last executing test programs: 28.246592657s ago: executing program 1 (id=17864): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) 28.163219444s ago: executing program 0 (id=17865): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xd5, 0x0, 0x1}]}}}], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) 28.080939017s ago: executing program 3 (id=17867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000380)={0x8f, 0x0, 0x6}) 27.977190474s ago: executing program 1 (id=17868): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4004550c, 0x0) 27.928849048s ago: executing program 0 (id=17870): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x401, 0x3, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x4000) 27.888081402s ago: executing program 1 (id=17871): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x8000, 0x2}) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) 27.813430843s ago: executing program 3 (id=17872): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) 27.745353365s ago: executing program 0 (id=17874): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="3f03fe7fd877140006001e0089e9", 0xe, 0x40800, &(0x7f0000000080)={0xc9, 0x86dd, r2, 0x1, 0xfc}, 0x14) 27.61035446s ago: executing program 2 (id=17875): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x80000}, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 27.551337429s ago: executing program 0 (id=17876): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x45, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6}}) io_uring_enter(r0, 0x15f1, 0xff98, 0x69, 0x0, 0x0) 27.490765018s ago: executing program 2 (id=17877): io_setup(0x81, &(0x7f0000001440)=0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000340), &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 27.342351619s ago: executing program 3 (id=17878): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$uid(0x3, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 27.232672136s ago: executing program 2 (id=17879): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0x138, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0xe8, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xff, 0x4, 0x0, 0x3500, 0xa, 0x8}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}]}, 0x138}}, 0x0) 27.084300163s ago: executing program 3 (id=17880): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) nanosleep(&(0x7f0000000040)={0x0, 0x3938700}, 0x0) 27.08098003s ago: executing program 2 (id=17881): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x4}, {0x6, 0xfc}]}) write(r0, &(0x7f0000000180)="1124805b", 0x4) 26.941902025s ago: executing program 0 (id=17882): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000b80)=@migrate={0x118, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@mcast2, 0x4e21, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x9c, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@broadcast, 0xff, 0x0, 0x0, 0x2, 0x2, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x20}, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}]}, 0x118}}, 0x44) 26.941240255s ago: executing program 3 (id=17883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="14002c80080000008009000004ae8c0a09ce3be7"], 0x30}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) 26.915171402s ago: executing program 1 (id=17884): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000180)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000000003a0", 0x58}], 0x1) 26.747433153s ago: executing program 2 (id=17886): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2542, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, 0x0, &(0x7f0000000140)) 26.739723458s ago: executing program 3 (id=17887): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x48d2, 0x0, 0x0, 0x0, 0x0, 0x8], [0x8, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0x9c}, 0x1, 0x7a00}, 0x0) 26.665009124s ago: executing program 0 (id=17888): socket$inet(0x2, 0x3, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x73, 0xff7ef001) 26.648710068s ago: executing program 1 (id=17889): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='user\x00', &(0x7f0000000140)='\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000180)='user\x00', &(0x7f0000000040), 0x0) 26.617581119s ago: executing program 2 (id=17890): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c0000070005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 26.495881285s ago: executing program 1 (id=17892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x3, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 19.597283454s ago: executing program 4 (id=17905): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmsg$can_j1939(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x20002100) 19.536361483s ago: executing program 4 (id=17906): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000006c0), &(0x7f0000000700)=0x4) 18.439640122s ago: executing program 4 (id=17907): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x0) 18.353040017s ago: executing program 4 (id=17908): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x8, 0x5, [{{0x9, 0x4, 0x0, 0x7f, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0xf, 0x81, 0x1, {0x22, 0x572}}, {{{0x9, 0x5, 0x81, 0x3, 0x600, 0x27, 0x7, 0x7}}}}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x1, 0x8, "387e93966e2f9271"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 15.221049613s ago: executing program 4 (id=17909): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x40, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x10, 0x9, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0xd, "0adb3fb8"}, 0xffff}) 15.144517568s ago: executing program 4 (id=17910): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'caif0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000300)={0x1d, r2}, 0x10) 11.528437278s ago: executing program 32 (id=17888): socket$inet(0x2, 0x3, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f0000001740)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1, 0x73, 0xff7ef001) 11.446597777s ago: executing program 33 (id=17890): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="8000b2000a000200aaaaaaaaaa1c0000070005"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40800) 10.019952748s ago: executing program 34 (id=17887): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x1000000, {0x0, 0x0, 0x12, r1, {0x0, 0x300}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x48d2, 0x0, 0x0, 0x0, 0x0, 0x8], [0x8, 0x0, 0x0, 0x0, 0xd645, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x6}]}}]}, 0x9c}, 0x1, 0x7a00}, 0x0) 9.674204613s ago: executing program 35 (id=17892): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x3, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 0s ago: executing program 36 (id=17910): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'caif0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000300)={0x1d, r2}, 0x10) kernel console output (not intermixed with test programs): 0 bytes leftover after parsing attributes in process `syz.2.16179'. [ 982.957931][ T7834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16181'. [ 983.067495][ T7839] netlink: 'syz.3.16184': attribute type 2 has an invalid length. [ 983.361517][ T7856] syzkaller1: tun_chr_ioctl cmd 35111 [ 983.487467][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16195'. [ 983.630912][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16195'. [ 984.007358][ T7881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 984.060452][ T7881] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 984.236881][ T7889] binder: 7888:7889 ioctl c0306201 200000000100 returned -14 [ 984.509775][ T7909] input: syz0 as /devices/virtual/input/input137 [ 984.802901][ T7924] netlink: 'syz.0.16224': attribute type 11 has an invalid length. [ 984.907979][ T7930] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.136613][ T7941] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16231'. [ 985.523641][ T7952] netlink: 'syz.1.16236': attribute type 11 has an invalid length. [ 986.324843][T27533] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 986.361879][ T7977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16247'. [ 986.495563][T27533] usb 3-1: Using ep0 maxpacket: 8 [ 986.526461][T27533] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 986.546933][T27533] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 986.570594][T27533] usb 3-1: Product: syz [ 986.584337][T27533] usb 3-1: Manufacturer: syz [ 986.589154][T27533] usb 3-1: SerialNumber: syz [ 986.601196][T27533] usb 3-1: config 0 descriptor?? [ 986.620123][T27533] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 987.164792][ T6712] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 987.229632][T27533] input: gspca_zc3xx as /devices/platform/dummy_hcd.2/usb3/3-1/input/input138 [ 987.325044][ T6712] usb 4-1: Using ep0 maxpacket: 8 [ 987.345448][ T6712] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.376825][ T6712] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 987.400194][ T6712] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 987.422494][ T6712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.437507][T27533] usb 3-1: USB disconnect, device number 91 [ 987.454946][ T6712] usb 4-1: Product: syz [ 987.466138][ T6712] usb 4-1: Manufacturer: syz [ 987.470792][ T6712] usb 4-1: SerialNumber: syz [ 987.741006][ T6712] cdc_ncm 4-1:1.0: bind() failure [ 987.770302][ T6712] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 987.781131][ T6712] cdc_ncm 4-1:1.1: bind() failure [ 987.794011][T27103] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 987.799766][ T6712] usb 4-1: USB disconnect, device number 118 [ 987.997880][T27103] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 988.024511][T27103] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 988.046637][T27103] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 988.073104][T27103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.114347][T27103] usb 2-1: Product: syz [ 988.118923][T27103] usb 2-1: Manufacturer: syz [ 988.123614][T27103] usb 2-1: SerialNumber: syz [ 988.568914][T27103] usb 2-1: 0:2 : does not exist [ 989.002336][T27103] usb 2-1: USB disconnect, device number 105 [ 989.891028][ T8031] netlink: 192 bytes leftover after parsing attributes in process `syz.0.16270'. [ 991.238104][ T8055] binder: 8054:8055 ioctl c018620c 200000000040 returned -22 [ 992.106169][ T8085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16294'. [ 992.974339][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.980709][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.268230][ T8122] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.16310'. [ 993.766012][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 993.766033][ T30] audit: type=1326 audit(1750016848.776:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.16322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d8e929 code=0x7ffc0000 [ 993.839377][ T8152] netlink: 'syz.0.16324': attribute type 12 has an invalid length. [ 993.912249][ T30] audit: type=1326 audit(1750016848.776:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.16322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d8e929 code=0x7ffc0000 [ 993.981224][ T30] audit: type=1326 audit(1750016848.776:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.16322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f51e3d8e929 code=0x7ffc0000 [ 994.080585][ T30] audit: type=1326 audit(1750016848.776:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.16322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d8e929 code=0x7ffc0000 [ 994.153426][ T30] audit: type=1326 audit(1750016848.776:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.16322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d8e929 code=0x7ffc0000 [ 994.254816][ T30] audit: type=1326 audit(1750016848.776:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.16322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f51e3d8e929 code=0x7ffc0000 [ 994.342809][ T30] audit: type=1326 audit(1750016848.776:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.16322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51e3d2ab19 code=0x7ffc0000 [ 994.470176][ T30] audit: type=1326 audit(1750016848.776:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.16322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51e3d2ab19 code=0x7ffc0000 [ 994.549557][ T30] audit: type=1326 audit(1750016848.776:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.16322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51e3d2ab19 code=0x7ffc0000 [ 994.649507][ T30] audit: type=1326 audit(1750016848.776:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8145 comm="syz.2.16322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f51e3d2ab19 code=0x7ffc0000 [ 995.552023][ T8187] netlink: 'syz.0.16341': attribute type 1 has an invalid length. [ 995.579253][ T8187] netlink: 'syz.0.16341': attribute type 2 has an invalid length. [ 995.592711][ T8186] sctp: [Deprecated]: syz.3.16340 (pid 8186) Use of int in max_burst socket option. [ 995.592711][ T8186] Use struct sctp_assoc_value instead [ 996.152081][ T8203] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 996.281332][ T8207] program syz.4.16351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.304297][ T8205] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 996.466757][T27299] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 996.530573][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16355'. [ 997.524676][ T6712] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 997.695014][ T6712] usb 5-1: Using ep0 maxpacket: 8 [ 997.703752][ T6712] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 997.725925][ T6712] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 997.744598][ T6712] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 997.774738][ T6712] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 997.800598][ T6712] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 997.811089][ T6712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.033232][ T8271] netlink: 146840 bytes leftover after parsing attributes in process `syz.1.16381'. [ 998.047867][ T6712] usb 5-1: GET_CAPABILITIES returned 0 [ 998.053447][ T6712] usbtmc 5-1:16.0: can't read capabilities [ 998.054142][T27103] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 998.253582][T27103] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 998.265955][ T8249] usbtmc 5-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 998.269109][T27103] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.285493][ T6712] usb 5-1: USB disconnect, device number 114 [ 998.290718][T27103] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 998.309096][T27103] usb 3-1: config 1 has no interface number 0 [ 998.331580][T27103] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 998.349765][T27103] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 998.376517][T27103] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 998.391954][T27103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.403555][T27103] usb 3-1: Product: syz [ 998.414553][T27103] usb 3-1: Manufacturer: syz [ 998.419282][T27103] usb 3-1: SerialNumber: syz [ 998.582143][ T8286] usb usb8: usbfs: process 8286 (syz.3.16388) did not claim interface 0 before use [ 998.930214][T27103] usb 3-1: USB disconnect, device number 92 [ 1000.321168][ T8339] ptrace attach of "./syz-executor exec"[5856] was attempted by "\x09   %-5鎢D|VTy\x22͚KN/)/HM&CsnVkת{Jv1%_)$n:,\x5c]n+]2yrrL˕-6^%D\x5c~zw'Mc\x22o٫`ˤ=sN8|?ޔBr9ɳbF{i$]끕J\x5c6\x0d*R͓X#xZmgSù>`vEI [ 1000.446321][ T8341] program syz.1.16413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1000.635282][ T8347] netlink: 'syz.4.16415': attribute type 2 has an invalid length. [ 1000.643182][ T8347] netlink: 116 bytes leftover after parsing attributes in process `syz.4.16415'. [ 1000.653722][ T8347] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1000.954606][ T6712] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1001.108155][ T30] kauditd_printk_skb: 1917 callbacks suppressed [ 1001.108177][ T30] audit: type=1800 audit(1750016856.116:10793): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.16424" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1001.144722][ T6712] usb 4-1: Using ep0 maxpacket: 32 [ 1001.166451][ T6712] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1001.174981][ T6712] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1001.201645][ T6712] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1001.218409][ T6712] usb 4-1: config 1 has no interface number 0 [ 1001.234170][ T6712] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1001.257966][ T6712] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1001.302884][ T6712] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1001.324561][ T6712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.363644][ T6712] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1001.569235][ T6712] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1001.727710][ T8382] netlink: 48 bytes leftover after parsing attributes in process `syz.2.16431'. [ 1002.010359][ T6712] usb 4-1: USB disconnect, device number 119 [ 1002.035424][ T6712] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1002.195261][ T8396] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16438'. [ 1003.148897][ T8429] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16454'. [ 1003.324168][ T6712] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1003.503967][ T6712] usb 5-1: Using ep0 maxpacket: 8 [ 1003.525812][ T6712] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1003.535189][ T6712] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1003.563992][ T6712] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1003.584809][ T6712] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1003.597373][ T6712] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1003.628451][ T6712] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1003.669496][ T6712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.919779][ T6712] usb 5-1: GET_CAPABILITIES returned 0 [ 1003.930880][ T6712] usbtmc 5-1:16.0: can't read capabilities [ 1004.138905][ T6712] usb 5-1: USB disconnect, device number 115 [ 1006.393451][ T8533] input: syz1 as /devices/virtual/input/input139 [ 1006.470992][ T8537] netlink: 182 bytes leftover after parsing attributes in process `syz.1.16502'. [ 1006.493987][ T6712] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1006.654638][ T6712] usb 4-1: Using ep0 maxpacket: 32 [ 1006.680122][ T6712] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1006.704304][ T6712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1006.732916][ T6712] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1006.777426][ T6712] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1006.794214][ T6712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.817569][ T6712] usb 4-1: config 0 descriptor?? [ 1006.834106][ T8529] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1006.845225][ T6712] hub 4-1:0.0: USB hub found [ 1006.884788][T27533] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1006.994068][ T5913] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1007.034617][T27533] usb 3-1: Using ep0 maxpacket: 16 [ 1007.046438][T27533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1007.088106][ T6712] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1007.105452][T27533] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1007.127930][T27533] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1007.141881][T27533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.151850][ T30] audit: type=1326 audit(1750016862.156:10794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.0.16508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b78e929 code=0x7ffc0000 [ 1007.190471][T27533] usb 3-1: config 0 descriptor?? [ 1007.195820][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 1007.211257][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1007.225825][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1007.237747][ T30] audit: type=1326 audit(1750016862.156:10795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.0.16508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b78e929 code=0x7ffc0000 [ 1007.271735][ T30] audit: type=1326 audit(1750016862.186:10796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.0.16508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2a7b78e929 code=0x7ffc0000 [ 1007.301451][ T5913] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1007.318111][ T6712] usbhid 4-1:0.0: can't add hid device: -71 [ 1007.331322][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.339862][ T6712] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1007.348591][ T5913] usb 2-1: Product: syz [ 1007.371895][ T5913] usb 2-1: Manufacturer: syz [ 1007.378329][ T30] audit: type=1326 audit(1750016862.186:10797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.0.16508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b78e929 code=0x7ffc0000 [ 1007.414320][ T5913] usb 2-1: SerialNumber: syz [ 1007.432640][ T5913] usb 2-1: config 0 descriptor?? [ 1007.438846][ T6712] usb 4-1: USB disconnect, device number 120 [ 1007.469851][ T5913] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1007.479448][ T30] audit: type=1326 audit(1750016862.186:10798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.0.16508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b78e929 code=0x7ffc0000 [ 1007.533880][ T5913] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1007.569592][ T30] audit: type=1326 audit(1750016862.186:10799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.0.16508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2a7b78e929 code=0x7ffc0000 [ 1007.653506][ T30] audit: type=1326 audit(1750016862.186:10800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.0.16508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b72ab19 code=0x7ffc0000 [ 1007.692081][T27533] corsair 0003:1B1C:1B02.0092: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1007.774607][ T30] audit: type=1326 audit(1750016862.186:10801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.0.16508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b78e929 code=0x7ffc0000 [ 1007.871247][ T30] audit: type=1326 audit(1750016862.186:10802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.0.16508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7b78e929 code=0x7ffc0000 [ 1007.895877][ T30] audit: type=1326 audit(1750016862.186:10803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8556 comm="syz.0.16508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2a7b72ab19 code=0x7ffc0000 [ 1007.928868][T27533] corsair 0003:1B1C:1B02.0092: Failed to get K90 initial state (error -71). [ 1007.945974][T27533] usb 3-1: USB disconnect, device number 93 [ 1008.030435][ T8561] fido_id[8561]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1008.126759][ T5913] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1008.336147][ T5913] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1008.364664][ T5913] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1008.371781][ T5913] em28xx 2-1:0.0: No AC97 audio processor [ 1008.409178][ T5913] usb 2-1: USB disconnect, device number 106 [ 1008.426004][ T5913] em28xx 2-1:0.0: Disconnecting em28xx [ 1008.467502][ T5913] em28xx 2-1:0.0: Freeing device [ 1009.007247][ T8582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16517'. [ 1010.014759][T27100] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 1010.225936][T27100] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1010.244033][T27100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1010.275060][T27100] usb 2-1: config 0 descriptor?? [ 1010.508342][T27100] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1010.716442][T27100] [drm:udl_init] *ERROR* Selecting channel failed [ 1010.775612][T27100] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 1010.834135][T27100] [drm] Initialized udl on minor 2 [ 1010.852827][T27100] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1010.886534][T27100] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1010.927396][T27103] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1010.942031][T27100] usb 2-1: USB disconnect, device number 107 [ 1010.956836][T27103] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1011.000732][T27103] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1011.064931][ T8650] batadv_slave_1: entered promiscuous mode [ 1011.072975][ T8649] batadv_slave_1: left promiscuous mode [ 1011.354858][T27533] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1011.519548][T27533] usb 3-1: config 150 has an invalid interface number: 204 but max is 1 [ 1011.538542][T27533] usb 3-1: config 150 has no interface number 0 [ 1011.565301][T27533] usb 3-1: config 150 interface 204 has no altsetting 0 [ 1011.583301][T27533] usb 3-1: config 150 interface 1 has no altsetting 0 [ 1011.615542][T27533] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1011.634080][T27533] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.656020][T27533] usb 3-1: Product: syz [ 1011.660257][T27533] usb 3-1: Manufacturer: syz [ 1011.685396][T27533] usb 3-1: SerialNumber: syz [ 1011.934735][T27533] xr_serial 3-1:150.204: xr_serial converter detected [ 1012.538293][T27533] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1012.549537][T27533] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1012.576343][T27533] usb 3-1: USB disconnect, device number 94 [ 1012.603705][T27533] xr_serial 3-1:150.204: device disconnected [ 1012.735036][ T5913] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1012.824736][ T6712] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1012.896569][ T5913] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1012.915366][ T5913] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1012.927109][ T5913] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1012.936681][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.952516][ T8694] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1012.967947][ T5913] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1012.989255][ T8708] netlink: 14 bytes leftover after parsing attributes in process `syz.0.16575'. [ 1012.999043][ T6712] usb 2-1: Using ep0 maxpacket: 32 [ 1013.017323][ T6712] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 1013.036310][ T6712] usb 2-1: config 1 has no interface number 0 [ 1013.051588][ T6712] usb 2-1: config 1 interface 242 has no altsetting 0 [ 1013.069842][ T6712] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1013.098579][ T6712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.110926][ T6712] usb 2-1: Product: syz [ 1013.116653][ T6712] usb 2-1: Manufacturer: syz [ 1013.121469][ T6712] usb 2-1: SerialNumber: syz [ 1013.205977][T27100] usb 4-1: USB disconnect, device number 121 [ 1013.788305][ T8733] ip6gretap0: entered promiscuous mode [ 1013.800077][ T8733] macsec1: entered allmulticast mode [ 1013.805769][ T8733] ip6gretap0: entered allmulticast mode [ 1013.971923][ T6712] aqc111 2-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1014.004784][ T6712] aqc111 2-1:1.242: probe with driver aqc111 failed with error -71 [ 1014.031260][ T6712] usb 2-1: USB disconnect, device number 108 [ 1014.884236][ T5913] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 1015.048069][ T5913] usb 2-1: config 0 has no interfaces? [ 1015.058687][ T5913] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 1015.081971][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.100591][ T5913] usb 2-1: Product: syz [ 1015.110727][ T5913] usb 2-1: Manufacturer: syz [ 1015.123972][ T5913] usb 2-1: SerialNumber: syz [ 1015.138884][ T5913] usb 2-1: config 0 descriptor?? [ 1015.401630][ T5913] usb 2-1: USB disconnect, device number 109 [ 1015.944515][T27100] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1015.983529][ T8811] input: syz0 as /devices/virtual/input/input140 [ 1016.114618][T27100] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1016.135749][T27100] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1016.167837][T27100] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1016.190227][T27100] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.200882][T27100] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1016.216586][T27100] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1016.236576][T27100] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.252426][T27100] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1016.291273][T27100] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1016.354991][T27100] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.380396][T27100] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1016.403625][T27100] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1016.424896][T27100] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.433119][T27100] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1016.448905][T27100] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1016.472208][T27100] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.481420][T27100] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1016.512569][T27100] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1016.535478][T27100] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.552976][T27100] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1016.562646][T27100] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1016.582375][T27100] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.591743][T27100] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1016.607342][T27100] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1016.622410][T27100] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1016.653440][T27100] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1016.689340][T27100] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1016.718934][T27100] usb 3-1: Product: syz [ 1016.723168][T27100] usb 3-1: Manufacturer: syz [ 1016.740844][ T8833] ip6gretap1: entered promiscuous mode [ 1016.748586][T27100] usb 3-1: SerialNumber: syz [ 1016.759295][T27100] usb 3-1: config 0 descriptor?? [ 1016.776970][ T8833] ip6gretap1: entered allmulticast mode [ 1016.779176][T27100] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1016.958976][ T8839] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16634'. [ 1017.033235][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16633'. [ 1017.060928][ T5913] usb 3-1: USB disconnect, device number 95 [ 1017.064946][ T8843] netlink: 1 bytes leftover after parsing attributes in process `syz.4.16633'. [ 1017.085905][ T5913] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1017.351690][ T8854] bond0: option min_links: invalid value (18446744072132493311) [ 1017.376388][ T8854] bond0: option min_links: allowed values 0 - 2147483647 [ 1017.519393][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 1017.519413][ T30] audit: type=1326 audit(1750016872.526:10918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.16644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751098e929 code=0x7ffc0000 [ 1017.633968][ T30] audit: type=1326 audit(1750016872.526:10919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.16644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751098e929 code=0x7ffc0000 [ 1017.656558][ C1] vkms_vblank_simulate: vblank timer overrun [ 1017.705580][ T30] audit: type=1326 audit(1750016872.526:10920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.16644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f751098e929 code=0x7ffc0000 [ 1017.767301][ T8869] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1017.775444][ T5825] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1017.833976][ T30] audit: type=1326 audit(1750016872.526:10921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.16644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751098e929 code=0x7ffc0000 [ 1017.856535][ C1] vkms_vblank_simulate: vblank timer overrun [ 1017.890522][ T30] audit: type=1326 audit(1750016872.526:10922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.16644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f751098e929 code=0x7ffc0000 [ 1017.972380][ T30] audit: type=1326 audit(1750016872.536:10923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.16644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751098e929 code=0x7ffc0000 [ 1018.043777][ T30] audit: type=1326 audit(1750016872.536:10924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.16644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751098e929 code=0x7ffc0000 [ 1018.113629][ T30] audit: type=1326 audit(1750016872.536:10925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.16644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f751098e929 code=0x7ffc0000 [ 1018.185999][ T30] audit: type=1326 audit(1750016872.536:10926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.16644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751098e929 code=0x7ffc0000 [ 1018.208569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1018.303933][ T30] audit: type=1326 audit(1750016872.536:10927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8861 comm="syz.1.16644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f751098e929 code=0x7ffc0000 [ 1018.347699][ C1] hrtimer: interrupt took 29737 ns [ 1018.503964][ T5913] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1018.514148][T27100] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1018.660080][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 1018.684182][T27100] usb 4-1: Using ep0 maxpacket: 32 [ 1018.686408][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.713108][T27100] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1018.742022][ T5913] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1018.768211][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.783301][T27100] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1018.803772][ T5913] usb 3-1: config 0 descriptor?? [ 1018.804199][T27100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.849623][T27100] usb 4-1: Product: syz [ 1018.864246][T27100] usb 4-1: Manufacturer: syz [ 1018.879105][T27100] usb 4-1: SerialNumber: syz [ 1018.901856][T27100] usb 4-1: config 0 descriptor?? [ 1019.018549][ T8904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1019.240392][ T5913] mcp2221 0003:04D8:00DD.0093: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1019.336038][T27100] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 1019.679132][ T5913] usb 3-1: USB disconnect, device number 96 [ 1019.737662][T27100] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 1019.754071][T27100] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 1019.774802][T27100] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1019.807802][T27100] usb 4-1: USB disconnect, device number 122 [ 1020.898594][ T8946] ipvlan3: entered promiscuous mode [ 1021.202220][T27103] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1021.395258][T27103] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1021.434262][T27103] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.442422][T27103] usb 3-1: Product: syz [ 1021.488913][T27103] usb 3-1: Manufacturer: syz [ 1021.493604][T27103] usb 3-1: SerialNumber: syz [ 1021.528555][T27103] usb 3-1: config 0 descriptor?? [ 1021.556680][T27103] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1021.864127][T27100] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1022.024076][T27100] usb 4-1: Using ep0 maxpacket: 8 [ 1022.031371][T27100] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.064111][T27100] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1022.090579][T27100] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.113940][T27100] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1022.150393][T27100] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1022.197284][T27100] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.212515][T27100] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1022.234313][T27100] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.252288][T27100] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1022.277541][T27100] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1022.306080][T27100] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1022.325010][T27100] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1022.345972][ T8987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16700'. [ 1022.355410][T27100] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1022.377328][T27100] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1022.390876][T27103] gspca_sunplus: reg_r err -71 [ 1022.400399][T27103] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1022.423623][T27103] usb 3-1: USB disconnect, device number 97 [ 1022.451679][T27100] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1022.542555][T27100] usb 4-1: string descriptor 0 read error: -22 [ 1022.558155][T27100] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1022.574599][T27100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.609812][T27100] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1022.806251][T27103] usb 4-1: USB disconnect, device number 123 [ 1023.025485][ T8968] adutux: No device or device unplugged -19 [ 1023.330109][ T9012] cgroup: fork rejected by pids controller in /syz4 [ 1025.016763][ T60] bridge_slave_1: left allmulticast mode [ 1025.025878][ T60] bridge_slave_1: left promiscuous mode [ 1025.034470][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.099039][ T60] bridge_slave_0: left allmulticast mode [ 1025.140401][ T60] bridge_slave_0: left promiscuous mode [ 1025.157775][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.282315][ T9088] netlink: 'syz.3.16743': attribute type 1 has an invalid length. [ 1026.619977][ T60] dvmrp0 (unregistering): left allmulticast mode [ 1026.729864][ T9100] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1026.743394][ T9100] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1026.754383][ T9100] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1026.765968][ T9100] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1026.776194][ T9100] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1027.342812][T27103] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1027.472658][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.484955][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.493982][T27103] usb 4-1: Using ep0 maxpacket: 32 [ 1027.500748][ T60] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1027.511055][T27103] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1027.523122][T27103] usb 4-1: config 0 has no interface number 0 [ 1027.533024][T27103] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1027.533674][ T60] bond0 (unregistering): Released all slaves [ 1027.542736][T27103] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.557086][T27103] usb 4-1: Product: syz [ 1027.561290][T27103] usb 4-1: Manufacturer: syz [ 1027.566367][T27103] usb 4-1: SerialNumber: syz [ 1027.570483][ T60] bond1 (unregistering): Released all slaves [ 1027.585012][T27103] usb 4-1: config 0 descriptor?? [ 1027.600597][T27103] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1027.604975][ T60] bond2 (unregistering): Released all slaves [ 1027.631271][ T60] bond3 (unregistering): Released all slaves [ 1027.778958][ T60] bond4 (unregistering): Released all slaves [ 1027.915337][ T60] bond5 (unregistering): Released all slaves [ 1027.933138][ T60] bond6 (unregistering): Released all slaves [ 1027.949764][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16740'. [ 1028.091579][ T60] tipc: Disabling bearer [ 1028.114291][ T60] tipc: Left network mode [ 1028.183523][T27103] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1028.236835][T27103] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1028.240479][ T60] IPVS: stopping backup sync thread 27977 ... [ 1028.378092][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16757'. [ 1028.388764][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1028.390121][ T6712] usb 4-1: USB disconnect, device number 124 [ 1028.439093][ T6712] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1028.549366][ T6712] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1028.598002][ T6712] quatech2 4-1:0.51: device disconnected [ 1028.883946][T27299] Bluetooth: hci4: command tx timeout [ 1029.523267][ T9104] chnl_net:caif_netlink_parms(): no params data found [ 1029.896233][ T9185] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16773'. [ 1030.419651][ T60] hsr_slave_0: left promiscuous mode [ 1030.444007][ T60] hsr_slave_1: left promiscuous mode [ 1030.459238][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1030.472286][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1030.490878][ T60] veth1_macvtap: left allmulticast mode [ 1030.813466][ T9218] openvswitch: netlink: Message has 4 unknown bytes. [ 1030.820669][ T9218] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1030.850442][ T60] team0 (unregistering): Port device macvlan0 removed [ 1030.975119][T27299] Bluetooth: hci4: command tx timeout [ 1031.620572][ T60] team0 (unregistering): Port device team_slave_1 removed [ 1031.633527][ T9241] vivid-001: ================= START STATUS ================= [ 1031.658447][ T9241] vivid-001: Radio HW Seek Mode: Bounded [ 1031.666789][ T9241] vivid-001: Radio Programmable HW Seek: false [ 1031.673158][ T9241] vivid-001: RDS Rx I/O Mode: Block I/O [ 1031.679678][ T9241] vivid-001: Generate RBDS Instead of RDS: false [ 1031.687540][ T9241] vivid-001: RDS Reception: true [ 1031.692633][ T9241] vivid-001: RDS Program Type: 0 inactive [ 1031.700931][ T9241] vivid-001: RDS PS Name: inactive [ 1031.706560][ T9241] vivid-001: RDS Radio Text: inactive [ 1031.712428][ T9241] vivid-001: RDS Traffic Announcement: false inactive [ 1031.721608][ T9241] vivid-001: RDS Traffic Program: false inactive [ 1031.728655][ T9241] vivid-001: RDS Music: false inactive [ 1031.734614][ T9241] vivid-001: ================== END STATUS ================== [ 1031.744416][ T60] team0 (unregistering): Port device C removed [ 1032.284061][ T9104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.291264][ T9104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.318791][ T9104] bridge_slave_0: entered allmulticast mode [ 1032.345370][ T9104] bridge_slave_0: entered promiscuous mode [ 1032.371040][ T9104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.386269][ T9104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.393582][ T9104] bridge_slave_1: entered allmulticast mode [ 1032.401954][ T9104] bridge_slave_1: entered promiscuous mode [ 1032.543323][ T9104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.573329][ T9104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1032.756292][ T9104] team0: Port device team_slave_0 added [ 1032.833040][ T9104] team0: Port device team_slave_1 added [ 1032.982134][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1032.990013][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.048915][T27299] Bluetooth: hci4: command tx timeout [ 1033.051002][ T9104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1033.087783][ T9104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1033.113959][ T9104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1033.141180][ T9104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1033.157649][ T60] IPVS: stop unused estimator thread 0... [ 1033.282237][ T9104] hsr_slave_0: entered promiscuous mode [ 1033.327019][ T9104] hsr_slave_1: entered promiscuous mode [ 1033.333601][ T9104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1033.351328][ T9104] Cannot create hsr debugfs directory [ 1033.426052][ T9289] binder: 9288:9289 ioctl c0306201 200000000100 returned -14 [ 1033.526166][ T6712] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1033.725859][ T6712] usb 3-1: Using ep0 maxpacket: 16 [ 1033.735905][ T6712] usb 3-1: config 0 has no interfaces? [ 1033.753012][ T6712] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1033.763783][ T6712] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1033.772039][ T6712] usb 3-1: Manufacturer: syz [ 1033.795088][ T6712] usb 3-1: config 0 descriptor?? [ 1033.803197][ T9300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16817'. [ 1034.139871][ T6712] usb 3-1: USB disconnect, device number 98 [ 1034.171322][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1034.544432][ T9310] netlink: 'syz.1.16821': attribute type 1 has an invalid length. [ 1034.606145][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16821'. [ 1035.035682][ T9315] @: renamed from vlan0 [ 1035.083399][ C0] syz_tun: tun_net_xmit 58 [ 1035.133953][T27299] Bluetooth: hci4: command tx timeout [ 1035.404285][ C1] syz_tun: tun_net_xmit 58 [ 1035.513956][T27103] usb 4-1: new low-speed USB device number 125 using dummy_hcd [ 1035.687135][T27103] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.705168][T27103] usb 4-1: config 0 has no interface number 0 [ 1035.723228][ T9104] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1035.732500][T27103] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1035.768501][ T9104] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1035.769855][T27103] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1035.813921][T27103] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1035.816646][ T9104] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1035.834026][T27103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.864745][T27103] usb 4-1: config 0 descriptor?? [ 1035.874262][ T9338] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1035.887900][ T9104] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1035.902982][T27103] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1035.934353][ C1] syz_tun: tun_net_xmit 58 [ 1036.140624][T27103] usb 4-1: USB disconnect, device number 125 [ 1036.146800][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1036.180421][ T9104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.252961][ T9104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1036.308590][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.315848][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1036.377430][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.384717][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1036.626657][ T9104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.711002][ T9104] veth0_vlan: entered promiscuous mode [ 1036.744042][T27100] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1036.761639][ T9104] veth1_vlan: entered promiscuous mode [ 1036.865936][ T9104] veth0_macvtap: entered promiscuous mode [ 1036.912483][ T9104] veth1_macvtap: entered promiscuous mode [ 1036.925833][T27100] usb 3-1: Using ep0 maxpacket: 32 [ 1036.944406][T27100] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1036.972927][T27100] usb 3-1: config 0 has no interface number 0 [ 1036.982603][ T9401] pim6reg: tun_chr_ioctl cmd 35108 [ 1036.991991][T27100] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1037.005954][T27100] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.022852][T27100] usb 3-1: Product: syz [ 1037.035335][T27100] usb 3-1: Manufacturer: syz [ 1037.040058][T27100] usb 3-1: SerialNumber: syz [ 1037.049014][T27100] usb 3-1: config 0 descriptor?? [ 1037.079188][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1037.091945][T27100] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1037.140001][ T9104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1037.185687][ T9104] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.201493][ T9104] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.221861][ T9104] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.230971][ T9104] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1037.254627][T27103] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1037.286961][ T9413] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16853'. [ 1037.293370][T27100] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1037.300471][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16853'. [ 1037.333423][T27100] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1037.464911][T27103] usb 4-1: Using ep0 maxpacket: 8 [ 1037.501302][T27103] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1037.533505][T27103] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1037.560961][ T9386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.584879][T27103] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1037.611074][ T9386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.636974][T27103] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1037.657916][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1037.670518][T27990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.680263][T27103] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1037.691678][T27103] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1037.706302][T27103] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1037.715789][T27103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.725147][T27990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.837008][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.859323][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1037.875081][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.892472][ T6712] usb 3-1: USB disconnect, device number 99 [ 1037.920237][ T6712] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1037.980888][T27103] usb 4-1: GET_CAPABILITIES returned 0 [ 1037.990575][ T6712] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1037.997007][T27103] usbtmc 4-1:16.0: can't read capabilities [ 1038.050052][ T6712] quatech2 3-1:0.51: device disconnected [ 1038.186563][T27103] usb 4-1: USB disconnect, device number 126 [ 1038.580977][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16862'. [ 1039.087248][ T9465] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x32314142, 4, 0, 0, 0) [ 1040.355791][ T9504] delete_channel: no stack [ 1040.633911][T27103] usb 5-1: new full-speed USB device number 116 using dummy_hcd [ 1040.819289][T27103] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.833902][T27103] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1040.842865][T27103] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1040.893951][T27103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.914828][T27103] usb 5-1: config 0 descriptor?? [ 1040.931141][T27103] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1040.954759][T27103] dvb-usb: bulk message failed: -22 (3/0) [ 1040.965086][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16890'. [ 1040.972858][T27103] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1041.028953][T27103] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1041.047182][T27103] usb 5-1: media controller created [ 1041.062964][T27103] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1041.099185][T27103] dvb-usb: bulk message failed: -22 (6/0) [ 1041.132077][ T30] audit: type=1326 audit(1750016896.136:10928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9538 comm="syz.3.16893" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7fa918e929 code=0x0 [ 1041.138132][T27103] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1041.194542][T27103] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input141 [ 1041.241312][T27103] dvb-usb: schedule remote query interval to 150 msecs. [ 1041.267357][T27103] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1041.309591][T27103] usb 5-1: USB disconnect, device number 116 [ 1041.401775][T27103] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1041.635087][ T9553] kvm: user requested TSC rate below hardware speed [ 1041.844613][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1042.185046][ T9572] netlink: 'syz.3.16903': attribute type 10 has an invalid length. [ 1042.227842][ T9572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.259656][ T9572] bond0: (slave team0): Enslaving as an active interface with an up link [ 1042.622388][ T9592] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1043.189750][ T9611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16915'. [ 1043.643027][ T9633] ipvlan2: entered promiscuous mode [ 1043.682276][ T9633] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1043.717982][ T9633] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1044.373899][T27533] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1044.554704][T27533] usb 4-1: Using ep0 maxpacket: 8 [ 1044.561753][T27533] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1044.577979][T27533] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1044.609046][T27533] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1044.630173][T27533] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1044.653623][T27533] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1044.713988][T27533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.954748][T27533] usb 4-1: GET_CAPABILITIES returned 0 [ 1044.960365][T27533] usbtmc 4-1:16.0: can't read capabilities [ 1045.166945][T27533] usb 4-1: USB disconnect, device number 127 [ 1045.519946][ T9689] input: syz0 as /devices/virtual/input/input142 [ 1045.876906][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16951'. [ 1045.924844][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16951'. [ 1046.114200][T27101] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1046.293983][T27101] usb 4-1: Using ep0 maxpacket: 16 [ 1046.316240][T27101] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.344191][T27101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1046.380522][T27101] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1046.403920][T27101] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1046.427318][ T9713] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1046.436123][T27101] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1046.449500][ T9713] macvtap1: entered allmulticast mode [ 1046.461270][T27101] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1046.471851][T27101] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1046.473635][ T9713] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1046.498899][T27101] usb 4-1: Manufacturer: syz [ 1046.528751][T27101] usb 4-1: config 0 descriptor?? [ 1046.536987][ T9713] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1046.548493][ T9713] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1046.884211][T27101] rc_core: IR keymap rc-hauppauge not found [ 1046.914823][T27101] Registered IR keymap rc-empty [ 1046.919876][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1046.955116][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.014114][T27101] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1047.071445][T27101] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input143 [ 1047.130279][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.164073][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.185240][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.214027][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.264209][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.304262][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.334088][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.364813][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.414124][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.454509][T27101] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1047.489401][T27101] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1047.507402][T27101] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1047.540626][T27101] usb 4-1: USB disconnect, device number 2 [ 1047.592647][ T9739] syz_tun: tun_net_xmit 58 [ 1048.033933][ T6712] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1048.196631][ T6712] usb 5-1: Using ep0 maxpacket: 16 [ 1048.215406][ T6712] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.227296][ T6712] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1048.236557][ T6712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.249347][ T9756] C: renamed from team_slave_0 [ 1048.250146][ T6712] usb 5-1: config 0 descriptor?? [ 1048.273545][ T9756] netlink: 'syz.1.16976': attribute type 4 has an invalid length. [ 1048.283268][ T9756] netlink: 152 bytes leftover after parsing attributes in process `syz.1.16976'. [ 1048.292697][ T9756] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1048.703057][ T6712] mcp2221 0003:04D8:00DD.0094: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1048.743975][T27101] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1048.944029][T27101] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.963162][T27101] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1048.981868][T27101] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1049.008906][T27101] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1049.019755][T27101] usb 3-1: SerialNumber: syz [ 1049.098352][ T6712] usb 5-1: USB disconnect, device number 117 [ 1049.254381][T27101] usb 3-1: 0:2 : does not exist [ 1049.302817][T27101] usb 3-1: USB disconnect, device number 100 [ 1049.345109][ T9778] usb usb8: usbfs: process 9778 (syz.3.16986) did not claim interface 0 before use [ 1049.351161][T26881] udevd[26881]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1049.907524][ T6712] hid-generic 0000:0003:0000.0095: unknown main item tag 0x0 [ 1049.932015][ T6712] hid-generic 0000:0003:0000.0095: unknown main item tag 0x0 [ 1049.976045][T27101] usb 5-1: new full-speed USB device number 118 using dummy_hcd [ 1049.982618][ T6712] hid-generic 0000:0003:0000.0095: hidraw0: HID v4000.00 Device [syz0] on syz1 [ 1050.054064][T27100] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1050.132142][ T9812] fido_id[9812]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1050.167802][T27101] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1050.184523][T27101] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.215492][T27101] usb 5-1: config 0 descriptor?? [ 1050.235128][T27100] usb 4-1: Using ep0 maxpacket: 16 [ 1050.242887][T27101] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1050.262859][T27100] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1050.280935][T27100] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1050.291639][T27100] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.300764][T27100] usb 4-1: Product: syz [ 1050.305470][T27100] usb 4-1: Manufacturer: syz [ 1050.310202][T27100] usb 4-1: SerialNumber: syz [ 1050.340147][T27100] usb 4-1: config 0 descriptor?? [ 1050.346302][T27100] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 1050.347672][T27100] usb 4-1: Detected FT232R [ 1050.554182][T27100] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1050.566210][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1050.746801][ T9837] openvswitch: netlink: Multiple metadata blocks provided [ 1050.792742][T27100] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1050.851921][T27101] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1050.883382][T27101] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1050.993047][T27533] usb 4-1: USB disconnect, device number 3 [ 1051.041288][T27533] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1051.065142][T27101] usb 5-1: USB disconnect, device number 118 [ 1051.126333][T27533] ftdi_sio 4-1:0.0: device disconnected [ 1051.649059][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17023'. [ 1051.671503][ T9860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17023'. [ 1052.341258][ T9886] program syz.2.17036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1053.060313][ T9912] netlink: 'syz.1.17045': attribute type 2 has an invalid length. [ 1053.073038][ T9921] C: renamed from team_slave_0 [ 1053.082816][ T9912] netlink: 'syz.1.17045': attribute type 1 has an invalid length. [ 1053.098190][ T9912] netlink: 152 bytes leftover after parsing attributes in process `syz.1.17045'. [ 1053.125158][ T9921] netlink: 'syz.2.17050': attribute type 8 has an invalid length. [ 1053.144046][ T9921] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1053.339911][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17053'. [ 1053.359492][ T9928] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 1053.378033][ T9928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1053.718619][ T9946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1053.880380][ T9952] netlink: 'syz.4.17060': attribute type 3 has an invalid length. [ 1053.899566][ T9952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17060'. [ 1054.128550][ T30] audit: type=1326 audit(1750016909.136:10929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9961 comm="syz.1.17068" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f751098e929 code=0x0 [ 1054.410424][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.416988][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.467385][ T9972] bridge0: entered promiscuous mode [ 1054.474190][ T9972] macvlan2: entered promiscuous mode [ 1054.776790][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17078'. [ 1054.801399][ T9984] vlan2: entered promiscuous mode [ 1054.812989][ T9984] batadv0: entered promiscuous mode [ 1054.821910][ T9984] vlan2: entered allmulticast mode [ 1054.831083][ T9984] batadv0: entered allmulticast mode [ 1055.495999][T27101] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1055.633996][T10019] loop6: detected capacity change from 0 to 524287999 [ 1055.651441][T10019] Buffer I/O error on dev loop6, logical block 0, async page read [ 1055.664030][T27101] usb 2-1: Using ep0 maxpacket: 16 [ 1055.675026][T10019] Buffer I/O error on dev loop6, logical block 0, async page read [ 1055.684584][T27101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1055.704974][T10019] Buffer I/O error on dev loop6, logical block 0, async page read [ 1055.716037][T27101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.753374][T27101] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1055.763097][T10019] Buffer I/O error on dev loop6, logical block 0, async page read [ 1055.780350][T27101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.805535][T27101] usb 2-1: config 0 descriptor?? [ 1055.811982][T10019] Buffer I/O error on dev loop6, logical block 0, async page read [ 1055.855100][T10019] Buffer I/O error on dev loop6, logical block 0, async page read [ 1055.868133][T10019] Buffer I/O error on dev loop6, logical block 0, async page read [ 1055.877403][T10019] Buffer I/O error on dev loop6, logical block 0, async page read [ 1055.897375][T10019] ldm_validate_partition_table(): Disk read failed. [ 1055.905673][T10019] Buffer I/O error on dev loop6, logical block 0, async page read [ 1055.913696][T10019] Buffer I/O error on dev loop6, logical block 0, async page read [ 1055.922712][T10019] Dev loop6: unable to read RDB block 0 [ 1055.929764][T10019] loop6: unable to read partition table [ 1055.953981][T10019] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 1056.141982][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17097'. [ 1056.261536][T27101] hid-multitouch 0003:1FD2:6007.0096: unknown main item tag 0x0 [ 1056.281469][T27101] hid-multitouch 0003:1FD2:6007.0096: unknown main item tag 0x0 [ 1056.291504][T27101] hid-multitouch 0003:1FD2:6007.0096: unknown main item tag 0x0 [ 1056.299583][T27101] hid-multitouch 0003:1FD2:6007.0096: unknown main item tag 0x0 [ 1056.312643][T27101] hid-multitouch 0003:1FD2:6007.0096: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1056.404706][T27100] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1056.455307][T27101] usb 2-1: USB disconnect, device number 110 [ 1056.494583][ T6712] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1056.564170][T27100] usb 4-1: Using ep0 maxpacket: 8 [ 1056.571604][T27100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.585820][T27100] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1056.599587][T27100] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1056.623994][T27100] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.654697][T27100] usb 4-1: config 0 descriptor?? [ 1056.666995][ T6712] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1056.682006][ T6712] usb 3-1: config 0 has no interface number 0 [ 1056.689943][ T6712] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1056.707302][ T6712] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1056.722625][ T6712] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1056.744243][ T6712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.766756][ T6712] usb 3-1: config 0 descriptor?? [ 1056.772568][T10033] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1056.799931][ T6712] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1056.873258][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.895172][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.920782][T27299] Bluetooth: hci1: Unknown advertising packet type: 0x75 [ 1056.920874][T27299] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1056.945447][T27100] usbhid 4-1:0.0: can't add hid device: -71 [ 1056.951508][T27100] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1056.985375][T27100] usb 4-1: USB disconnect, device number 4 [ 1057.057581][ T6712] usb 3-1: USB disconnect, device number 101 [ 1057.376887][T10065] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.385846][T10065] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.395323][T10065] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.404156][T10065] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1057.618972][T10075] netlink: 104 bytes leftover after parsing attributes in process `syz.4.17119'. [ 1057.731693][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17120'. [ 1059.039915][T10133] pim6reg: entered allmulticast mode [ 1059.200030][T10141] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17147'. [ 1059.211017][T10140] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17146'. [ 1059.220206][T10141] netlink: 'syz.2.17147': attribute type 6 has an invalid length. [ 1059.220264][T10141] netlink: 'syz.2.17147': attribute type 5 has an invalid length. [ 1059.220280][T10141] netlink: 'syz.2.17147': attribute type 4 has an invalid length. [ 1059.328628][T10140] netem: unknown loss type 13 [ 1059.334833][T10140] netem: change failed [ 1060.149402][T10190] sctp: [Deprecated]: syz.1.17172 (pid 10190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1060.149402][T10190] Use struct sctp_sack_info instead [ 1060.183956][ T5913] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1060.214343][T27100] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1060.348812][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 1060.371374][ T5913] usb 3-1: config 0 has an invalid interface number: 17 but max is 0 [ 1060.376931][T27100] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1060.382177][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.405576][T27100] usb 5-1: config 0 has no interface number 0 [ 1060.414414][ T5913] usb 3-1: config 0 has no interface number 0 [ 1060.423106][T27100] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1060.429984][ T5913] usb 3-1: New USB device found, idVendor=0408, idProduct=4034, bcdDevice=dd.cd [ 1060.439730][T27100] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.450621][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.451639][T27100] usb 5-1: Product: syz [ 1060.468729][T27100] usb 5-1: Manufacturer: syz [ 1060.469505][ T5913] usb 3-1: Product: syz [ 1060.475008][T27100] usb 5-1: SerialNumber: syz [ 1060.488517][ T5913] usb 3-1: Manufacturer: syz [ 1060.510055][T27100] usb 5-1: config 0 descriptor?? [ 1060.513894][ T5913] usb 3-1: SerialNumber: syz [ 1060.565032][ T5913] usb 3-1: config 0 descriptor?? [ 1060.731461][T27100] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1060.756630][T27100] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1060.778147][T27100] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1060.778325][ T5913] usb 3-1: Found UVC 0.00 device syz (0408:4034) [ 1060.789365][T27100] usb 5-1: media controller created [ 1060.794535][ T5913] usb 3-1: No valid video chain found. [ 1060.831413][T27100] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1060.945020][T27100] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1060.964385][ T9809] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1061.026889][T27101] usb 3-1: USB disconnect, device number 102 [ 1061.091262][T27100] usb 5-1: USB disconnect, device number 119 [ 1061.124876][ T9809] usb 4-1: Using ep0 maxpacket: 8 [ 1061.139973][ T9809] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1061.160031][ T9809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1061.172856][ T9809] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1061.245003][ T9809] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1061.292483][ T9809] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1061.322578][ T9809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.592585][ T9809] usb 4-1: GET_CAPABILITIES returned 0 [ 1061.604068][ T9809] usbtmc 4-1:16.0: can't read capabilities [ 1061.817548][T27101] usb 4-1: USB disconnect, device number 5 [ 1065.240908][T10310] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 1065.285043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 1065.352593][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1065.361773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1065.583921][ T6712] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1065.774086][ T6712] usb 5-1: Using ep0 maxpacket: 32 [ 1065.780784][ T6712] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1065.791506][ T6712] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1065.816688][ T6712] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1065.883676][ T6712] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1065.916673][ T6712] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1065.954618][ T6712] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1065.963746][ T6712] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1065.975314][ T6712] usb 5-1: Product: syz [ 1065.979544][ T6712] usb 5-1: Manufacturer: syz [ 1065.987431][ T6712] usb 5-1: SerialNumber: syz [ 1066.012368][ T6712] usb 5-1: config 0 descriptor?? [ 1066.036268][ T6712] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1066.056745][ T6712] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1066.283043][T27101] usb 5-1: USB disconnect, device number 120 [ 1066.303652][T27101] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1066.424172][ T9809] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1066.574384][ T9809] usb 2-1: Using ep0 maxpacket: 8 [ 1066.582637][ T9809] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1066.642879][ T9809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1066.673891][ T9809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1066.693995][ T9809] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.724277][ T9809] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1066.733673][ T9809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.853705][T10350] netlink: 'syz.2.17240': attribute type 8 has an invalid length. [ 1066.874247][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17240'. [ 1067.005782][ T9809] usb 2-1: GET_CAPABILITIES returned 0 [ 1067.030545][ T9809] usbtmc 2-1:16.0: can't read capabilities [ 1067.079059][T10350] bridge0: port 3(dummy0) entered disabled state [ 1067.100698][T10350] bridge0: entered allmulticast mode [ 1067.215993][ T6712] usb 2-1: USB disconnect, device number 111 [ 1067.334593][T27533] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1067.344918][T10363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17244'. [ 1067.464923][T10367] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17248'. [ 1067.503990][T27533] usb 4-1: Using ep0 maxpacket: 32 [ 1067.515861][T27533] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1067.543854][T27533] usb 4-1: config 0 has no interface number 0 [ 1067.565943][T27533] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1067.581871][T27533] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.611224][T27533] usb 4-1: Product: syz [ 1067.628094][T27533] usb 4-1: Manufacturer: syz [ 1067.632783][T27533] usb 4-1: SerialNumber: syz [ 1067.656518][T27533] usb 4-1: config 0 descriptor?? [ 1067.669733][T27533] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1067.844932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1067.914807][T27533] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1067.964657][T27533] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1067.978331][T10389] misc userio: Can't change port type on an already running userio instance [ 1068.137084][T10357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.169950][T10357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.400906][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1068.407011][ T9809] usb 4-1: USB disconnect, device number 6 [ 1068.427558][T27100] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1068.442982][ T9809] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1068.485663][ T9809] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1068.499280][ T9809] quatech2 4-1:0.51: device disconnected [ 1068.614065][T27100] usb 2-1: Using ep0 maxpacket: 16 [ 1068.621824][T27100] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 1068.639057][T27100] usb 2-1: config 0 has no interface number 0 [ 1068.652457][T27100] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1068.669513][T27100] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1068.679813][T27100] usb 2-1: config 0 interface 41 has no altsetting 0 [ 1068.735848][T27100] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1068.764148][T27100] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.772213][T27100] usb 2-1: Product: syz [ 1068.807690][T27100] usb 2-1: Manufacturer: syz [ 1068.812370][T27100] usb 2-1: SerialNumber: syz [ 1068.843301][T27100] usb 2-1: config 0 descriptor?? [ 1068.849970][T10395] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1068.877986][T10395] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1068.910193][ T30] audit: type=1326 audit(1750016923.916:10930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10417 comm="syz.0.17272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2a7b78e929 code=0x0 [ 1069.106179][T10395] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1069.135622][T10395] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1069.319423][ T30] audit: type=1326 audit(1750016924.326:10931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.3.17279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1069.351347][ T30] audit: type=1326 audit(1750016924.326:10932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.3.17279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1069.382703][ T30] audit: type=1326 audit(1750016924.326:10933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.3.17279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1069.412558][ T30] audit: type=1326 audit(1750016924.326:10934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.3.17279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1069.452374][ T30] audit: type=1326 audit(1750016924.326:10935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.3.17279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1069.509605][ T30] audit: type=1326 audit(1750016924.326:10936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.3.17279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1069.550040][ T30] audit: type=1326 audit(1750016924.326:10937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10434 comm="syz.3.17279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1069.606960][T27100] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1069.825364][T27100] dm9601 2-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 1069.853572][T27100] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 1069.897593][T27100] usb 2-1: USB disconnect, device number 112 [ 1070.532363][T10469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1071.164919][ T6712] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1071.364023][ T6712] usb 2-1: Using ep0 maxpacket: 16 [ 1071.372766][ T6712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.392795][ T6712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1071.433276][ T6712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1071.446953][ T6712] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1071.462167][ T6712] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1071.482656][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17304'. [ 1071.500855][ T6712] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1071.511298][ T6712] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1071.520398][ T6712] usb 2-1: Manufacturer: syz [ 1071.529233][ T6712] usb 2-1: config 0 descriptor?? [ 1071.826038][ T6712] rc_core: IR keymap rc-hauppauge not found [ 1071.834552][ T6712] Registered IR keymap rc-empty [ 1071.839677][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1071.864667][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1071.885469][ T6712] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1071.904074][ T6712] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input146 [ 1071.934364][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1071.944934][ C1] mceusb 2-1:0.0: long-range (0x14) receiver active [ 1071.955141][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1071.974288][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1072.001234][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1072.044342][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1072.074542][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1072.115431][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1072.144954][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1072.164194][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1072.184925][ T6712] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1072.209467][ T6712] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1072.229299][ T6712] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x14 active) [ 1072.246600][ T6712] usb 2-1: USB disconnect, device number 113 [ 1072.385931][T10523] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1072.396316][T10523] bond0: (slave bond4): Enslaving as an active interface with a down link [ 1073.204717][T27533] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1073.284181][ T9809] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1073.375161][T27533] usb 4-1: Using ep0 maxpacket: 16 [ 1073.386592][T27533] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1073.412522][T27533] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1073.422983][T27533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.435216][ T9809] usb 2-1: Using ep0 maxpacket: 8 [ 1073.447099][T27533] usb 4-1: config 0 descriptor?? [ 1073.449613][ T9809] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1073.480337][T27533] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input147 [ 1073.480847][ T9809] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1073.507969][ T9809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1073.544872][ T9809] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1073.558756][ T9809] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1073.602561][ T9809] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1073.619225][ T9809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.673704][ T5193] bcm5974 4-1:0.0: could not read from device [ 1073.691720][ T5193] bcm5974 4-1:0.0: could not read from device [ 1073.702593][T27533] bcm5974 4-1:0.0: could not read from device [ 1073.718085][ T5193] bcm5974 4-1:0.0: could not read from device [ 1073.739805][T27533] input: failed to attach handler mousedev to device input147, error: -5 [ 1073.776198][ T5193] bcm5974 4-1:0.0: could not read from device [ 1073.785365][T27533] usb 4-1: USB disconnect, device number 7 [ 1073.855446][ T9809] usb 2-1: GET_CAPABILITIES returned 0 [ 1073.861366][ T9809] usbtmc 2-1:16.0: can't read capabilities [ 1074.112227][ T9809] usb 2-1: USB disconnect, device number 114 [ 1074.507481][T10589] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1074.537381][T10589] bond0: (slave bond1): Enslaving as an active interface with an up link [ 1075.766467][T10641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17368'. [ 1076.083345][T10657] loop6: detected capacity change from 0 to 524288000 [ 1077.322367][T10703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.844060][T27533] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1079.016779][T27533] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 1079.036457][T27533] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.049012][T27533] usb 3-1: config 0 descriptor?? [ 1079.065604][T27533] gspca_main: spca508-2.14.0 probing 8086:0110 [ 1079.265308][T27533] gspca_spca508: reg_read err -32 [ 1079.280016][T27533] gspca_spca508: reg_read err -32 [ 1079.385015][T10773] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1079.493744][T27533] gspca_spca508: reg_read err -71 [ 1079.512258][T27533] gspca_spca508: reg_read err -71 [ 1079.518464][T27533] gspca_spca508: reg write: error -71 [ 1079.525116][T27533] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 1079.547387][T27533] usb 3-1: USB disconnect, device number 103 [ 1080.122989][T10801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17435'. [ 1080.480495][T10819] gretap0: entered promiscuous mode [ 1080.489406][T10819] vlan3: entered promiscuous mode [ 1081.249296][T10840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17453'. [ 1082.561898][T10886] netlink: 277 bytes leftover after parsing attributes in process `syz.3.17473'. [ 1083.024404][T10907] QAT: Invalid ioctl 1075883590 [ 1083.029504][T10907] QAT: Invalid ioctl 1075883590 [ 1083.044543][T10907] QAT: Invalid ioctl 1075883590 [ 1083.050003][T10907] QAT: Invalid ioctl 1075883590 [ 1083.064679][T10907] QAT: Invalid ioctl 1075883590 [ 1083.069974][T10907] QAT: Invalid ioctl 1075883590 [ 1083.084165][T10907] QAT: Invalid ioctl 1075883590 [ 1083.091407][T10907] QAT: Invalid ioctl 1075883590 [ 1083.102954][T10907] QAT: Invalid ioctl 1075883590 [ 1083.119816][T10907] QAT: Invalid ioctl 1075883590 [ 1083.224080][ T6712] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1083.416334][ T6712] usb 2-1: Using ep0 maxpacket: 8 [ 1083.432736][ T6712] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1083.467603][ T6712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.491135][ T6712] usb 2-1: config 0 descriptor?? [ 1083.734039][ T6712] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1084.334748][ T6712] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1084.364025][ T6712] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1084.404150][ T6712] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1084.433876][ T6712] usb 2-1: USB disconnect, device number 115 [ 1085.343985][ T5913] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1085.514606][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 1085.572429][ T5913] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1085.596555][ T5913] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1085.623954][ T5913] usb 4-1: can't read configurations, error -71 [ 1087.169281][T11006] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1087.432115][T11012] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1087.454121][T11012] syzkaller1: linktype set to 6 [ 1088.646876][T11045] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17535'. [ 1089.005504][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17542'. [ 1089.114706][T27533] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1089.314248][T27533] usb 4-1: Using ep0 maxpacket: 8 [ 1089.337996][T27533] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1089.351231][T27533] usb 4-1: config 179 has no interface number 0 [ 1089.371141][T27533] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1089.393907][T27533] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1089.452285][T27533] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1089.464139][T27533] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1089.484947][T27533] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1089.503518][T27533] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1089.539341][T27533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.576758][T11053] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1089.594161][T11081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17552'. [ 1089.644124][T11081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17552'. [ 1089.669571][T11083] loop8: detected capacity change from 0 to 1 [ 1089.679790][T26881] Dev loop8: unable to read RDB block 1 [ 1089.687397][T26881] loop8: unable to read partition table [ 1089.693702][T26881] loop8: partition table beyond EOD, truncated [ 1089.701193][T11084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17552'. [ 1089.720194][T11083] Dev loop8: unable to read RDB block 1 [ 1089.730928][T11083] loop8: unable to read partition table [ 1089.737284][T11083] loop8: partition table beyond EOD, truncated [ 1089.743750][T11084] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17552'. [ 1089.754590][T11083] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 1089.890696][T27533] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input148 [ 1090.107141][T27101] usb 4-1: USB disconnect, device number 10 [ 1090.107253][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1090.121722][T27101] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1090.123885][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 1090.277934][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17559'. [ 1090.834728][T27101] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1090.871801][ T30] audit: type=1326 audit(1750016945.866:10938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.3.17572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1090.896219][ T30] audit: type=1326 audit(1750016945.866:10939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.3.17572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1090.919523][ T30] audit: type=1326 audit(1750016945.886:10940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.3.17572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1090.951798][ T30] audit: type=1326 audit(1750016945.886:10941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.3.17572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1090.979578][ T30] audit: type=1326 audit(1750016945.886:10942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.3.17572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1091.024025][T27101] usb 2-1: Using ep0 maxpacket: 32 [ 1091.028596][ T30] audit: type=1326 audit(1750016945.886:10943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.3.17572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1091.036134][T27101] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1091.052413][ T30] audit: type=1326 audit(1750016945.906:10944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.3.17572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1091.089619][T27101] usb 2-1: config 0 has no interface number 0 [ 1091.136906][T27101] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1091.151909][T27101] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.173059][T27101] usb 2-1: Product: syz [ 1091.183438][T27101] usb 2-1: Manufacturer: syz [ 1091.203630][T27101] usb 2-1: SerialNumber: syz [ 1091.214750][ T30] audit: type=1326 audit(1750016945.906:10945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.3.17572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1091.217195][T27101] usb 2-1: config 0 descriptor?? [ 1091.279995][ T30] audit: type=1326 audit(1750016945.906:10946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.3.17572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1091.307345][T27101] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1091.314493][ T30] audit: type=1326 audit(1750016945.906:10947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11122 comm="syz.3.17572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fa918e929 code=0x7ffc0000 [ 1091.335475][T27101] usb 2-1: selecting invalid altsetting 1 [ 1091.354151][T27101] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1091.375532][T27101] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1091.409340][T27101] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1091.418740][T27101] usb 2-1: media controller created [ 1091.474277][T27101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1091.487335][T11139] input: syz0 as /devices/virtual/input/input149 [ 1091.494600][ T5913] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1091.544640][T27101] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1091.560197][T27101] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1091.569124][T27101] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1091.641005][T27101] usb 2-1: USB disconnect, device number 116 [ 1091.664291][ T5913] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1091.681575][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.709669][ T5913] usb 3-1: config 0 descriptor?? [ 1091.752776][ T5913] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1092.133288][ T5913] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1092.350889][T11155] kvm: apic: phys broadcast and lowest prio [ 1092.549532][ T5913] gspca_cpia1: usb_control_msg 02, error -71 [ 1092.571936][ T5913] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1092.602114][ T5913] usb 3-1: USB disconnect, device number 104 [ 1093.167429][T11183] vivid-000: disconnect [ 1093.172343][T11182] vivid-000: reconnect [ 1093.289184][T11190] tap0: tun_chr_ioctl cmd 1074025677 [ 1093.295015][T11190] tap0: linktype set to 270 [ 1094.466752][T11230] netlink: 'syz.2.17619': attribute type 11 has an invalid length. [ 1095.554089][T27101] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1095.574018][ T9809] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1095.713994][T27101] usb 5-1: Using ep0 maxpacket: 32 [ 1095.722426][T27101] usb 5-1: config 0 has no interfaces? [ 1095.737848][T27101] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1095.747399][T27101] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.766395][ T9809] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 86, changing to 10 [ 1095.780377][T27101] usb 5-1: Product: syz [ 1095.785057][ T9809] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.800254][T27101] usb 5-1: Manufacturer: syz [ 1095.805114][T27101] usb 5-1: SerialNumber: syz [ 1095.811466][ T9809] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1095.825592][T27101] usb 5-1: config 0 descriptor?? [ 1095.832096][ T9809] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1095.834568][T27533] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1095.845669][ T9809] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1095.855428][ T9809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.884925][ T9809] usb 3-1: config 0 descriptor?? [ 1096.028323][T27533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1096.040704][T27533] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1096.054725][ T5913] usb 5-1: USB disconnect, device number 121 [ 1096.073613][T27533] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1096.085155][T27533] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.101029][T11258] netlink: 'syz.2.17629': attribute type 1 has an invalid length. [ 1096.113917][T11258] netlink: 7718 bytes leftover after parsing attributes in process `syz.2.17629'. [ 1096.135014][T27533] usb 4-1: config 0 descriptor?? [ 1096.163140][ T9809] usbhid 3-1:0.0: can't add hid device: -71 [ 1096.186223][ T9809] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1096.209376][ T9809] usb 3-1: USB disconnect, device number 105 [ 1096.953957][T27533] hid-led 0003:27B8:01ED.0097: probe with driver hid-led failed with error -71 [ 1096.968841][T27533] usb 4-1: USB disconnect, device number 11 [ 1097.854197][T27101] usb 3-1: new full-speed USB device number 106 using dummy_hcd [ 1098.046281][T27101] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 1098.069708][T27101] usb 3-1: config 7 has no interface number 0 [ 1098.102139][T27101] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1098.130339][T27101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.157962][T27101] usb 3-1: Product: syz [ 1098.170635][T27101] usb 3-1: Manufacturer: syz [ 1098.198469][T27101] usb 3-1: SerialNumber: syz [ 1098.209915][ T30] audit: type=1800 audit(1750016953.196:10948): pid=11328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.17660" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 1099.030318][T27101] as10x_usb: device has been detected [ 1099.051497][T27101] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1099.164852][T27101] usb 3-1: DVB: registering adapter 2 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1099.297956][T27101] as10x_usb: error during firmware upload part1 [ 1099.310867][T27101] Registered device Elgato EyeTV DTT Deluxe [ 1099.326373][T27101] usb 3-1: USB disconnect, device number 106 [ 1099.459800][T27101] Unregistered device Elgato EyeTV DTT Deluxe [ 1099.462966][T27101] as10x_usb: device has been disconnected [ 1099.776775][ T30] audit: type=1326 audit(1750016954.786:10949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11358 comm="syz.4.17674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbc5138e929 code=0x0 [ 1100.484999][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1100.944035][T27533] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1101.119483][T27533] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1101.139125][T27533] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1101.154992][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17695'. [ 1101.193215][T27533] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1101.228800][T11407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17695'. [ 1101.248431][T27533] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1101.286873][T27533] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1101.330122][T27533] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1101.373659][T27533] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1101.392513][T27533] usb 3-1: Product: syz [ 1101.398933][T27533] usb 3-1: Manufacturer: syz [ 1101.425046][T27533] cdc_wdm 3-1:1.0: skipping garbage [ 1101.430317][T27533] cdc_wdm 3-1:1.0: skipping garbage [ 1101.452077][T27533] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1101.465087][T27533] cdc_wdm 3-1:1.0: Unknown control protocol [ 1101.564495][ T5944] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1101.579550][T11421] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1101.724526][ T5944] usb 5-1: Using ep0 maxpacket: 16 [ 1101.742136][ T5944] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1101.758782][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.774315][ T5944] usb 5-1: Product: syz [ 1101.778714][ T5944] usb 5-1: Manufacturer: syz [ 1101.785048][ T5944] usb 5-1: SerialNumber: syz [ 1101.805916][ T5944] usb 5-1: config 0 descriptor?? [ 1101.818765][ T5944] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 1101.836761][ T5913] usb 3-1: USB disconnect, device number 107 [ 1102.018124][ T5944] usb 5-1: USB disconnect, device number 122 [ 1102.233115][T11437] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17708'. [ 1103.058400][T11463] sctp: [Deprecated]: syz.1.17720 (pid 11463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1103.058400][T11463] Use struct sctp_sack_info instead [ 1103.429684][T11482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17728'. [ 1103.439259][T11480] netlink: 104 bytes leftover after parsing attributes in process `syz.1.17727'. [ 1104.989815][T11528] netlink: 'syz.3.17749': attribute type 10 has an invalid length. [ 1105.009747][T11528] macvlan0: entered allmulticast mode [ 1105.024346][T11528] veth1_vlan: entered allmulticast mode [ 1105.049667][T11528] team0: Port device macvlan0 added [ 1105.067540][T11530] netlink: 'syz.4.17750': attribute type 25 has an invalid length. [ 1105.094073][T11530] netlink: 'syz.4.17750': attribute type 7 has an invalid length. [ 1105.117314][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17751'. [ 1105.442211][T11543] input: syz1 as /devices/virtual/input/input150 [ 1105.572798][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17758'. [ 1105.593929][T27101] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1105.719662][T27100] IPVS: starting estimator thread 0... [ 1105.767066][T27101] usb 3-1: Using ep0 maxpacket: 32 [ 1105.776003][T27101] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1105.795509][T27101] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1105.805743][T27101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.814018][T11555] IPVS: using max 26 ests per chain, 62400 per kthread [ 1105.831266][T27101] usb 3-1: Product: syz [ 1105.836129][T27101] usb 3-1: Manufacturer: syz [ 1105.840835][T27101] usb 3-1: SerialNumber: syz [ 1105.854521][T27101] usb 3-1: config 0 descriptor?? [ 1105.878853][ T5944] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1106.046301][ T5944] usb 2-1: Using ep0 maxpacket: 32 [ 1106.071983][ T5944] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1106.096385][ T5944] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1106.109454][ T5944] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1106.133854][ T5944] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1106.142272][ T5944] usb 2-1: Product: syz [ 1106.154653][ T5944] usb 2-1: Manufacturer: syz [ 1106.167584][ T5944] hub 2-1:4.0: USB hub found [ 1106.267962][T27101] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 1106.377905][ T5944] hub 2-1:4.0: 2 ports detected [ 1106.589676][ T5944] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1106.613833][ T5944] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1106.654616][ T5944] usb 2-1: USB disconnect, device number 117 [ 1106.694930][ T5913] usb 3-1: USB disconnect, device number 108 [ 1107.171159][T11592] program syz.3.17774 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1107.380773][T11600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17778'. [ 1107.425981][T11600] netlink: 'syz.3.17778': attribute type 2 has an invalid length. [ 1108.344234][T27101] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1108.505405][T27101] usb 2-1: Using ep0 maxpacket: 16 [ 1108.549945][T27101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.581952][T27101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.609897][T27101] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1108.632987][T27101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.670371][T27101] usb 2-1: config 0 descriptor?? [ 1109.124874][T27101] corsair 0003:1B1C:1B02.0098: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 1109.307647][T27101] corsair 0003:1B1C:1B02.0098: Read invalid backlight brightness: ad. [ 1109.540227][ T5944] usb 2-1: USB disconnect, device number 118 [ 1110.383974][T27101] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1110.400620][T11698] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17815'. [ 1110.546264][T27101] usb 4-1: Using ep0 maxpacket: 16 [ 1110.592339][T27101] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1110.613447][T27101] usb 4-1: config 0 has no interface number 0 [ 1110.632856][T27101] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1110.644234][T27101] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.656554][T27101] usb 4-1: Product: syz [ 1110.660775][T27101] usb 4-1: Manufacturer: syz [ 1110.675621][T27101] usb 4-1: SerialNumber: syz [ 1110.695949][T27101] usb 4-1: config 0 descriptor?? [ 1110.708057][T27101] asix 4-1:0.251: probe with driver asix failed with error -22 [ 1110.804768][ T5913] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1110.918149][T27101] usb 4-1: USB disconnect, device number 12 [ 1110.977667][ T5913] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 1110.986394][ T5913] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1110.995918][ T5913] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.009571][ T5913] usb 5-1: config 220 has no interface number 2 [ 1111.018501][ T5913] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1111.032940][ T5913] usb 5-1: config 220 interface 0 has no altsetting 0 [ 1111.045790][ T5913] usb 5-1: config 220 interface 76 has no altsetting 0 [ 1111.053420][ T5913] usb 5-1: config 220 interface 1 has no altsetting 0 [ 1111.069555][ T5913] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1111.082159][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.093088][ T5913] usb 5-1: Product: syz [ 1111.102115][ T5913] usb 5-1: Manufacturer: syz [ 1111.109370][ T5913] usb 5-1: SerialNumber: syz [ 1111.332546][ T5913] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 1111.340281][ T5913] usb 5-1: No valid video chain found. [ 1111.346499][ T5913] usb 5-1: selecting invalid altsetting 0 [ 1111.367042][ T5913] usb 5-1: selecting invalid altsetting 0 [ 1111.373343][ T5913] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 1111.386291][ T5913] usb 5-1: USB disconnect, device number 123 [ 1111.454058][ T6712] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1111.616298][ T6712] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1111.630277][ T6712] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1111.640233][ T6712] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1111.654709][ T6712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1111.662335][ T6712] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1111.672225][ T6712] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1111.683336][ T6712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1111.691061][ T6712] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1111.700861][ T6712] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1111.712101][ T6712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1111.720169][ T6712] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1111.730486][ T6712] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1111.745868][ T6712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1111.756445][ T6712] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1111.765839][ T6712] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1111.776992][ T6712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1111.785666][ T6712] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1111.795848][ T5944] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1111.806534][ T6712] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1111.817621][ T6712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1111.826952][ T6712] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1111.839779][ T6712] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1111.858251][T27101] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1111.868162][ T6712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1111.890718][ T6712] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1111.910183][ T6712] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1111.942621][ T6712] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1111.960285][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.977598][ T5944] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1111.992226][ T6712] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1112.001897][ T5944] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1112.012391][ T6712] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1112.017039][T27101] usb 2-1: Using ep0 maxpacket: 8 [ 1112.021133][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.035448][ T6712] usb 3-1: Product: syz [ 1112.039663][ T6712] usb 3-1: Manufacturer: syz [ 1112.044545][ T6712] usb 3-1: SerialNumber: syz [ 1112.052575][T27101] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1112.055344][ T5944] usb 4-1: config 0 descriptor?? [ 1112.069392][T27101] usb 2-1: config 179 has no interface number 0 [ 1112.090934][ T6712] usb 3-1: config 0 descriptor?? [ 1112.092986][T27101] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1112.109045][ T6712] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1112.154969][T27101] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1112.215296][T27101] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 1112.231553][T27101] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 1112.248626][T27101] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1112.263050][T27101] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1112.270613][T27101] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1112.282126][T27101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.323755][T27101] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input151 [ 1112.394233][ T5193] input input151: unable to receive magic message: -110 [ 1112.422122][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 1112.424277][ T5193] input input151: unable to receive magic message: -32 [ 1112.432128][ T6712] usb 3-1: USB disconnect, device number 109 [ 1112.477216][ T6712] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1112.492428][ T5193] input input151: unable to receive magic message: -32 [ 1112.526171][ T5944] kye 0003:0458:0138.0099: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.3-1/input0 [ 1112.564405][T27101] usb 2-1: USB disconnect, device number 119 [ 1112.564477][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1112.564531][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1112.616922][T27101] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1112.708617][T27100] usb 4-1: USB disconnect, device number 13 [ 1113.108826][T11763] input: syz0 as /devices/virtual/input/input152 [ 1113.735204][ T5944] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1113.785104][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17852'. [ 1113.822659][T11783] netlink: 2 bytes leftover after parsing attributes in process `syz.2.17852'. [ 1113.907935][ T5944] usb 5-1: config 0 has no interfaces? [ 1113.918012][ T5944] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 1113.937381][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.976658][ T5944] usb 5-1: config 0 descriptor?? [ 1114.214792][T11775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.240120][T11775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.251204][ T5944] usb 5-1: USB disconnect, device number 124 [ 1114.379947][T11802] IPVS: Scheduler module ip_vs_ not found [ 1114.433289][T11807] vivid-004: disconnect [ 1114.461224][T11806] vivid-004: reconnect [ 1114.724633][ T5944] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1114.894133][ T5944] usb 5-1: Using ep0 maxpacket: 8 [ 1114.902071][ T5944] usb 5-1: config index 0 descriptor too short (expected 72, got 36) [ 1114.914560][ T5944] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1114.965801][ T5944] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 1114.975373][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.983497][ T5944] usb 5-1: Product: syz [ 1115.001620][ T5944] usb 5-1: Manufacturer: syz [ 1115.018686][ T5944] usb 5-1: SerialNumber: syz [ 1115.321686][ T5944] usb 5-1: USB disconnect, device number 125 [ 1115.851741][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.858695][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.004737][ T5913] usb 5-1: new full-speed USB device number 126 using dummy_hcd [ 1117.166043][ T5913] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1117.186279][ T5913] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1117.200886][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.209384][ T5913] usb 5-1: Product: syz [ 1117.219902][ T5913] usb 5-1: Manufacturer: syz [ 1117.225039][ T5913] usb 5-1: SerialNumber: syz [ 1118.103455][ T5913] cdc_ncm 5-1:1.0: SET_CRC_MODE failed [ 1118.141254][ T5913] cdc_ncm 5-1:1.0: bind() failure [ 1118.152118][ T5913] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1118.164288][ T5913] cdc_ncm 5-1:1.1: bind() failure [ 1118.186475][ T5913] usb 5-1: USB disconnect, device number 126 [ 1119.344649][ T5913] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1119.501285][ T5913] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1119.510339][ T5913] usb 5-1: config 0 has no interface number 0 [ 1119.521681][ T5913] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1119.535903][ T5913] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1119.557510][ T5913] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1119.568835][ T5913] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1119.579725][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.604356][ T5913] usb 5-1: config 0 descriptor?? [ 1119.619736][ T5913] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1132.476735][ T9100] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1132.492639][ T9100] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1132.501992][ T9100] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1132.510519][ T9100] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1132.518887][ T9100] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1133.285783][T27299] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1133.297469][T27299] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1133.306148][T27299] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1133.315734][T27299] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1133.323499][T27299] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1133.808918][T27299] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1133.825124][T27299] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1133.835777][T27299] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1133.844484][T27299] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1133.852371][T27299] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1134.211488][ T9100] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1134.222787][ T9100] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1134.238178][ T9100] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1134.249248][ T9100] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1134.260112][ T9100] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1134.649233][ T9100] Bluetooth: hci5: command tx timeout [ 1135.364179][ T9100] Bluetooth: hci6: command tx timeout [ 1135.923923][ T9100] Bluetooth: hci7: command tx timeout [ 1136.324001][ T9100] Bluetooth: hci8: command tx timeout [ 1136.729975][ T9100] Bluetooth: hci5: command tx timeout [ 1137.444814][ T9100] Bluetooth: hci6: command tx timeout [ 1138.003896][ T9100] Bluetooth: hci7: command tx timeout [ 1138.404916][ T9100] Bluetooth: hci8: command tx timeout [ 1138.804642][ T9100] Bluetooth: hci5: command tx timeout [ 1139.523995][ T9100] Bluetooth: hci6: command tx timeout [ 1140.089762][ T9100] Bluetooth: hci7: command tx timeout [ 1140.500021][ T9100] Bluetooth: hci8: command tx timeout [ 1140.884830][ T9100] Bluetooth: hci5: command tx timeout [ 1141.604175][ T9100] Bluetooth: hci6: command tx timeout [ 1142.164196][ T9100] Bluetooth: hci7: command tx timeout [ 1142.579512][ T9100] Bluetooth: hci8: command tx timeout [ 1143.050630][T27299] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1143.068522][T27299] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1143.080494][T27299] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1143.092967][T27299] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1143.108295][T27299] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1145.204736][T27299] Bluetooth: hci9: command tx timeout [ 1147.284559][T27299] Bluetooth: hci9: command tx timeout [ 1149.364688][T27299] Bluetooth: hci9: command tx timeout [ 1151.444791][T27299] Bluetooth: hci9: command tx timeout [ 1153.766304][T27299] Bluetooth: hci4: command 0x0406 tx timeout [ 1177.291283][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.298484][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1191.641904][ T5848] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1191.651636][ T5848] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1191.660551][ T5848] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1191.669660][ T5848] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1191.678928][ T5848] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1194.085544][T11952] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1194.098055][T11952] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1194.107000][T11952] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1194.115627][T11952] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1194.123334][T11952] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1194.450359][T11960] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1194.461760][T11960] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1194.474728][T11960] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1194.483396][T11960] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1194.492111][T11960] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1194.499829][T11960] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1194.509601][T11960] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1194.517226][T11960] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1194.525889][T11960] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1194.533274][T11960] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1203.191907][T11963] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1203.210463][T11963] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1203.220399][T11963] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1203.233570][T11963] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1203.241506][T11963] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1221.213760][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1221.220418][ C0] rcu: 0-....: (1 GPs behind) idle=1d4c/1/0x4000000000000000 softirq=203534/203544 fqs=5068 [ 1221.231931][ C0] rcu: hardirqs softirqs csw/system [ 1221.238355][ C0] rcu: number: 8721 0 0 [ 1221.244776][ C0] rcu: cputime: 193 52285 18 ==> 52480(ms) [ 1221.252596][ C0] rcu: (t=10500 jiffies g=205661 q=13807 ncpus=2) [ 1221.259126][ C0] CPU: 0 UID: 0 PID: 11861 Comm: syz.0.17888 Not tainted 6.16.0-rc1-syzkaller-00239-g08215f5486ec #0 PREEMPT(full) [ 1221.259146][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1221.259161][ C0] RIP: 0010:taprio_dequeue_tc_priority+0x1a7/0x750 [ 1221.259190][ C0] Code: 83 58 01 00 00 e8 19 73 3a f8 42 0f b6 44 25 00 84 c0 0f 85 a6 02 00 00 41 8b 75 00 48 8b 7c 24 48 48 8b 54 24 50 8b 4c 24 1c b4 05 00 00 48 89 44 24 10 48 8b 44 24 58 42 0f b6 04 20 84 c0 [ 1221.259204][ C0] RSP: 0018:ffffc90000007b48 EFLAGS: 00000246 [ 1221.259224][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000026f [ 1221.259234][ C0] RDX: ffff888020f9ec00 RSI: 0000000000000008 RDI: ffff8880216d6000 [ 1221.259245][ C0] RBP: 1ffff110042dac72 R08: 0000000000000000 R09: ffffffff89854036 [ 1221.259256][ C0] R10: 0000000000000001 R11: ffffffff8978acd0 R12: dffffc0000000000 [ 1221.259267][ C0] R13: ffff8880216d6390 R14: 0000000000000010 R15: 0000000000000001 [ 1221.259278][ C0] FS: 0000000000000000(0000) GS:ffff888125c51000(0000) knlGS:0000000000000000 [ 1221.259290][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1221.259301][ C0] CR2: 00007fbc520e56c0 CR3: 0000000062b22000 CR4: 00000000003526f0 [ 1221.259315][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1221.259323][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1221.259333][ C0] Call Trace: [ 1221.259344][ C0] [ 1221.259360][ C0] ? taprio_dequeue+0x26/0x550 [ 1221.259381][ C0] taprio_dequeue+0x186/0x550 [ 1221.259403][ C0] __qdisc_run+0x239/0x15f0 [ 1221.259435][ C0] qdisc_run+0xc2/0x230 [ 1221.259461][ C0] net_tx_action+0x7c9/0x980 [ 1221.259478][ C0] ? net_tx_action+0x634/0x980 [ 1221.259493][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1221.259518][ C0] ? __pfx_net_tx_action+0x10/0x10 [ 1221.259544][ C0] handle_softirqs+0x286/0x870 [ 1221.259571][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1221.259598][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1221.259625][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1221.259647][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1221.259670][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1221.259701][ C0] irq_exit_rcu+0x9/0x30 [ 1221.259722][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1221.259747][ C0] [ 1221.259752][ C0] [ 1221.259758][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1221.259775][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1221.259797][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b bd fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1221.259810][ C0] RSP: 0018:ffffc9000b48f4f0 EFLAGS: 00000206 [ 1221.259823][ C0] RAX: 0f6056d44fca5400 RBX: 0000000000000000 RCX: 0f6056d44fca5400 [ 1221.259833][ C0] RDX: 0000000000000000 RSI: ffffffff8db6ecc6 RDI: ffffffff8be28a80 [ 1221.259844][ C0] RBP: ffffffff822ef8c7 R08: 0000000000000000 R09: ffffffff822ef8c7 [ 1221.259854][ C0] R10: dffffc0000000000 R11: fffff940003be0d9 R12: 0000000000000002 [ 1221.259865][ C0] R13: ffffffff8e13ed60 R14: 0000000000000000 R15: 0000000000000246 [ 1221.259877][ C0] ? page_table_check_clear+0x187/0x700 [ 1221.259894][ C0] ? page_table_check_clear+0x187/0x700 [ 1221.259918][ C0] ? pfn_valid+0xba/0x490 [ 1221.259936][ C0] ? pfn_valid+0xba/0x490 [ 1221.259952][ C0] ? page_table_check_clear+0x187/0x700 [ 1221.259968][ C0] page_table_check_clear+0x1a4/0x700 [ 1221.259983][ C0] ? page_table_check_clear+0x187/0x700 [ 1221.259999][ C0] ? vm_normal_page+0xb7/0x230 [ 1221.260020][ C0] unmap_page_range+0x326e/0x41c0 [ 1221.260075][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1221.260102][ C0] ? unmap_vmas+0x144/0x580 [ 1221.260123][ C0] unmap_vmas+0x399/0x580 [ 1221.260148][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1221.260186][ C0] exit_mmap+0x248/0xb50 [ 1221.260202][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1221.260230][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1221.260244][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1221.260268][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1221.260291][ C0] ? uprobe_clear_state+0x274/0x290 [ 1221.260316][ C0] __mmput+0x118/0x420 [ 1221.260341][ C0] exit_mm+0x1da/0x2c0 [ 1221.260361][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1221.260381][ C0] ? rcu_is_watching+0x15/0xb0 [ 1221.260408][ C0] do_exit+0x640/0x22e0 [ 1221.260431][ C0] ? preempt_schedule_common+0x83/0xd0 [ 1221.260454][ C0] ? preempt_schedule+0xae/0xc0 [ 1221.260477][ C0] ? __pfx_do_exit+0x10/0x10 [ 1221.260499][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1221.260525][ C0] do_group_exit+0x21c/0x2d0 [ 1221.260548][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1221.260567][ C0] x64_sys_call+0x21ba/0x21c0 [ 1221.260583][ C0] do_syscall_64+0xfa/0x3b0 [ 1221.260596][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1221.260619][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.260635][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1221.260653][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.260668][ C0] RIP: 0033:0x7f2a7b78e929 [ 1221.260685][ C0] Code: Unable to access opcode bytes at 0x7f2a7b78e8ff. [ 1221.260694][ C0] RSP: 002b:00007f2a7badfd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1221.260708][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2a7b78e929 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1221.260719][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 1221.260728][ C0] RBP: 00007f2a7badfdec R08: 000000047badfe7f R09: 00000000000927c0 [ 1221.260739][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000dd0 [ 1221.260748][ C0] R13: 00000000000927c0 R14: 0000000000110694 R15: 00007f2a7badfe40 [ 1221.260771][ C0]