last executing test programs: 10m51.546747768s ago: executing program 4 (id=4134): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a3100f7ff000800044000000000090000000800e3fd984003400000000134000000140a03"], 0x98}}, 0x0) 10m51.332104738s ago: executing program 4 (id=4138): bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x808, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000080)={0xa3, 0x0, 0x0}) 10m51.028700326s ago: executing program 4 (id=4141): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) madvise(&(0x7f0000706000/0x4000)=nil, 0x4000, 0x4) 10m50.038415299s ago: executing program 4 (id=4146): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 10m49.095049995s ago: executing program 4 (id=4159): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) r1 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe) 10m48.820706465s ago: executing program 4 (id=4163): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={r2, 0x401}, &(0x7f0000000680)=0x8) 10m48.348587421s ago: executing program 32 (id=4163): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={r2, 0x401}, &(0x7f0000000680)=0x8) 10m5.451860359s ago: executing program 3 (id=4566): open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0xd4) r1 = open(&(0x7f0000000000)='.\x00', 0x2400, 0x0) mkdirat(r1, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r0, &(0x7f0000000300)='./file1\x00', r0, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) 10m5.279057179s ago: executing program 3 (id=4568): syz_open_dev$usbfs(&(0x7f0000000040), 0x74, 0x101301) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) 10m5.083731745s ago: executing program 3 (id=4572): unshare(0x2a020400) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) unshare(0x22020600) setns(r1, 0x8020000) 10m4.874537205s ago: executing program 3 (id=4575): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 10m3.947944108s ago: executing program 3 (id=4591): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r1, r2, r3, 0x0, 0x0, 0xfffffffd}) 10m3.578229315s ago: executing program 3 (id=4592): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x82, &(0x7f0000000240)={0x0, 0x3, 0x9, 0x7, 0x9c1, 0x6, 0x4, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x4000}}, 0x4, 0xfffffffc, 0x4, 0x6, 0x8}}, &(0x7f00000000c0)=0xb0) 10m3.192549811s ago: executing program 33 (id=4592): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x82, &(0x7f0000000240)={0x0, 0x3, 0x9, 0x7, 0x9c1, 0x6, 0x4, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x4000}}, 0x4, 0xfffffffc, 0x4, 0x6, 0x8}}, &(0x7f00000000c0)=0xb0) 50.850281014s ago: executing program 6 (id=10513): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x80003, 0x0, [0x32, 0x0, 0x8, 0x8004, 0x19a3, 0x5, 0x5, 0xfffffffffffffffe]}) 50.69543007s ago: executing program 6 (id=10515): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000013c0), 0x43c}}, 0x0) recvmsg(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000009c0)=""/53, 0x35}, {&(0x7f0000000a00)=""/70, 0x46}], 0x2}, 0x100) 50.637596554s ago: executing program 6 (id=10516): sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030d0000000000000000000000030005"], 0x68}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008f02"]) 50.395344174s ago: executing program 6 (id=10520): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x9901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x8) 50.314275411s ago: executing program 6 (id=10522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000002100004000000000ff"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.037904241s ago: executing program 6 (id=10526): r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000052c0)={0x14}, 0x14) 49.535627166s ago: executing program 34 (id=10526): r0 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0) write$FUSE_NOTIFY_RESEND(r0, &(0x7f00000052c0)={0x14}, 0x14) 34.619200872s ago: executing program 5 (id=10629): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x2, 0x0, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)='0', 0x1}], 0x1) 34.377051883s ago: executing program 5 (id=10633): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x5) 33.949776176s ago: executing program 5 (id=10638): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4000041}, 0x20024090) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 33.637105616s ago: executing program 5 (id=10642): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 33.423358285s ago: executing program 5 (id=10644): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x1, "e6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x1, "e9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0003ed000000ed03"], 0x0, 0x0, 0x0}, 0x0) 32.998266873s ago: executing program 5 (id=10648): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) shutdown(r0, 0x0) 32.734235133s ago: executing program 35 (id=10648): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) shutdown(r0, 0x0) 5.418912183s ago: executing program 1 (id=10880): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000003c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.030260624s ago: executing program 0 (id=10882): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x20, 0x70bd28, 0x80000000, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xc00000}, @NL80211_ATTR_TXQ_QUANTUM={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40086}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) 4.649530449s ago: executing program 0 (id=10885): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x29, 0x1, 0x6a542793, 0x681d, 0x0, 0x3, 0x1, 0x0, 0x0, 0x100, 0x82}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x5}}, 0x30) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) 4.487450012s ago: executing program 0 (id=10887): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) fanotify_init(0x200, 0x40000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x775409462d9a369f}) 4.249946328s ago: executing program 0 (id=10890): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) close(r1) 3.962296825s ago: executing program 0 (id=10893): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESHEX=0x0], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.792789627s ago: executing program 7 (id=10894): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0xfffc, r0, 0x0}]) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 3.527166627s ago: executing program 7 (id=10897): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 3.407186293s ago: executing program 1 (id=10898): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.858271493s ago: executing program 2 (id=10902): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0x40}}}}}}}, 0x0) 2.756864937s ago: executing program 2 (id=10904): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x1000400) r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020005d"], 0x69) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.682229011s ago: executing program 1 (id=10905): r0 = dup(0xffffffffffffffff) r1 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r0, r1, 0x0, 0x8000fffffffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d3000000000000008001500000000000800130000170000080014"], 0x4c}}, 0x0) 2.580726543s ago: executing program 2 (id=10906): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x24, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x44, &(0x7f0000000a00)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.569021997s ago: executing program 1 (id=10907): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 2.323109308s ago: executing program 8 (id=10910): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0088cfb", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c0022803400008008000300000000000800050000000000080002000000000008000300000000000800020000000000080004000000000044000080080004000000000008000700000000000800060000000000080005000000000008000100000000000900020000000000"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68) 2.225193474s ago: executing program 8 (id=10911): r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x42302) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x92, @time={0x7665642f, 0x65757100}, 0x3, {0x1}, 0xfb}) 2.138342367s ago: executing program 7 (id=10912): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) bind$alg(0xffffffffffffffff, 0x0, 0x0) 2.103196529s ago: executing program 8 (id=10913): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 1.90624137s ago: executing program 8 (id=10914): r0 = syz_io_uring_setup(0x832, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$rds(0x15, 0x5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0, 0x2020}) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.906089306s ago: executing program 7 (id=10915): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0xfdfe, 0x7, @remote, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) 1.771575801s ago: executing program 8 (id=10916): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64], 0x80}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) 1.764197367s ago: executing program 7 (id=10917): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01, 0x0, 0xab}]}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.554362297s ago: executing program 1 (id=10918): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000880)={[], 0xf000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) 1.484717463s ago: executing program 7 (id=10919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.464149802s ago: executing program 8 (id=10920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) 914.289866ms ago: executing program 1 (id=10921): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000005c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xdddd1000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 889.495613ms ago: executing program 0 (id=10922): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0xbb5, 0x2, 0x0, 0x0, @msi={0x9, 0x70000000, 0x25cee92e, 0xffffe51d}}]}) close_range(r0, 0xffffffffffffffff, 0x0) 163.025857ms ago: executing program 2 (id=10923): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000001a80)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) 72.796821ms ago: executing program 2 (id=10924): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 0s ago: executing program 2 (id=10925): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000086d040ec2000000000001090224"], 0x0) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) kernel console output (not intermixed with test programs): set [1, 0] type 2 family 0 port 6081 - 0 [ 892.121251][T29079] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.249712][T20646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.272117][T20646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.337420][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 892.346927][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 892.462905][T29206] veth1_to_team: entered promiscuous mode [ 892.541743][T29206] team0: Port device team_slave_1 removed [ 892.552939][T20532] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 892.714722][T20532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.727544][T20532] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.741190][T20532] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 892.773057][T20532] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 892.782125][T20532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.795377][T20532] usb 3-1: config 0 descriptor?? [ 893.031488][T29220] kvm: apic: phys broadcast and lowest prio [ 893.225491][T20532] plantronics 0003:047F:FFFF.0080: unknown main item tag 0x0 [ 893.263593][T20532] plantronics 0003:047F:FFFF.0080: No inputs registered, leaving [ 893.287006][T20532] plantronics 0003:047F:FFFF.0080: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 893.757846][T20655] hid-generic 0000:0000:0000.0081: unknown main item tag 0x0 [ 893.774690][T20655] hid-generic 0000:0000:0000.0081: hidraw1: HID v0.00 Device [syz0] on syz0 [ 893.959230][ T5838] Bluetooth: hci3: command tx timeout [ 894.508358][T29253] input: syz0 as /devices/virtual/input/input161 [ 894.692553][T20649] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 894.864943][T20649] usb 7-1: Using ep0 maxpacket: 32 [ 894.875849][T20649] usb 7-1: config 0 interface 0 has no altsetting 0 [ 894.895544][T20649] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 894.911489][T20649] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.920453][T20649] usb 7-1: Product: syz [ 894.924959][T20649] usb 7-1: Manufacturer: syz [ 894.929911][T20649] usb 7-1: SerialNumber: syz [ 894.942172][T20649] usb 7-1: config 0 descriptor?? [ 895.143848][T29273] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9600'. [ 895.159566][T29273] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9600'. [ 895.197130][T29273] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 895.366105][T20649] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 895.372621][T29024] usb 3-1: reset high-speed USB device number 100 using dummy_hcd [ 895.401730][T29024] usb 3-1: device reset changed ep0 maxpacket size! [ 895.412022][T20655] usb 3-1: USB disconnect, device number 100 [ 895.592773][T20655] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 895.752547][T20655] usb 3-1: Using ep0 maxpacket: 32 [ 895.760687][T20655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.778157][T20655] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.781289][T20649] gs_usb 7-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 895.804937][T20655] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 895.826218][T20655] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.850116][T20655] usb 3-1: config 0 descriptor?? [ 896.009687][T29302] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 896.022126][T29302] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 896.026982][T20649] usb 7-1: USB disconnect, device number 71 [ 896.032859][ T5838] Bluetooth: hci3: command tx timeout [ 896.049919][T29302] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 896.059980][T29302] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 896.334487][T20655] savu 0003:1E7D:2D5A.0082: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 896.637595][ T5880] usb 3-1: USB disconnect, device number 101 [ 896.789094][T29324] input: syz1 as /devices/virtual/input/input162 [ 897.129417][T29337] fuse: Invalid uid '00000000000000000000003' [ 897.209371][ T5834] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 897.340351][T29348] netlink: 'syz.2.9635': attribute type 4 has an invalid length. [ 897.357765][T29348] netlink: 'syz.2.9635': attribute type 4 has an invalid length. [ 897.386483][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 897.399422][ T5834] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 897.419661][ T5834] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 897.447427][ T5834] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 897.471935][ T5834] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 897.495326][ T5834] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 897.511806][ T5834] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 897.527114][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.759615][T29371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9631'. [ 897.771872][T29371] netlink: 'syz.0.9631': attribute type 5 has an invalid length. [ 897.789391][ T5834] usb 2-1: usb_control_msg returned -32 [ 897.814214][ T5834] usbtmc 2-1:16.0: can't read capabilities [ 897.830652][T29371] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.840096][T29371] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.849675][T29371] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.859481][T29371] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 897.877373][T29371] vxlan0: entered promiscuous mode [ 898.486216][T29400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9650'. [ 898.507090][T29401] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 898.644690][T29407] input: syz1 as /devices/virtual/input/input163 [ 898.709123][ T5834] usb 2-1: USB disconnect, device number 99 [ 898.762240][T29410] netlink: 1343 bytes leftover after parsing attributes in process `syz.0.9645'. [ 899.724439][T29452] input: syz1 as /devices/virtual/input/input164 [ 899.775388][T29454] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.9661'. [ 900.116505][ T5880] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 900.282583][ T5880] usb 6-1: Using ep0 maxpacket: 32 [ 900.289766][ T5880] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 900.322200][ T5880] usb 6-1: config 0 has no interface number 0 [ 900.347602][ T5880] usb 6-1: config 0 interface 184 has no altsetting 0 [ 900.368792][ T5880] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 900.388504][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.417669][ T5880] usb 6-1: Product: syz [ 900.421867][ T5880] usb 6-1: Manufacturer: syz [ 900.450486][ T5880] usb 6-1: SerialNumber: syz [ 900.459873][ T5880] usb 6-1: config 0 descriptor?? [ 900.468231][ T5880] smsc75xx v1.0.0 [ 901.032684][T20655] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 901.182817][T20655] usb 7-1: Using ep0 maxpacket: 32 [ 901.196511][T20655] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 901.213816][T20655] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.233399][T20655] usb 7-1: config 0 descriptor?? [ 901.249973][T20655] gspca_main: sunplus-2.14.0 probing 041e:400b [ 901.289131][ T5880] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 901.304972][ T5880] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 901.542893][ T5880] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 901.577230][ T5880] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 901.606365][ T5880] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 901.633426][ T5880] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 901.688027][ T5880] usb 6-1: USB disconnect, device number 79 [ 901.844087][T29502] kvm: apic: phys broadcast and lowest prio [ 902.254178][T20655] gspca_sunplus: reg_w_riv err -71 [ 902.277785][T20655] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 902.315867][T20655] usb 7-1: USB disconnect, device number 72 [ 903.777524][T29547] kvm: apic: phys broadcast and lowest prio [ 903.970693][T29552] futex_wake_op: syz.0.9696 tries to shift op by -1; fix this program [ 905.132764][T29553] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9695'. [ 906.252558][ T5886] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 906.422673][ T5886] usb 2-1: Using ep0 maxpacket: 8 [ 906.430610][ T5886] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 906.439443][ T5886] usb 2-1: config 179 has no interface number 0 [ 906.448380][ T5886] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 906.461503][ T5886] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 906.473817][ T5886] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 906.485191][ T5886] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 906.502789][ T5886] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 906.518078][ T5886] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 906.528864][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.544007][T29598] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 906.792872][ T5834] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input165 [ 906.987846][T29598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.002275][T29598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.226556][T20532] usb 2-1: USB disconnect, device number 100 [ 907.226610][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 907.241404][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 907.836204][T29603] loop4: detected capacity change from 0 to 524255232 [ 908.972665][T29641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9730'. [ 909.013856][T29641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9730'. [ 909.124599][T29646] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9732'. [ 909.311686][T29656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9736'. [ 911.675153][ T5834] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 911.835083][ T5834] usb 2-1: Using ep0 maxpacket: 8 [ 911.848326][ T5834] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 911.862341][ T5834] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 911.878904][ T5834] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 911.892878][T20532] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 911.894840][ T5834] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 911.910444][ T5834] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 911.929545][ T5834] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 911.938692][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.052653][T20532] usb 6-1: Using ep0 maxpacket: 16 [ 912.059981][T20532] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 912.072272][T20532] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 912.086224][T20532] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 912.095761][T20532] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.104243][T20532] usb 6-1: Product: syz [ 912.109569][T20532] usb 6-1: Manufacturer: syz [ 912.114358][T20532] usb 6-1: SerialNumber: syz [ 912.122808][T20532] usb 6-1: config 0 descriptor?? [ 912.187304][ T5834] usb 2-1: usb_control_msg returned -32 [ 912.199897][ T5834] usbtmc 2-1:16.0: can't read capabilities [ 912.412091][T20532] appledisplay 6-1:0.0: Error while getting initial brightness: -71 [ 912.444374][T20532] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -71 [ 912.465141][T20532] usb 6-1: USB disconnect, device number 80 [ 912.918690][T29725] usbtmc 2-1:16.0: usb_clear_halt returned -32 [ 913.134337][ T5886] usb 2-1: USB disconnect, device number 101 [ 913.550783][T29748] netlink: 'syz.5.9773': attribute type 4 has an invalid length. [ 913.598011][T29748] netlink: 'syz.5.9773': attribute type 4 has an invalid length. [ 914.162711][ T5834] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 914.344462][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 914.362506][ T5834] usb 2-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 914.373641][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.392440][ T5834] usb 2-1: config 0 descriptor?? [ 914.398339][T29767] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 914.732877][T20649] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 914.892711][T20649] usb 7-1: Using ep0 maxpacket: 8 [ 914.907769][T20649] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 914.920507][T20649] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 914.930722][T20649] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 914.941503][T20649] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.956129][T20649] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 914.968218][T20649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.035008][ T5834] usb 2-1: USB disconnect, device number 102 [ 915.184963][T20649] usb 7-1: GET_CAPABILITIES returned 0 [ 915.190504][T20649] usbtmc 7-1:16.0: can't read capabilities [ 915.397577][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 915.406974][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 915.416049][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 915.425095][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 915.434157][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 915.443214][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 915.458816][ T5834] usb 7-1: USB disconnect, device number 73 [ 915.609310][T29793] netlink: 'syz.1.9789': attribute type 4 has an invalid length. [ 915.621935][T29793] netlink: 'syz.1.9789': attribute type 4 has an invalid length. [ 916.342585][T20649] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 916.398550][T29828] binder: 29824:29828 ioctl c0306201 80000480 returned -14 [ 916.528778][T20649] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.552501][T20649] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 916.562401][T20649] usb 2-1: config 1 has no interface number 0 [ 916.574391][T20649] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.590427][T20649] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 916.610669][T20649] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 916.620195][T20649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.628655][T20649] usb 2-1: Product: syz [ 916.633186][T20649] usb 2-1: Manufacturer: syz [ 916.637861][T20649] usb 2-1: SerialNumber: syz [ 917.392748][ T5886] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 917.471523][T29855] input: syz1 as /devices/virtual/input/input166 [ 917.584015][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 917.594781][ T5886] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 917.613082][ T5886] usb 6-1: config 0 has no interface number 0 [ 917.633504][ T5886] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 917.653099][ T5886] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 917.670082][T20649] cdc_ncm 2-1:1.1: bind() failure [ 917.692580][ T5886] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 917.715898][ T5886] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 917.751038][ T5886] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 917.772503][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.797568][ T5886] usb 6-1: config 0 descriptor?? [ 917.827296][ T5886] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 917.928085][T29865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9822'. [ 917.941467][ T5886] usb 2-1: USB disconnect, device number 103 [ 917.971066][T29865] program syz.0.9822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 918.104888][T20649] usb 6-1: USB disconnect, device number 81 [ 918.142864][T20649] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 918.623060][T20532] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 918.766558][T29907] syzkaller0: entered allmulticast mode [ 918.782277][T29907] syzkaller0 (unregistering): left allmulticast mode [ 918.793347][T20532] usb 3-1: Using ep0 maxpacket: 8 [ 918.805214][T20532] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 918.818924][T20532] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 918.839304][T20532] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 918.863330][T20532] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 918.886361][T20532] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.899620][T20532] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 918.910367][T20532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.064181][T29909] misc userio: Invalid payload size [ 919.142779][T20532] usb 3-1: usb_control_msg returned -32 [ 919.155968][T20532] usbtmc 3-1:16.0: can't read capabilities [ 919.517613][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 919.884504][T29946] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 919.964149][T29950] misc userio: Invalid payload size [ 920.072554][T20649] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 920.094558][ T5886] usb 3-1: USB disconnect, device number 102 [ 920.234301][T20649] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 920.246209][T20649] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 920.260524][T20649] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 920.269731][T20649] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.280585][T20649] usb 2-1: config 0 descriptor?? [ 921.013696][T20649] usbhid 2-1:0.0: can't add hid device: -71 [ 921.019729][T20649] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 921.080541][T20649] usb 2-1: USB disconnect, device number 104 [ 921.522636][ T5880] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 921.718944][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 921.727683][ T5880] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 921.753567][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.934995][ T5880] usb 3-1: config 0 descriptor?? [ 921.946788][ T5880] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 923.081228][T30016] syzkaller1: entered promiscuous mode [ 923.087021][T30016] syzkaller1: entered allmulticast mode [ 923.191721][ T5880] gspca_vc032x: reg_w err -71 [ 923.199392][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.210405][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.216548][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.221918][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.229157][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.234834][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.240134][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.246013][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.251323][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.257054][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.262354][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.268225][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.273799][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.279160][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.290642][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.296638][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.302016][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.308791][ T5880] gspca_vc032x: I2c Bus Busy Wait 00 [ 923.308805][ T5880] gspca_vc032x: Unknown sensor... [ 923.308879][ T5880] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 923.320553][ T5880] usb 3-1: USB disconnect, device number 103 [ 923.700492][T30034] binder: 30032:30034 ioctl c0306201 80000480 returned -14 [ 925.302804][ T5880] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 925.462608][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 925.469687][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.480805][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.490787][ T5880] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 925.503902][ T5880] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 925.513653][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.524062][ T5880] usb 7-1: config 0 descriptor?? [ 925.572604][T20532] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 925.724911][T20532] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 925.737481][T20532] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 925.749701][T20532] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 925.763710][T20532] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 925.778444][T20532] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.787450][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dc76000: rx timeout, send abort [ 925.828177][T20532] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 925.841804][T20532] usb 3-1: invalid MIDI out EP 0 [ 925.981725][T20532] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 925.992086][ T5880] shield 0003:0955:7214.0084: unknown main item tag 0x0 [ 925.999106][ T5880] shield 0003:0955:7214.0084: unknown main item tag 0x0 [ 926.008872][ T5880] shield 0003:0955:7214.0084: unknown main item tag 0x0 [ 926.017122][ T5880] shield 0003:0955:7214.0084: unknown main item tag 0x0 [ 926.024585][ T5880] shield 0003:0955:7214.0084: unknown main item tag 0x0 [ 926.037134][T20532] usb 3-1: USB disconnect, device number 104 [ 926.044844][ T5880] input: HID 0955:7214 Haptics as /devices/virtual/input/input167 [ 926.088669][ T5880] shield 0003:0955:7214.0084: Registered Thunderstrike controller [ 926.098800][ T5880] shield 0003:0955:7214.0084: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 926.168500][T30073] random: crng reseeded on system resumption [ 926.183470][ T58] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 926.297701][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804dc76000: abort rx timeout. Force session deactivation [ 926.319079][T30089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.341520][T30089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.366395][ T58] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 926.382561][ T58] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 926.411785][ T58] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 926.424593][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.455286][ T58] usb 2-1: Product: syz [ 926.459836][ T58] usb 2-1: Manufacturer: syz [ 926.464680][ T58] usb 2-1: SerialNumber: syz [ 926.505922][ T5880] usb 7-1: USB disconnect, device number 74 [ 926.512013][T29024] shield 0003:0955:7214.0084: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 926.531724][T29024] shield 0003:0955:7214.0084: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 926.552722][T29024] shield 0003:0955:7214.0084: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 926.597087][T29024] shield 0003:0955:7214.0084: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 926.700865][T30088] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 927.006474][ T30] audit: type=1326 audit(1748284909.155:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30105 comm="syz.2.9924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 927.032515][ T30] audit: type=1326 audit(1748284909.155:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30105 comm="syz.2.9924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 927.060857][ T30] audit: type=1326 audit(1748284909.155:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30105 comm="syz.2.9924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 927.084625][ T30] audit: type=1326 audit(1748284909.155:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30105 comm="syz.2.9924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 927.119238][ T30] audit: type=1326 audit(1748284909.155:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30105 comm="syz.2.9924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 927.148029][ T30] audit: type=1326 audit(1748284909.155:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30105 comm="syz.2.9924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 927.197725][ T30] audit: type=1326 audit(1748284909.155:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30105 comm="syz.2.9924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 927.221169][ T30] audit: type=1326 audit(1748284909.155:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30105 comm="syz.2.9924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 927.244002][ T30] audit: type=1326 audit(1748284909.155:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30105 comm="syz.2.9924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 927.266212][T20649] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 927.299906][ T30] audit: type=1326 audit(1748284909.155:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30105 comm="syz.2.9924" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 927.321318][T30088] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 927.424670][T20649] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.461403][T20649] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 927.482570][T20649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.503971][T20649] usb 6-1: config 0 descriptor?? [ 927.541403][ T58] cdc_ncm 2-1:1.0: bind() failure [ 927.558788][ T58] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 927.568874][ T58] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 927.599464][ T58] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 927.634663][ T58] usb 2-1: USB disconnect, device number 105 [ 927.743201][T20649] usbhid 6-1:0.0: can't add hid device: -71 [ 927.749320][T20649] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 927.764494][T20649] usb 6-1: USB disconnect, device number 82 [ 928.202565][T20649] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 928.274615][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9945'. [ 928.336669][T30153] sock: sock_timestamping_bind_phc: sock not bind to device [ 928.374916][T20649] usb 6-1: Using ep0 maxpacket: 32 [ 928.392321][T20649] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.425851][T20649] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 928.444541][T20649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.472929][T20649] usb 6-1: config 0 descriptor?? [ 928.493332][T20649] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 928.516686][T20649] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 928.943478][T20649] usb 6-1: USB disconnect, device number 83 [ 928.963244][T20649] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 929.652712][ T58] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 929.868359][ T58] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 929.886225][ T58] usb 2-1: config 0 has no interface number 0 [ 929.914378][ T58] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 929.953596][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.992170][T14747] bridge_slave_1: left allmulticast mode [ 929.996701][ T58] usb 2-1: Product: syz [ 930.008318][ T58] usb 2-1: Manufacturer: syz [ 930.008956][T14747] bridge_slave_1: left promiscuous mode [ 930.017182][ T58] usb 2-1: SerialNumber: syz [ 930.042051][ T58] usb 2-1: config 0 descriptor?? [ 930.053776][T14747] bridge0: port 2(bridge_slave_1) entered disabled state [ 930.088339][T14747] bridge_slave_0: left allmulticast mode [ 930.104535][T14747] bridge_slave_0: left promiscuous mode [ 930.119373][T14747] bridge0: port 1(bridge_slave_0) entered disabled state [ 930.485782][ T58] usb 2-1: Firmware: major: 22, minor: 220, hardware type: UNKNOWN (68) [ 930.689076][ T58] usb 2-1: Read permanent extended address 00:00:00:00:00:00:00:4f from device [ 930.724664][ T58] usb 2-1: atusb_probe: initialization failed, error = -524 [ 930.732208][ T58] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 930.909022][T30206] netlink: 'syz.0.9971': attribute type 11 has an invalid length. [ 930.947337][ T5886] usb 2-1: USB disconnect, device number 106 [ 931.012971][T14747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 931.027658][T14747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 931.037285][T14747] bond0 (unregistering): Released all slaves [ 931.268370][T15589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 931.284851][T15589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 931.306564][T15589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 931.322240][T15589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 931.330947][T15589] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 931.482400][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.489140][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.865102][T14747] hsr_slave_0: left promiscuous mode [ 931.921344][T14747] hsr_slave_1: left promiscuous mode [ 931.929022][T14747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.937890][T14747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 932.218438][ T30] kauditd_printk_skb: 173 callbacks suppressed [ 932.218456][ T30] audit: type=1326 audit(1748284914.365:4364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30237 comm="syz.5.9978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 932.247096][ C0] vkms_vblank_simulate: vblank timer overrun [ 932.291088][ T30] audit: type=1326 audit(1748284914.365:4365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30237 comm="syz.5.9978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 932.313187][ C0] vkms_vblank_simulate: vblank timer overrun [ 932.420261][ T30] audit: type=1326 audit(1748284914.365:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30237 comm="syz.5.9978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 932.579532][ T30] audit: type=1326 audit(1748284914.365:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30237 comm="syz.5.9978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 932.686940][ T30] audit: type=1326 audit(1748284914.365:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30237 comm="syz.5.9978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 932.709290][ T30] audit: type=1326 audit(1748284914.365:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30237 comm="syz.5.9978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 932.731314][ C0] vkms_vblank_simulate: vblank timer overrun [ 932.746876][ T30] audit: type=1326 audit(1748284914.365:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30237 comm="syz.5.9978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 932.794087][ T30] audit: type=1326 audit(1748284914.405:4371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30237 comm="syz.5.9978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 932.816405][ T30] audit: type=1326 audit(1748284914.405:4372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30237 comm="syz.5.9978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 932.839527][ T30] audit: type=1326 audit(1748284914.405:4373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30237 comm="syz.5.9978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 932.861713][ C0] vkms_vblank_simulate: vblank timer overrun [ 933.192030][T14747] team0 (unregistering): Port device team_slave_1 removed [ 933.403280][ T5838] Bluetooth: hci4: command tx timeout [ 934.204639][T30216] chnl_net:caif_netlink_parms(): no params data found [ 934.425979][T14747] IPVS: stop unused estimator thread 0... [ 934.432869][T20532] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 934.612332][T20532] usb 2-1: Using ep0 maxpacket: 32 [ 934.627301][T30216] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.655098][T20532] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 934.663424][T30216] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.670619][T30216] bridge_slave_0: entered allmulticast mode [ 934.693162][T20532] usb 2-1: config 0 has no interface number 0 [ 934.722970][T20532] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 934.732277][T30216] bridge_slave_0: entered promiscuous mode [ 934.738178][T20532] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.769005][T30216] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.776133][T20532] usb 2-1: Product: syz [ 934.794685][T20532] usb 2-1: Manufacturer: syz [ 934.799318][T20532] usb 2-1: SerialNumber: syz [ 934.812604][T30216] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.827589][T30216] bridge_slave_1: entered allmulticast mode [ 934.845976][T20532] usb 2-1: config 0 descriptor?? [ 934.873681][T20532] smsc95xx v2.0.0 [ 934.878171][T30216] bridge_slave_1: entered promiscuous mode [ 935.048061][T30216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 935.099232][T30216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.309127][T30216] team0: Port device team_slave_0 added [ 935.326892][T30216] team0: Port device team_slave_1 added [ 935.421864][T30216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.451540][T30216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.501276][ T5838] Bluetooth: hci4: command tx timeout [ 935.542632][T30216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.575918][T30216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.607478][T30216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.633357][ C1] vkms_vblank_simulate: vblank timer overrun [ 935.725148][T30216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.904963][T20532] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 935.934460][T30216] hsr_slave_0: entered promiscuous mode [ 935.936672][T20532] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 935.941038][T30216] hsr_slave_1: entered promiscuous mode [ 935.979977][T20532] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 936.003849][T30216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.017115][T20532] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 936.042712][T30216] Cannot create hsr debugfs directory [ 936.048629][T20532] usb 2-1: USB disconnect, device number 107 [ 937.216110][T30334] syzkaller1: entered promiscuous mode [ 937.225972][T30334] syzkaller1: entered allmulticast mode [ 937.552650][ T5838] Bluetooth: hci4: command tx timeout [ 937.842777][ T5834] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 938.048290][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 938.061862][ T5834] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 938.071373][T30216] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 938.087562][ T5834] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 938.107224][ T5834] usb 3-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 938.108778][T30216] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 938.134955][ T5834] usb 3-1: Product: syz [ 938.151290][ T5834] usb 3-1: Manufacturer: syz [ 938.166233][ T5834] usb 3-1: SerialNumber: syz [ 938.168216][T30216] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 938.188604][ T5834] usb 3-1: config 0 descriptor?? [ 938.213578][T30216] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 938.228116][ T5834] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 938.646364][T30216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.718783][T30216] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.749018][T20646] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.756220][T20646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.793319][T20532] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 938.859785][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.866986][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.002592][T20532] usb 6-1: Using ep0 maxpacket: 8 [ 939.013895][T20532] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 939.038504][T20532] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 939.066959][T30216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.078732][T20532] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 939.106316][T20532] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.155594][T20532] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 939.193201][T20532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.214872][T30216] veth0_vlan: entered promiscuous mode [ 939.249682][T30216] veth1_vlan: entered promiscuous mode [ 939.258036][ T5834] gspca_zc3xx: reg_w_i err -71 [ 939.370990][T30216] veth0_macvtap: entered promiscuous mode [ 939.435439][T30216] veth1_macvtap: entered promiscuous mode [ 939.436207][T20532] usb 6-1: GET_CAPABILITIES returned 0 [ 939.464705][T20532] usbtmc 6-1:16.0: can't read capabilities [ 939.531387][T30216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 939.586661][T30216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 939.610455][T30216] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.642957][ T5838] Bluetooth: hci4: command tx timeout [ 939.658864][T30216] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.722521][T30216] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.731275][T30216] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.763104][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 939.772208][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 939.781292][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 939.790378][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 939.799473][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 939.808563][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 939.817698][ C1] vkms_vblank_simulate: vblank timer overrun [ 939.860278][ T5886] usb 6-1: USB disconnect, device number 84 [ 939.881626][ T5834] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 939.889298][ T5834] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 939.933967][ T5834] usb 3-1: USB disconnect, device number 105 [ 940.163510][T14747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.179058][T14747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.267152][T20646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.282994][T20646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 941.062188][T30447] KVM: debugfs: duplicate directory 30447-5 [ 941.490036][T30465] netlink: 'syz.5.10039': attribute type 4 has an invalid length. [ 941.892014][T30470] binder: 30468:30470 ioctl c0306201 80001a80 returned -14 [ 941.923816][T30486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10046'. [ 941.992279][T30486] netlink: 40 bytes leftover after parsing attributes in process `syz.2.10046'. [ 942.663237][ T30] kauditd_printk_skb: 302 callbacks suppressed [ 942.663255][ T30] audit: type=1326 audit(1748284924.805:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30531 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 942.739795][ T30] audit: type=1326 audit(1748284924.855:4677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30531 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 942.798583][ T30] audit: type=1326 audit(1748284924.855:4678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30531 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 942.856827][T30539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 942.888137][ T30] audit: type=1326 audit(1748284924.855:4679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30531 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 942.952796][ T30] audit: type=1326 audit(1748284924.855:4680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30531 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 943.003275][ T30] audit: type=1326 audit(1748284924.855:4681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30531 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 943.075078][ T30] audit: type=1326 audit(1748284924.855:4682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30531 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 943.251436][ T30] audit: type=1326 audit(1748284924.855:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30531 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 943.280682][ T30] audit: type=1326 audit(1748284924.855:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30531 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 943.306473][ T30] audit: type=1326 audit(1748284924.855:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30531 comm="syz.2.10060" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e539 code=0x7ffc0000 [ 943.328618][ C1] vkms_vblank_simulate: vblank timer overrun [ 943.461029][T30559] input: syz0 as /devices/virtual/input/input168 [ 944.709913][T30611] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 944.732841][ T5886] syzkaller1: tun_net_xmit 90 [ 944.740601][T30611] syzkaller1: Linktype set failed because interface is up [ 945.362623][T20532] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 945.524612][T20532] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.562346][T20532] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 945.583856][T20532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.623397][T20532] usb 2-1: config 0 descriptor?? [ 945.847618][T20532] usbhid 2-1:0.0: can't add hid device: -71 [ 945.872771][T20532] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 945.921704][T20532] usb 2-1: USB disconnect, device number 108 [ 946.112392][T30653] syzkaller1: entered promiscuous mode [ 946.122039][T30653] syzkaller1: entered allmulticast mode [ 946.382725][T20532] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 946.542569][T20532] usb 2-1: Using ep0 maxpacket: 16 [ 946.549892][T20532] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.585640][T20532] usb 2-1: config 0 interface 0 has no altsetting 0 [ 946.605926][T20532] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 946.625455][T20532] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.647770][T20532] usb 2-1: config 0 descriptor?? [ 947.042847][T29024] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 947.086719][T20532] nzxt-smart2 0003:1E71:2009.0085: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 947.204597][T29024] usb 6-1: config 0 has no interfaces? [ 947.210157][T29024] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 947.234906][T29024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 947.253744][T29024] usb 6-1: config 0 descriptor?? [ 947.473788][ T5886] hid-generic 0000:0000:0000.0086: unknown main item tag 0x0 [ 947.487672][T29024] usb 2-1: USB disconnect, device number 109 [ 947.488759][ T5886] hid-generic 0000:0000:0000.0086: hidraw1: HID v0.00 Device [syz1] on syz0 [ 947.572033][T30686] fido_id[30686]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 947.687637][T30673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.699225][T30673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.709338][ T5886] usb 6-1: USB disconnect, device number 85 [ 948.456980][T30698] loop2: detected capacity change from 0 to 7 [ 948.490023][T30698] Dev loop2: unable to read RDB block 7 [ 948.507881][T30698] loop2: unable to read partition table [ 948.528168][T30698] loop2: partition table beyond EOD, truncated [ 948.544365][T30698] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 948.720175][T30708] netlink: 88 bytes leftover after parsing attributes in process `syz.6.10121'. [ 948.753561][T30708] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10121'. [ 950.117897][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 950.117914][ T30] audit: type=1326 audit(1748284932.265:4694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30751 comm="syz.1.10138" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf710e539 code=0x0 [ 950.232890][T20532] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 950.396469][T20532] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 950.424157][T20532] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 950.442628][T20532] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 950.455334][T20532] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.476347][T30747] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 950.488176][T20532] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 950.736138][T20532] usb 6-1: USB disconnect, device number 86 [ 951.058077][T30769] loop2: detected capacity change from 0 to 7 [ 951.086000][T30769] loop2: [POWERTEC] p1 p2 p3 [ 951.090900][T30769] loop2: p1 start 1953653104 is beyond EOD, truncated [ 951.107930][T30769] loop2: p2 start 1818361856 is beyond EOD, truncated [ 951.132612][T30769] loop2: p3 start 1769173621 is beyond EOD, truncated [ 951.414124][T30775] kvm: kvm [30774]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x1020000000800 [ 951.682087][T30789] netlink: 'syz.2.10154': attribute type 2 has an invalid length. [ 951.692030][T30789] netlink: 'syz.2.10154': attribute type 4 has an invalid length. [ 951.700807][T30789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10154'. [ 952.062994][T29024] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 952.272223][T29024] usb 3-1: config 0 interface 0 has no altsetting 0 [ 952.302598][T29024] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 952.312063][T29024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.350628][T29024] usb 3-1: config 0 descriptor?? [ 952.906620][ T5886] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 953.079798][T30818] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10165'. [ 953.096107][ T5886] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 953.130543][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.164268][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.191359][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 953.209706][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.229908][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.269488][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 953.293758][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.313110][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.352295][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 953.362033][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.371392][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.397945][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 953.423024][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.442200][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.452915][T29024] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 953.463054][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 953.483690][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.500811][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.513676][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 953.527675][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.552533][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.572656][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 953.596474][ T5886] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 953.612743][ T5886] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 953.632784][ T5886] usb 7-1: config 0 interface 0 has no altsetting 0 [ 953.648316][ T5886] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 953.660498][ T5886] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 953.677251][T29024] usb 3-1: USB disconnect, device number 106 [ 953.689395][ T5886] usb 7-1: Product: syz [ 953.694274][ T5886] usb 7-1: Manufacturer: syz [ 953.703651][ T5886] usb 7-1: SerialNumber: syz [ 953.715611][ T5834] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 953.728691][ T5886] usb 7-1: config 0 descriptor?? [ 953.767384][ T5886] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 953.892983][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 953.907297][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.918002][T30834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10172'. [ 953.943242][ T5834] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 953.980754][ T5834] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 954.003429][ T5834] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 954.020699][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.050370][ T5834] usb 2-1: config 0 descriptor?? [ 954.146798][ C1] usb 7-1: yurex_control_callback - control failed: -71 [ 954.154429][T20649] usb 7-1: USB disconnect, device number 75 [ 954.175970][T20649] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 954.508713][ T5834] shield 0003:0955:7214.0087: unknown main item tag 0x0 [ 954.523234][ T5834] shield 0003:0955:7214.0087: unknown main item tag 0x0 [ 954.530447][ T5834] shield 0003:0955:7214.0087: unknown main item tag 0x0 [ 954.538538][ T5834] shield 0003:0955:7214.0087: unknown main item tag 0x0 [ 954.563335][ T5834] shield 0003:0955:7214.0087: unknown main item tag 0x0 [ 954.580763][ T5834] input: HID 0955:7214 Haptics as /devices/virtual/input/input169 [ 954.650541][ T5834] shield 0003:0955:7214.0087: Registered Thunderstrike controller [ 954.659893][ T5834] shield 0003:0955:7214.0087: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 954.706590][T30827] random: crng reseeded on system resumption [ 955.002300][T30858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 955.025266][T30858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.380201][ T5834] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 955.392079][T20649] usb 2-1: USB disconnect, device number 110 [ 955.409148][ T5834] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 955.434292][ T5834] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 955.450819][ T5834] shield 0003:0955:7214.0087: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 955.811342][T30880] loop2: detected capacity change from 0 to 7 [ 955.831408][T30880] Dev loop2: unable to read RDB block 7 [ 955.855690][T30880] loop2: unable to read partition table [ 955.878655][T30880] loop2: partition table beyond EOD, truncated [ 955.907599][T30880] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 957.068631][T30920] loop7: detected capacity change from 0 to 16384 [ 957.202607][ T5880] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 957.419116][ T5880] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 957.468636][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.504725][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 957.555573][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 957.606814][ T5880] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 957.648495][ T5880] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 957.656836][ T5880] usb 6-1: Manufacturer: syz [ 957.683866][ T5880] usb 6-1: config 0 descriptor?? [ 958.103424][ T5880] appleir 0003:05AC:8243.0088: unknown main item tag 0x0 [ 958.113637][ T5880] appleir 0003:05AC:8243.0088: No inputs registered, leaving [ 958.176162][ T5880] appleir 0003:05AC:8243.0088: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 958.543910][T30953] sit0: left promiscuous mode [ 958.627297][T30953] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 960.095308][ T5834] usb 6-1: USB disconnect, device number 87 [ 960.401625][T30989] xt_CT: No such helper "netbios-ns" [ 960.523413][T30994] bridge0: port 3(syz_tun) entered blocking state [ 960.529985][T30994] bridge0: port 3(syz_tun) entered forwarding state [ 960.544656][T30994] bridge0: left promiscuous mode [ 960.555861][T30994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.564465][T30994] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.589010][T30994] batman_adv: batadv0: Interface activated: dummy0 [ 960.602845][T30994] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 960.670280][T30997] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 960.701792][T30997] macvtap1: entered allmulticast mode [ 960.711760][T30997] mac80211_hwsim hwsim21 wlan0: entered allmulticast mode [ 960.730993][T30997] batman_adv: batadv0: Adding interface: macvtap1 [ 960.737675][T30997] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.763509][T30997] batman_adv: batadv0: Interface activated: macvtap1 [ 960.882716][ T5886] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 961.084215][ T5886] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 961.113025][ T5886] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 961.130305][ T5886] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 961.159771][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.191750][T31001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 961.259881][ T5886] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 961.545970][ T5886] usb 2-1: USB disconnect, device number 111 [ 962.440287][T31046] input: syz0 as /devices/virtual/input/input170 [ 963.152409][T31065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 963.885651][ T5880] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 964.088748][ T5880] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 964.128662][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.155004][ T5880] usb 2-1: Product: syz [ 964.164903][ T5880] usb 2-1: Manufacturer: syz [ 964.196328][ T5880] usb 2-1: SerialNumber: syz [ 964.228501][ T5880] usb 2-1: config 0 descriptor?? [ 964.283943][ T5880] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 965.521261][ T5880] gspca_sunplus: reg_w_riv err -71 [ 965.532316][ T5880] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 965.560962][ T5880] usb 2-1: USB disconnect, device number 112 [ 965.677230][T31134] tls_set_device_offload: netdev not found [ 965.831715][T31142] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10298'. [ 965.995069][T31148] vlan2: entered allmulticast mode [ 966.017035][T31148] bridge0: port 3(vlan2) entered blocking state [ 966.023512][T31148] bridge0: port 3(vlan2) entered disabled state [ 966.052852][T31148] vlan2: entered promiscuous mode [ 966.063256][T31148] bridge0: mtu less than device minimum [ 966.223176][T31155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10303'. [ 966.469977][T31168] netlink: 'syz.2.10311': attribute type 1 has an invalid length. [ 966.479552][T31166] input: syz1 as /devices/virtual/input/input171 [ 966.496386][T31168] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.10311'. [ 966.592553][ T5886] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 966.764631][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 966.790165][ T5886] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 966.805636][ T5886] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 966.821209][ T5886] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 966.838431][ T5886] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.851376][ T5886] usb 7-1: config 0 descriptor?? [ 967.212572][ T5880] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 967.312252][ T5886] plantronics 0003:047F:FFFF.0089: No inputs registered, leaving [ 967.365547][ T5886] plantronics 0003:047F:FFFF.0089: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 967.422760][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 967.435551][ T5886] hid-generic 0000:0000:0000.008A: unknown main item tag 0x0 [ 967.453321][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 967.492835][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 967.493537][ T5886] hid-generic 0000:0000:0000.008A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 967.541270][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 967.583137][ T5880] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 967.592204][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.655683][ T5880] usb 2-1: config 0 descriptor?? [ 968.083918][ T5880] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 968.100238][ T5880] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 968.110610][ T5880] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 968.118725][ T5880] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 968.129767][ T5880] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 968.138134][ T5880] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 968.152727][ T5880] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.008B/input/input172 [ 968.281083][T31193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.291492][T31193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.634711][ C1] plantronics 0003:047F:FFFF.0089: usb_submit_urb(ctrl) failed: -1 [ 968.656810][ T5880] microsoft 0003:045E:07DA.008B: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 968.684969][ T5880] usb 2-1: USB disconnect, device number 113 [ 968.760751][T31222] fido_id[31222]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 969.430860][T31245] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 969.444662][ T5834] usb 7-1: USB disconnect, device number 76 [ 969.494999][T31250] loop6: detected capacity change from 0 to 524287999 [ 969.507696][T31247] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 969.521281][T31247] macvtap1: entered allmulticast mode [ 969.531107][T31247] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 969.543202][T31247] batman_adv: batadv0: Adding interface: macvtap1 [ 969.549714][T31247] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.581400][T31247] batman_adv: batadv0: Interface activated: macvtap1 [ 972.132728][T20655] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 972.302622][T20655] usb 3-1: Using ep0 maxpacket: 8 [ 972.320455][T20655] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 972.354234][T20655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.362255][T20655] usb 3-1: Product: syz [ 972.404834][T20655] usb 3-1: Manufacturer: syz [ 972.409462][T20655] usb 3-1: SerialNumber: syz [ 972.427590][T20655] usb 3-1: config 0 descriptor?? [ 972.440325][T20655] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 973.682781][T20655] gspca_sonixj: reg_w1 err -71 [ 973.713585][T31359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10390'. [ 973.722625][T20655] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 973.733077][T20655] usb 3-1: USB disconnect, device number 107 [ 974.473272][T31383] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 974.736382][T31393] pim6reg1: entered promiscuous mode [ 974.742042][T31393] pim6reg1: entered allmulticast mode [ 975.075654][T31401] loop7: detected capacity change from 0 to 16384 [ 975.083618][T29202] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 975.262835][T29202] usb 2-1: Using ep0 maxpacket: 16 [ 975.286879][T29202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.324767][T29202] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.381161][T29202] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 975.435014][T29202] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 975.454158][T29202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.475476][T29202] usb 2-1: config 0 descriptor?? [ 975.906776][T29202] microsoft 0003:045E:07DA.008C: ignoring exceeding usage max [ 975.980975][T29202] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.008C/input/input173 [ 976.349133][T29202] microsoft 0003:045E:07DA.008C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 976.457009][T31416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10416'. [ 976.524688][T29202] usb 2-1: USB disconnect, device number 114 [ 976.691913][T31418] fido_id[31418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 977.076579][ T30] audit: type=1326 audit(1748284959.225:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31429 comm="syz.0.10421" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x0 [ 977.098229][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.162935][T20655] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 977.334397][T20655] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 977.357007][T20655] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 977.380783][T20655] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 977.391230][T20655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.402653][T20655] usb 3-1: Product: syz [ 977.406900][T20655] usb 3-1: Manufacturer: syz [ 977.411549][T20655] usb 3-1: SerialNumber: syz [ 977.426379][T31423] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 978.452707][T20655] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 978.459482][T31467] input: syz1 as /devices/virtual/input/input174 [ 978.482633][T20655] cdc_ncm 3-1:1.0: dwNtbInMaxSize=6 is too small. Using 2048 [ 978.503525][T20655] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 978.659776][T20655] cdc_ncm 3-1:1.0: setting tx_max = 36 [ 978.694594][T20655] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 978.723101][T20655] usb 3-1: USB disconnect, device number 108 [ 978.742380][T20655] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 979.013118][ T5834] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 979.174707][ T5834] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 979.192944][ T5834] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 979.214641][ T5834] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 979.230652][ T5834] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 979.244774][ T5834] usb 6-1: SerialNumber: syz [ 979.268801][T31488] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 979.496837][ T5834] usb 6-1: 0:2 : does not exist [ 979.533027][ T5834] usb 6-1: 5:0: cannot get min/max values for control 4 (id 5) [ 979.562154][ T5834] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 979.588962][ T5834] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 979.632846][ T5834] usb 6-1: USB disconnect, device number 88 [ 979.698930][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 980.845685][T31529] bridge0: port 4(erspan0) entered blocking state [ 980.859393][T31529] bridge0: port 4(erspan0) entered disabled state [ 980.878812][T31529] erspan0: entered allmulticast mode [ 980.889699][T31529] erspan0: entered promiscuous mode [ 980.900176][T31529] bridge0: port 4(erspan0) entered blocking state [ 980.907464][T31529] bridge0: port 4(erspan0) entered forwarding state [ 980.919585][T31529] bridge0: mtu less than device minimum [ 980.926484][T31535] erspan0: left allmulticast mode [ 980.938108][T31535] erspan0: left promiscuous mode [ 980.947387][T31535] bridge0: port 4(erspan0) entered disabled state [ 980.977952][T31535] bridge0: mtu less than device minimum [ 981.564107][T31544] vivid-000: disconnect [ 981.575117][T31543] vivid-000: reconnect [ 981.665754][T31547] netlink: 36 bytes leftover after parsing attributes in process `syz.6.10471'. [ 983.833396][ T5886] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 984.006059][ T5886] usb 3-1: Using ep0 maxpacket: 32 [ 984.042933][ T5886] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 984.051042][ T5886] usb 3-1: config 0 has no interface number 0 [ 984.067154][ T5886] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 984.080969][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.102535][ T5886] usb 3-1: Product: syz [ 984.106736][ T5886] usb 3-1: Manufacturer: syz [ 984.129625][ T5886] usb 3-1: SerialNumber: syz [ 984.147734][ T5886] usb 3-1: config 0 descriptor?? [ 984.177068][ T5886] smsc95xx v2.0.0 [ 984.253035][ T30] audit: type=1800 audit(1748284966.405:4696): pid=31598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.10492" name=04 dev="tmpfs" ino=1074 res=0 errno=0 [ 984.273487][ C1] vkms_vblank_simulate: vblank timer overrun [ 984.525413][T31603] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10494'. [ 984.581690][ T5886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 984.612160][ T5886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 984.944985][T20649] usb 7-1: new low-speed USB device number 77 using dummy_hcd [ 985.134868][T20649] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 985.145322][T20649] usb 7-1: config 0 has no interface number 0 [ 985.152037][T20649] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 985.209946][T20649] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 985.221422][T20649] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 985.231132][ T5886] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 985.249151][T20649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.257550][ T5886] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 985.303425][ T5886] usb 3-1: USB disconnect, device number 109 [ 985.313391][T20649] usb 7-1: config 0 descriptor?? [ 985.319376][T31609] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 985.338894][T20649] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 985.572733][ T5886] usb 7-1: USB disconnect, device number 77 [ 985.578761][ C1] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 986.252169][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b525400: rx timeout, send abort [ 986.636878][T31537] Set syz1 is full, maxelem 65536 reached [ 986.753904][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b525000: rx timeout, send abort [ 986.762212][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b525400: abort rx timeout. Force session deactivation [ 987.262176][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b525000: abort rx timeout. Force session deactivation [ 987.428737][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.547795][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.676766][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.770144][T31677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10531'. [ 987.845753][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.146406][T31689] syzkaller1: entered promiscuous mode [ 988.153942][T31689] syzkaller1: entered allmulticast mode [ 988.418084][T15589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 988.428863][T15589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 988.439660][T15589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 988.449925][T15589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 988.458111][T15589] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 988.477333][ T12] vlan2: left promiscuous mode [ 988.511461][ T12] bridge0: port 3(vlan2) entered disabled state [ 988.598982][ T12] bridge_slave_1: left allmulticast mode [ 988.637600][ T12] bridge_slave_1: left promiscuous mode [ 988.674160][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.735165][ T12] bridge_slave_0: left promiscuous mode [ 988.758415][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.791011][ T30] audit: type=1800 audit(1748284970.935:4697): pid=31706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10540" name=04 dev="tmpfs" ino=11151 res=0 errno=0 [ 989.848373][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 989.860211][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 989.878653][ T12] bond0 (unregistering): Released all slaves [ 990.362040][T31741] netlink: 'syz.2.10554': attribute type 4 has an invalid length. [ 990.416353][T31744] netlink: 'syz.2.10554': attribute type 4 has an invalid length. [ 990.513040][T15589] Bluetooth: hci4: command tx timeout [ 990.742551][ T12] batman_adv: batadv0: Interface deactivated: macvtap1 [ 990.761004][ T12] mac80211_hwsim hwsim26 wlan0 (unregistering): left allmulticast mode [ 990.846630][ T12] batman_adv: batadv0: Removing interface: macvtap1 [ 991.269787][ T12] hsr_slave_0: left promiscuous mode [ 991.279333][ T12] hsr_slave_1: left promiscuous mode [ 991.290165][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 991.305168][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 991.324204][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 991.331614][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 991.401696][ T12] veth1_macvtap: left promiscuous mode [ 991.416451][ T12] veth0_macvtap: left promiscuous mode [ 991.425005][ T12] veth1_vlan: left promiscuous mode [ 991.436310][ T12] veth0_vlan: left promiscuous mode [ 991.644808][ T30] audit: type=1326 audit(1748284973.795:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 991.695714][T31757] syz.1.10558: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 991.715090][T31757] CPU: 0 UID: 0 PID: 31757 Comm: syz.1.10558 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 991.715114][T31757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 991.715129][T31757] Call Trace: [ 991.715140][T31757] [ 991.715150][T31757] dump_stack_lvl+0x189/0x250 [ 991.715183][T31757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 991.715207][T31757] ? __pfx__printk+0x10/0x10 [ 991.715226][T31757] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 991.715246][T31757] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 991.715268][T31757] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 991.715290][T31757] warn_alloc+0x214/0x310 [ 991.715323][T31757] ? __pfx_warn_alloc+0x10/0x10 [ 991.715355][T31757] ? __get_vm_area_node+0x28f/0x300 [ 991.715385][T31757] __vmalloc_node_range_noprof+0x5f2/0x12c0 [ 991.715446][T31757] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 991.715481][T31757] vmalloc_user_noprof+0x74/0x80 [ 991.715505][T31757] ? vb2_vmalloc_alloc+0xef/0x340 [ 991.715530][T31757] vb2_vmalloc_alloc+0xef/0x340 [ 991.715554][T31757] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 991.715580][T31757] __vb2_queue_alloc+0x9bf/0x15a0 [ 991.715630][T31757] vb2_core_reqbufs+0xc31/0x1420 [ 991.715672][T31757] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 991.715694][T31757] ? vb2_verify_memory_type+0x1fc/0x570 [ 991.715719][T31757] ? vb2_reqbufs+0x3a9/0x630 [ 991.715751][T31757] v4l2_m2m_ioctl_reqbufs+0x169/0x240 [ 991.715774][T31757] __video_do_ioctl+0xc98/0xdb0 [ 991.715809][T31757] ? __pfx___video_do_ioctl+0x10/0x10 [ 991.715848][T31757] video_usercopy+0x86e/0x14f0 [ 991.715883][T31757] ? __pfx___video_do_ioctl+0x10/0x10 [ 991.715908][T31757] ? __pfx_video_usercopy+0x10/0x10 [ 991.715952][T31757] ? __fget_files+0x2a/0x420 [ 991.715978][T31757] v4l2_ioctl+0x18d/0x1e0 [ 991.716006][T31757] v4l2_compat_ioctl32+0x1d7/0x260 [ 991.716032][T31757] __ia32_compat_sys_ioctl+0x554/0x840 [ 991.716056][T31757] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 991.716093][T31757] ? rcu_is_watching+0x15/0xb0 [ 991.716117][T31757] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 991.716142][T31757] ? lockdep_hardirqs_on+0x9c/0x150 [ 991.716167][T31757] __do_fast_syscall_32+0xb4/0x110 [ 991.716196][T31757] do_fast_syscall_32+0x34/0x80 [ 991.716218][T31757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 991.716239][T31757] RIP: 0023:0xf710e539 [ 991.716255][T31757] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 991.716272][T31757] RSP: 002b:00000000f50fe55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 991.716291][T31757] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0145608 [ 991.716304][T31757] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 991.716316][T31757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 991.716327][T31757] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 991.716338][T31757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 991.716367][T31757] [ 991.716379][T31757] Mem-Info: [ 991.895413][ T30] audit: type=1326 audit(1748284973.795:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 992.045550][T31757] active_anon:29170 inactive_anon:2 isolated_anon:0 [ 992.045550][T31757] active_file:18713 inactive_file:40255 isolated_file:0 [ 992.045550][T31757] unevictable:768 dirty:339 writeback:0 [ 992.045550][T31757] slab_reclaimable:6486 slab_unreclaimable:108571 [ 992.045550][T31757] mapped:33258 shmem:20540 pagetables:1883 [ 992.045550][T31757] sec_pagetables:0 bounce:0 [ 992.045550][T31757] kernel_misc_reclaimable:0 [ 992.045550][T31757] free:1255302 free_pcp:6431 free_cma:0 [ 992.102000][T31757] Node 0 active_anon:116680kB inactive_anon:8kB active_file:74844kB inactive_file:160776kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132980kB dirty:1352kB writeback:0kB shmem:80624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB writeback_tmp:0kB kernel_stack:12560kB pagetables:7532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 992.151196][T31757] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 992.187149][ T30] audit: type=1326 audit(1748284973.795:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 992.209901][ T30] audit: type=1326 audit(1748284973.795:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 992.242428][T31757] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 992.262663][ T30] audit: type=1326 audit(1748284973.795:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f07539 code=0x7ffc0000 [ 992.352359][T31757] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 992.378644][T31757] Node 0 [ 992.378659][ T30] audit: type=1326 audit(1748284973.805:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 992.378663][T31757] DMA32 free:1106900kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:116672kB inactive_anon:8kB active_file:74844kB inactive_file:160676kB unevictable:1536kB writepending:1352kB present:3129332kB managed:2564108kB mlocked:0kB bounce:0kB free_pcp:268kB local_pcp:268kB free_cma:0kB [ 992.381639][ T30] audit: type=1326 audit(1748284973.805:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 992.514398][ T30] audit: type=1326 audit(1748284973.805:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 992.549588][ T30] audit: type=1326 audit(1748284973.805:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 992.602749][T15589] Bluetooth: hci4: command tx timeout [ 992.606033][ T30] audit: type=1326 audit(1748284973.805:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31768 comm="syz.5.10559" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7f07558 code=0x7ffc0000 [ 992.642249][T31757] lowmem_reserve[]: 0 0 0 0 0 [ 992.667117][T31757] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 992.727302][T31757] lowmem_reserve[]: 0 0 0 0 0 [ 992.746186][T31757] Node 1 Normal free:3913208kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:244kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11972kB local_pcp:11972kB free_cma:0kB [ 992.852919][T31757] lowmem_reserve[]: 0 0 0 0 0 [ 992.862756][T31757] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 992.925571][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.931846][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.952081][T31757] Node 0 DMA32: 341*4kB (UME) 771*8kB (UME) 197*16kB (UME) 58*32kB (UME) 209*64kB (UME) 123*128kB (UME) 80*256kB (ME) 31*512kB (UME) 19*1024kB (UME) 6*2048kB (UME) 243*4096kB (M) = 1105084kB [ 993.015920][T31757] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 993.115016][T20649] usb 6-1: new full-speed USB device number 89 using dummy_hcd [ 993.135323][T31757] Node 1 Normal: 220*4kB (UME) 73*8kB (UME) 54*16kB (UE) 207*32kB (UE) 44*64kB (UE) 18*128kB (UE) 19*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 3*2048kB (UME) 948*4096kB (UM) = 3913208kB [ 993.196702][T31757] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 993.206881][T31757] Node 0 hugepages_total=3 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 993.221404][T31757] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 993.238235][T31757] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 993.247886][T31757] 79508 total pagecache pages [ 993.257859][T31757] 2 pages in swap cache [ 993.262030][T31757] Free swap = 124988kB [ 993.267802][T31757] Total swap = 124996kB [ 993.272101][T31757] 2097051 pages RAM [ 993.304584][T31757] 0 pages HighMem/MovableOnly [ 993.317045][T31757] 424366 pages reserved [ 993.321221][T31757] 0 pages cma reserved [ 993.689282][ T12] team0 (unregistering): Port device team_slave_1 removed [ 993.757416][ T12] team0 (unregistering): Port device team_slave_0 removed [ 994.620942][T31788] vlan2: entered allmulticast mode [ 994.641459][T31788] bridge0: entered allmulticast mode [ 994.653583][T31788] bridge0: port 3(vlan2) entered blocking state [ 994.661727][T31788] bridge0: port 3(vlan2) entered disabled state [ 994.682533][T15589] Bluetooth: hci4: command tx timeout [ 994.741715][T31700] chnl_net:caif_netlink_parms(): no params data found [ 995.084428][T31700] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.097482][T31700] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.109582][T31700] bridge_slave_0: entered allmulticast mode [ 995.131983][T31700] bridge_slave_0: entered promiscuous mode [ 995.156480][T31700] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.168971][T31700] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.189542][T31700] bridge_slave_1: entered allmulticast mode [ 995.213909][T31700] bridge_slave_1: entered promiscuous mode [ 995.381418][T31824] vivid-000: disconnect [ 995.427226][T31700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.459391][T31700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.484017][ T5886] vivid-000: reconnect [ 995.552678][T20649] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 995.626470][T31700] team0: Port device team_slave_0 added [ 995.663863][T31700] team0: Port device team_slave_1 added [ 995.727069][T20649] usb 6-1: Using ep0 maxpacket: 16 [ 995.757239][T20649] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 995.774840][T20649] usb 6-1: config 0 has no interface number 0 [ 995.788362][T20649] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 995.797819][T20649] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.809307][T20649] usb 6-1: Product: syz [ 995.820730][T31700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.828502][T20649] usb 6-1: Manufacturer: syz [ 995.845087][T20649] usb 6-1: SerialNumber: syz [ 995.847458][T31700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.860792][T20649] usb 6-1: config 0 descriptor?? [ 995.923393][T20649] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 995.936823][T31700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.990859][T31700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.011942][T31700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.063084][T31700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.238954][T31700] hsr_slave_0: entered promiscuous mode [ 996.277527][T31700] hsr_slave_1: entered promiscuous mode [ 996.318328][T31700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 996.357300][T31700] Cannot create hsr debugfs directory [ 996.752941][T15589] Bluetooth: hci4: command tx timeout [ 996.904374][T31855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10584'. [ 997.225065][T31700] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 997.268272][T31700] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 997.299801][T31700] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 997.331516][T31700] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 997.355665][T20649] gspca_spca1528: reg_w err -71 [ 997.362386][T20649] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 997.388787][T20649] usb 6-1: USB disconnect, device number 90 [ 997.640130][T31700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 997.743396][T31700] 8021q: adding VLAN 0 to HW filter on device team0 [ 997.780016][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 997.787214][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 997.866987][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 997.874296][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 998.008608][T31700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 998.167235][T31700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.312671][T20649] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 998.385685][T31700] veth0_vlan: entered promiscuous mode [ 998.413987][T31700] veth1_vlan: entered promiscuous mode [ 998.485672][T31700] veth0_macvtap: entered promiscuous mode [ 998.492140][T20649] usb 6-1: Using ep0 maxpacket: 16 [ 998.516067][T20649] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.545203][T31700] veth1_macvtap: entered promiscuous mode [ 998.569177][T20649] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.603107][T20649] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 998.630324][T31700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 998.639643][T20649] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 998.670570][T31700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 998.700088][T20649] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.731335][T20649] usb 6-1: config 0 descriptor?? [ 998.739816][T31700] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.804661][T31700] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.833254][T31700] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 998.856572][T31700] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.129526][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.158021][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.237391][T20649] shield 0003:0955:7214.008D: unknown main item tag 0x0 [ 999.280480][T20649] shield 0003:0955:7214.008D: unknown main item tag 0x0 [ 999.300655][T20646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.322082][T20649] shield 0003:0955:7214.008D: unknown main item tag 0x0 [ 999.343581][T20646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.366894][T20649] shield 0003:0955:7214.008D: unknown main item tag 0x0 [ 999.402667][T20649] shield 0003:0955:7214.008D: unknown main item tag 0x0 [ 999.404600][T31880] random: crng reseeded on system resumption [ 999.433473][T20649] input: HID 0955:7214 Haptics as /devices/virtual/input/input175 [ 999.573627][T20649] shield 0003:0955:7214.008D: Registered Thunderstrike controller [ 999.594194][T31906] fuse: Bad value for 'fd' [ 999.603294][T20649] shield 0003:0955:7214.008D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 999.647981][T31908] loop9: detected capacity change from 0 to 7 [ 999.684368][T31908] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 999.689708][T31908] loop9: partition table partially beyond EOD, truncated [ 999.742866][T31908] loop9: p1 size 501170297 extends beyond EOD, truncated [ 999.937477][ T6177] udevd[6177]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 1000.055556][T31903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.088805][T31903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.154068][T31923] netlink: 'syz.7.10600': attribute type 1 has an invalid length. [ 1000.191435][T31923] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10600'. [ 1000.563261][T29202] shield 0003:0955:7214.008D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1000.574747][ T5886] usb 6-1: USB disconnect, device number 91 [ 1000.585183][T29202] shield 0003:0955:7214.008D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1000.645032][T29202] shield 0003:0955:7214.008D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1000.656869][T29202] shield 0003:0955:7214.008D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1000.841135][T31943] loop2: detected capacity change from 0 to 7 [ 1000.887953][T31943] Dev loop2: unable to read RDB block 7 [ 1000.897445][T31943] loop2: unable to read partition table [ 1000.907422][T31943] loop2: partition table beyond EOD, truncated [ 1000.937233][T31943] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1002.458717][T31999] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10625'. [ 1002.619646][T32005] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10623'. [ 1003.283486][ T30] kauditd_printk_skb: 409 callbacks suppressed [ 1003.283503][ T30] audit: type=1326 audit(1748284985.435:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.7.10636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1003.389059][T32040] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10638'. [ 1003.413626][ T30] audit: type=1326 audit(1748284985.435:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.7.10636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1003.502731][ T30] audit: type=1326 audit(1748284985.465:5119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.7.10636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1003.565126][ T30] audit: type=1326 audit(1748284985.465:5120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.7.10636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1003.632551][ T30] audit: type=1326 audit(1748284985.465:5121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.7.10636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1003.691630][ T30] audit: type=1326 audit(1748284985.465:5122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.7.10636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1003.773594][ T30] audit: type=1326 audit(1748284985.465:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.7.10636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1003.801978][ T30] audit: type=1326 audit(1748284985.465:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.7.10636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1003.932818][ T30] audit: type=1326 audit(1748284985.465:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.7.10636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1003.989504][ T30] audit: type=1326 audit(1748284985.465:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32035 comm="syz.7.10636" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54539 code=0x7ffc0000 [ 1004.011665][ C0] vkms_vblank_simulate: vblank timer overrun [ 1004.300835][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.429368][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.442562][T20655] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1004.502882][T20649] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 1004.585157][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.622674][T20655] usb 2-1: Using ep0 maxpacket: 16 [ 1004.634241][T20655] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1004.655436][T20655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1004.676827][T20649] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1004.689001][T20655] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1004.692688][T20649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.710677][T20655] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.727848][T20655] usb 2-1: Product: syz [ 1004.732136][T20655] usb 2-1: Manufacturer: syz [ 1004.737331][T20655] usb 2-1: SerialNumber: syz [ 1004.747642][T20649] usb 3-1: Product: syz [ 1004.760877][T20655] usb 2-1: config 0 descriptor?? [ 1004.775089][T20649] usb 3-1: Manufacturer: syz [ 1004.779709][T20649] usb 3-1: SerialNumber: syz [ 1004.787254][T20655] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1004.797582][T20655] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1004.826729][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.833488][T20649] usb 3-1: config 0 descriptor?? [ 1005.214266][ T52] bridge_slave_1: left allmulticast mode [ 1005.230170][ T52] bridge_slave_1: left promiscuous mode [ 1005.253040][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.255000][T29202] usb 3-1: USB disconnect, device number 110 [ 1005.285534][ T52] bridge_slave_0: left allmulticast mode [ 1005.291249][ T52] bridge_slave_0: left promiscuous mode [ 1005.297798][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1005.309802][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1005.319456][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1005.327983][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.336052][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1005.347789][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1005.391067][T20655] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1005.421109][T20655] em28xx 2-1:0.0: Config register raw data: 0x6c [ 1005.467509][T20655] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 1005.495087][T20655] em28xx 2-1:0.0: No AC97 audio processor [ 1005.834506][T20655] usb 2-1: USB disconnect, device number 115 [ 1006.006335][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.017340][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.028323][ T52] bond0 (unregistering): Released all slaves [ 1006.172685][T29202] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 1006.334070][T29202] usb 3-1: Using ep0 maxpacket: 16 [ 1006.351114][T29202] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1006.395301][T29202] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1006.424554][T29202] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1006.471722][T29202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.507459][T29202] usb 3-1: Product: syz [ 1006.520589][T29202] usb 3-1: Manufacturer: syz [ 1006.536473][T29202] usb 3-1: SerialNumber: syz [ 1006.543888][ T52] hsr_slave_0: left promiscuous mode [ 1006.561116][T29202] usb 3-1: config 0 descriptor?? [ 1006.571751][ T52] hsr_slave_1: left promiscuous mode [ 1006.582058][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.596164][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.625083][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.642780][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.728331][ T52] veth1_macvtap: left promiscuous mode [ 1006.748245][ T52] veth0_macvtap: left promiscuous mode [ 1006.777368][ T52] veth1_vlan: left promiscuous mode [ 1006.798217][ T52] veth0_vlan: left promiscuous mode [ 1007.249086][T29202] usb 3-1: USB disconnect, device number 111 [ 1007.396411][ T5838] Bluetooth: hci3: command tx timeout [ 1008.529287][ T52] team0 (unregistering): Port device team_slave_0 removed [ 1008.580450][T20649] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1008.585420][T32168] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1008.724063][T32171] netlink: 'syz.7.10679': attribute type 1 has an invalid length. [ 1008.733975][T32171] netlink: 68 bytes leftover after parsing attributes in process `syz.7.10679'. [ 1008.747780][T20649] usb 2-1: Using ep0 maxpacket: 32 [ 1008.768738][T20649] usb 2-1: config 0 has an invalid interface number: 235 but max is 0 [ 1008.779388][T20649] usb 2-1: config 0 has no interface number 0 [ 1008.804636][T20649] usb 2-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 1008.821269][T20649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.846919][T20649] usb 2-1: Product: syz [ 1008.860812][T20649] usb 2-1: Manufacturer: syz [ 1008.891333][T20649] usb 2-1: SerialNumber: syz [ 1008.909133][T20649] usb 2-1: config 0 descriptor?? [ 1009.472741][ T5838] Bluetooth: hci3: command tx timeout [ 1009.502705][T20655] psmouse serio11: Failed to reset mouse on : -5 [ 1009.509495][T32180] syzkaller1: entered promiscuous mode [ 1009.549683][T32180] syzkaller1: entered allmulticast mode [ 1009.584581][T32078] chnl_net:caif_netlink_parms(): no params data found [ 1010.006598][T32207] input: syz0 as /devices/virtual/input/input177 [ 1010.287576][T32078] bridge0: port 1(bridge_slave_0) entered blocking state [ 1010.298276][T32078] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.314955][T32078] bridge_slave_0: entered allmulticast mode [ 1010.332616][T20656] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 1010.361734][T32078] bridge_slave_0: entered promiscuous mode [ 1010.403759][T32078] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.411023][T32078] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.436926][T32078] bridge_slave_1: entered allmulticast mode [ 1010.446897][T32078] bridge_slave_1: entered promiscuous mode [ 1010.522798][T20656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1010.541737][T32078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.558345][T20656] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1010.585355][T32078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.597847][T20656] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1010.754822][T20656] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1010.773668][T20656] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.784410][T32078] team0: Port device team_slave_0 added [ 1010.805785][T20656] usb 3-1: config 0 descriptor?? [ 1010.842259][T32078] team0: Port device team_slave_1 added [ 1011.186207][T32078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.201979][T32078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.248212][T32078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.270794][T32239] netlink: 'syz.7.10696': attribute type 1 has an invalid length. [ 1011.285494][T20656] plantronics 0003:047F:FFFF.008E: unknown main item tag 0x0 [ 1011.304170][T20649] kaweth 2-1:0.235: Firmware present in device. [ 1011.311729][T20656] plantronics 0003:047F:FFFF.008E: No inputs registered, leaving [ 1011.320500][T32078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.333005][T32239] netlink: 'syz.7.10696': attribute type 2 has an invalid length. [ 1011.344034][T20649] kaweth 2-1:0.235: Error reading configuration (-71), no net device created [ 1011.354617][T32078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.381346][T32239] netlink: 'syz.7.10696': attribute type 1 has an invalid length. [ 1011.381834][T20656] plantronics 0003:047F:FFFF.008E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1011.390312][T20649] kaweth 2-1:0.235: probe with driver kaweth failed with error -5 [ 1011.410542][T32239] netlink: 'syz.7.10696': attribute type 8 has an invalid length. [ 1011.430836][T32239] netlink: 816 bytes leftover after parsing attributes in process `syz.7.10696'. [ 1011.453906][T32078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.475056][T20649] usb 2-1: USB disconnect, device number 116 [ 1011.553125][ T5838] Bluetooth: hci3: command tx timeout [ 1011.893049][T32078] hsr_slave_0: entered promiscuous mode [ 1011.899892][T32078] hsr_slave_1: entered promiscuous mode [ 1011.911617][T32078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1011.921125][T32078] Cannot create hsr debugfs directory [ 1012.461443][T32078] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1012.479897][T32078] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1012.500081][T32078] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1012.534111][T32078] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1012.703744][T32078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1012.727408][T32078] 8021q: adding VLAN 0 to HW filter on device team0 [ 1012.763180][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.770361][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1012.821150][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.828345][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1013.044228][T20655] misc userio: Buffer overflowed, userio client isn't keeping up [ 1013.098214][T32078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.261911][T32078] veth0_vlan: entered promiscuous mode [ 1013.304523][T32078] veth1_vlan: entered promiscuous mode [ 1013.335442][ T5880] usb 3-1: USB disconnect, device number 112 [ 1013.457774][T32078] veth0_macvtap: entered promiscuous mode [ 1013.492701][T32078] veth1_macvtap: entered promiscuous mode [ 1013.584033][T32078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.633090][ T5838] Bluetooth: hci3: command tx timeout [ 1013.654010][T32078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.721426][T32078] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.772283][T32078] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.811621][T32078] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.842660][T32078] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.183598][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.220069][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.317331][T20655] input: PS/2 Generic Mouse as /devices/serio11/input/input176 [ 1014.329007][T14747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.374634][T14747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.535579][T32304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10713'. [ 1014.585358][T20655] psmouse serio11: Failed to enable mouse on [ 1014.645263][T29024] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1014.832766][T29024] usb 2-1: Using ep0 maxpacket: 32 [ 1014.845578][T29024] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1014.867823][T29024] usb 2-1: config 0 has no interface number 0 [ 1014.894001][T29024] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1014.913675][T29024] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.921695][T29024] usb 2-1: Product: syz [ 1014.946191][T29024] usb 2-1: Manufacturer: syz [ 1014.950812][T29024] usb 2-1: SerialNumber: syz [ 1015.025850][T29024] usb 2-1: config 0 descriptor?? [ 1015.044208][T29024] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1015.243535][T29024] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1015.277219][T29024] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1015.363370][T20655] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1015.542712][T20655] usb 9-1: Using ep0 maxpacket: 16 [ 1015.563976][T20655] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.610859][T20655] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1015.638356][T20655] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.658313][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1015.668656][T29024] usb 2-1: USB disconnect, device number 117 [ 1015.689332][T20655] usb 9-1: config 0 descriptor?? [ 1015.702212][T29024] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1015.758493][T29024] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1015.801132][T29024] quatech2 2-1:0.51: device disconnected [ 1015.829236][T32334] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.10722'. [ 1015.971951][T20655] usbhid 9-1:0.0: can't add hid device: -71 [ 1016.008322][T20655] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1016.067170][T20655] usb 9-1: USB disconnect, device number 2 [ 1016.664412][T32355] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10730'. [ 1016.828916][T32361] vlan3: entered allmulticast mode [ 1016.879135][T32361] bridge0: entered allmulticast mode [ 1016.896045][T32361] bridge0: port 4(vlan3) entered blocking state [ 1016.922768][T32361] bridge0: port 4(vlan3) entered disabled state [ 1019.812586][T20655] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1020.103345][T20655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1020.162533][T20655] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1020.171613][T20655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.269455][T20655] usb 2-1: config 0 descriptor?? [ 1020.423997][T32462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10759'. [ 1020.542861][T20655] usbhid 2-1:0.0: can't add hid device: -71 [ 1020.567958][T20655] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1020.603313][T20655] usb 2-1: USB disconnect, device number 118 [ 1020.979588][T32485] netlink: 'syz.8.10766': attribute type 2 has an invalid length. [ 1021.092964][T20655] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1021.206363][T32495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10771'. [ 1021.262839][T20655] usb 2-1: Using ep0 maxpacket: 32 [ 1021.280621][T20655] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.299626][T20655] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1021.350597][T20655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.366780][T20655] usb 2-1: config 0 descriptor?? [ 1021.377689][T20655] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1021.403188][T20655] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1021.656740][ C1] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 1021.983992][ C1] ldusb 2-1:0.0: Ring buffer overflow, 8 bytes dropped [ 1023.069323][T29202] usb 2-1: USB disconnect, device number 119 [ 1023.107118][T29202] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1024.513562][T32624] netlink: 'syz.8.10805': attribute type 1 has an invalid length. [ 1025.762706][T20655] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1025.916282][T20655] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.935362][T20655] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1025.953755][T20655] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.975070][T20655] usb 9-1: config 0 descriptor?? [ 1026.192119][T20655] usbhid 9-1:0.0: can't add hid device: -71 [ 1026.224948][T20655] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1026.264664][T20655] usb 9-1: USB disconnect, device number 3 [ 1026.499473][T32688] binder: 32687:32688 ioctl c0306201 800001c0 returned -22 [ 1026.702588][T20655] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1026.907677][T20655] usb 9-1: Using ep0 maxpacket: 16 [ 1026.928465][T20655] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1026.956222][T20655] usb 9-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 1027.021575][T20655] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.129508][T20655] usb 9-1: config 0 descriptor?? [ 1027.350040][T20655] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 1027.495153][T20655] input: Griffin PowerMate as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input178 [ 1027.746894][ C0] powermate: config urb returned -71 [ 1027.753126][ C0] powermate: config urb returned -71 [ 1027.753530][T29202] usb 9-1: USB disconnect, device number 4 [ 1027.758422][ C0] powermate: usb_submit_urb(config) failed [ 1027.765393][ C0] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 1028.025285][T32735] team0: entered promiscuous mode [ 1028.040845][T32735] team_slave_0: entered promiscuous mode [ 1028.050904][T32735] team_slave_1: entered promiscuous mode [ 1028.075317][T32735] batadv_slave_0: entered promiscuous mode [ 1028.093209][T32734] batadv_slave_0: left promiscuous mode [ 1028.099685][T32734] team0: left promiscuous mode [ 1028.115789][T32734] team_slave_0: left promiscuous mode [ 1028.140815][T32734] team_slave_1: left promiscuous mode [ 1028.342796][T32740] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10838'. [ 1029.232624][T29024] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 1029.393617][ T309] kernel read not supported for file /eth0 (pid: 309 comm: syz.8.10849) [ 1029.413107][T29024] usb 3-1: Using ep0 maxpacket: 16 [ 1029.418769][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1029.418782][ T30] audit: type=1800 audit(1748285011.565:5132): pid=309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.10849" name="eth0" dev="mqueue" ino=159145 res=0 errno=0 [ 1029.492051][T29024] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1029.501339][T29024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.517858][T29024] usb 3-1: Product: syz [ 1029.528668][T29024] usb 3-1: Manufacturer: syz [ 1029.541887][T29024] usb 3-1: SerialNumber: syz [ 1029.554381][T29024] usb 3-1: config 0 descriptor?? [ 1029.584785][T29024] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1029.602744][ T30] audit: type=1326 audit(1748285011.745:5133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=313 comm="syz.8.10851" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf703e539 code=0x0 [ 1030.782883][T29202] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1030.791853][T29024] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 1030.818372][T29024] usb 3-1: USB disconnect, device number 113 [ 1030.946245][T29202] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1030.968655][T29202] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1030.987639][T29202] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1031.008469][T29202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1031.017148][T29202] usb 2-1: SerialNumber: syz [ 1031.248230][T29202] usb 2-1: 0:2 : does not exist [ 1031.261349][T29202] usb 2-1: unit 11 not found! [ 1031.302748][T29202] usb 2-1: USB disconnect, device number 120 [ 1031.350934][ T6177] udevd[6177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1031.842719][ T394] input: syz0 as /devices/virtual/input/input180 [ 1032.193391][T20655] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 1032.385340][T20655] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1032.417076][T20655] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.468452][ T404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10882'. [ 1032.499503][T20655] usb 2-1: config 0 descriptor?? [ 1032.750088][T20655] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 1032.767372][T20655] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1032.820802][T20655] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1032.856310][T20655] [drm] Initialized udl on minor 2 [ 1032.999227][T20655] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 1033.011499][T20655] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.237825][T29024] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1033.262858][T29024] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1033.275984][T29024] usb 2-1: USB disconnect, device number 121 [ 1034.197281][ T449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10900'. [ 1034.236972][ T449] sch_tbf: burst 0 is lower than device bridge1 mtu (1514) ! [ 1034.983075][T20655] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 1035.018333][ C1] vcan0: j1939_tp_rxtimer: 0xffff888023b00000: rx timeout, send abort [ 1035.026824][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888023b00000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 1035.150894][T20655] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1035.178314][T20655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.203337][T20655] usb 3-1: Product: syz [ 1035.212960][T20655] usb 3-1: Manufacturer: syz [ 1035.221495][T20655] usb 3-1: SerialNumber: syz [ 1035.251669][T20655] usb 3-1: config 0 descriptor?? [ 1035.681715][T20655] airspy 3-1:0.0: Board ID: 05 [ 1035.689617][T20655] airspy 3-1:0.0: Firmware version:  [ 1036.486565][T20655] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 1036.509595][T20655] airspy 3-1:0.0: Registered as swradio24 [ 1036.521180][T20655] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1036.538970][T20655] usb 3-1: USB disconnect, device number 114 [ 1037.952856][ T506] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1037.959943][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 1037.984494][ T506] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 1037.994183][ C1] [ 1037.996526][ C1] ============================= [ 1038.001372][ C1] [ BUG: Invalid wait context ] [ 1038.006226][ C1] 6.15.0-syzkaller #0 Not tainted [ 1038.011257][ C1] ----------------------------- [ 1038.016103][ C1] kworker/u8:3/52 is trying to lock: [ 1038.021386][ C1] ffffc90003429410 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 1038.030878][ C1] other info that might help us debug this: [ 1038.036745][ C1] context-{2:2} [ 1038.040179][ C1] 3 locks held by kworker/u8:3/52: [ 1038.045273][ C1] #0: ffff88814c48e148 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 1038.056609][ C1] #1: ffffc90000be7c60 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 1038.069768][ C1] #2: ffffc90003429958 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1c3/0x9a0 [ 1038.079709][ C1] stack backtrace: [ 1038.083427][ C1] CPU: 1 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 1038.083448][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1038.083459][ C1] Workqueue: bat_events batadv_nc_worker [ 1038.083480][ C1] Call Trace: [ 1038.083487][ C1] [ 1038.083495][ C1] dump_stack_lvl+0x189/0x250 [ 1038.083518][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1038.083538][ C1] ? __pfx__printk+0x10/0x10 [ 1038.083554][ C1] ? print_lock_name+0xde/0x100 [ 1038.083576][ C1] __lock_acquire+0xbcf/0xd20 [ 1038.083598][ C1] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 1038.083614][ C1] lock_acquire+0x120/0x360 [ 1038.083631][ C1] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 1038.083648][ C1] ? __lock_acquire+0xaac/0xd20 [ 1038.083669][ C1] _raw_read_lock_irqsave+0xaf/0x100 [ 1038.083688][ C1] ? kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 1038.083703][ C1] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 1038.083719][ C1] ? xa_load+0x1ea/0x210 [ 1038.083742][ C1] kvm_xen_set_evtchn_fast+0x1fb/0x9a0 [ 1038.083757][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1038.083775][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1038.083790][ C1] ? kvm_xen_set_evtchn_fast+0x1c3/0x9a0 [ 1038.083804][ C1] xen_timer_callback+0x109/0x220 [ 1038.083818][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 1038.083830][ C1] __hrtimer_run_queues+0x4dd/0xc60 [ 1038.083852][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1038.083868][ C1] ? read_tsc+0x9/0x20 [ 1038.083882][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1038.083907][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 1038.083923][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1038.083937][ C1] [ 1038.083942][ C1] [ 1038.083948][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1038.083960][ C1] RIP: 0010:batadv_nc_process_nc_paths+0xc5/0x3a0 [ 1038.083977][ C1] Code: 8b 44 24 10 4c 89 74 24 08 49 63 ee 48 c1 e5 03 48 03 28 e8 fd c4 82 f6 48 8d 05 00 00 00 00 48 c7 c7 e0 de f3 8d 31 f6 31 d2 02 00 00 00 45 31 c0 45 31 c9 48 89 44 24 28 50 e8 25 36 79 f6 [ 1038.083989][ C1] RSP: 0018:ffffc90000be7a50 EFLAGS: 00000246 [ 1038.084000][ C1] RAX: ffffffff8b2508da RBX: ffffffff8b250bd0 RCX: dffffc0000000000 [ 1038.084010][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8df3dee0 [ 1038.084019][ C1] RBP: ffff88802a414a28 R08: 0000000000000000 R09: 0000000000000000 [ 1038.084027][ C1] R10: 0000000000000000 R11: ffffffff8b2508da R12: dffffc0000000000 [ 1038.084036][ C1] R13: 1ffff1100b16db13 R14: 0000000000000045 R15: ffff888058b6cd80 [ 1038.084047][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 1038.084060][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 1038.084074][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 1038.084091][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 1038.084106][ C1] batadv_nc_worker+0x429/0x610 [ 1038.084120][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 1038.084133][ C1] process_scheduled_works+0xadb/0x17a0 [ 1038.084152][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1038.084174][ C1] worker_thread+0x8a0/0xda0 [ 1038.084193][ C1] kthread+0x70e/0x8a0 [ 1038.084208][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1038.084219][ C1] ? __pfx_kthread+0x10/0x10 [ 1038.084232][ C1] ? __pfx_kthread+0x10/0x10 [ 1038.084246][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1038.084258][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1038.084272][ C1] ? __pfx_kthread+0x10/0x10 [ 1038.084285][ C1] ret_from_fork+0x4b/0x80 [ 1038.084297][ C1] ? __pfx_kthread+0x10/0x10 [ 1038.084310][ C1] ret_from_fork_asm+0x1a/0x30 [ 1038.084334][ C1] [ 1038.839738][ T506] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1038.846290][ T506] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1038.854890][ T506] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1038.867167][ T506] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1038.874165][ T506] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1038.886939][ T506] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1039.162547][ T5886] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 1039.325334][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 1039.335887][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.347480][ T5886] usb 3-1: config 0 has no interfaces? [ 1039.356506][ T5886] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1039.367112][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.376614][ T5886] usb 3-1: config 0 descriptor?? [ 1039.668163][ T5886] usb 3-1: USB disconnect, device number 115 [ 1040.032596][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 1040.038712][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 1040.923506][ T671] Bluetooth: hci3: command 0x0c1a tx timeout [ 1042.112538][ T671] Bluetooth: hci4: command 0x0c1a tx timeout [ 1042.992640][ T671] Bluetooth: hci3: command 0x0c1a tx timeout [ 1044.192552][ T671] Bluetooth: hci4: command 0x0c1a tx timeout [ 1045.072603][ T671] Bluetooth: hci3: command 0x0c1a tx timeout