252.156302][T17941] usb 5-1: 0:2 : does not exist [ 1252.210281][T17941] usb 5-1: USB disconnect, device number 114 [ 1252.348699][T18312] udevd[18312]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1252.610959][T23959] tun0: tun_chr_ioctl cmd 2148553947 [ 1253.562806][T24003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18809'. [ 1253.667581][T24003] vlan0: entered allmulticast mode [ 1253.903990][T24015] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1253.910145][T24015] syzkaller1: linktype set to 32 [ 1253.919051][T24021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18814'. [ 1255.202168][ T6328] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1255.362177][ T6328] usb 4-1: Using ep0 maxpacket: 8 [ 1255.379087][ T6328] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1255.409723][ T6328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.428763][ T6328] usb 4-1: Product: syz [ 1255.440521][ T6328] usb 4-1: Manufacturer: syz [ 1255.454202][ T6328] usb 4-1: SerialNumber: syz [ 1255.479825][ T6328] usb 4-1: config 0 descriptor?? [ 1255.739848][ T6328] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1256.339654][ T6328] gspca_sunplus: reg_w_riv err -71 [ 1256.359321][ T6328] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1256.405793][T24125] Attempt to restore checkpoint with obsolete wellknown handles [ 1256.406787][ T6328] usb 4-1: USB disconnect, device number 114 [ 1256.531485][T24135] netlink: 'syz.5.18846': attribute type 13 has an invalid length. [ 1256.823002][T17941] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1256.997638][T17941] usb 5-1: New USB device found, idVendor=046d, idProduct=c087, bcdDevice= 0.00 [ 1257.028766][T17941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.066585][T17941] usb 5-1: config 0 descriptor?? [ 1257.289627][T17941] usbhid 5-1:0.0: can't add hid device: -71 [ 1257.299996][T17941] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1257.321198][T17941] usb 5-1: USB disconnect, device number 115 [ 1257.845882][T24206] netlink: 452 bytes leftover after parsing attributes in process `syz.1.18859'. [ 1258.150115][T24214] netlink: 136 bytes leftover after parsing attributes in process `syz.3.18862'. [ 1258.902943][T24243] netlink: 'syz.5.18871': attribute type 58 has an invalid length. [ 1258.934352][T24243] netlink: 20 bytes leftover after parsing attributes in process `syz.5.18871'. [ 1260.312883][ T6378] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 1260.520651][ T6378] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1260.550228][ T6378] usb 2-1: config 0 has no interface number 0 [ 1260.572257][ T6378] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1260.614743][ T6378] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1260.650565][ T6378] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1260.669283][ T6378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.684721][ T6378] usb 2-1: config 0 descriptor?? [ 1260.696430][T24295] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1260.727649][ T6378] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1260.957292][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1260.966900][T25238] usb 2-1: USB disconnect, device number 8 [ 1261.142776][ T6378] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1261.152429][ T6328] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1261.302247][ T6378] usb 6-1: Using ep0 maxpacket: 8 [ 1261.309425][ T6378] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1261.312513][ T6328] usb 5-1: Using ep0 maxpacket: 16 [ 1261.328867][ T6328] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1261.329494][ T6378] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1261.339022][ T6328] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11 [ 1261.358351][ T6378] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1261.360611][ T6328] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024 [ 1261.375889][ T6378] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.381732][ T6328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1261.403085][ T6378] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1261.411477][ T6328] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1261.412626][ T6378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.427427][ T6328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.438251][ T6328] usb 5-1: Product: syz [ 1261.442846][ T6328] usb 5-1: Manufacturer: syz [ 1261.447527][ T6328] usb 5-1: SerialNumber: syz [ 1261.456671][ T6328] usb 5-1: config 0 descriptor?? [ 1261.477977][T24345] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1261.647470][ T6378] usb 6-1: GET_CAPABILITIES returned 0 [ 1261.653336][ T6378] usbtmc 6-1:16.0: can't read capabilities [ 1261.694586][T24345] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1261.712991][ T6328] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input155 [ 1261.955347][ T6328] usb 6-1: USB disconnect, device number 10 [ 1262.066637][ T6326] usb 5-1: USB disconnect, device number 116 [ 1265.353105][ T6378] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1265.522388][ T6378] usb 5-1: Using ep0 maxpacket: 8 [ 1265.529908][ T6378] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1265.582441][ T6378] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1265.608655][ T6378] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1265.634637][ T6378] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1265.668328][ T6378] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1265.684235][ T6378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.928617][ T6378] usb 5-1: GET_CAPABILITIES returned 0 [ 1265.964805][ T6378] usbtmc 5-1:16.0: can't read capabilities [ 1266.165514][ T6326] usb 5-1: USB disconnect, device number 117 [ 1266.969990][T24601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18963'. [ 1268.382776][ T6326] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1268.565133][ T6326] usb 4-1: Using ep0 maxpacket: 16 [ 1268.593519][ T6326] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1268.612605][ T6326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1268.663476][ T6326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1268.692237][ T6326] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1268.711733][ T6326] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1268.768738][ T6326] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1268.797610][ T6326] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1268.817047][ T6326] usb 4-1: Manufacturer: syz [ 1268.873238][ T6326] usb 4-1: config 0 descriptor?? [ 1269.028666][T24697] input: syz0 as /devices/virtual/input/input156 [ 1269.248560][ T6326] rc_core: IR keymap rc-hauppauge not found [ 1269.269185][ T6326] Registered IR keymap rc-empty [ 1269.289208][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.309593][T24712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19000'. [ 1269.322563][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.355802][ T6326] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1269.417110][ T6326] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input157 [ 1269.489605][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.532571][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.562508][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.600433][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.642981][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.684094][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.762733][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.790770][T24738] Cannot find del_set index 0 as target [ 1269.796978][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.835832][T24740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19008'. [ 1269.855828][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.882359][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.922179][ T6326] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1269.955357][ T6326] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1269.971659][ T6326] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1269.996605][ T6326] usb 4-1: USB disconnect, device number 115 [ 1270.049652][T24754] input: syz0 as /devices/virtual/input/input158 [ 1270.132396][ T6328] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1270.341321][ T6328] usb 5-1: config 4 has an invalid interface number: 4 but max is 0 [ 1270.349752][ T6328] usb 5-1: config 4 has no interface number 0 [ 1270.362902][ T6328] usb 5-1: config 4 interface 4 has no altsetting 0 [ 1270.395005][ T6328] usb 5-1: New USB device found, idVendor=1435, idProduct=0326, bcdDevice=ea.c7 [ 1270.422118][ T6328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1270.431210][ T6328] usb 5-1: Product: syz [ 1270.452308][ T6328] usb 5-1: Manufacturer: syz [ 1270.457020][ T6328] usb 5-1: SerialNumber: syz [ 1270.612454][ T6328] usb 5-1: reset full-speed USB device number 118 using dummy_hcd [ 1270.743511][T24791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19019'. [ 1270.809470][T24793] netlink: 'syz.0.19020': attribute type 5 has an invalid length. [ 1271.212387][T25238] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1271.343204][ T6328] usb 5-1: device descriptor read/64, error -71 [ 1271.389894][T25238] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1271.426014][T25238] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1271.438329][T25238] usb 4-1: config 220 has an invalid descriptor of length 97, skipping remainder of the config [ 1271.450710][T25238] usb 4-1: config 220 has no interface number 2 [ 1271.465010][T25238] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1271.484662][T25238] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1271.491549][T25238] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1271.505320][T25238] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1271.535507][T25238] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1271.553421][T25238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.567128][T25238] usb 4-1: Product: syz [ 1271.571367][T25238] usb 4-1: Manufacturer: syz [ 1271.577001][T25238] usb 4-1: SerialNumber: syz [ 1271.612187][ T6328] usb 5-1: reset full-speed USB device number 118 using dummy_hcd [ 1271.825775][T25238] usb 4-1: selecting invalid altsetting 0 [ 1271.855581][T25238] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1271.872769][T25238] usb 4-1: No valid video chain found. [ 1271.888830][T25238] usb 4-1: selecting invalid altsetting 0 [ 1271.897565][T25238] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 1271.946935][T25238] usb 4-1: USB disconnect, device number 116 [ 1272.241517][ T6378] usb 5-1: USB disconnect, device number 118 [ 1272.902316][ T24] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1273.063870][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1273.078613][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1273.091210][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1273.107735][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1273.128847][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1273.139417][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1273.152007][ T24] usb 2-1: SerialNumber: syz [ 1273.190626][T24875] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1273.398780][ T30] audit: type=1326 audit(1748786556.610:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24917 comm="syz.0.19056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d5db8e969 code=0x0 [ 1273.447086][ T24] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1273.505245][ T24] usb 2-1: USB disconnect, device number 9 [ 1273.882893][ T978] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1274.042132][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 1274.075316][ T978] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1274.099957][ T978] usb 6-1: config 0 has no interface number 0 [ 1274.115180][ T978] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1274.133876][ T978] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.146035][ T978] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1274.156134][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.174582][ T978] usb 6-1: config 0 descriptor?? [ 1274.352855][ T6378] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1274.522473][ T6378] usb 5-1: Using ep0 maxpacket: 16 [ 1274.530562][ T6378] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 1274.541104][ T6378] usb 5-1: config 0 has no interface number 0 [ 1274.548085][ T6378] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1274.558804][ T6378] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1274.574759][ T6378] usb 5-1: config 0 interface 41 has no altsetting 0 [ 1274.594748][ T6378] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1274.612266][ T6378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1274.639884][ T6378] usb 5-1: Product: syz [ 1274.651279][ T6378] usb 5-1: Manufacturer: syz [ 1274.662258][ T6378] usb 5-1: SerialNumber: syz [ 1274.679296][ T6378] usb 5-1: config 0 descriptor?? [ 1274.697163][T24955] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1274.705650][T24955] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1274.835633][ T978] uclogic 0003:28BD:0071.0081: failed retrieving string descriptor #100: -71 [ 1274.865036][ T978] uclogic 0003:28BD:0071.0081: failed retrieving pen parameters: -71 [ 1274.896341][ T978] uclogic 0003:28BD:0071.0081: pen probing failed: -71 [ 1274.928590][T24955] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1274.937398][ T978] uclogic 0003:28BD:0071.0081: failed probing parameters: -71 [ 1274.952658][T24955] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1274.968961][ T978] uclogic 0003:28BD:0071.0081: probe with driver uclogic failed with error -71 [ 1274.998914][ T978] usb 6-1: USB disconnect, device number 11 [ 1275.395014][ T6378] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 1275.429086][ T6378] usb 5-1: USB disconnect, device number 119 [ 1276.243225][ T6378] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1276.359111][T25056] netlink: 277 bytes leftover after parsing attributes in process `syz.0.19094'. [ 1276.413341][ T6378] usb 4-1: Using ep0 maxpacket: 16 [ 1276.434151][ T6378] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.472312][ T6378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1276.491932][ T6378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59152, setting to 1024 [ 1276.504150][ T6378] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1276.520971][ T6378] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1276.545167][ T6378] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1276.558622][ T6378] usb 4-1: Manufacturer: syz [ 1276.584603][ T6378] usb 4-1: config 0 descriptor?? [ 1276.987311][ T6378] rc_core: IR keymap rc-hauppauge not found [ 1277.060825][ T6378] Registered IR keymap rc-empty [ 1277.083836][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.113171][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.139136][ T6378] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1277.189662][ T6378] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input159 [ 1277.244404][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.275554][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.314160][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.361612][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.392556][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.432567][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.462611][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.503660][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.533099][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.582657][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.616749][ T6378] mceusb 4-1:0.0: Error: mce write urb status = -71 [ 1277.664722][ T6378] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1277.782421][ T6378] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1277.892793][ T6378] usb 4-1: USB disconnect, device number 117 [ 1277.934726][T25124] netlink: 48 bytes leftover after parsing attributes in process `syz.5.19109'. [ 1278.558488][T25153] netem: change failed [ 1279.034603][T25238] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1279.218426][T25238] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1279.253704][T25238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.271139][T25238] usb 5-1: Product: syz [ 1279.277067][T25238] usb 5-1: Manufacturer: syz [ 1279.281930][T25238] usb 5-1: SerialNumber: syz [ 1279.294917][T25238] usb 5-1: config 0 descriptor?? [ 1279.634189][ T6378] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1279.729544][T25238] usb 5-1: Firmware: major: 0, minor: 97, hardware type: ATUSB (0) [ 1279.797491][ T6378] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.824937][ T6378] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1279.854830][ T6378] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1279.873868][ T6378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1279.892212][ T6378] usb 4-1: SerialNumber: syz [ 1279.934422][T25238] usb 5-1: failed to fetch extended address, random address set [ 1280.068353][T25238] usb 5-1: USB disconnect, device number 120 [ 1280.126935][ T6378] usb 4-1: 0:2 : does not exist [ 1280.208075][ T6378] usb 4-1: USB disconnect, device number 118 [ 1280.349179][T18312] udevd[18312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.373047][ T6328] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1280.385045][T25260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19140'. [ 1280.542264][ T6328] usb 2-1: Using ep0 maxpacket: 8 [ 1280.560346][ T6328] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1280.581101][ T6328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.600022][ T6328] usb 2-1: Product: syz [ 1280.604385][ T6328] usb 2-1: Manufacturer: syz [ 1280.609069][ T6328] usb 2-1: SerialNumber: syz [ 1280.617083][ T6328] usb 2-1: config 0 descriptor?? [ 1280.629452][ T6328] gspca_main: se401-2.14.0 probing 047d:5003 [ 1280.782363][T25238] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1280.882830][ T6326] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1280.942342][T25238] usb 6-1: Using ep0 maxpacket: 32 [ 1280.959235][T25238] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 1280.978525][T25238] usb 6-1: config 0 has no interface number 0 [ 1280.995672][T25238] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1281.006943][T25238] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1281.028742][T25238] usb 6-1: config 0 interface 126 has no altsetting 0 [ 1281.044591][T25238] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1281.054500][ T6326] usb 5-1: Using ep0 maxpacket: 8 [ 1281.067030][T25238] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.078331][T25238] usb 6-1: Product: syz [ 1281.086242][ T6326] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1281.102511][T25238] usb 6-1: Manufacturer: syz [ 1281.107229][T25238] usb 6-1: SerialNumber: syz [ 1281.112604][ T6326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.120663][ T6326] usb 5-1: Product: syz [ 1281.133831][T25238] usb 6-1: config 0 descriptor?? [ 1281.147205][ T6326] usb 5-1: Manufacturer: syz [ 1281.154633][ T6326] usb 5-1: SerialNumber: syz [ 1281.158012][T25267] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1281.176211][ T6326] usb 5-1: config 0 descriptor?? [ 1281.192603][ T6328] usb 2-1: reset high-speed USB device number 10 using dummy_hcd [ 1281.201689][T25267] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1281.205536][ T6326] gspca_main: se401-2.14.0 probing 047d:5003 [ 1281.628097][T25238] ir_usb 6-1:0.126: IR Dongle converter detected [ 1281.640973][ T6326] gspca_se401: Frame size: 0x0 1/16th janggu [ 1281.798437][ T6328] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1281.811355][ T6328] se401 2-1:0.0: probe with driver se401 failed with error -71 [ 1281.827505][ T6328] usb 2-1: USB disconnect, device number 10 [ 1281.834287][T25238] usb 6-1: IRDA class descriptor not found, device not bound [ 1281.871578][ T6326] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input160 [ 1281.938062][ T6326] usb 5-1: USB disconnect, device number 121 [ 1282.085803][ T6378] usb 6-1: USB disconnect, device number 12 [ 1282.492340][T25362] netlink: 'syz.1.19157': attribute type 9 has an invalid length. [ 1282.510880][T25362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19157'. [ 1282.528554][T25362] hsr0: entered promiscuous mode [ 1282.552854][T25362] macvlan2: entered promiscuous mode [ 1282.562685][T25362] macvlan2: entered allmulticast mode [ 1282.570665][T25362] hsr0: entered allmulticast mode [ 1282.579998][T25362] hsr_slave_0: entered allmulticast mode [ 1282.589989][T25362] hsr_slave_1: entered allmulticast mode [ 1282.615003][T25362] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1282.943467][T25386] batadv0: entered allmulticast mode [ 1283.071722][T25396] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1283.531937][T25421] xt_CT: No such helper "snmp" [ 1283.533296][ T30] audit: type=1326 audit(1748786566.740:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.19178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c4b8e969 code=0x7ffc0000 [ 1283.560014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1283.584017][ T30] audit: type=1326 audit(1748786566.740:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.19178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c4b8e969 code=0x7ffc0000 [ 1283.606672][ C0] vkms_vblank_simulate: vblank timer overrun [ 1283.613664][ T30] audit: type=1326 audit(1748786566.760:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.19178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f64c4b8e969 code=0x7ffc0000 [ 1283.645258][ T30] audit: type=1326 audit(1748786566.760:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25426 comm="syz.1.19178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c4b8e969 code=0x7ffc0000 [ 1283.851151][T25446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19183'. [ 1283.865317][T25446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19183'. [ 1283.877805][T25446] netlink: 2 bytes leftover after parsing attributes in process `syz.3.19183'. [ 1283.922683][T25446] bridge_slave_0: entered allmulticast mode [ 1283.929354][T25446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19183'. [ 1283.945635][T25446] netlink: 2 bytes leftover after parsing attributes in process `syz.3.19183'. [ 1283.962839][ T978] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1284.011483][ T6378] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1284.126258][T25456] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1284.135085][T25456] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1284.144172][ T978] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1284.154902][ T978] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1284.159284][ T30] audit: type=1400 audit(1748786567.370:7481): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A5B0A868099E9E4714992EA56D3D33D9F22BA3B8953050E6B92D3D79CE8CEB6266B185B6C6BE92FCF07FAF29141F525F2E0B7531E2063B7A6345C67A555F26BF2EF0FBC7006A89C01A5517E64A10B791358670701B411733C3A pid=25457 comm="syz.3.19188" [ 1284.200241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1284.200830][T25456] veth0_to_bridge: entered allmulticast mode [ 1284.213526][ T6378] usb 2-1: Using ep0 maxpacket: 16 [ 1284.219808][ T978] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1284.237021][T25456] veth0_to_bridge: entered promiscuous mode [ 1284.247427][ T6378] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1284.258016][ T6378] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.267340][ T978] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1284.282134][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1284.324538][ T6378] usb 2-1: config 0 descriptor?? [ 1284.326992][T25463] openvswitch: netlink: Multiple metadata blocks provided [ 1284.330662][ T978] usb 6-1: Product: syz [ 1284.356794][ T6378] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1284.391340][ T978] usb 6-1: Manufacturer: syz [ 1284.402779][ T978] usb 6-1: SerialNumber: syz [ 1284.651481][ T978] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1284.780944][ T30] audit: type=1326 audit(1748786567.990:7482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.0.19197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5db8e969 code=0x7ffc0000 [ 1284.808673][ T30] audit: type=1326 audit(1748786568.010:7483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.0.19197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5db8e969 code=0x7ffc0000 [ 1284.834657][ T30] audit: type=1326 audit(1748786568.020:7484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.0.19197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f0d5db8e969 code=0x7ffc0000 [ 1284.857711][ C0] vkms_vblank_simulate: vblank timer overrun [ 1284.867054][ T30] audit: type=1326 audit(1748786568.020:7485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.0.19197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5db8e969 code=0x7ffc0000 [ 1284.869186][ T978] usb 6-1: USB disconnect, device number 13 [ 1284.889749][ C0] vkms_vblank_simulate: vblank timer overrun [ 1284.890337][ T30] audit: type=1326 audit(1748786568.020:7486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25488 comm="syz.0.19197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d5db8e969 code=0x7ffc0000 [ 1284.958658][ T978] usblp0: removed [ 1285.158516][ T6378] gspca_sonixj: reg_r err -71 [ 1285.169587][ T6378] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 1285.203171][ T6378] usb 2-1: USB disconnect, device number 11 [ 1285.861741][T25544] netlink: 'syz.1.19211': attribute type 64 has an invalid length. [ 1286.256845][T25555] binder: 25553:25555 ioctl 40046205 0 returned -22 [ 1287.812189][ T6326] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 1287.994497][ T6326] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1288.022367][ T6326] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.039535][ T6326] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1288.070156][ T6326] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1288.079382][ T6326] usb 6-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 1288.097276][ T6326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.118593][ T6326] usb 6-1: config 0 descriptor?? [ 1288.548221][ T6326] hid (null): unknown global tag 0x28 [ 1288.568067][ T6326] hid (null): unknown global tag 0xd [ 1288.586252][ T6326] hid (null): invalid report_size 415 [ 1288.624105][ T6326] uclogic 0003:28BD:0074.0082: interface is invalid, ignoring [ 1288.766659][ T6378] usb 6-1: USB disconnect, device number 14 [ 1288.832294][T17941] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1288.931603][T25698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19264'. [ 1288.982190][T17941] usb 4-1: Using ep0 maxpacket: 16 [ 1288.995490][T17941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1289.011255][T17941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1289.030278][T17941] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1289.040930][T17941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.054511][T17941] usb 4-1: Product: syz [ 1289.058853][T17941] usb 4-1: Manufacturer: syz [ 1289.067928][T17941] usb 4-1: SerialNumber: syz [ 1289.080928][T17941] usb 4-1: config 0 descriptor?? [ 1289.099577][T17941] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1289.110077][T17941] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1289.331566][T25710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1289.710269][T17941] em28xx 4-1:0.0: chip ID is em2870 [ 1289.973879][ T6328] usb 4-1: USB disconnect, device number 119 [ 1290.003759][ T6328] em28xx 4-1:0.0: Disconnecting em28xx [ 1290.030324][ T6328] em28xx 4-1:0.0: Freeing device [ 1291.391595][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19300'. [ 1291.412722][T25811] netlink: 'syz.5.19300': attribute type 9 has an invalid length. [ 1291.441382][T25811] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 1291.467182][T25811] macvlan2: entered allmulticast mode [ 1291.472930][T25811] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 1292.203835][T25868] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19312'. [ 1292.218326][T25868] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19312'. [ 1292.284989][T25868] erspan0: entered promiscuous mode [ 1292.303085][T25868] erspan0: left promiscuous mode [ 1292.502374][ T6328] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1292.669712][ T6328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1292.703697][ T6328] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1292.736692][ T6328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1292.762587][ T6328] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 1292.779540][ T6328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.810053][ T6328] usb 2-1: config 0 descriptor?? [ 1292.835712][ T6328] em28xx 2-1:0.0: New device @ 480 Mbps (2040:1605, interface 0, class 0) [ 1292.862229][ T6328] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1293.102890][ T6328] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1293.122317][ T6328] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1293.155725][ T6328] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1293.172249][ T6328] em28xx 2-1:0.0: No AC97 audio processor [ 1293.216534][ T6328] usb 2-1: USB disconnect, device number 12 [ 1293.246708][ T6328] em28xx 2-1:0.0: Disconnecting em28xx [ 1293.287683][ T6328] em28xx 2-1:0.0: Freeing device [ 1294.498711][T25980] netlink: 'syz.5.19349': attribute type 9 has an invalid length. [ 1294.507465][T25980] netlink: 200108 bytes leftover after parsing attributes in process `syz.5.19349'. [ 1294.534817][T25980] openvswitch: netlink: Message has 5 unknown bytes. [ 1296.722338][ T978] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1296.872380][ T978] usb 4-1: Using ep0 maxpacket: 8 [ 1296.897048][ T978] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 3 [ 1296.912714][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1296.928498][ T978] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1296.938490][ T978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1296.950419][ T978] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1296.960827][ T978] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1296.969288][ T978] usb 4-1: Product: syz [ 1296.987993][ T978] usb 4-1: config 0 descriptor?? [ 1297.003095][T26068] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1297.109154][T26103] netlink: 277 bytes leftover after parsing attributes in process `syz.1.19385'. [ 1297.762886][ T24] usb 4-1: USB disconnect, device number 120 [ 1298.145770][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1298.145791][ T30] audit: type=1326 audit(1748786581.360:7492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26141 comm="syz.0.19397" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d5db8e969 code=0x0 [ 1298.858644][T26184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19404'. [ 1300.164040][T26247] netlink: 692 bytes leftover after parsing attributes in process `syz.1.19427'. [ 1300.202827][ T6328] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1300.392207][ T6328] usb 5-1: Using ep0 maxpacket: 32 [ 1300.399856][ T6328] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1300.411666][ T6328] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1300.414363][T26259] netlink: 24 bytes leftover after parsing attributes in process `syz.5.19431'. [ 1300.434707][ T6328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.453305][ T6328] usb 5-1: Product: syz [ 1300.466199][ T6328] usb 5-1: Manufacturer: syz [ 1300.481370][ T6328] usb 5-1: SerialNumber: syz [ 1300.503204][ T6328] usb 5-1: config 0 descriptor?? [ 1300.673409][T26269] lo: left allmulticast mode [ 1300.726454][T26270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19434'. [ 1300.930727][ T6328] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1301.063113][ T978] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1301.224295][ T978] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1301.262178][ T978] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1301.272002][ T978] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1301.299080][ T978] usb 2-1: New USB device found, idVendor=056a, idProduct=00cc, bcdDevice= 0.00 [ 1301.333456][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.339812][ T6328] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1301.361227][ T978] usb 2-1: config 0 descriptor?? [ 1301.429576][ T6328] usb 5-1: USB disconnect, device number 122 [ 1301.589915][T26316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1302.359438][ T6378] usb 2-1: USB disconnect, device number 13 [ 1302.392421][ T6326] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1302.552550][ T6326] usb 6-1: Using ep0 maxpacket: 16 [ 1302.564436][ T6326] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1302.584845][ T6326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1302.599546][ T6326] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1302.609114][ T6326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.617439][ T6326] usb 6-1: Product: syz [ 1302.621874][ T6326] usb 6-1: Manufacturer: syz [ 1302.627052][ T6326] usb 6-1: SerialNumber: syz [ 1302.637167][ T6326] usb 6-1: config 0 descriptor?? [ 1302.642362][ T978] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1302.647714][ T6326] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1302.660713][ T6326] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1302.802740][ T978] usb 5-1: Using ep0 maxpacket: 16 [ 1302.811235][ T978] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1302.821048][ T978] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 39, changing to 9 [ 1302.833352][ T978] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 1302.844715][ T978] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1302.858167][ T978] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1302.868296][ T978] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 1302.877660][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.885757][ T978] usb 5-1: Product: syz [ 1302.902253][ T978] usb 5-1: Manufacturer: syz [ 1302.906934][ T978] usb 5-1: SerialNumber: syz [ 1302.932850][T26366] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1303.170946][ T978] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input161 [ 1303.272338][ T6326] em28xx 6-1:0.0: unknown em28xx chip ID (86) [ 1303.488670][ T6326] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1303.498488][ T6326] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1303.507375][ T6326] em28xx 6-1:0.0: No AC97 audio processor [ 1303.526206][ T6326] usb 6-1: USB disconnect, device number 15 [ 1303.541505][ T6326] em28xx 6-1:0.0: Disconnecting em28xx [ 1303.559073][ T6326] em28xx 6-1:0.0: Freeing device [ 1303.786053][ T5185] bcm5974 5-1:1.0: could not read from device [ 1303.786576][ T6326] usb 5-1: USB disconnect, device number 123 [ 1303.803810][ T5185] bcm5974 5-1:1.0: could not read from device [ 1303.814370][T18370] bcm5974 5-1:1.0: could not read from device [ 1304.620634][T26444] netlink: 31 bytes leftover after parsing attributes in process `syz.3.19468'. [ 1304.678003][T26442] gretap0: entered promiscuous mode [ 1305.557657][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.567186][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.412927][T26527] C: renamed from team_slave_0 [ 1306.421043][T26527] netlink: 'syz.4.19494': attribute type 8 has an invalid length. [ 1306.449767][T26527] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1306.582607][ T6328] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1306.745120][ T6328] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1306.772542][ T6328] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1306.794212][ T6328] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1306.807586][ T6328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1306.821364][ T6328] usb 4-1: SerialNumber: syz [ 1306.838775][T26553] Context (ID=0x0) not attached to queue pair (handle=0x2:0x0) [ 1307.059175][ T6328] usb 4-1: 0:2 : does not exist [ 1307.146085][ T6328] usb 4-1: USB disconnect, device number 121 [ 1307.176375][T18312] udevd[18312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1308.467403][T26637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.951999][T26662] netlink: 104 bytes leftover after parsing attributes in process `syz.3.19527'. [ 1309.003702][ T6378] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1309.173226][ T6378] usb 2-1: Using ep0 maxpacket: 16 [ 1309.196949][ T6378] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1309.227525][ T6378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.259655][ T6378] usb 2-1: Product: syz [ 1309.269803][ T6378] usb 2-1: Manufacturer: syz [ 1309.281170][ T6378] usb 2-1: SerialNumber: syz [ 1309.310093][ T6378] usb 2-1: config 0 descriptor?? [ 1309.319465][ T6378] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1309.531415][ T6378] usb 2-1: USB disconnect, device number 14 [ 1309.550182][T26697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19536'. [ 1309.591162][T26696] macvlan3: entered allmulticast mode [ 1310.552198][ T978] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 1310.717348][ T978] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1310.735527][ T978] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1310.750809][ T978] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1310.761800][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.770261][ T978] usb 6-1: Product: syz [ 1310.793716][ T978] usb 6-1: Manufacturer: syz [ 1310.799087][ T978] usb 6-1: SerialNumber: syz [ 1311.140646][T26801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19562'. [ 1311.202448][ T6378] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1311.246488][ T978] usb 6-1: 0:2 : does not exist [ 1311.365040][ T6378] usb 4-1: Using ep0 maxpacket: 8 [ 1311.384836][ T6378] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1311.400764][ T6378] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1311.422131][ T6378] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1311.443342][ T6378] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1311.483226][ T6378] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1311.504771][ T6378] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1311.544122][ T6378] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1311.550593][T26824] netlink: 'syz.1.19568': attribute type 1 has an invalid length. [ 1311.576495][ T6378] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1311.592887][T26824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19568'. [ 1311.609848][ T6378] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1311.637136][ T6378] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1311.665390][ T978] usb 6-1: USB disconnect, device number 16 [ 1311.709864][ T6378] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1311.736329][ T6378] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1311.768845][ T6378] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1311.791106][ T6378] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1311.813229][ T6378] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1311.834925][ T6378] usb 4-1: string descriptor 0 read error: -22 [ 1311.845020][ T6378] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1311.864527][ T6378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.883323][T26845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19573'. [ 1311.921341][ T6378] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1312.183143][T17941] usb 4-1: USB disconnect, device number 122 [ 1312.236296][T26864] sctp: [Deprecated]: syz.4.19579 (pid 26864) Use of int in maxseg socket option. [ 1312.236296][T26864] Use struct sctp_assoc_value instead [ 1312.360835][T26880] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1312.369155][T26877] macvlan1: entered promiscuous mode [ 1312.392302][T26877] macvlan1: left promiscuous mode [ 1312.410887][T26792] adutux: No device or device unplugged -19 [ 1312.929487][ T6326] hid-generic 0000:0003:0000.0084: unknown main item tag 0x0 [ 1312.944537][ T6326] hid-generic 0000:0003:0000.0084: unknown main item tag 0x0 [ 1312.969164][ T6326] hid-generic 0000:0003:0000.0084: hidraw0: HID v0.00 Device [syz0] on syz1 [ 1313.134288][T26923] fido_id[26923]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1313.242275][ T6378] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1313.405699][ T6378] usb 6-1: Using ep0 maxpacket: 8 [ 1313.414556][ T6378] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1313.426715][ T6378] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1313.440423][ T6378] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1313.451213][ T6378] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1313.465754][ T6378] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1313.475675][ T6378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.572902][T17941] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1313.706316][ T6378] usb 6-1: GET_CAPABILITIES returned 0 [ 1313.711925][ T6378] usbtmc 6-1:16.0: can't read capabilities [ 1313.728817][T17941] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1313.746929][T17941] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1313.758348][T17941] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1313.769862][T17941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.784279][T26942] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1313.797582][T17941] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1313.919515][ T6328] usb 6-1: USB disconnect, device number 17 [ 1314.075667][T17941] usb 4-1: USB disconnect, device number 123 [ 1315.166095][T27026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19621'. [ 1316.244767][T27071] netlink: 16 bytes leftover after parsing attributes in process `syz.5.19638'. [ 1316.513134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1316.820822][T27095] openvswitch: netlink: IP tunnel dst address not specified [ 1317.242622][ T6328] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1317.302499][ C0] hrtimer: interrupt took 158283 ns [ 1317.432149][ T6328] usb 5-1: Using ep0 maxpacket: 32 [ 1317.441917][ T6328] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1317.471712][ T6328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.499675][ T6328] usb 5-1: config 0 descriptor?? [ 1317.722278][ T6328] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1317.739973][ T6328] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1317.769018][ T6328] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1317.787567][ T6328] usb 5-1: media controller created [ 1317.856871][ T6328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1317.921501][ T6328] az6027: usb out operation failed. (-71) [ 1317.935783][ T6328] az6027: usb out operation failed. (-71) [ 1317.944022][ T6328] stb0899_attach: Driver disabled by Kconfig [ 1317.950156][ T6328] az6027: no front-end attached [ 1317.950156][ T6328] [ 1317.973561][ T6328] az6027: usb out operation failed. (-71) [ 1317.987671][ T6328] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1318.008690][ T6328] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input162 [ 1318.048831][ T6328] dvb-usb: schedule remote query interval to 400 msecs. [ 1318.060562][ T6328] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1318.086502][ T6328] usb 5-1: USB disconnect, device number 124 [ 1318.318660][ T6328] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1320.376563][T27248] pim6reg: entered allmulticast mode [ 1320.622412][ T6328] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 1320.722201][T17941] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1320.775482][ T6328] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1320.794101][ T6328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.811782][ T6328] usb 4-1: config 0 descriptor?? [ 1320.828544][ T6328] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1320.874018][T17941] usb 2-1: Using ep0 maxpacket: 32 [ 1320.894631][T17941] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1320.914778][T17941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.945923][T17941] usb 2-1: config 0 descriptor?? [ 1320.971966][T17941] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1321.444437][ T6328] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1321.477711][ T6328] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1321.648139][T25238] usb 4-1: USB disconnect, device number 124 [ 1321.767541][T17941] gspca_sunplus: reg_r err -71 [ 1321.782817][T17941] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 1321.815912][T17941] usb 2-1: USB disconnect, device number 15 [ 1321.832566][ T6326] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1321.994706][ T6326] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1322.008828][ T6326] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1322.019817][ T6326] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1322.036027][ T6326] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.055850][ T6326] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1322.068863][ T6326] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1322.081827][ T6326] usb 6-1: Product: syz [ 1322.091554][ T6326] usb 6-1: Manufacturer: syz [ 1322.118747][ T6326] cdc_wdm 6-1:1.0: skipping garbage [ 1322.127855][ T6326] cdc_wdm 6-1:1.0: skipping garbage [ 1322.139921][ T6326] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1322.148126][ T6326] cdc_wdm 6-1:1.0: Unknown control protocol [ 1322.261496][T27333] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1322.276192][T27333] syzkaller0: linktype set to 823 [ 1322.371560][ T24] usb 6-1: USB disconnect, device number 18 [ 1322.710205][T27363] netlink: 'syz.3.19734': attribute type 1 has an invalid length. [ 1323.600078][ T30] audit: type=1326 audit(1748786606.810:7493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27394 comm="syz.4.19747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1323.622634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.645853][ T30] audit: type=1326 audit(1748786606.840:7494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27394 comm="syz.4.19747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1323.715313][ T30] audit: type=1326 audit(1748786606.850:7495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27394 comm="syz.4.19747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1323.737858][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.792916][ T30] audit: type=1326 audit(1748786606.850:7496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27394 comm="syz.4.19747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1323.832277][ T30] audit: type=1326 audit(1748786606.850:7497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27394 comm="syz.4.19747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1323.854838][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.911408][ T30] audit: type=1326 audit(1748786606.860:7498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27394 comm="syz.4.19747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1323.962196][ T30] audit: type=1326 audit(1748786606.860:7499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27394 comm="syz.4.19747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1323.989923][ T30] audit: type=1326 audit(1748786606.860:7500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27394 comm="syz.4.19747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1324.094809][ T30] audit: type=1326 audit(1748786606.860:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27394 comm="syz.4.19747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x0 [ 1324.133894][ T30] audit: type=1326 audit(1748786606.910:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27394 comm="syz.4.19747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fa14ed8e969 code=0x0 [ 1324.563870][T27416] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 1325.582710][T27444] netlink: 356 bytes leftover after parsing attributes in process `syz.5.19763'. [ 1325.842622][ T6326] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1326.002167][T25238] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1326.010833][ T6326] usb 4-1: Using ep0 maxpacket: 16 [ 1326.041876][ T6326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.064435][ T6326] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1326.075984][ T6326] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1326.090350][ T6326] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1326.100166][ T6326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.118685][ T6326] usb 4-1: config 0 descriptor?? [ 1326.162515][T25238] usb 2-1: Using ep0 maxpacket: 16 [ 1326.174907][T25238] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1326.196250][T25238] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1326.212539][T25238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.244814][T25238] usb 2-1: config 0 descriptor?? [ 1326.525422][T27474] vivid-000: ================= START STATUS ================= [ 1326.536270][T27474] vivid-000: Radio HW Seek Mode: Bounded [ 1326.555904][T27474] vivid-000: Radio Programmable HW Seek: false [ 1326.563031][T27474] vivid-000: RDS Rx I/O Mode: Block I/O [ 1326.563614][ T6326] microsoft 0003:045E:07DA.0085: unknown main item tag 0x0 [ 1326.568630][T27474] vivid-000: Generate RBDS Instead of RDS: false [ 1326.568703][T27474] vivid-000: RDS Reception: true [ 1326.568729][T27474] vivid-000: RDS Program Type: [ 1326.592526][ T6326] microsoft 0003:045E:07DA.0085: unknown main item tag 0x0 [ 1326.594345][T27474] 0 inactive [ 1326.611077][T27474] vivid-000: RDS PS Name: inactive [ 1326.617630][T27474] vivid-000: RDS Radio Text: inactive [ 1326.623913][T27474] vivid-000: RDS Traffic Announcement: false inactive [ 1326.634476][T27474] vivid-000: RDS Traffic Program: false inactive [ 1326.640977][T27474] vivid-000: RDS Music: false inactive [ 1326.647604][T27474] vivid-000: ================== END STATUS ================== [ 1326.686546][ T6326] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0085/input/input163 [ 1326.705621][T25238] mcp2221 0003:04D8:00DD.0086: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1326.756196][ T6326] microsoft 0003:045E:07DA.0085: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1326.878779][ T6326] usb 4-1: USB disconnect, device number 125 [ 1327.053777][T27488] fido_id[27488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1327.105108][T27516] bond0: entered promiscuous mode [ 1327.110435][T27516] bond_slave_0: entered promiscuous mode [ 1327.125947][T27516] bond_slave_1: entered promiscuous mode [ 1327.138309][ T6378] usb 2-1: USB disconnect, device number 16 [ 1327.172303][T27516] bond0: left promiscuous mode [ 1327.177223][T27516] bond_slave_0: left promiscuous mode [ 1327.202369][T27516] bond_slave_1: left promiscuous mode [ 1327.662707][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19780'. [ 1327.862500][ T6326] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1328.032121][ T6326] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1328.049647][ T6326] usb 6-1: config 0 has no interface number 0 [ 1328.063460][T27575] loop6: detected capacity change from 0 to 524287999 [ 1328.080373][ T6326] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1328.111208][ T6326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.119976][ T6326] usb 6-1: Product: syz [ 1328.131700][ T6326] usb 6-1: Manufacturer: syz [ 1328.136676][ T6326] usb 6-1: SerialNumber: syz [ 1328.159777][ T6326] usb 6-1: config 0 descriptor?? [ 1328.380223][ T6326] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1328.413073][ T6326] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1328.420641][T27595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.19796'. [ 1328.447910][ T6326] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1328.469151][ T6326] usb 6-1: media controller created [ 1328.552884][ T6326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1328.629851][ T6326] i2c i2c-3: ec100: i2c rd failed=-71 reg=33 [ 1328.636600][T27611] loop5: detected capacity change from 0 to 63 [ 1328.711772][ T6326] usb 6-1: USB disconnect, device number 19 [ 1328.934141][T27633] loop6: detected capacity change from 0 to 524288000 [ 1329.137271][T27640] sctp: [Deprecated]: syz.3.19807 (pid 27640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1329.137271][T27640] Use struct sctp_sack_info instead [ 1330.092202][ T6326] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1330.262249][ T6326] usb 2-1: Using ep0 maxpacket: 32 [ 1330.262919][T17941] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1330.276646][ T6326] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1330.289377][ T6326] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1330.301977][ T6326] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1330.315129][T25238] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 1330.340760][ T6326] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1330.355414][ T6326] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1330.366801][ T6326] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1330.377629][ T6326] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1330.392537][ T6326] usb 2-1: Product: syz [ 1330.396967][ T6326] usb 2-1: Manufacturer: syz [ 1330.406859][ T6326] usb 2-1: SerialNumber: syz [ 1330.421470][ T6326] usb 2-1: config 0 descriptor?? [ 1330.448011][ T6326] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1330.461966][ T6326] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1330.473500][T17941] usb 6-1: Using ep0 maxpacket: 8 [ 1330.498661][T17941] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1330.512127][T17941] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1330.529909][T25238] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1330.546427][T17941] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1330.557499][T25238] usb 4-1: no configurations [ 1330.566949][T25238] usb 4-1: can't read configurations, error -22 [ 1330.580457][T17941] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1330.604587][T27685] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1330.611700][T17941] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1330.634017][T17941] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1330.652691][T17941] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.904741][T17941] usb 6-1: GET_CAPABILITIES returned 0 [ 1330.910595][T17941] usbtmc 6-1:16.0: can't read capabilities [ 1331.052321][ T6378] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1331.143807][ T6326] usb 6-1: USB disconnect, device number 20 [ 1331.202976][ T6378] usb 5-1: Using ep0 maxpacket: 16 [ 1331.211550][ T6378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1331.233312][ T6378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1331.252205][ T6378] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1331.257688][T20017] usb 2-1: USB disconnect, device number 17 [ 1331.271780][ T6378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.301244][T20017] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1331.302152][ T6378] usb 5-1: config 0 descriptor?? [ 1331.827579][ T6378] corsair 0003:1B1C:1B02.0087: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 1332.085311][T27743] netlink: 'syz.1.19828': attribute type 4 has an invalid length. [ 1332.141894][ T6378] usb 5-1: USB disconnect, device number 125 [ 1332.755081][T27780] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19838'. [ 1333.232460][T19447] Bluetooth: hci2: command 0x0406 tx timeout [ 1334.266846][T27867] [U] 5ѨDՍ [ 1334.270726][T27867] [U] DLY>D@ [ 1334.275157][T27867] [U] [ 1334.277907][T27867] [U] [ 1334.280644][T27867] [U] [ 1334.283919][T27867] [U] [ 1334.286673][T27867] [U] [ 1334.289416][T27867] [U] [ 1334.292150][T27867] [U] [ 1334.295606][T27867] [U] [ 1334.298369][T27867] [U] [ 1334.301117][T27867] [U] [ 1334.316558][T27866] [U] [ 1334.763191][ T6378] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1334.938589][ T6378] usb 5-1: Using ep0 maxpacket: 8 [ 1334.948827][ T6378] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1334.961439][ T6378] usb 5-1: config 0 has no interface number 0 [ 1334.973753][ T6378] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1334.995259][ T6378] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1335.035009][ T6378] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.075770][ T6378] usb 5-1: config 0 descriptor?? [ 1335.109298][ T6378] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1335.551145][T25238] usb 5-1: USB disconnect, device number 126 [ 1335.866599][T27892] IPVS: You probably need to specify IP address on multicast interface. [ 1335.883021][T27892] IPVS: Error connecting to the multicast addr [ 1336.212847][T17941] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1336.369733][T17941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1336.412128][T17941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.420277][T27983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19887'. [ 1336.423915][T17941] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1336.439614][T27983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19887'. [ 1336.492399][T17941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.515266][T17941] usb 2-1: config 0 descriptor?? [ 1336.722315][T25238] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1336.899960][T25238] usb 5-1: Using ep0 maxpacket: 16 [ 1336.935231][T25238] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 1336.949095][T25238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.959012][T25238] usb 5-1: Product: syz [ 1336.973597][T17941] savu 0003:1E7D:2D5A.0088: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1336.999848][T25238] usb 5-1: Manufacturer: syz [ 1337.005610][T25238] usb 5-1: SerialNumber: syz [ 1337.021934][T25238] usb 5-1: config 0 descriptor?? [ 1337.041284][T25238] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1337.066292][T25238] usb 5-1: Detected FT232H [ 1337.142338][ T6378] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 1337.243753][T25238] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1337.269298][ T24] usb 2-1: USB disconnect, device number 18 [ 1337.328578][ T6378] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1337.344527][ T6378] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1337.359647][ T6378] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1337.369826][ T6378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.449970][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19897'. [ 1337.600317][ T6378] usb 4-1: usb_control_msg returned -32 [ 1337.607916][ T6378] usbtmc 4-1:16.0: can't read capabilities [ 1337.676018][T25238] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1337.832858][ T978] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1337.874060][ T6378] usb 5-1: USB disconnect, device number 127 [ 1337.919251][ T6378] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1337.948539][ T6378] ftdi_sio 5-1:0.0: device disconnected [ 1337.996160][ T978] usb 6-1: Using ep0 maxpacket: 16 [ 1338.008782][ T978] usb 6-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1338.021185][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.031143][ T978] usb 6-1: Product: syz [ 1338.035683][ T978] usb 6-1: Manufacturer: syz [ 1338.040423][ T978] usb 6-1: SerialNumber: syz [ 1338.049193][ T978] usb 6-1: config 0 descriptor?? [ 1338.065555][ T978] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1338.140039][T28093] input input164: cannot allocate more than FF_MAX_EFFECTS effects [ 1338.196506][T25238] usb 4-1: USB disconnect, device number 2 [ 1338.224358][T28095] netlink: 152 bytes leftover after parsing attributes in process `syz.1.19903'. [ 1338.273462][ T978] gp8psk: usb in 128 operation failed. [ 1338.280124][ T978] gp8psk: usb in 137 operation failed. [ 1338.285929][ T978] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1338.297018][ T978] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1338.307496][ T978] usb 6-1: media controller created [ 1338.337713][ T978] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1338.365883][ T978] gp8psk_fe: Frontend revision 1 attached [ 1338.371754][ T978] usb 6-1: DVB: registering adapter 3 frontend 0 (Genpix DVB-S)... [ 1338.381020][ T978] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1338.480220][ T978] gp8psk: usb in 138 operation failed. [ 1338.486337][ T978] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1338.501398][ T978] gp8psk: found Genpix USB device pID = 201 (hex) [ 1338.533135][ T978] usb 6-1: USB disconnect, device number 21 [ 1338.658363][ T978] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1338.968305][T28145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1340.299415][T28163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19920'. [ 1341.105928][T28261] sctp: [Deprecated]: syz.3.19940 (pid 28261) Use of int in max_burst socket option. [ 1341.105928][T28261] Use struct sctp_assoc_value instead [ 1341.219568][T28266] vivid-000: disconnect [ 1341.237455][T28265] vivid-000: reconnect [ 1341.663799][T25238] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1341.852916][T25238] usb 4-1: Using ep0 maxpacket: 8 [ 1341.860614][T25238] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1341.871243][T25238] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1341.914217][T25238] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1341.937761][T25238] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1341.962088][T25238] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1341.992697][ T6378] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1341.994025][T25238] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1342.019162][T25238] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1342.031960][T25238] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1342.070532][T25238] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1342.092453][T25238] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1342.123415][T25238] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1342.130965][T25238] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1342.162109][T25238] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1342.164323][ T6378] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.182187][T25238] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1342.196762][ T6378] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1342.212332][T25238] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1342.217322][ T6378] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1342.238223][ T6378] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1342.246579][T25238] usb 4-1: string descriptor 0 read error: -22 [ 1342.246720][T25238] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1342.246747][T25238] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.257588][T25238] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1342.288230][ T6378] usb 6-1: SerialNumber: syz [ 1342.536331][ T6378] usb 6-1: 0:2 : does not exist [ 1342.577418][ T6378] usb 6-1: USB disconnect, device number 22 [ 1342.599668][T17941] usb 4-1: USB disconnect, device number 3 [ 1342.698751][T18312] udevd[18312]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1342.742862][ T978] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1342.850824][T28357] vcan0: tx drop: invalid da for name 0xfffffffffffffffd [ 1342.902425][ T978] usb 5-1: Using ep0 maxpacket: 32 [ 1342.914306][ T978] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1342.931349][ T978] usb 5-1: config 0 has no interface number 0 [ 1342.939393][ T978] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1342.951415][ T978] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1342.961633][ T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.970758][ T978] usb 5-1: Product: syz [ 1342.982102][ T978] usb 5-1: Manufacturer: syz [ 1342.986909][ T978] usb 5-1: SerialNumber: syz [ 1342.996186][ T978] usb 5-1: config 0 descriptor?? [ 1343.007081][ T978] smsc75xx v1.0.0 [ 1343.604306][T25238] IPVS: starting estimator thread 0... [ 1343.605712][T28387] IPVS: sed: UDP 224.0.0.2:20004 - no destination available [ 1343.633291][ T978] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1343.644869][ T978] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1343.692315][T28392] IPVS: using max 27 ests per chain, 64800 per kthread [ 1343.840522][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19968'. [ 1343.879037][ T978] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1343.914331][ T978] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1343.934856][ T978] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1343.966563][ T978] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1344.008353][ T978] usb 5-1: USB disconnect, device number 2 [ 1344.724395][T25238] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1344.892992][T25238] usb 5-1: Using ep0 maxpacket: 16 [ 1344.905235][T25238] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1344.921572][T25238] usb 5-1: config 0 has no interface number 0 [ 1344.952149][T25238] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1344.987609][T25238] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1345.014988][T25238] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1345.024739][T25238] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1345.033858][T25238] usb 5-1: Product: syz [ 1345.038902][T25238] usb 5-1: SerialNumber: syz [ 1345.049407][T25238] usb 5-1: config 0 descriptor?? [ 1345.080780][T25238] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1345.104964][T25238] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input165 [ 1345.322947][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1345.606162][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.614781][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.622131][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.629440][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.637382][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.648893][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.656695][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.664094][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.671318][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.679601][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1345.687244][ T6378] usb 5-1: USB disconnect, device number 3 [ 1345.693291][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1345.737347][ T6378] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1346.009056][T28454] netlink: 'syz.0.19978': attribute type 3 has an invalid length. [ 1346.018044][T28454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19978'. [ 1347.985039][ T30] audit: type=1804 audit(1748786631.190:7503): pid=28491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.19991" name="/" dev="pidfs" ino=60710 res=1 errno=0 [ 1348.519053][T28423] netlink: 'syz.5.19973': attribute type 1 has an invalid length. [ 1348.716460][T28523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19996'. [ 1348.749335][T28523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19996'. [ 1349.282783][ T6326] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 1349.447296][ T6326] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1349.469727][ T6326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.481132][ T6326] usb 5-1: Product: syz [ 1349.486577][ T6326] usb 5-1: Manufacturer: syz [ 1349.491354][ T6326] usb 5-1: SerialNumber: syz [ 1349.508541][ T6326] usb 5-1: config 0 descriptor?? [ 1349.672350][T25238] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1349.865076][T25238] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1349.900433][T25238] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.940846][ T6326] airspy 5-1:0.0: Board ID: 00 [ 1349.960599][T25238] usb 4-1: config 0 descriptor?? [ 1349.992572][ T6326] airspy 5-1:0.0: Firmware version: [ 1350.021001][T25238] cp210x 4-1:0.0: cp210x converter detected [ 1350.400036][T28605] bond_slave_1: entered promiscuous mode [ 1350.425630][T28605] bond_slave_1: left promiscuous mode [ 1350.457486][T25238] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1350.473366][T25238] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1350.548438][ T6326] airspy 5-1:0.0: usb_control_msg() failed -71 request 12 [ 1350.602627][ T6326] airspy 5-1:0.0: Registered as swradio24 [ 1350.609000][ T6326] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1350.678361][ T6326] usb 5-1: USB disconnect, device number 4 [ 1350.710350][T20017] usb 4-1: USB disconnect, device number 4 [ 1350.735537][T20017] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1350.817876][T20017] cp210x 4-1:0.0: device disconnected [ 1352.933082][ T978] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1353.117441][ T978] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1353.152799][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1353.186267][ T978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1353.218471][ T978] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1353.252489][ T978] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1353.272251][ T978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.296037][ T978] usb 6-1: config 0 descriptor?? [ 1353.323506][T28736] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1353.765585][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1353.806384][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1353.832186][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1353.850357][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1353.892219][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1353.899706][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1353.942101][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1353.949584][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1353.998932][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1354.033147][T17941] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1354.042591][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1354.050093][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1354.082216][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1354.090296][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1354.135378][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1354.159319][ T978] plantronics 0003:047F:FFFF.0089: unknown main item tag 0x0 [ 1354.174164][ T978] plantronics 0003:047F:FFFF.0089: No inputs registered, leaving [ 1354.214909][ T978] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1354.246007][T17941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1354.266647][T17941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1354.293310][ T978] usb 6-1: USB disconnect, device number 23 [ 1354.322276][ T6326] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1354.324331][T17941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1354.395751][T17941] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1354.443675][T17941] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1354.463249][T17941] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1354.503146][T17941] usb 5-1: Manufacturer: syz [ 1354.506352][ T6326] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1354.513577][T28789] fido_id[28789]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1354.533731][T17941] usb 5-1: config 0 descriptor?? [ 1354.538029][ T6326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.600476][ T6326] usb 4-1: config 0 descriptor?? [ 1354.972101][T17941] rc_core: IR keymap rc-hauppauge not found [ 1354.978188][T17941] Registered IR keymap rc-empty [ 1354.988508][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.023076][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.054201][T17941] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1355.068410][T17941] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input166 [ 1355.103363][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.132979][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.152994][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.182226][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.202870][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.222260][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.242290][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.262839][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.302205][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.327011][T17941] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1355.381831][T17941] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1355.407260][T17941] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1355.441296][ T6326] usb 4-1: Cannot set autoneg [ 1355.456002][ T6326] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1355.484676][T17941] usb 5-1: USB disconnect, device number 5 [ 1355.580961][ T6326] usb 4-1: USB disconnect, device number 5 [ 1356.220539][T28878] netlink: 'syz.5.20055': attribute type 10 has an invalid length. [ 1356.278393][T28881] netlink: 'syz.5.20055': attribute type 10 has an invalid length. [ 1356.297989][T28878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1356.303766][T28881] netlink: 40 bytes leftover after parsing attributes in process `syz.5.20055'. [ 1356.358589][T28878] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1356.411574][T28881] batadv0: entered promiscuous mode [ 1356.424618][T28881] batadv0: entered allmulticast mode [ 1356.436922][T28881] bond0: (slave batadv0): Releasing backup interface [ 1356.472765][T28881] bridge0: port 3(batadv0) entered blocking state [ 1356.480216][T28881] bridge0: port 3(batadv0) entered disabled state [ 1356.825276][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1356.836298][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1357.290733][T28929] netem: unknown loss type 0 [ 1357.300332][T28929] netem: change failed [ 1357.728234][T28945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1357.752260][T20017] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1357.922161][T20017] usb 2-1: Using ep0 maxpacket: 32 [ 1357.938299][T20017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1357.962221][T20017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.001469][T20017] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1358.036977][T20017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.076907][T20017] usb 2-1: config 0 descriptor?? [ 1358.116524][T28961] netlink: 28 bytes leftover after parsing attributes in process `syz.5.20079'. [ 1358.186808][T28961] netlink: 'syz.5.20079': attribute type 7 has an invalid length. [ 1358.221775][T28961] netlink: 'syz.5.20079': attribute type 8 has an invalid length. [ 1358.236400][T28961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20079'. [ 1358.321054][T28961] gretap0: entered promiscuous mode [ 1358.344468][T28961] batadv_slave_1: entered promiscuous mode [ 1358.380481][T28961] gretap0: left promiscuous mode [ 1358.390746][T28961] batadv_slave_1: left promiscuous mode [ 1358.425914][T28970] syzkaller1: entered promiscuous mode [ 1358.431461][T28970] syzkaller1: entered allmulticast mode [ 1358.474073][ T30] audit: type=1326 audit(1748786641.670:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28978 comm="syz.4.20084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1358.515633][ T30] audit: type=1326 audit(1748786641.670:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28978 comm="syz.4.20084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1358.552715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1358.561696][ T30] audit: type=1326 audit(1748786641.670:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28978 comm="syz.4.20084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1358.581936][T20017] savu 0003:1E7D:2D5A.008A: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 1358.644385][ T30] audit: type=1326 audit(1748786641.670:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28978 comm="syz.4.20084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1358.766693][ T30] audit: type=1326 audit(1748786641.670:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28978 comm="syz.4.20084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa14ed2ab39 code=0x7ffc0000 [ 1358.825963][ T30] audit: type=1326 audit(1748786641.670:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28978 comm="syz.4.20084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1358.866867][T20017] usb 2-1: USB disconnect, device number 19 [ 1358.895037][T28988] fido_id[28988]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1358.912579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1358.922198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1358.950125][ T30] audit: type=1326 audit(1748786641.670:7510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28978 comm="syz.4.20084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa14ed2ab39 code=0x7ffc0000 [ 1359.099043][ T30] audit: type=1326 audit(1748786641.670:7511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28978 comm="syz.4.20084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1359.146237][ T30] audit: type=1326 audit(1748786641.670:7512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28978 comm="syz.4.20084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa14ed8e969 code=0x7ffc0000 [ 1359.243190][ T30] audit: type=1326 audit(1748786641.670:7513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28978 comm="syz.4.20084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa14ed2ab39 code=0x7ffc0000 [ 1360.132341][T20017] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1360.304859][T20017] usb 4-1: Using ep0 maxpacket: 32 [ 1360.329033][T29066] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.20098'. [ 1360.372314][T20017] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1360.405340][T20017] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1360.422516][T20017] usb 4-1: can't read configurations, error -71 [ 1361.061757][T17941] hid-generic 0000:0000:0000.008B: unknown main item tag 0x0 [ 1361.101400][T17941] hid-generic 0000:0000:0000.008B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1361.892981][ T6378] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1362.052238][ T6378] usb 5-1: Using ep0 maxpacket: 8 [ 1362.065947][ T6378] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1362.083009][ T6378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1362.091081][ T6378] usb 5-1: Product: syz [ 1362.112372][ T6378] usb 5-1: Manufacturer: syz [ 1362.117048][ T6378] usb 5-1: SerialNumber: syz [ 1362.128679][ T6378] usb 5-1: config 0 descriptor?? [ 1362.133743][T20017] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1362.150442][ T6378] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1362.161475][ T6378] usb 5-1: setting power ON [ 1362.169808][ T6378] dvb-usb: bulk message failed: -22 (2/0) [ 1362.193761][ T6378] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1362.223526][ T6378] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1362.234775][ T6378] usb 5-1: media controller created [ 1362.263999][ T6378] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1362.283123][T20017] usb 4-1: Using ep0 maxpacket: 32 [ 1362.304452][T20017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.319344][T20017] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.322479][ T6378] usb 5-1: selecting invalid altsetting 6 [ 1362.331473][T20017] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1362.345480][T20017] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.368770][ T6378] usb 5-1: digital interface selection failed (-22) [ 1362.379108][T20017] usb 4-1: config 0 descriptor?? [ 1362.392918][ T6378] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1362.432812][ T6378] usb 5-1: setting power OFF [ 1362.437523][ T6378] dvb-usb: bulk message failed: -22 (2/0) [ 1362.452844][ T6378] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1362.468071][ T6378] (NULL device *): no alternate interface [ 1362.534284][ T6378] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1362.556316][ T6378] usb 5-1: USB disconnect, device number 6 [ 1362.832871][T20017] ft260 0003:0403:6030.008C: unknown main item tag 0x0 [ 1362.875734][T29213] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1363.053553][T20017] ft260 0003:0403:6030.008C: chip code: 0000 0000 [ 1363.254218][T20017] ft260 0003:0403:6030.008C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1363.456085][T20017] ft260 0003:0403:6030.008C: failed to retrieve status: -71, no wakeup [ 1363.480935][T20017] ft260 0003:0403:6030.008C: failed to retrieve status: -71 [ 1363.499141][T20017] ft260 0003:0403:6030.008C: failed to reset I2C controller: -71 [ 1363.561033][T20017] usb 4-1: USB disconnect, device number 8 [ 1364.002747][ T6326] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1364.162852][ T6326] usb 5-1: Using ep0 maxpacket: 32 [ 1364.180764][ T6326] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1364.199611][ T6326] usb 5-1: config 0 has no interface number 0 [ 1364.212148][T20017] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1364.219992][ T6326] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1364.239863][ T6326] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1364.259415][ T6326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.272314][ T6326] usb 5-1: Product: syz [ 1364.276645][ T6326] usb 5-1: Manufacturer: syz [ 1364.281369][ T6326] usb 5-1: SerialNumber: syz [ 1364.291083][ T6326] usb 5-1: config 0 descriptor?? [ 1364.308264][ T6326] smsc75xx v1.0.0 [ 1364.384400][T20017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.412172][T20017] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.432401][T20017] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1364.441612][T20017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.465951][T20017] usb 2-1: config 0 descriptor?? [ 1364.900146][T20017] cp2112 0003:10C4:EA90.008D: unknown main item tag 0x0 [ 1364.921244][T20017] cp2112 0003:10C4:EA90.008D: unknown main item tag 0x0 [ 1364.937769][ T6326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1364.962903][T20017] cp2112 0003:10C4:EA90.008D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1364.982905][ T6326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1365.099346][T20017] cp2112 0003:10C4:EA90.008D: error requesting version [ 1365.121066][T20017] cp2112 0003:10C4:EA90.008D: probe with driver cp2112 failed with error -71 [ 1365.161792][T20017] usb 2-1: USB disconnect, device number 20 [ 1365.195385][ T6326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1365.231168][ T6326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1365.244328][ T6326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1365.269577][ T6326] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1365.295522][ T6326] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 1365.328352][ T6326] usb 5-1: USB disconnect, device number 7 [ 1365.347147][T29301] [ 1365.349546][T29301] ===================================================== [ 1365.356498][T29301] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1365.363995][T29301] 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 Not tainted [ 1365.370793][T29301] ----------------------------------------------------- [ 1365.377755][T29301] syz.3.20153/29301 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1365.385579][T29301] ffff88804d555600 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 1365.394403][T29301] [ 1365.394403][T29301] and this task is already holding: [ 1365.401780][T29301] ffff888029523028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1365.411546][T29301] which would create a new lock dependency: [ 1365.417437][T29301] (&client->buffer_lock){..-.}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 1365.425560][T29301] [ 1365.425560][T29301] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1365.435016][T29301] (&client->buffer_lock){..-.}-{3:3} [ 1365.435047][T29301] [ 1365.435047][T29301] ... which became SOFTIRQ-irq-safe at: [ 1365.448151][T29301] lock_acquire+0x120/0x360 [ 1365.452761][T29301] _raw_spin_lock+0x2e/0x40 [ 1365.457392][T29301] evdev_pass_values+0xb9/0xbd0 [ 1365.462339][T29301] evdev_events+0x1e6/0x340 [ 1365.466938][T29301] input_pass_values+0x288/0x890 [ 1365.472025][T29301] input_event_dispose+0x3e5/0x6b0 [ 1365.477242][T29301] input_inject_event+0x1fe/0x320 [ 1365.482367][T29301] kd_sound_helper+0x19f/0x210 [ 1365.487243][T29301] input_handler_for_each_handle+0x101/0x1c0 [ 1365.493328][T29301] call_timer_fn+0x17b/0x5f0 [ 1365.498018][T29301] __run_timer_base+0x61a/0x860 [ 1365.502963][T29301] run_timer_softirq+0xb7/0x180 [ 1365.507929][T29301] handle_softirqs+0x283/0x870 [ 1365.512794][T29301] __irq_exit_rcu+0xca/0x1f0 [ 1365.517485][T29301] irq_exit_rcu+0x9/0x30 [ 1365.521826][T29301] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1365.527558][T29301] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1365.533640][T29301] console_flush_all+0x7f7/0xc40 [ 1365.538684][T29301] console_unlock+0xc4/0x270 [ 1365.543387][T29301] vprintk_emit+0x5b7/0x7a0 [ 1365.548020][T29301] dev_vprintk_emit+0x337/0x3f0 [ 1365.552967][T29301] dev_printk_emit+0xe0/0x130 [ 1365.557738][T29301] _dev_info+0x10a/0x160 [ 1365.562080][T29301] usb_disconnect+0xdd/0x910 [ 1365.566783][T29301] hub_event+0x1cdb/0x4a00 [ 1365.571302][T29301] process_scheduled_works+0xade/0x17b0 [ 1365.576952][T29301] worker_thread+0x8a0/0xda0 [ 1365.581645][T29301] kthread+0x711/0x8a0 [ 1365.585831][T29301] ret_from_fork+0x3fc/0x770 [ 1365.590516][T29301] ret_from_fork_asm+0x1a/0x30 [ 1365.595374][T29301] [ 1365.595374][T29301] to a SOFTIRQ-irq-unsafe lock: [ 1365.602392][T29301] (tasklist_lock){.+.+}-{3:3} [ 1365.602423][T29301] [ 1365.602423][T29301] ... which became SOFTIRQ-irq-unsafe at: [ 1365.615073][T29301] ... [ 1365.615084][T29301] lock_acquire+0x120/0x360 [ 1365.622277][T29301] _raw_read_lock+0x36/0x50 [ 1365.626879][T29301] __do_wait+0xde/0x740 [ 1365.631132][T29301] do_wait+0x1f8/0x520 [ 1365.635294][T29301] kernel_wait+0xab/0x170 [ 1365.639720][T29301] call_usermodehelper_exec_work+0xbe/0x230 [ 1365.645712][T29301] process_scheduled_works+0xade/0x17b0 [ 1365.651357][T29301] worker_thread+0x8a0/0xda0 [ 1365.656045][T29301] kthread+0x711/0x8a0 [ 1365.660206][T29301] ret_from_fork+0x3fc/0x770 [ 1365.664899][T29301] ret_from_fork_asm+0x1a/0x30 [ 1365.669761][T29301] [ 1365.669761][T29301] other info that might help us debug this: [ 1365.669761][T29301] [ 1365.679997][T29301] Chain exists of: [ 1365.679997][T29301] &client->buffer_lock --> &new->fa_lock --> tasklist_lock [ 1365.679997][T29301] [ 1365.693144][T29301] Possible interrupt unsafe locking scenario: [ 1365.693144][T29301] [ 1365.701529][T29301] CPU0 CPU1 [ 1365.706903][T29301] ---- ---- [ 1365.712273][T29301] lock(tasklist_lock); [ 1365.716529][T29301] local_irq_disable(); [ 1365.723287][T29301] lock(&client->buffer_lock); [ 1365.730677][T29301] lock(&new->fa_lock); [ 1365.737452][T29301] [ 1365.740921][T29301] lock(&client->buffer_lock); [ 1365.745965][T29301] [ 1365.745965][T29301] *** DEADLOCK *** [ 1365.745965][T29301] [ 1365.754111][T29301] 7 locks held by syz.3.20153/29301: [ 1365.759400][T29301] #0: ffff888145ff6118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 1365.768562][T29301] #1: ffff8880297e5230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320 [ 1365.779212][T29301] #2: ffffffff8e13d080 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320 [ 1365.788929][T29301] #3: ffffffff8e13d080 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 1365.798550][T29301] #4: ffffffff8e13d080 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 1365.807713][T29301] #5: ffff888029523028 (&client->buffer_lock){..-.}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 1365.817917][T29301] #6: ffffffff8e13d080 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 1365.827195][T29301] [ 1365.827195][T29301] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1365.837628][T29301] -> (&client->buffer_lock){..-.}-{3:3} { [ 1365.843389][T29301] IN-SOFTIRQ-W at: [ 1365.847379][T29301] lock_acquire+0x120/0x360 [ 1365.853551][T29301] _raw_spin_lock+0x2e/0x40 [ 1365.859716][T29301] evdev_pass_values+0xb9/0xbd0 [ 1365.866230][T29301] evdev_events+0x1e6/0x340 [ 1365.872398][T29301] input_pass_values+0x288/0x890 [ 1365.879010][T29301] input_event_dispose+0x3e5/0x6b0 [ 1365.885786][T29301] input_inject_event+0x1fe/0x320 [ 1365.892510][T29301] kd_sound_helper+0x19f/0x210 [ 1365.898940][T29301] input_handler_for_each_handle+0x101/0x1c0 [ 1365.906592][T29301] call_timer_fn+0x17b/0x5f0 [ 1365.912846][T29301] __run_timer_base+0x61a/0x860 [ 1365.919357][T29301] run_timer_softirq+0xb7/0x180 [ 1365.925864][T29301] handle_softirqs+0x283/0x870 [ 1365.932290][T29301] __irq_exit_rcu+0xca/0x1f0 [ 1365.938541][T29301] irq_exit_rcu+0x9/0x30 [ 1365.944443][T29301] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1365.951737][T29301] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1365.959377][T29301] console_flush_all+0x7f7/0xc40 [ 1365.965980][T29301] console_unlock+0xc4/0x270 [ 1365.972236][T29301] vprintk_emit+0x5b7/0x7a0 [ 1365.978406][T29301] dev_vprintk_emit+0x337/0x3f0 [ 1365.984917][T29301] dev_printk_emit+0xe0/0x130 [ 1365.991304][T29301] _dev_info+0x10a/0x160 [ 1365.997252][T29301] usb_disconnect+0xdd/0x910 [ 1366.003517][T29301] hub_event+0x1cdb/0x4a00 [ 1366.009624][T29301] process_scheduled_works+0xade/0x17b0 [ 1366.016852][T29301] worker_thread+0x8a0/0xda0 [ 1366.023485][T29301] kthread+0x711/0x8a0 [ 1366.029336][T29301] ret_from_fork+0x3fc/0x770 [ 1366.035605][T29301] ret_from_fork_asm+0x1a/0x30 [ 1366.042040][T29301] INITIAL USE at: [ 1366.046386][T29301] lock_acquire+0x120/0x360 [ 1366.052557][T29301] _raw_spin_lock_irqsave+0xa7/0xf0 [ 1366.059332][T29301] evdev_ioctl_handler+0x1095/0x1f10 [ 1366.066194][T29301] __se_sys_ioctl+0xfc/0x170 [ 1366.072365][T29301] do_syscall_64+0xfa/0x3b0 [ 1366.078451][T29301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.085930][T29301] } [ 1366.088461][T29301] ... key at: [] evdev_open.__key.25+0x0/0x20 [ 1366.096635][T29301] [ 1366.096635][T29301] the dependencies between the lock to be acquired [ 1366.096648][T29301] and SOFTIRQ-irq-unsafe lock: [ 1366.110181][T29301] -> (tasklist_lock){.+.+}-{3:3} { [ 1366.115509][T29301] HARDIRQ-ON-R at: [ 1366.119670][T29301] lock_acquire+0x120/0x360 [ 1366.126184][T29301] _raw_read_lock+0x36/0x50 [ 1366.132701][T29301] __do_wait+0xde/0x740 [ 1366.138863][T29301] do_wait+0x1f8/0x520 [ 1366.144964][T29301] kernel_wait+0xab/0x170 [ 1366.151328][T29301] call_usermodehelper_exec_work+0xbe/0x230 [ 1366.159240][T29301] process_scheduled_works+0xade/0x17b0 [ 1366.166811][T29301] worker_thread+0x8a0/0xda0 [ 1366.173429][T29301] kthread+0x711/0x8a0 [ 1366.179507][T29301] ret_from_fork+0x3fc/0x770 [ 1366.186107][T29301] ret_from_fork_asm+0x1a/0x30 [ 1366.192879][T29301] SOFTIRQ-ON-R at: [ 1366.197042][T29301] lock_acquire+0x120/0x360 [ 1366.203553][T29301] _raw_read_lock+0x36/0x50 [ 1366.210063][T29301] __do_wait+0xde/0x740 [ 1366.216221][T29301] do_wait+0x1f8/0x520 [ 1366.222295][T29301] kernel_wait+0xab/0x170 [ 1366.228640][T29301] call_usermodehelper_exec_work+0xbe/0x230 [ 1366.236637][T29301] process_scheduled_works+0xade/0x17b0 [ 1366.244203][T29301] worker_thread+0x8a0/0xda0 [ 1366.250807][T29301] kthread+0x711/0x8a0 [ 1366.256883][T29301] ret_from_fork+0x3fc/0x770 [ 1366.263481][T29301] ret_from_fork_asm+0x1a/0x30 [ 1366.270254][T29301] INITIAL USE at: [ 1366.274344][T29301] lock_acquire+0x120/0x360 [ 1366.280766][T29301] _raw_write_lock_irq+0xa2/0xf0 [ 1366.291190][T29301] copy_process+0x224f/0x3c00 [ 1366.297799][T29301] kernel_clone+0x21e/0x870 [ 1366.304231][T29301] user_mode_thread+0xdd/0x140 [ 1366.310919][T29301] rest_init+0x23/0x300 [ 1366.317006][T29301] start_kernel+0x47d/0x500 [ 1366.323431][T29301] x86_64_start_reservations+0x24/0x30 [ 1366.330819][T29301] x86_64_start_kernel+0x143/0x1c0 [ 1366.337857][T29301] common_startup_64+0x13e/0x147 [ 1366.344723][T29301] INITIAL READ USE at: [ 1366.349233][T29301] lock_acquire+0x120/0x360 [ 1366.356092][T29301] _raw_read_lock+0x36/0x50 [ 1366.362952][T29301] __do_wait+0xde/0x740 [ 1366.369490][T29301] do_wait+0x1f8/0x520 [ 1366.375916][T29301] kernel_wait+0xab/0x170 [ 1366.382607][T29301] call_usermodehelper_exec_work+0xbe/0x230 [ 1366.390868][T29301] process_scheduled_works+0xade/0x17b0 [ 1366.398774][T29301] worker_thread+0x8a0/0xda0 [ 1366.405724][T29301] kthread+0x711/0x8a0 [ 1366.412149][T29301] ret_from_fork+0x3fc/0x770 [ 1366.419097][T29301] ret_from_fork_asm+0x1a/0x30 [ 1366.426221][T29301] } [ 1366.428923][T29301] ... key at: [] tasklist_lock+0x18/0x40 [ 1366.436830][T29301] ... acquired at: [ 1366.440810][T29301] lock_acquire+0x120/0x360 [ 1366.445499][T29301] _raw_read_lock+0x36/0x50 [ 1366.450188][T29301] send_sigurg+0x12b/0x420 [ 1366.454786][T29301] sk_send_sigurg+0x6c/0x2e0 [ 1366.459581][T29301] queue_oob+0x699/0x8a0 [ 1366.464008][T29301] unix_stream_sendmsg+0xaf9/0xc90 [ 1366.469299][T29301] __sock_sendmsg+0x219/0x270 [ 1366.474157][T29301] ____sys_sendmsg+0x505/0x830 [ 1366.479100][T29301] ___sys_sendmsg+0x21f/0x2a0 [ 1366.483958][T29301] __x64_sys_sendmsg+0x19b/0x260 [ 1366.489078][T29301] do_syscall_64+0xfa/0x3b0 [ 1366.493765][T29301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.499846][T29301] [ 1366.502194][T29301] -> (&f_owner->lock){....}-{3:3} { [ 1366.507784][T29301] INITIAL USE at: [ 1366.511870][T29301] lock_acquire+0x120/0x360 [ 1366.518131][T29301] _raw_write_lock_irq+0xa2/0xf0 [ 1366.524830][T29301] __f_setown+0x67/0x370 [ 1366.530821][T29301] generic_setlease+0xd5d/0x1240 [ 1366.537536][T29301] fcntl_setlease+0x3a2/0x4c0 [ 1366.544063][T29301] do_fcntl+0x6a9/0x1910 [ 1366.550094][T29301] __se_sys_fcntl+0xc8/0x150 [ 1366.556430][T29301] do_syscall_64+0xfa/0x3b0 [ 1366.562683][T29301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.570324][T29301] INITIAL READ USE at: [ 1366.574757][T29301] lock_acquire+0x120/0x360 [ 1366.581449][T29301] _raw_read_lock_irq+0xaa/0xf0 [ 1366.588487][T29301] f_getown+0x54/0x2a0 [ 1366.594746][T29301] sock_ioctl+0x536/0x790 [ 1366.601259][T29301] __se_sys_ioctl+0xfc/0x170 [ 1366.608038][T29301] do_syscall_64+0xfa/0x3b0 [ 1366.614752][T29301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.622835][T29301] } [ 1366.625428][T29301] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 1366.634392][T29301] ... acquired at: [ 1366.638283][T29301] lock_acquire+0x120/0x360 [ 1366.642970][T29301] _raw_read_lock_irqsave+0xaf/0x100 [ 1366.648532][T29301] send_sigio+0x38/0x370 [ 1366.652959][T29301] kill_fasync+0x24d/0x4d0 [ 1366.657560][T29301] lease_break_callback+0x26/0x30 [ 1366.662770][T29301] __break_lease+0x6a5/0x1620 [ 1366.667633][T29301] do_dentry_open+0xd62/0x1970 [ 1366.672579][T29301] vfs_open+0x3b/0x340 [ 1366.676827][T29301] path_openat+0x2ee5/0x3830 [ 1366.681612][T29301] do_filp_open+0x1fa/0x410 [ 1366.686300][T29301] do_sys_openat2+0x121/0x1c0 [ 1366.691156][T29301] __x64_sys_open+0x11e/0x150 [ 1366.696014][T29301] do_syscall_64+0xfa/0x3b0 [ 1366.700715][T29301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.706790][T29301] [ 1366.709119][T29301] -> (&new->fa_lock){....}-{3:3} { [ 1366.714261][T29301] INITIAL USE at: [ 1366.718164][T29301] lock_acquire+0x120/0x360 [ 1366.724239][T29301] _raw_write_lock_irq+0xa2/0xf0 [ 1366.730751][T29301] fasync_remove_entry+0xf1/0x1c0 [ 1366.737351][T29301] __fput+0x89f/0xa70 [ 1366.742901][T29301] task_work_run+0x1d4/0x260 [ 1366.749065][T29301] exit_to_user_mode_loop+0xec/0x110 [ 1366.755931][T29301] do_syscall_64+0x2bd/0x3b0 [ 1366.762108][T29301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.769578][T29301] INITIAL READ USE at: [ 1366.773914][T29301] lock_acquire+0x120/0x360 [ 1366.780451][T29301] _raw_read_lock_irqsave+0xaf/0x100 [ 1366.787890][T29301] kill_fasync+0x199/0x4d0 [ 1366.794453][T29301] pipe_release+0x19c/0x330 [ 1366.800983][T29301] __fput+0x449/0xa70 [ 1366.807066][T29301] task_work_run+0x1d4/0x260 [ 1366.813662][T29301] exit_to_user_mode_loop+0xec/0x110 [ 1366.820958][T29301] do_syscall_64+0x2bd/0x3b0 [ 1366.827559][T29301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.835491][T29301] } [ 1366.837997][T29301] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 1366.846711][T29301] ... acquired at: [ 1366.850520][T29301] lock_acquire+0x120/0x360 [ 1366.855216][T29301] _raw_read_lock_irqsave+0xaf/0x100 [ 1366.860690][T29301] kill_fasync+0x199/0x4d0 [ 1366.865295][T29301] evdev_pass_values+0x627/0xbd0 [ 1366.870414][T29301] evdev_events+0x1e6/0x340 [ 1366.875120][T29301] input_pass_values+0x288/0x890 [ 1366.880248][T29301] input_event_dispose+0x330/0x6b0 [ 1366.885544][T29301] input_inject_event+0x1fe/0x320 [ 1366.890766][T29301] evdev_write+0x2fc/0x480 [ 1366.895489][T29301] vfs_write+0x27e/0xa90 [ 1366.899924][T29301] ksys_write+0x145/0x250 [ 1366.904440][T29301] do_syscall_64+0xfa/0x3b0 [ 1366.909142][T29301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.915218][T29301] [ 1366.917585][T29301] [ 1366.917585][T29301] stack backtrace: [ 1366.923483][T29301] CPU: 1 UID: 0 PID: 29301 Comm: syz.3.20153 Not tainted 6.15.0-syzkaller-10769-g7d4e49a77d99 #0 PREEMPT(full) [ 1366.923507][T29301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1366.923520][T29301] Call Trace: [ 1366.923530][T29301] [ 1366.923538][T29301] dump_stack_lvl+0x189/0x250 [ 1366.923570][T29301] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1366.923596][T29301] ? __pfx__printk+0x10/0x10 [ 1366.923618][T29301] validate_chain+0x1f05/0x2140 [ 1366.923650][T29301] __lock_acquire+0xab9/0xd20 [ 1366.923672][T29301] ? kill_fasync+0x199/0x4d0 [ 1366.923691][T29301] lock_acquire+0x120/0x360 [ 1366.923709][T29301] ? kill_fasync+0x199/0x4d0 [ 1366.923733][T29301] _raw_read_lock_irqsave+0xaf/0x100 [ 1366.923758][T29301] ? kill_fasync+0x199/0x4d0 [ 1366.923778][T29301] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1366.923796][T29301] ? do_raw_spin_lock+0x121/0x290 [ 1366.923825][T29301] kill_fasync+0x199/0x4d0 [ 1366.923844][T29301] ? kill_fasync+0x53/0x4d0 [ 1366.923863][T29301] evdev_pass_values+0x627/0xbd0 [ 1366.923883][T29301] ? evdev_pass_values+0x601/0xbd0 [ 1366.923901][T29301] evdev_events+0x1e6/0x340 [ 1366.923915][T29301] ? evdev_events+0x79/0x340 [ 1366.923930][T29301] ? input_pass_values+0x8d/0x890 [ 1366.923956][T29301] input_pass_values+0x288/0x890 [ 1366.923984][T29301] ? input_handle_event+0x70c/0xf30 [ 1366.924006][T29301] input_event_dispose+0x330/0x6b0 [ 1366.924030][T29301] input_inject_event+0x1fe/0x320 [ 1366.924052][T29301] ? input_inject_event+0xbc/0x320 [ 1366.924075][T29301] evdev_write+0x2fc/0x480 [ 1366.924093][T29301] ? __pfx_evdev_write+0x10/0x10 [ 1366.924109][T29301] ? bpf_lsm_file_permission+0x9/0x20 [ 1366.924131][T29301] ? security_file_permission+0x75/0x290 [ 1366.924150][T29301] ? rw_verify_area+0x258/0x650 [ 1366.924172][T29301] ? __pfx_evdev_write+0x10/0x10 [ 1366.924188][T29301] vfs_write+0x27e/0xa90 [ 1366.924214][T29301] ? __pfx_vfs_write+0x10/0x10 [ 1366.924236][T29301] ? __fget_files+0x2a/0x420 [ 1366.924253][T29301] ? __fget_files+0x2a/0x420 [ 1366.924267][T29301] ? __fget_files+0x3a0/0x420 [ 1366.924281][T29301] ? __fget_files+0x2a/0x420 [ 1366.924299][T29301] ksys_write+0x145/0x250 [ 1366.924323][T29301] ? __pfx_ksys_write+0x10/0x10 [ 1366.924344][T29301] ? rcu_is_watching+0x15/0xb0 [ 1366.924368][T29301] ? do_syscall_64+0xbe/0x3b0 [ 1366.924391][T29301] do_syscall_64+0xfa/0x3b0 [ 1366.924412][T29301] ? lockdep_hardirqs_on+0x9c/0x150 [ 1366.924432][T29301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.924448][T29301] ? clear_bhb_loop+0x60/0xb0 [ 1366.924466][T29301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.924483][T29301] RIP: 0033:0x7fcae4f8e969 [ 1366.924500][T29301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1366.924517][T29301] RSP: 002b:00007fcae5eb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1366.924537][T29301] RAX: ffffffffffffffda RBX: 00007fcae51b5fa0 RCX: 00007fcae4f8e969 [ 1366.924550][T29301] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 1366.924561][T29301] RBP: 00007fcae5010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 1366.924572][T29301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1366.924582][T29301] R13: 0000000000000000 R14: 00007fcae51b5fa0 R15: 00007fcae52dfa28 [ 1366.924601][T29301] [ 1367.259494][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.266004][ T1302] ieee802154 phy1 wpan1: encryption failed: -22