last executing test programs: 9m22.456741075s ago: executing program 32 (id=3079): r0 = socket$netlink(0x10, 0x3, 0xb) r1 = syz_io_uring_setup(0xcf, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x8, 0x0, r0, 0x0, 0x0, 0x0, 0x40010040, 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 7m42.433227381s ago: executing program 2 (id=4213): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r0, 0x2, &(0x7f0000000100)={0x2}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) 7m42.104949203s ago: executing program 33 (id=4211): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000003, 0x204031, 0xffffffffffffffff, 0x29d1f000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}], 0x1) syz_emit_ethernet(0x36b, &(0x7f0000002c40)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x35d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x349, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) 7m38.300371913s ago: executing program 2 (id=4228): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 7m38.05823471s ago: executing program 2 (id=4231): openat$audio(0xffffffffffffff9c, 0x0, 0xa2442, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x10, 0x10, "6972a16387920cfad256559f58af1ac31147a8bd9b98f15a744d3c03497fc60c69384e4c90a0ed09e1b7f957fb401fa9e05136d2dd259e85fba5a108da06e82d", "7ae7cae7925fbe121718e6de64227243f96d9685d5016b32c02336b2cae3a91e", [0x0, 0x4]}) 7m37.40591216s ago: executing program 2 (id=4222): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) 7m37.056399637s ago: executing program 2 (id=4241): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x100, 0x12, 0x200, 0x70bd2c, 0x25dfdbff, {0x22, 0x4, 0x3, 0x80, {0x4e24, 0x4e22, [0x8, 0xc5, 0x8, 0xa], [0x4, 0x6a5, 0x6, 0x7], 0x0, [0xffff, 0xe]}, 0x7e, 0x584}, [@INET_DIAG_REQ_BYTECODE={0xb1, 0x1, "528a0873d791ef3050e46561283128c35db3872b4a4fad33bbea4b80d79cabdfd89f0c30e4f9850b377482ca777155141d433362a74733db85159bda56508d8d4cf3211baf46761f95eb698d3d8ea07b156e16b8aae73c24838a18c5ecfeb7334620e3396ad5e51e14e715d2ff8c307cb9bee02d2d54eba8a88239686a01f06fefeebd311912f65ea98bca9c52cf119704d16fbe271a062a9bba04b8ab1beb6e2fb6d1eecbde218c99a901ec0d"}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000021}, 0x40408c0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x9, 0x81, 0x8, 0x9, 0x19, "70b8cd37971c56ed"}) 7m36.870917241s ago: executing program 2 (id=4225): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 7m36.294042029s ago: executing program 34 (id=4225): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x6e9c84f3}], 0x1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 5m32.940090316s ago: executing program 0 (id=5677): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000700)="dd", 0x1}], 0x1}, 0x4048067) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0) 5m32.800875585s ago: executing program 0 (id=5691): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639) read$FUSE(r0, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000002c0)={{0xfffffffc, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r1, 0x0, 0x0, 'syz1\x00', 0x0}) 5m32.645485428s ago: executing program 0 (id=5685): socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x286f7, 0x10100, 0x0, 0x40000000}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xd82, 0x0, 0x3}}}}}}}, 0x0) 5m32.529257722s ago: executing program 0 (id=5688): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x44000, 0x0) 5m31.624030655s ago: executing program 0 (id=5709): pipe2$watch_queue(&(0x7f00000006c0), 0x80) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x351a, 0x100, 0x0, 0x0, 0x0) 5m31.394486648s ago: executing program 0 (id=5713): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r2, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5m31.198290312s ago: executing program 35 (id=5713): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) dup3(r2, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m16.182481471s ago: executing program 3 (id=6593): pipe(&(0x7f0000000380)={0xffffffffffffffff}) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x5f, &(0x7f0000000900)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)='P', 0x1}]) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 4m15.993428295s ago: executing program 3 (id=6594): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_clone3(&(0x7f0000000340)={0x4290f400, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 4m15.865843667s ago: executing program 3 (id=6596): unshare(0x22020400) r0 = syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x465e, 0x400, 0x3, 0x100234}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='./file0\x00'}) io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 4m15.55629015s ago: executing program 3 (id=6601): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 4m14.632476599s ago: executing program 3 (id=6616): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0x1}}, @ip_ttl={{0x10, 0x0, 0x2, 0x1}}], 0x20}}], 0x1, 0x24000801) 4m14.378523913s ago: executing program 3 (id=6618): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) 4m14.167935985s ago: executing program 36 (id=6618): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x80000011}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x19) 1m54.615701304s ago: executing program 9 (id=8193): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="0e4a597d773372ceccd69eb7b0128135912c754434fd30a10808a0f1f8baa420b326867ff9aedffaa13c7b54db458a49ac6ec8cd20a44b384bb6abbc50", 0x3d}], 0x1}, 0x400c010) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 1m54.533492845s ago: executing program 9 (id=8195): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) read$nci(r0, 0x0, 0x0) 1m54.419111344s ago: executing program 9 (id=8197): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) mlock2(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x0) 1m54.329400923s ago: executing program 9 (id=8199): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 1m54.24752977s ago: executing program 9 (id=8201): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000000200)={{&(0x7f0000f54000/0x1000)=nil, 0x1000}}) 1m53.973285501s ago: executing program 9 (id=8205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 1m53.70785381s ago: executing program 37 (id=8205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000100", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 1m34.761027888s ago: executing program 8 (id=8388): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300000400000000fbdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000000000000000014001a80101105800c0008"], 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 1m34.604061411s ago: executing program 8 (id=8390): r0 = socket(0x2, 0x80802, 0x0) sendmsg$inet(r0, &(0x7f0000000a80)={&(0x7f00000007c0)={0x2, 0x4e23, @loopback}, 0x10, 0x0}, 0x1c880) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) sendmmsg$unix(r0, &(0x7f00000083c0)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004084}}], 0x2, 0x0) 1m34.416865036s ago: executing program 8 (id=8392): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x10, 0x1, 0x25dffbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xa, 0xffff}, {0xd, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x41}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040040}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m33.428217238s ago: executing program 8 (id=8402): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1) 1m33.242438249s ago: executing program 8 (id=8403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000480)=[{&(0x7f0000003440)=""/4108, 0x100c}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m32.79500973s ago: executing program 8 (id=8408): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) io_setup(0x5, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)='\x00', 0x1, 0x0, 0x0, 0x2}]) syz_emit_vhci(0x0, 0x7) 1m32.422842683s ago: executing program 38 (id=8408): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}, 0x20, 0x0, 0x0) io_setup(0x5, &(0x7f0000000500)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)='\x00', 0x1, 0x0, 0x0, 0x2}]) syz_emit_vhci(0x0, 0x7) 3.722937412s ago: executing program 6 (id=9334): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x40, 0x16, 0x4, "90b7a71b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 2.725825914s ago: executing program 1 (id=9352): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200001004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000006800e97800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 2.611273287s ago: executing program 1 (id=9354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0xc040) 2.576063083s ago: executing program 1 (id=9355): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='westwood', 0x8) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)={0x4c, 0x12, 0x301, 0x0, 0x0, {0x0, 0x7, 0x0, 0x0, {0x4e23, 0x0, [0x0, 0x0, 0x81], [0x1, 0xfffffffd, 0x10000], 0x0, [0x0, 0x7fff]}, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) 2.483533382s ago: executing program 1 (id=9356): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$midi(r0, &(0x7f00000012c0)=""/232, 0xe8) 1.600007875s ago: executing program 7 (id=9366): r0 = socket(0x10, 0x80003, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 1.589601795s ago: executing program 5 (id=9367): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x4, 0x1, 0xf000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r2 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000000c0)={0xdddd0000, 0x105000, 0x8}) 1.476995836s ago: executing program 7 (id=9368): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x420, 0x3f4, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x1, 0x9, [0x1, 0x45e4e745, 0x9, 0xfffffffc, 0x0, 0xf5, 0x3, 0xa6, 0x10000, 0x7fffffff, 0x8001, 0xa0, 0x2, 0x0, 0x24, 0x8, 0x40e, 0x0, 0x1c5, 0x7ff, 0x1, 0x6, 0x1, 0x8, 0xfff, 0x10000, 0x5, 0x9, 0x40000, 0x5, 0x0, 0x8, 0x4, 0x1, 0x2, 0x7089, 0xe, 0x6, 0xfffffde8, 0x9, 0x7ff, 0x0, 0x6, 0x9, 0x2e, 0x4cc8, 0x7, 0xa24, 0xfff, 0x1, 0x5edaa154, 0xfffffffa, 0xae, 0xde6, 0xa92, 0x5b008d06, 0x7, 0x95, 0x4, 0xf, 0x3, 0x8001, 0x9, 0xc], [0x5, 0x7, 0xea, 0x400, 0x2, 0x0, 0x23, 0x0, 0xff, 0x2, 0x200, 0x3, 0x0, 0x100, 0x4, 0x7, 0x3, 0x1, 0x828, 0x7, 0xffffffff, 0xfffffff8, 0x8000, 0x1cee, 0xa3a, 0x2, 0x2, 0x7, 0x80000001, 0x6aa6, 0x0, 0x511, 0x8001, 0x200, 0x3, 0xea49, 0x6, 0x5, 0x400, 0x6, 0xfff, 0xa, 0x8000, 0x4f8, 0x7, 0x3, 0x778, 0x3, 0x3, 0xffffffff, 0x1, 0x7f, 0x4, 0xffff, 0x6, 0x6, 0xd581, 0xd67, 0x5, 0x1, 0x1, 0x3, 0x1, 0x7], [0x800, 0xfffffff7, 0x40, 0x2, 0x8e, 0x0, 0x10001, 0x5, 0xc1f, 0x9, 0x0, 0x5, 0xffffffff, 0x3c, 0x0, 0x2, 0x2, 0x8, 0x3, 0x9, 0x6, 0x4, 0x8, 0x3, 0x4, 0xf1, 0x2, 0x2, 0x1, 0x6, 0xfffffff8, 0x1, 0x5, 0x4, 0x80, 0x8, 0x3, 0x4, 0xf114, 0xffffffff, 0x4, 0x0, 0x5, 0x5b4, 0xfffffff9, 0x9, 0x8001, 0xd, 0x3, 0x61, 0x7f, 0x3, 0x7, 0x7, 0x2, 0xfff, 0x0, 0xf791, 0x800, 0x1, 0x1, 0x1, 0x6, 0x5], [0xff, 0x1, 0xfffffff8, 0xa5, 0x1, 0x1, 0x8, 0x81, 0x6, 0xf72, 0x7, 0x4, 0x2, 0x7f, 0x4, 0xffffff3c, 0x7, 0x7, 0x401, 0x3, 0x6, 0x0, 0x2, 0x5, 0x6, 0x1000, 0x9, 0x100, 0x1, 0x10001, 0x9, 0x8, 0x0, 0x400, 0x1, 0x80000000, 0xffff8001, 0xc0b, 0x6, 0xa884, 0x80000000, 0x6f86187, 0xb, 0x4, 0x4, 0x2, 0x2, 0x6, 0x1, 0x0, 0x9, 0x81, 0x2, 0x7, 0x6, 0x4, 0x6, 0x5, 0x3, 0x3, 0xc, 0x3, 0x1, 0x7]}}, 0x420}, 0x1, 0x0, 0x0, 0x800}, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.45463786s ago: executing program 1 (id=9369): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/net\x00') 1.341759844s ago: executing program 5 (id=9370): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.280808898s ago: executing program 7 (id=9371): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) write$UHID_CREATE2(r1, &(0x7f0000000280)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r1, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x35315258, 0x0, 0x0, 0x0, 0x7, 0x400}}) 1.229371527s ago: executing program 5 (id=9372): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x5fa, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x76, '\x00', 0x6}, {0x1, 0x7f, 0x7, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0xbe, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0xa, 0x2, 0x0, '\x00', 0xff}, {0xd, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x4, 0x4, 0xfd, '\x00', 0x8}, {0xb, 0x0, 0x9, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x0, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x96, 0xc0, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x8, 0x2, '\x00', 0x1}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.210309995s ago: executing program 7 (id=9373): r0 = eventfd2(0x0, 0x80801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8503, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000440)={r0, 0x100, 0x0, r0}) write$eventfd(r0, &(0x7f0000000040), 0x8) 1.094909545s ago: executing program 5 (id=9374): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1901) 1.074936871s ago: executing program 7 (id=9375): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 904.828663ms ago: executing program 7 (id=9376): syz_open_dev$mouse(&(0x7f0000000700), 0x0, 0x6a040) syz_usb_connect(0x3, 0x2d, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000061c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da09"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000001100), 0x2) ftruncate(0xffffffffffffffff, 0x51a9497) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 650.257018ms ago: executing program 4 (id=9377): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) 605.815433ms ago: executing program 6 (id=9378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 570.05791ms ago: executing program 4 (id=9379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close(0x3) 536.858443ms ago: executing program 1 (id=9380): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f00000000c0)={0x1, 0x100, 0x40000002, 0x0, 0x1, 0x1}) 425.725112ms ago: executing program 4 (id=9381): r0 = syz_io_uring_setup(0x35d, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x5, 0x1f5}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r3, &(0x7f0000000040), 0x8) io_uring_enter(r0, 0x47f2, 0x0, 0x0, 0x0, 0x0) 347.723852ms ago: executing program 6 (id=9382): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0xffff, 0xfff3}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x64040021}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 319.630875ms ago: executing program 4 (id=9383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x100001, 0x80001) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x0, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x1}) 155.620005ms ago: executing program 6 (id=9384): openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x8402, 0x0) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x1, 0x6bd60be1, 0x7}) flock(r0, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) 154.745824ms ago: executing program 5 (id=9385): openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000480), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 128.706521ms ago: executing program 6 (id=9386): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 48.521849ms ago: executing program 4 (id=9387): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8040}, 0x18, 0x0) landlock_restrict_self(r1, 0x6) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS2(r2, 0x402c542b, 0x0) 46.507962ms ago: executing program 5 (id=9388): mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x4, 0x82b) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x8000000a) r1 = getpid() fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r1}) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) 4.169407ms ago: executing program 4 (id=9389): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) ftruncate(r1, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/58, 0x10c000, 0x800, 0x0, 0x1}, 0x20) 0s ago: executing program 6 (id=9390): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0), 0xdf6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x7f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3]}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) kernel console output (not intermixed with test programs): ting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 701.814829][ T5917] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 701.830325][ T5917] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.842120][ T5917] usb 10-1: config 0 descriptor?? [ 701.940217][ T5896] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 701.953873][ T5896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 701.968862][ T5896] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 701.979674][ T5896] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.994371][ T5896] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.003807][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.017718][ T5896] usb 9-1: config 0 descriptor?? [ 702.272393][ T5917] HID 045e:07da: Invalid code 65791 type 1 [ 702.304119][ T5917] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.006C/input/input121 [ 702.350064][ T5917] microsoft 0003:045E:07DA.006C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 702.440854][ T5896] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 702.460759][ T5896] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 702.478317][ T5896] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 702.499130][ T5896] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 702.525856][ T5896] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 702.546310][ T5896] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 702.554576][ T5917] usb 10-1: USB disconnect, device number 25 [ 702.567496][ T5896] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 702.582241][ T5896] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 702.595892][ T5896] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 702.611671][ T5896] plantronics 0003:047F:FFFF.006D: unknown main item tag 0x0 [ 702.639950][ T5896] plantronics 0003:047F:FFFF.006D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 702.784846][ T5896] usb 9-1: USB disconnect, device number 33 [ 703.256747][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 703.279788][T27781] netlink: 112 bytes leftover after parsing attributes in process `syz.7.8009'. [ 704.073868][T27814] team_slave_0: entered promiscuous mode [ 704.080110][T27814] team_slave_1: entered promiscuous mode [ 704.098382][T27814] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 704.132787][T27815] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 704.333389][T27820] input: syz0 as /devices/virtual/input/input122 [ 704.502051][T27822] sctp: [Deprecated]: syz.9.8025 (pid 27822) Use of struct sctp_assoc_value in delayed_ack socket option. [ 704.502051][T27822] Use struct sctp_sack_info instead [ 704.719877][T27824] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.8026'. [ 705.251086][T27845] loop9: detected capacity change from 0 to 7 [ 705.286782][T27845] Dev loop9: unable to read RDB block 7 [ 705.297663][T27845] loop9: unable to read partition table [ 705.313944][T27845] loop9: partition table beyond EOD, truncated [ 705.335971][ T5896] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 705.344806][T27845] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 705.515832][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 705.542919][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 705.552684][T27856] warning: `syz.9.8041' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 705.555882][ T5896] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 705.583160][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.607981][ T5896] usb 2-1: config 0 descriptor?? [ 705.744717][T27867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8045'. [ 706.048426][ T5896] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.006E/input/input123 [ 706.160931][ T5896] creative-sb0540 0003:041E:3100.006E: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 706.343517][ T5896] usb 2-1: USB disconnect, device number 110 [ 706.718445][T27896] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8056'. [ 706.745070][T27896] hsr0 (unregistering): left allmulticast mode [ 707.265856][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 707.436020][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 707.443098][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.454359][ T10] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 707.463520][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.474297][ T10] usb 2-1: config 0 descriptor?? [ 707.704902][ T10] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 707.922086][ T10] usb 2-1: USB disconnect, device number 111 [ 708.106570][ T5917] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 708.275854][ T5917] usb 10-1: Using ep0 maxpacket: 32 [ 708.282743][ T5917] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 708.294640][ T5917] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 708.307754][ T5917] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 708.317728][ T5917] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 708.328895][ T5917] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 708.343007][ T5917] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 708.352398][ T5917] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.360577][ T5917] usb 10-1: Product: syz [ 708.364834][ T5917] usb 10-1: Manufacturer: syz [ 708.369552][ T5917] usb 10-1: SerialNumber: syz [ 708.375929][ T5917] usb 10-1: config 0 descriptor?? [ 708.478978][T27928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8071'. [ 708.488287][T27928] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8071'. [ 708.792691][ T5917] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 708.816792][ T5917] input input124: Device does not respond to id packet M [ 708.824760][ T5917] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 708.834328][ T5917] input input124: Device does not respond to id packet P [ 709.048723][ T5917] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 709.055361][ T5917] input input124: Device does not respond to id packet N [ 709.076407][ T5917] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 709.083074][ T5917] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 709.091170][ T5917] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 709.101384][ T5917] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 709.112848][ T5917] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input124 [ 709.141695][ T5917] usb 10-1: USB disconnect, device number 26 [ 709.403096][ T5830] Bluetooth: hci0: hardware error 0x04 [ 709.504784][T27953] input: syz0 as /devices/virtual/input/input125 [ 709.642129][T27959] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8085'. [ 709.786896][T27965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8087'. [ 710.117922][T27974] input: syz1 as /devices/virtual/input/input126 [ 710.493341][ T5917] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 710.669275][ T5917] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 710.677942][ T5917] usb 2-1: config 0 has no interface number 0 [ 710.684079][ T5917] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 710.735819][ T5917] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 710.755816][ T5917] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 710.783359][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.837315][ T5917] usb 2-1: config 0 descriptor?? [ 710.849686][T27982] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 710.882421][ T5917] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 711.117958][ T5896] usb 2-1: USB disconnect, device number 112 [ 711.118105][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 711.192010][T28004] netlink: 'syz.9.8106': attribute type 4 has an invalid length. [ 711.347412][T28009] syzkaller1: entered promiscuous mode [ 711.352978][T28009] syzkaller1: entered allmulticast mode [ 711.495865][ T5830] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 711.552761][T28017] input: syz1 as /devices/virtual/input/input127 [ 712.071219][T28045] input: syz0 as /devices/virtual/input/input128 [ 712.249622][T28053] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8128'. [ 712.256698][T28055] input: syz1 as /devices/virtual/input/input129 [ 712.259025][T28053] netlink: 'syz.9.8128': attribute type 7 has an invalid length. [ 712.281969][T28053] netlink: 'syz.9.8128': attribute type 8 has an invalid length. [ 712.299303][T28053] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8128'. [ 712.461048][T28063] netlink: 'syz.8.8131': attribute type 11 has an invalid length. [ 712.655912][ T10] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 712.779584][T28078] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8138'. [ 712.815942][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 712.827176][ T10] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 712.846255][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.870251][ T10] usb 10-1: config 0 descriptor?? [ 713.090376][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 713.100421][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 713.116821][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 713.124593][ T10] usb 10-1: media controller created [ 713.146980][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 713.300013][ T10] az6027: usb out operation failed. (-71) [ 713.309723][ T10] az6027: usb out operation failed. (-71) [ 713.315471][ T10] stb0899_attach: Driver disabled by Kconfig [ 713.324061][ T10] az6027: no front-end attached [ 713.324061][ T10] [ 713.331551][ T10] az6027: usb out operation failed. (-71) [ 713.343099][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 713.352949][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input130 [ 713.368167][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 713.375144][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 713.391982][ T10] usb 10-1: USB disconnect, device number 27 [ 713.432902][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 713.976299][ T5896] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 714.169921][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 64 [ 714.196042][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 714.210004][ T5896] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 714.221370][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.234889][ T5896] usb 2-1: config 0 descriptor?? [ 714.475943][ T10] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 714.625836][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 714.632597][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.644498][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 714.655241][ T10] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 714.664852][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.667182][ T5896] hid-multitouch 0003:0457:07DA.006F: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.1-1/input0 [ 714.687135][ T10] usb 9-1: config 0 descriptor?? [ 714.940843][ T5917] usb 2-1: USB disconnect, device number 113 [ 715.117013][ T10] savu 0003:1E7D:2D5A.0070: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 715.378999][ T5917] usb 9-1: USB disconnect, device number 34 [ 715.495952][ T10] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 715.657231][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.667685][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 715.680349][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 715.690242][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 715.705350][ T10] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 715.715875][ T10] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 715.724223][ T10] usb 10-1: Manufacturer: syz [ 715.731533][ T10] usb 10-1: config 0 descriptor?? [ 716.026874][ T10] rc_core: IR keymap rc-hauppauge not found [ 716.033420][ T10] Registered IR keymap rc-empty [ 716.038585][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.066913][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.087538][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 716.102616][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input131 [ 716.127191][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.139388][T28147] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8167'. [ 716.156120][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.164859][T28131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.177855][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.186353][T28131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.219287][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.246011][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.276016][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.306002][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.326021][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.346075][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.365966][ T10] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 716.397027][ T10] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 716.406872][ T10] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 716.534532][ T5896] usb 10-1: USB disconnect, device number 28 [ 716.833476][T28173] netlink: 176 bytes leftover after parsing attributes in process `syz.7.8179'. [ 717.431342][T28196] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 717.465340][T28196] bond2: (slave lo): Enslaving as a backup interface with an up link [ 717.489483][T28201] binder: 28200:28201 ioctl c0306201 800003c0 returned -14 [ 717.538140][T28203] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8191'. [ 717.539455][T28196] net_ratelimit: 35 callbacks suppressed [ 717.539472][T28196] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 717.575331][T28203] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8191'. [ 717.610900][T28203] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8191'. [ 718.321012][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8206'. [ 718.334734][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8206'. [ 718.347608][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8206'. [ 718.420232][T25586] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.627245][T28242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8208'. [ 718.641056][T25586] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.760429][T25586] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.763525][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 718.787424][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 718.797550][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 718.808289][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 718.816299][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 718.894414][T28249] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8212'. [ 718.899042][T25586] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.914421][T28249] netlink: Conntrack attr has 3 unknown bytes [ 719.242967][T25586] bridge_slave_1: left allmulticast mode [ 719.260525][T25586] bridge_slave_1: left promiscuous mode [ 719.277743][T25586] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.304152][T25586] bridge_slave_0: left allmulticast mode [ 719.313194][T25586] bridge_slave_0: left promiscuous mode [ 719.327756][T25586] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.302489][T25586] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 720.313506][T25586] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.324263][T25586] bond0 (unregistering): Released all slaves [ 720.559133][T28250] chnl_net:caif_netlink_parms(): no params data found [ 720.806345][T25586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.823850][T25586] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.845863][T25586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.856446][ T5830] Bluetooth: hci3: command tx timeout [ 720.872285][T25586] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.928870][T25586] team_slave_0: left promiscuous mode [ 720.934783][T25586] team_slave_1: left promiscuous mode [ 720.942694][T25586] veth1_macvtap: left promiscuous mode [ 720.948727][T25586] veth0_macvtap: left promiscuous mode [ 720.964704][T25586] veth1_vlan: left promiscuous mode [ 720.970240][T25586] veth0_vlan: left promiscuous mode [ 721.284530][ T30] audit: type=1326 audit(1768052009.434:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28320 comm="syz.7.8229" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 722.782324][T25586] team0 (unregistering): Port device team_slave_1 removed [ 722.898670][T25586] team0 (unregistering): Port device team_slave_0 removed [ 722.936420][ T5830] Bluetooth: hci3: command tx timeout [ 724.108992][T28250] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.126130][T28250] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.151403][T28250] bridge_slave_0: entered allmulticast mode [ 724.175106][T28250] bridge_slave_0: entered promiscuous mode [ 724.214292][T28250] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.236378][T28250] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.260162][T28250] bridge_slave_1: entered allmulticast mode [ 724.279201][T28250] bridge_slave_1: entered promiscuous mode [ 724.317352][T28392] syzkaller1: entered promiscuous mode [ 724.356390][T28392] syzkaller1: entered allmulticast mode [ 724.529715][T28250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 724.557601][T28250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 724.687784][T28407] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 724.706081][T28407] bond1: (slave lo): Enslaving as a backup interface with an up link [ 724.717932][T28407] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 724.783883][T28250] team0: Port device team_slave_0 added [ 724.811855][T28250] team0: Port device team_slave_1 added [ 724.835844][ T5895] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 724.936459][T28250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 724.950347][T28250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.978049][T28250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 725.016280][ T5830] Bluetooth: hci3: command tx timeout [ 725.038381][ T5895] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 725.049751][ T5895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.061131][T28250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 725.068882][ T5895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.078964][T28250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 725.109219][ T5895] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 725.122790][T28250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.134614][ T5895] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 725.161530][ T5895] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 725.175929][ T5895] usb 9-1: Manufacturer: syz [ 725.217411][ T5895] usb 9-1: config 0 descriptor?? [ 725.332516][T28250] hsr_slave_0: entered promiscuous mode [ 725.357832][T28250] hsr_slave_1: entered promiscuous mode [ 725.371048][T28250] debugfs: 'hsr0' already exists in 'hsr' [ 725.395831][T28250] Cannot create hsr debugfs directory [ 725.659531][ T5895] hid_parser_main: 5 callbacks suppressed [ 725.659553][ T5895] appleir 0003:05AC:8243.0071: unknown main item tag 0x0 [ 725.716324][ T5895] appleir 0003:05AC:8243.0071: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 725.962971][ T5895] usb 9-1: USB disconnect, device number 35 [ 726.019798][T28454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8276'. [ 726.705696][T28474] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.8280'. [ 727.097323][ T5830] Bluetooth: hci3: command tx timeout [ 727.164278][T28250] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 727.186900][T28250] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 727.200025][T28250] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 727.225198][T28250] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 727.412037][T28250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 727.454976][T28250] 8021q: adding VLAN 0 to HW filter on device team0 [ 727.480866][T22612] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.488094][T22612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 727.539275][T19815] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.546526][T19815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 727.672256][T28250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.785518][T28250] veth0_vlan: entered promiscuous mode [ 727.834572][T28250] veth1_vlan: entered promiscuous mode [ 727.972657][T28250] veth0_macvtap: entered promiscuous mode [ 727.984668][T28250] veth1_macvtap: entered promiscuous mode [ 728.029819][T28250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 728.071158][T28250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 728.122073][T22612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.146726][T22612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.161186][T22612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.179976][T22612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.365278][T25586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.409193][T25586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.493222][ T6212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.504945][ T6212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.949489][T28559] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 729.052305][T28559] bond1: (slave lo): Enslaving as a backup interface with an up link [ 729.092217][T28559] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 731.103473][T28646] netlink: 'syz.8.8327': attribute type 4 has an invalid length. [ 731.172356][T28646] netlink: 'syz.8.8327': attribute type 4 has an invalid length. [ 731.735903][ T5895] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 731.897357][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 731.904660][ T5895] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 731.913654][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 731.940332][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 731.985799][ T5895] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 732.017592][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.046086][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 732.063874][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.312649][ T5895] usb 5-1: GET_CAPABILITIES returned 0 [ 732.335369][ T5895] usbtmc 5-1:16.0: can't read capabilities [ 732.626926][ T5917] usb 5-1: USB disconnect, device number 23 [ 732.633024][T28659] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 732.718678][ T5912] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 732.879186][ T5912] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 732.898217][ T5912] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.964523][ T5912] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 732.996719][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.257449][ T5912] usb 2-1: usb_control_msg returned -32 [ 733.283547][ T5912] usbtmc 2-1:16.0: can't read capabilities [ 733.650494][T28738] usbtmc 2-1:16.0: usbtmc_ioctl_request failed -32 [ 733.679263][ T5912] usb 2-1: USB disconnect, device number 114 [ 734.454160][T28771] netlink: 'syz.4.8356': attribute type 11 has an invalid length. [ 734.834451][T28790] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 735.035863][ T5912] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 735.195990][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 735.221457][ T5912] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 735.245886][ T5912] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 735.280731][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 735.292837][ T5912] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 735.312398][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.337451][ T5912] usb 5-1: Product: syz [ 735.341667][ T5912] usb 5-1: Manufacturer: syz [ 735.358687][ T5912] usb 5-1: SerialNumber: syz [ 735.794221][ T5912] usb 5-1: 0:2 : does not exist [ 736.641504][ T5895] usb 5-1: USB disconnect, device number 24 [ 738.002990][T28911] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8392'. [ 738.020050][T28911] netlink: 'syz.8.8392': attribute type 13 has an invalid length. [ 738.255861][ T57] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 738.429875][ T57] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.454613][ T57] usb 2-1: config 0 has no interfaces? [ 738.472931][ T57] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 738.492989][ T57] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.519787][ T57] usb 2-1: config 0 descriptor?? [ 739.596376][T25591] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.623483][T25591] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.760430][T25591] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.781147][T25591] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.952197][T25591] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.983621][T25591] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.093440][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 740.105581][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 740.117412][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 740.140509][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 740.151718][T25591] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.155083][T28975] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 740.162318][T25591] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.186316][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 740.265836][ T57] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 740.422184][T25591] bridge_slave_1: left allmulticast mode [ 740.430009][ T57] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 740.448840][T25591] bridge_slave_1: left promiscuous mode [ 740.456295][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.465516][T25591] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.479714][ T57] usb 5-1: config 0 descriptor?? [ 740.489202][T25591] bridge_slave_0: left allmulticast mode [ 740.494897][T25591] bridge_slave_0: left promiscuous mode [ 740.501398][ T57] gspca_main: spca508-2.14.0 probing 8086:0110 [ 740.508515][T25591] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.692619][ T57] gspca_spca508: reg_read err -32 [ 740.713558][ T57] gspca_spca508: reg_read err -32 [ 740.719811][ T57] gspca_spca508: reg_read err -32 [ 740.725968][ T57] gspca_spca508: reg_read err -32 [ 740.933005][ T57] gspca_spca508: reg write: error -71 [ 740.940860][ T57] spca508 5-1:0.0: probe with driver spca508 failed with error -71 [ 740.954484][ T57] usb 5-1: USB disconnect, device number 25 [ 740.986920][T25591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 741.001183][T25591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 741.017818][T25591] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 741.033836][ T5923] usb 2-1: USB disconnect, device number 115 [ 741.050185][T25591] bond0 (unregistering): Released all slaves [ 741.073011][T25591] bond1 (unregistering): Released all slaves [ 741.105038][T25591] bond2 (unregistering): (slave lo): Releasing backup interface [ 741.113839][T25591] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 741.126130][T28990] input: syz0 as /devices/virtual/input/input134 [ 741.139548][T25591] bond2 (unregistering): Released all slaves [ 741.416279][T28996] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 741.771290][T29013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8427'. [ 741.799633][T28979] chnl_net:caif_netlink_parms(): no params data found [ 741.814252][T29013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8427'. [ 741.908654][T25591] hsr_slave_0: left promiscuous mode [ 741.929152][T25591] hsr_slave_1: left promiscuous mode [ 741.944275][T25591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.961418][T25591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.978142][T25591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 742.012305][T25591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.052525][T25591] veth1_macvtap: left promiscuous mode [ 742.066070][T25591] veth0_macvtap: left promiscuous mode [ 742.072456][T25591] veth1_vlan: left promiscuous mode [ 742.088453][T25591] veth0_vlan: left promiscuous mode [ 742.215920][ T5830] Bluetooth: hci0: command tx timeout [ 742.851551][T25591] team0 (unregistering): Port device team_slave_1 removed [ 742.908990][T25591] team0 (unregistering): Port device C removed [ 743.152598][T29055] netlink: 'syz.6.8440': attribute type 11 has an invalid length. [ 743.782612][T28979] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.826356][T28979] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.851102][T28979] bridge_slave_0: entered allmulticast mode [ 743.859722][T28979] bridge_slave_0: entered promiscuous mode [ 743.876317][ T5917] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 743.882770][T28979] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.895135][T28979] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.903152][T28979] bridge_slave_1: entered allmulticast mode [ 743.911598][T28979] bridge_slave_1: entered promiscuous mode [ 743.992893][T28979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.026765][T28979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.066861][ T5917] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 744.084304][T28979] team0: Port device team_slave_0 added [ 744.100682][T28979] team0: Port device team_slave_1 added [ 744.106509][ T5917] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 744.106534][ T5917] usb 5-1: Product: syz [ 744.106549][ T5917] usb 5-1: Manufacturer: syz [ 744.106563][ T5917] usb 5-1: SerialNumber: syz [ 744.133549][ T5917] usb 5-1: config 0 descriptor?? [ 744.134730][T25591] IPVS: stop unused estimator thread 0... [ 744.164999][ T5917] ch341 5-1:0.0: ch341-uart converter detected [ 744.233252][T28979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.247440][T28979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.307901][ T5830] Bluetooth: hci0: command tx timeout [ 744.313504][T28979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.332667][T28979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.343185][T28979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.370141][T28979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 744.434975][T28979] hsr_slave_0: entered promiscuous mode [ 744.445138][T28979] hsr_slave_1: entered promiscuous mode [ 744.455267][T28979] debugfs: 'hsr0' already exists in 'hsr' [ 744.463130][T28979] Cannot create hsr debugfs directory [ 745.195298][ T5917] ch341-uart ttyUSB0: break control not supported, using simulated break [ 745.229691][ T5917] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 745.272487][ T5917] usb 5-1: USB disconnect, device number 26 [ 745.310470][ T5917] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 745.350186][ T5917] ch341 5-1:0.0: device disconnected [ 745.840361][T28979] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 745.872729][T28979] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 745.903533][T28979] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 745.942186][T28979] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 746.222743][T28979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.271584][T28979] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.301571][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.308814][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.350373][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.357613][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.378317][ T5830] Bluetooth: hci0: command tx timeout [ 746.489194][T28979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.648767][T28979] veth0_vlan: entered promiscuous mode [ 746.709296][T28979] veth1_vlan: entered promiscuous mode [ 746.798970][T28979] veth0_macvtap: entered promiscuous mode [ 746.843676][T28979] veth1_macvtap: entered promiscuous mode [ 746.896424][ T5923] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 746.907077][T28979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 746.952334][T28979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 746.997640][T25076] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.016907][T25076] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.038929][T25076] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.059656][T25076] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.087787][ T5923] usb 2-1: Using ep0 maxpacket: 32 [ 747.116640][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 747.169720][ T5923] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 747.206213][ T5923] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 747.233130][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.260923][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.270426][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.277101][T19815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.277970][ T5923] usb 2-1: config 0 descriptor?? [ 747.291515][T19815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.383165][T19815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.427758][T19815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.769066][ T5923] koneplus 0003:1E7D:2D51.0072: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 747.934158][T29192] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 747.941275][T29192] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 747.949717][ T5912] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 748.109482][ T5912] usb 6-1: config 0 has no interfaces? [ 748.120426][ T5912] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 748.146740][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 748.154814][ T5912] usb 6-1: Product: syz [ 748.200666][ T5912] usb 6-1: Manufacturer: syz [ 748.221456][ T5912] usb 6-1: config 0 descriptor?? [ 748.271415][ T6205] usb 2-1: USB disconnect, device number 116 [ 748.334909][T29208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8477'. [ 748.368639][T29208] vxlan0: entered promiscuous mode [ 748.382526][ T1330] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.408679][ T1330] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.417764][ T1330] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.427335][ T1330] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 748.454373][ T5912] usb 6-1: USB disconnect, device number 21 [ 748.460654][ T5830] Bluetooth: hci0: command tx timeout [ 749.116136][ T5923] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 749.288793][ T5923] usb 6-1: config 0 has no interfaces? [ 749.307762][ T5923] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 749.320526][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 749.331447][ T5923] usb 6-1: Product: syz [ 749.335645][ T5923] usb 6-1: Manufacturer: syz [ 749.343978][ T5923] usb 6-1: config 0 descriptor?? [ 749.358814][ T5824] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 749.525980][ T5824] usb 2-1: Using ep0 maxpacket: 32 [ 749.538086][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.554058][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.564410][ T5824] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 749.575446][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.586984][ T5923] usb 6-1: USB disconnect, device number 22 [ 749.589031][ T5824] usb 2-1: config 0 descriptor?? [ 749.629716][ T5824] hub 2-1:0.0: USB hub found [ 749.847910][ T5824] hub 2-1:0.0: 1 port detected [ 750.522574][ T5824] hub 2-1:0.0: activate --> -90 [ 750.933070][ T5917] usb 2-1: USB disconnect, device number 117 [ 751.145864][ T5923] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 751.342289][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.371742][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.391993][ T5923] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 751.433157][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.460335][ T5923] usb 5-1: config 0 descriptor?? [ 751.708884][T29320] vivid-000: disconnect [ 751.716012][T29318] vivid-000: reconnect [ 751.908885][ T5923] cm6533_jd 0003:0D8C:0022.0073: unknown main item tag 0x0 [ 751.925061][ T5923] cm6533_jd 0003:0D8C:0022.0073: unknown main item tag 0x0 [ 751.956791][ T5923] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0073/input/input136 [ 752.031234][ T5923] cm6533_jd 0003:0D8C:0022.0073: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 752.166745][T29339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8499'. [ 752.198205][ T5923] usb 5-1: USB disconnect, device number 27 [ 752.707532][T29350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8501'. [ 752.729073][T29350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8501'. [ 752.797353][T29350] macvlan0: entered allmulticast mode [ 753.286197][T18666] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 753.449403][T18666] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 753.470352][T18666] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 753.482362][T18666] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 753.491794][T18666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.509041][T18666] usb 2-1: Product: syz [ 753.513247][T18666] usb 2-1: Manufacturer: syz [ 753.536993][T18666] usb 2-1: SerialNumber: syz [ 753.753102][T18666] usb 2-1: 0:2 : does not exist [ 753.773795][T18666] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 753.818634][T18666] usb 2-1: USB disconnect, device number 118 [ 753.884764][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 754.321299][T29415] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8515'. [ 754.331751][T29415] netlink: 'syz.7.8515': attribute type 7 has an invalid length. [ 754.355963][T29415] netlink: 'syz.7.8515': attribute type 8 has an invalid length. [ 754.367865][T29415] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8515'. [ 754.523619][ T30] audit: type=1326 audit(1768052042.674:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29421 comm="syz.1.8517" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff1539 code=0x0 [ 754.976138][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 755.150354][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.172684][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.195030][ T10] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 755.217117][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.244371][ T10] usb 6-1: config 0 descriptor?? [ 755.595065][T29465] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 755.621956][T29465] bond1: (slave lo): Enslaving as a backup interface with an up link [ 755.632393][T29465] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 755.695575][ T10] cm6533_jd 0003:0D8C:0022.0074: unknown main item tag 0x0 [ 755.714717][ T10] cm6533_jd 0003:0D8C:0022.0074: unknown main item tag 0x0 [ 755.741121][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0074/input/input138 [ 755.788358][ T10] cm6533_jd 0003:0D8C:0022.0074: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 755.967064][ T10] usb 6-1: USB disconnect, device number 23 [ 756.839324][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 757.021632][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 757.046917][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.054957][ T10] usb 5-1: Product: syz [ 757.068422][ T10] usb 5-1: Manufacturer: syz [ 757.075919][ T10] usb 5-1: SerialNumber: syz [ 757.093986][ T10] usb 5-1: config 0 descriptor?? [ 757.112175][ T10] ch341 5-1:0.0: ch341-uart converter detected [ 757.208852][T29523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8538'. [ 757.336990][T29527] pim6reg1: entered promiscuous mode [ 757.345486][T29527] pim6reg1: entered allmulticast mode [ 758.144348][ T10] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 758.365863][T28536] usb 5-1: USB disconnect, device number 28 [ 758.397472][T28536] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 758.416905][T28536] ch341 5-1:0.0: device disconnected [ 759.245859][ T10] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 759.409510][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 759.451548][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.483246][ T10] usb 2-1: config 0 descriptor?? [ 760.081089][T29609] netlink: 'syz.4.8558': attribute type 1 has an invalid length. [ 760.238418][T29609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 760.279850][T29613] bond2: (slave gretap1): making interface the new active one [ 760.356219][T29613] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 760.760061][ T10] pegasus 2-1:0.0: can't reset MAC [ 760.793873][ T10] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 760.836679][ T10] usb 2-1: USB disconnect, device number 119 [ 761.194744][T29643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8567'. [ 763.127107][T29706] netlink: 'syz.5.8592': attribute type 1 has an invalid length. [ 763.155843][ T57] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 763.175853][ T10] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 763.328608][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.336216][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.349823][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.349851][ T57] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 763.349895][ T57] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 763.363411][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 763.392888][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.407113][ T10] usb 2-1: config 0 descriptor?? [ 763.423971][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 763.434031][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.447503][ T57] usb 5-1: config 0 descriptor?? [ 763.551112][T29719] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8598'. [ 763.820616][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 763.827973][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 763.835373][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 763.875608][ T57] plantronics 0003:047F:FFFF.0075: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 763.926570][ T5921] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 764.044645][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 764.054386][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 764.061365][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 764.068822][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 764.076130][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 764.083183][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 764.089963][ T5921] usb 6-1: Using ep0 maxpacket: 16 [ 764.096055][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 764.103065][ T5921] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 764.112124][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 764.119260][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 764.125910][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.137166][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 764.144860][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 764.152061][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 764.159633][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.173349][ T10] pwc: Registered as video103. [ 764.179660][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.191643][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input139 [ 764.207013][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.228391][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.246992][ T10] usb 2-1: USB disconnect, device number 120 [ 764.270830][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.302920][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.320758][ T5921] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 764.334951][ T5921] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 764.346771][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 764.355147][ T5921] usb 6-1: SerialNumber: syz [ 764.364339][ T5921] usb 6-1: config 0 descriptor?? [ 764.378836][ T5921] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input140 [ 764.590520][ T5186] bcm5974 6-1:0.0: could not read from device [ 764.602748][ T5186] bcm5974 6-1:0.0: could not read from device [ 764.611513][ T5921] usb 6-1: USB disconnect, device number 24 [ 765.993208][ T5921] usb 5-1: USB disconnect, device number 29 [ 766.913963][T29776] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 766.921156][T29776] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 767.019190][T29776] vhci_hcd vhci_hcd.0: Device attached [ 767.193136][T29778] usbip_core: unknown command [ 767.206388][ T57] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 767.255949][T29778] vhci_hcd: unknown pdu 4244635647 [ 767.271110][T29778] usbip_core: unknown command [ 767.296116][T22612] vhci_hcd vhci_hcd.1: stop threads [ 767.311697][T22612] vhci_hcd vhci_hcd.1: release socket [ 767.330968][T22612] vhci_hcd vhci_hcd.1: disconnect device [ 767.791481][T29807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8631'. [ 767.804864][T29807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8631'. [ 767.817749][T29807] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8631'. [ 768.005882][ T5824] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 768.206115][ T5824] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.236370][T28536] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 768.265537][ T5824] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.298741][ T5824] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 768.310043][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.418134][T29821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8636'. [ 768.425838][T28536] usb 2-1: Using ep0 maxpacket: 8 [ 768.434384][T29821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8636'. [ 768.447065][T28536] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 768.457616][T29821] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8636'. [ 768.457645][T28536] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 768.478607][T29821] netlink: 104 bytes leftover after parsing attributes in process `syz.5.8636'. [ 768.483407][T28536] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 768.500031][T28536] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 768.510197][T28536] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 768.524812][T28536] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 768.535424][T28536] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.548302][ T5824] usb 5-1: usb_control_msg returned -32 [ 768.553939][ T5824] usbtmc 5-1:16.0: can't read capabilities [ 768.774689][T28536] usb 2-1: usb_control_msg returned -32 [ 768.780436][T28536] usbtmc 2-1:16.0: can't read capabilities [ 769.517356][T29832] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 769.525108][T28536] usb 5-1: USB disconnect, device number 30 [ 770.433999][T29859] netlink: 'syz.5.8651': attribute type 12 has an invalid length. [ 770.651440][T29867] netlink: 'syz.4.8654': attribute type 1 has an invalid length. [ 770.874113][T29870] ip6gre1: entered promiscuous mode [ 770.892449][T29870] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 770.913253][T29870] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 770.926062][T29874] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8657'. [ 770.929401][T29870] bond3: (slave ip6gre1): making interface the new active one [ 770.947504][T29870] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 771.032928][ T10] usb 2-1: USB disconnect, device number 121 [ 771.089411][T29876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8658'. [ 771.106693][T29876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8658'. [ 771.877658][T29890] netlink: 'syz.6.8665': attribute type 1 has an invalid length. [ 771.927603][T29890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 771.937059][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 771.999129][T29893] bond2: (slave geneve3): making interface the new active one [ 772.080621][T29893] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 772.120130][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 772.146926][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 772.174786][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 772.240443][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 772.301184][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 772.355197][ T10] usb 6-1: Product: syz [ 772.365316][ T10] usb 6-1: Manufacturer: syz [ 772.376417][ T57] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 772.397833][ T10] usb 6-1: SerialNumber: syz [ 772.595905][T28536] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 772.644762][ T10] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 772.755838][T28536] usb 5-1: Using ep0 maxpacket: 8 [ 772.763693][T28536] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 772.763746][T28536] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 772.763769][T28536] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 772.763792][T28536] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 772.763824][T28536] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.763867][T28536] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 772.763889][T28536] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.903230][T28537] usb 6-1: USB disconnect, device number 25 [ 772.911733][T29887] usblp0: removed [ 773.019382][T28536] usb 5-1: GET_CAPABILITIES returned 0 [ 773.019431][T28536] usbtmc 5-1:16.0: can't read capabilities [ 773.378610][ T10] usb 5-1: USB disconnect, device number 31 [ 773.386320][T29906] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 773.414547][T29925] usb 5-1: usbtmc_ioctl_clear_in_halt returned -19 [ 773.596427][T29935] input: syz0 as /devices/virtual/input/input141 [ 774.306659][T29967] netlink: 'syz.5.8686': attribute type 1 has an invalid length. [ 774.499278][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 774.522676][T29974] 8021q: adding VLAN 0 to HW filter on device bond2 [ 774.534404][T29974] bond1: (slave bond2): making interface the new active one [ 774.543799][T29974] bond1: (slave bond2): Enslaving as an active interface with an up link [ 774.694642][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 774.714791][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.736773][ T10] usb 2-1: Product: syz [ 774.744389][ T10] usb 2-1: Manufacturer: syz [ 774.752495][ T10] usb 2-1: SerialNumber: syz [ 774.922555][T29993] binder: 29992:29993 unknown command 0 [ 774.938679][T29993] binder: 29992:29993 ioctl c0306201 80000080 returned -22 [ 775.189645][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 775.231079][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 775.452316][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 775.526045][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 775.539299][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 775.607824][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 775.638373][ T10] usb 2-1: USB disconnect, device number 122 [ 776.647909][T30043] loop3: detected capacity change from 0 to 16384 [ 776.729494][ C1] I/O error, dev loop3, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 776.739726][ C1] I/O error, dev loop3, sector 5376 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 776.752246][ C0] I/O error, dev loop3, sector 5120 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 776.758021][ C1] I/O error, dev loop3, sector 15432 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 776.762209][ C0] Buffer I/O error on dev loop3, logical block 640, async page read [ 776.773107][ C1] I/O error, dev loop3, sector 15432 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 776.782747][ C0] I/O error, dev loop3, sector 5128 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 776.789941][ C1] Buffer I/O error on dev loop3, logical block 1929, async page read [ 776.799786][ C0] Buffer I/O error on dev loop3, logical block 641, async page read [ 776.815984][ C0] I/O error, dev loop3, sector 5136 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 776.825867][ C0] Buffer I/O error on dev loop3, logical block 642, async page read [ 776.833907][ C0] I/O error, dev loop3, sector 5144 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 776.843757][ C0] Buffer I/O error on dev loop3, logical block 643, async page read [ 776.851945][ C0] I/O error, dev loop3, sector 5152 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 776.861856][ C0] Buffer I/O error on dev loop3, logical block 644, async page read [ 776.870065][ C0] I/O error, dev loop3, sector 5160 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 776.879957][ C0] Buffer I/O error on dev loop3, logical block 645, async page read [ 776.888090][ C0] Buffer I/O error on dev loop3, logical block 646, async page read [ 776.896221][ C0] Buffer I/O error on dev loop3, logical block 647, async page read [ 776.904434][ C0] Buffer I/O error on dev loop3, logical block 648, async page read [ 777.153723][T30053] binder: 30052:30053 ioctl c0306201 80000b40 returned -14 [ 777.545908][ T6205] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 777.733993][ T6205] usb 2-1: unable to get BOS descriptor or descriptor too short [ 777.736772][T30072] __nla_validate_parse: 2 callbacks suppressed [ 777.736790][T30072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8713'. [ 777.766323][ T6205] usb 2-1: not running at top speed; connect to a high speed hub [ 777.776816][T30072] netlink: 'syz.4.8713': attribute type 12 has an invalid length. [ 777.787994][T30072] netlink: 'syz.4.8713': attribute type 6 has an invalid length. [ 777.796833][ T6205] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.838291][ T6205] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.868667][ T6205] usb 2-1: string descriptor 0 read error: -22 [ 777.875033][ T6205] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 777.922409][ T6205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.961460][ T6205] usb 2-1: 0:2 : does not exist [ 778.067755][T30079] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8717'. [ 778.790648][T30092] syz_tun: entered allmulticast mode [ 778.807713][T30090] syz_tun: left allmulticast mode [ 778.978072][ T6205] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 779.003975][ T6205] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 779.018727][T28536] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 779.023506][ T6205] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 779.078538][ T6205] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 779.106069][ T6205] usb 2-1: USB disconnect, device number 123 [ 779.176048][T28536] usb 6-1: Using ep0 maxpacket: 8 [ 779.199492][T28536] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.225793][T28536] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.235666][T28536] usb 6-1: config 0 interface 0 has no altsetting 0 [ 779.246035][T28536] usb 6-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 779.255357][T28536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.270743][T28536] usb 6-1: config 0 descriptor?? [ 779.485363][T28536] usbhid 6-1:0.0: can't add hid device: -71 [ 779.500255][T28536] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 779.522418][T28536] usb 6-1: USB disconnect, device number 26 [ 779.669951][T30119] netlink: 'syz.4.8734': attribute type 4 has an invalid length. [ 780.446224][T30154] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8747'. [ 780.456368][T30154] netlink: 'syz.7.8747': attribute type 14 has an invalid length. [ 780.489909][T30154] vxlan1: entered promiscuous mode [ 780.498582][ T6212] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.517046][ T6212] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.530803][ T6212] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.541827][ T6212] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 780.716854][T28536] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 780.875972][T28536] usb 6-1: Using ep0 maxpacket: 8 [ 780.884136][T28536] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 780.894208][T28536] usb 6-1: config 0 has no interface number 0 [ 780.900598][T28536] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 780.912835][T28536] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 780.947285][T28536] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 780.969851][T28536] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 780.983574][T28536] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 780.999249][T28536] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.010486][T28536] usb 6-1: config 0 descriptor?? [ 781.022995][T28536] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 781.436038][T28536] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 781.531645][ T5824] usb 6-1: USB disconnect, device number 27 [ 781.531694][ C0] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 781.545355][ T5824] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 781.615894][T28536] usb 5-1: Using ep0 maxpacket: 32 [ 781.627395][T28536] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 781.638860][T28536] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 781.657522][T28536] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 781.683105][T28536] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 781.698656][T28536] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 781.710585][T28536] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.719718][T28536] usb 5-1: Product: syz [ 781.724758][T28536] usb 5-1: Manufacturer: syz [ 781.729650][T28536] usb 5-1: SerialNumber: syz [ 781.745438][ C1] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 781.756698][T28536] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input142 [ 781.966138][T28536] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 781.974634][T28536] (id 0x00) [ 782.035789][T28536] rc_core: IR keymap rc-imon-pad not found [ 782.041761][T28536] Registered IR keymap rc-empty [ 782.047841][T28536] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 782.058737][T28536] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 782.173922][T28536] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 782.195139][T28536] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input143 [ 782.256097][T28536] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:32> initialized [ 782.495280][T25626] usb 5-1: USB disconnect, device number 32 [ 782.990532][T30230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8782'. [ 783.002541][T30230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8782'. [ 783.014854][T30230] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8782'. [ 783.026594][T30230] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8782'. [ 783.119520][T30234] lo: Caught tx_queue_len zero misconfig [ 783.582186][T30253] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.753548][T30262] Invalid argument reading file caps for ./file0 [ 784.142287][T30275] netlink: 'syz.4.8801': attribute type 9 has an invalid length. [ 784.150684][T30275] netlink: 'syz.4.8801': attribute type 11 has an invalid length. [ 784.166366][T30275] netlink: 'syz.4.8801': attribute type 12 has an invalid length. [ 784.199756][T30275] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.8801'. [ 784.226807][T30275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8801'. [ 784.265160][T30280] ALSA: seq fatal error: cannot create timer (-16) [ 784.426374][T25626] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 784.597952][T25626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 784.610327][T25626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.624844][T25626] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 784.636329][T25626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.647581][T25626] usb 6-1: config 0 descriptor?? [ 784.795843][ T6205] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 784.952045][ T6205] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 784.964826][ T6205] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 784.974568][ T6205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.982784][ T6205] usb 2-1: Product: syz [ 784.987180][ T6205] usb 2-1: Manufacturer: syz [ 784.991838][ T6205] usb 2-1: SerialNumber: syz [ 785.008813][ T6205] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 785.068545][T25626] elan 0003:04F3:0755.0076: unknown main item tag 0x0 [ 785.075517][T25626] elan 0003:04F3:0755.0076: unknown main item tag 0x0 [ 785.082825][T25626] elan 0003:04F3:0755.0076: unknown main item tag 0x0 [ 785.089744][T25626] elan 0003:04F3:0755.0076: unknown main item tag 0x0 [ 785.097878][T25626] elan 0003:04F3:0755.0076: unknown main item tag 0x0 [ 785.107343][T25626] elan 0003:04F3:0755.0076: failed to start in urb: -90 [ 785.116058][T25626] elan 0003:04F3:0755.0076: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 785.280330][T25626] usb 6-1: USB disconnect, device number 28 [ 785.421506][ T6205] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 785.432974][ T6205] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 785.441744][ T6205] usb 2-1: media controller created [ 785.459277][ T6205] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.535828][ T5824] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 785.569756][ T6205] usb 2-1: USB disconnect, device number 124 [ 785.695856][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 785.702495][ T5824] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 785.723146][ T5824] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 785.746378][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 785.754595][ T5824] usb 5-1: Product: syz [ 785.760613][ T5824] usb 5-1: Manufacturer: syz [ 785.765283][ T5824] usb 5-1: SerialNumber: syz [ 785.774554][ T5824] usb 5-1: config 0 descriptor?? [ 785.790916][T30302] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 785.807712][ T5824] hub 5-1:0.0: bad descriptor, ignoring hub [ 785.813787][ T5824] hub 5-1:0.0: probe with driver hub failed with error -5 [ 785.915072][T30307] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 786.189796][T30322] kvm: user requested TSC rate below hardware speed [ 786.234912][ T6205] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 786.305921][ T5824] usb 5-1: reset high-speed USB device number 33 using dummy_hcd [ 786.322229][ T5824] usb 5-1: device reset changed ep0 maxpacket size! [ 786.344358][ T5824] usb 5-1: USB disconnect, device number 33 [ 786.396335][ T6205] usb 6-1: Using ep0 maxpacket: 32 [ 786.408574][ T6205] usb 6-1: config 0 interface 0 has no altsetting 0 [ 786.433888][ T6205] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 786.453725][ T6205] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.472438][ T6205] usb 6-1: Product: syz [ 786.480573][ T6205] usb 6-1: Manufacturer: syz [ 786.485312][ T6205] usb 6-1: SerialNumber: syz [ 786.496852][ T6205] usb 6-1: config 0 descriptor?? [ 786.612553][T30334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 786.633199][T30334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 786.666095][ T5824] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 786.843918][ T5824] usb 5-1: Using ep0 maxpacket: 8 [ 786.859754][T30334] hsr0: left allmulticast mode [ 786.870779][ T5824] usb 5-1: unable to get BOS descriptor or descriptor too short [ 786.876009][T30334] hsr_slave_0: left allmulticast mode [ 786.884916][T30334] hsr_slave_1: left allmulticast mode [ 786.895017][ T5824] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 786.913994][ T5824] usb 5-1: can't read configurations, error -71 [ 786.933239][ T1330] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.946070][ T6205] gs_usb 6-1:0.0: Configuring for 82 interfaces [ 786.956126][ T1330] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.971715][T30354] netlink: 'syz.7.8837': attribute type 2 has an invalid length. [ 786.981034][T30354] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8837'. [ 786.990816][ T1330] netdevsim netdevsim6 netdevsim0: unset [1, 1] type 2 family 0 port 48024 - 0 [ 787.004565][ T1330] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.024528][ T1330] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.054045][ T1330] netdevsim netdevsim6 netdevsim1: unset [1, 1] type 2 family 0 port 48024 - 0 [ 787.068548][ T1330] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.100326][ T1330] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.115390][ T1330] netdevsim netdevsim6 netdevsim2: unset [1, 1] type 2 family 0 port 48024 - 0 [ 787.129058][ T1330] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.138254][ T1330] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.151426][ T1330] netdevsim netdevsim6 netdevsim3: unset [1, 1] type 2 family 0 port 48024 - 0 [ 787.196499][ T30] audit: type=1326 audit(1768052075.354:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30359 comm="syz.1.8840" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff1539 code=0x0 [ 787.566785][ T6205] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 787.689111][ T6205] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 787.705579][ T6205] usb 6-1: USB disconnect, device number 29 [ 787.757219][ T5824] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 787.935892][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 787.944782][ T5824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 23, changing to 8 [ 787.956765][ T5824] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 787.971115][ T5824] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 787.980639][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.991597][ T5824] usb 5-1: config 0 descriptor?? [ 788.416087][ T5824] lg-g15 0003:046D:C222.0077: hidraw0: USB HID v0.05 Device [HID 046d:c222] on usb-dummy_hcd.4-1/input0 [ 788.525921][T28536] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 788.642184][ T5824] usb 5-1: USB disconnect, device number 35 [ 788.680934][T28536] usb 6-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 788.704108][T28536] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 788.718845][T28536] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 788.730307][T28536] usb 6-1: config 0 interface 0 has no altsetting 0 [ 788.739139][T28536] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 788.748646][T28536] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 788.757488][T28536] usb 6-1: Product: syz [ 788.761813][T28536] usb 6-1: Manufacturer: syz [ 788.767574][T28536] usb 6-1: SerialNumber: syz [ 788.775043][T28536] usb 6-1: config 0 descriptor?? [ 788.781132][T30403] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 788.799049][T28536] usb 6-1: selecting invalid altsetting 0 [ 789.022419][T30403] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 789.034947][T30403] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 789.043247][T30403] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 789.051498][T30403] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 789.059810][T30403] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 789.073397][T30403] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 789.083472][T30428] netlink: 'syz.1.8871': attribute type 9 has an invalid length. [ 789.092079][T30428] netlink: 'syz.1.8871': attribute type 11 has an invalid length. [ 789.095223][T30403] usb 6-1: cannot submit urb 0, error -2: endpoint not enabled [ 789.103271][T30428] netlink: 'syz.1.8871': attribute type 12 has an invalid length. [ 789.112537][ T6205] usb 6-1: USB disconnect, device number 30 [ 789.118093][T30428] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.8871'. [ 789.134315][T30428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8871'. [ 789.402226][T30441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8874'. [ 789.413724][T30441] netlink: 'syz.1.8874': attribute type 5 has an invalid length. [ 789.994733][T30465] input: syz0 as /devices/virtual/input/input144 [ 790.110771][T30469] vivid-001: disconnect [ 790.199089][T30468] vivid-001: reconnect [ 790.819855][T30504] kernel read not supported for file /file0 (pid: 30504 comm: syz.5.8904) [ 790.860248][ T30] audit: type=1800 audit(1768052079.014:568): pid=30504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8904" name="file0" dev="mqueue" ino=135751 res=0 errno=0 [ 791.726650][T30524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8914'. [ 791.805165][T30526] loop7: detected capacity change from 0 to 7 [ 791.817063][ T5843] Dev loop7: unable to read RDB block 7 [ 791.822734][ T5843] loop7: AHDI p3 p4 [ 791.831927][ T5843] loop7: partition table partially beyond EOD, truncated [ 791.840112][ T5843] loop7: p3 start 1886353253 is beyond EOD, truncated [ 791.850167][T30526] Dev loop7: unable to read RDB block 7 [ 791.857454][T30526] loop7: AHDI p3 p4 [ 791.862797][T30526] loop7: partition table partially beyond EOD, truncated [ 791.871177][T30526] loop7: p3 start 1886353253 is beyond EOD, truncated [ 792.144150][ T30] audit: type=1326 audit(1768052080.294:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30539 comm="syz.5.8922" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70dd539 code=0x0 [ 792.576192][ T5824] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 792.745839][ T5824] usb 5-1: Using ep0 maxpacket: 16 [ 792.752945][ T5824] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 792.771753][ T5824] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.783563][ T5824] usb 5-1: config 0 has no interface number 0 [ 792.792777][ T5824] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 792.804872][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.813089][ T5824] usb 5-1: Product: syz [ 792.817430][ T5824] usb 5-1: Manufacturer: syz [ 792.822253][ T5824] usb 5-1: SerialNumber: syz [ 792.829895][ T5824] usb 5-1: config 0 descriptor?? [ 792.849613][ T5824] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 792.857939][ T5824] uvcvideo 5-1:0.105: No valid video chain found. [ 793.086539][ T5824] usb 5-1: USB disconnect, device number 36 [ 793.104754][T30574] binder: 30573:30574 ioctl c0306201 800003c0 returned -14 [ 794.164831][ T30] audit: type=1326 audit(1768052082.314:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30597 comm="syz.7.8948" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 794.374795][T30606] vivid-003: disconnect [ 794.513266][T30603] vivid-003: reconnect [ 794.726841][ T6205] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 794.895979][ T6205] usb 2-1: Using ep0 maxpacket: 32 [ 794.903011][ T6205] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 794.911590][ T6205] usb 2-1: config 0 has no interface number 0 [ 794.917911][ T5917] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 794.925593][ T6205] usb 2-1: config 0 interface 184 has no altsetting 0 [ 794.934974][ T6205] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 794.944343][ T6205] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.952555][ T6205] usb 2-1: Product: syz [ 794.956936][ T6205] usb 2-1: Manufacturer: syz [ 794.961545][ T6205] usb 2-1: SerialNumber: syz [ 794.968607][ T6205] usb 2-1: config 0 descriptor?? [ 794.981181][ T6205] smsc75xx v1.0.0 [ 795.096269][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 795.103879][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 795.116291][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 795.129180][ T5917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 795.140805][ T5917] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 795.150100][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.188763][ T5917] usb 5-1: config 0 descriptor?? [ 795.194562][T30622] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 795.222300][ T5917] hub 5-1:0.0: USB hub found [ 795.239510][T30631] pim6reg1: entered promiscuous mode [ 795.245080][T30631] pim6reg1: entered allmulticast mode [ 795.425783][ T5917] hub 5-1:0.0: 1 port detected [ 796.010775][ T6205] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 796.216367][ T6205] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 796.250141][ T6205] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 796.285724][ T6205] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 796.317376][ T6205] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 796.352490][ T6205] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 796.400431][ T6205] usb 2-1: USB disconnect, device number 125 [ 796.958493][ T10] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 797.058958][T30694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8988'. [ 797.145890][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 797.152541][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 797.165833][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 797.178041][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 797.189563][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 797.226260][ T5917] usb 5-1: USB disconnect, device number 37 [ 797.233685][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.265929][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 797.275156][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.501859][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 797.508238][ T10] usbtmc 6-1:16.0: can't read capabilities [ 797.828019][T30679] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 797.828321][ T10] usb 6-1: USB disconnect, device number 31 [ 797.864072][T30712] usbtmc 6-1:16.0: usb_control_msg returned -19 [ 798.156742][ T5824] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 798.328952][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 798.339155][ T5824] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 798.355498][ T5824] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 798.367003][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.375034][ T5824] usb 2-1: Product: syz [ 798.379833][ T5824] usb 2-1: Manufacturer: syz [ 798.384456][ T5824] usb 2-1: SerialNumber: syz [ 798.392308][ T5824] usb 2-1: config 0 descriptor?? [ 798.403289][T30718] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 798.413382][T30718] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 798.646417][T30718] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 798.660504][T30718] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 798.673238][ T30] audit: type=1326 audit(1768052086.834:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30737 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 798.696927][ T30] audit: type=1326 audit(1768052086.834:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30737 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 798.719623][ T30] audit: type=1326 audit(1768052086.834:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30737 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 798.745891][ T30] audit: type=1326 audit(1768052086.834:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30737 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 798.771435][ T30] audit: type=1326 audit(1768052086.834:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30737 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 798.815402][ T30] audit: type=1326 audit(1768052086.834:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30737 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 798.842018][ T30] audit: type=1326 audit(1768052086.834:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30737 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 798.866760][ T30] audit: type=1326 audit(1768052086.834:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30737 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 798.890655][ T30] audit: type=1326 audit(1768052086.834:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30737 comm="syz.5.9006" exe="/root/syz-executor" sig=0 arch=40000003 syscall=446 compat=1 ip=0xf70dd539 code=0x7ffc0000 [ 798.940192][T30742] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.985557][T30747] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 799.047555][T30742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.064408][T30742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.239036][T25591] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.252599][T25591] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.268652][T25591] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.278803][T25591] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.290752][T25591] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.304774][T25591] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.316288][T25591] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 799.325293][T25591] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.428865][T30756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9015'. [ 799.482230][T30758] loop2: detected capacity change from 0 to 7 [ 799.494062][T30758] Dev loop2: unable to read RDB block 7 [ 799.500902][T30758] loop2: unable to read partition table [ 799.507266][T30758] loop2: partition table beyond EOD, truncated [ 799.514448][T30758] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 799.733662][ T5824] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 799.779625][ T5824] dm9601 2-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 799.805575][ T5824] usb 2-1: USB disconnect, device number 126 [ 799.819989][ T5824] dm9601 2-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 799.885871][ T5917] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 800.020326][T30775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9023'. [ 800.031232][T30775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9023'. [ 800.045511][T30775] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9023'. [ 800.058933][ T5917] usb 6-1: config 0 has an invalid interface number: 128 but max is 0 [ 800.068757][ T5917] usb 6-1: config 0 has no interface number 0 [ 800.078129][ T5917] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 800.087427][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.096299][ T5917] usb 6-1: Product: syz [ 800.100495][ T5917] usb 6-1: Manufacturer: syz [ 800.105150][ T5917] usb 6-1: SerialNumber: syz [ 800.116475][ T5917] usb 6-1: config 0 descriptor?? [ 800.310501][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 800.312240][ T30] audit: type=1326 audit(1768052088.464:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.7.9027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 800.372519][ T30] audit: type=1326 audit(1768052088.464:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.7.9027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 800.422445][ T30] audit: type=1326 audit(1768052088.464:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.7.9027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 800.451254][ T30] audit: type=1326 audit(1768052088.464:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.7.9027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 800.478711][ T30] audit: type=1326 audit(1768052088.464:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.7.9027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 800.535439][ T30] audit: type=1326 audit(1768052088.464:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.7.9027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=185 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 800.555551][ T5917] usb 6-1: Firmware: major: 0, minor: 83, hardware type: ATUSB (1) [ 800.582971][ T30] audit: type=1326 audit(1768052088.464:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.7.9027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 800.625520][ T30] audit: type=1326 audit(1768052088.464:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.7.9027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 800.697461][ T30] audit: type=1326 audit(1768052088.464:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.7.9027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 800.720563][ T5824] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 800.769710][ T30] audit: type=1326 audit(1768052088.484:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30782 comm="syz.7.9027" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 800.777260][ T5917] usb 6-1: failed to fetch extended address, random address set [ 800.899026][ T5824] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 800.908400][ T5824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.921107][ T5824] usb 2-1: Product: syz [ 800.926131][ T5824] usb 2-1: Manufacturer: syz [ 800.930761][ T5824] usb 2-1: SerialNumber: syz [ 800.935329][ T5917] usb 6-1: USB disconnect, device number 32 [ 800.938616][ T5824] usb 2-1: config 0 descriptor?? [ 801.088152][T25626] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 801.191495][ T5824] usb 2-1: USB disconnect, device number 127 [ 801.275844][T25626] usb 5-1: Using ep0 maxpacket: 32 [ 801.287535][T25626] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 801.302600][T25626] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 801.314764][T25626] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 801.326240][T25626] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 801.342093][T25626] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 801.351737][T25626] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.359882][T25626] usb 5-1: Product: syz [ 801.364162][T25626] usb 5-1: Manufacturer: syz [ 801.368995][T25626] usb 5-1: SerialNumber: syz [ 801.382293][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 801.393040][T25626] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input145 [ 801.623357][T25626] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 801.632404][T25626] (id 0x00) [ 801.695830][T25626] rc_core: IR keymap rc-imon-pad not found [ 801.701693][T25626] Registered IR keymap rc-empty [ 801.710089][T25626] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 801.721267][T25626] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 801.826897][T25626] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 801.930392][T25626] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input146 [ 801.964450][T25626] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:38> initialized [ 802.014681][T25626] usb 5-1: USB disconnect, device number 38 [ 802.595939][ T5917] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 802.745812][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 802.753897][ T5917] usb 6-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30 [ 802.769238][ T5917] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.781680][ T5917] usb 6-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 802.813406][ T5917] usb 6-1: config 0 interface 0 has no altsetting 0 [ 802.820133][ T5824] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 802.837726][ T5917] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 802.867899][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.879997][ T5917] usb 6-1: config 0 descriptor?? [ 802.889884][T30853] netlink: 'syz.7.9058': attribute type 1 has an invalid length. [ 802.973920][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.001420][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.025084][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 803.038708][ T5824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 803.048143][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.069487][ T5824] usb 2-1: config 0 descriptor?? [ 803.183733][T30864] netlink: 'syz.4.9063': attribute type 9 has an invalid length. [ 803.191816][T30864] netlink: 'syz.4.9063': attribute type 11 has an invalid length. [ 803.200870][T30864] netlink: 'syz.4.9063': attribute type 12 has an invalid length. [ 803.209755][T30864] netlink: 210020 bytes leftover after parsing attributes in process `syz.4.9063'. [ 803.219798][T30864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9063'. [ 803.318307][ T5917] sony 0003:054C:024B.0078: hiddev0,hidraw0: USB HID v0.03 Device [HID 054c:024b] on usb-dummy_hcd.5-1/input0 [ 803.367308][ T5917] sony 0003:054C:024B.0078: failed to claim input [ 803.538153][ T5917] usb 6-1: USB disconnect, device number 33 [ 803.558175][ T5824] plantronics 0003:047F:FFFF.0079: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 804.415844][T25626] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 804.585814][T25626] usb 6-1: Using ep0 maxpacket: 16 [ 804.592149][T25626] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 804.604646][T25626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.616305][T25626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.629182][T25626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.640543][T25626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.652095][T25626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.663740][T25626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.675192][T25626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.686999][T25626] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.698956][T25626] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 804.708679][T25626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 804.716984][T25626] usb 6-1: SerialNumber: syz [ 804.725423][T25626] usb 6-1: config 0 descriptor?? [ 804.738007][T25626] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input147 [ 804.979931][ T5824] usb 6-1: USB disconnect, device number 34 [ 804.981544][ T5186] bcm5974 6-1:0.0: could not read from device [ 804.997901][ T7560] bcm5974 6-1:0.0: could not read from device [ 805.575371][T30921] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9089'. [ 805.812294][T30934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9093'. [ 805.841718][T30934] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9093'. [ 806.017056][T25626] usb 2-1: USB disconnect, device number 2 [ 807.002623][ T5912] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 807.110940][T30974] kvm: user requested TSC rate below hardware speed [ 807.179074][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 807.187438][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 807.199693][ T5912] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 807.215074][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.235151][ T5912] usb 2-1: config 0 descriptor?? [ 807.328888][T30983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9115'. [ 807.452884][ T5912] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 807.516205][ T5824] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 807.679060][ T5824] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x93, changing to 0x83 [ 807.695784][ T5824] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 807.724493][ T5824] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x83 has invalid maxpacket 90, setting to 64 [ 807.737502][ T5824] usb 5-1: config 0 interface 0 has no altsetting 0 [ 807.748433][ T5824] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 807.758171][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 807.766721][ T5824] usb 5-1: Product: syz [ 807.770935][ T5824] usb 5-1: Manufacturer: syz [ 807.775552][ T5824] usb 5-1: SerialNumber: syz [ 807.783306][ T5824] usb 5-1: config 0 descriptor?? [ 807.789306][T30979] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 807.804029][ T5824] usb 5-1: selecting invalid altsetting 0 [ 808.012024][ T5824] usb 2-1: USB disconnect, device number 3 [ 808.025966][T30979] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 808.034076][T30979] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 808.043568][T30979] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 808.051855][T30979] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 808.061601][T30979] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 808.069748][T30979] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 808.077676][T30979] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 808.085484][T30979] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 808.094703][T30979] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 808.103960][T25626] usb 5-1: USB disconnect, device number 39 [ 808.106324][T30979] usb 5-1: cannot submit urb 0, error -19: no device [ 808.583926][T31001] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 808.590470][T31001] syzkaller1: Refused to change device type [ 808.710034][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.717848][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.534786][T31043] netlink: 'syz.4.9141': attribute type 6 has an invalid length. [ 809.890695][T31054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 810.536953][ T5912] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 810.698539][ T5912] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 810.711218][ T5912] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 810.723717][ T5912] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 810.734466][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.747669][T31067] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 810.760860][T31067] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 810.783227][ T5912] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 811.004094][ T5912] usb 6-1: USB disconnect, device number 35 [ 811.202840][T31078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9155'. [ 811.228350][T31078] vxlan2: entered promiscuous mode [ 811.235515][T25076] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.253046][T25076] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.262706][T25076] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.272998][T25076] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 812.099715][T31100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9163'. [ 812.145894][ T5912] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 812.316127][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 812.323118][ T5912] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.353544][ T5912] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 812.365440][ T5912] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 812.388768][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 812.415789][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.460561][ T5912] usb 5-1: Product: syz [ 812.464770][ T5912] usb 5-1: Manufacturer: syz [ 812.490022][ T5912] usb 5-1: SerialNumber: syz [ 812.551570][T31115] input: syz0 as /devices/virtual/input/input148 [ 813.363236][T31137] netlink: 'syz.6.9179': attribute type 1 has an invalid length. [ 813.381682][T31137] netlink: 'syz.6.9179': attribute type 6 has an invalid length. [ 813.424244][T31137] netlink: 'syz.6.9179': attribute type 3 has an invalid length. [ 813.765818][T25626] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 813.834291][ T5912] cdc_ncm 5-1:1.0: bind() failure [ 813.856769][ T5912] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 813.877467][ T5912] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 813.908005][ T5912] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 813.917791][T25626] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 813.927103][ T5912] usb 5-1: USB disconnect, device number 40 [ 813.936084][T25626] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 813.965753][T25626] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 813.986890][T25626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.010872][T31145] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 814.029878][T25626] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 814.326506][T25626] usb 6-1: USB disconnect, device number 36 [ 814.706437][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9194'. [ 814.761688][T31175] netlink: 'syz.4.9195': attribute type 2 has an invalid length. [ 814.772625][T31173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9194'. [ 814.774316][T31175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9195'. [ 814.786058][T31173] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9194'. [ 814.847794][T31173] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9194'. [ 815.215933][ T5824] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 815.376144][ T5824] usb 2-1: Using ep0 maxpacket: 16 [ 815.383781][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.395254][ T5824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.407198][ T5824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 815.421638][ T5824] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 815.431248][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.442369][ T5824] usb 2-1: config 0 descriptor?? [ 815.909197][ T5824] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.007A/input/input149 [ 815.957638][ T5824] microsoft 0003:045E:07DA.007A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 816.037512][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 816.037527][ T30] audit: type=1326 audit(1768052104.194:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31216 comm="syz.7.9214" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 816.147290][T31181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.159362][T31181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.167574][ T5824] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 816.190185][ T5912] usb 2-1: USB disconnect, device number 4 [ 816.330336][ T5824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.350310][ T5824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 816.367609][ T5824] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 816.376899][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 816.385008][ T5824] usb 6-1: SerialNumber: syz [ 816.603236][ T5824] usb 6-1: 0:2 : does not exist [ 816.617828][ T5824] usb 6-1: unit 16 not found! [ 816.645449][ T5824] usb 6-1: USB disconnect, device number 37 [ 816.682406][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.794359][T31221] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9216'. [ 817.158201][T31237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9222'. [ 817.191324][T31237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9222'. [ 817.736175][ T5824] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 817.861216][T31255] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9229'. [ 817.905864][ T5824] usb 2-1: Using ep0 maxpacket: 8 [ 817.913473][ T5824] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 817.936468][ T5824] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 817.971498][ T5824] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 817.991869][ T5824] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 818.012636][ T5824] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.027904][ T5824] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 818.038086][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.279101][ T5824] usb 2-1: GET_CAPABILITIES returned 0 [ 818.295551][ T5824] usbtmc 2-1:16.0: can't read capabilities [ 818.632546][T31251] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 818.632914][ T5824] usb 2-1: USB disconnect, device number 5 [ 818.716467][ T30] audit: type=1804 audit(1768052106.864:598): pid=31289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.9241" name="/newroot/190/file1" dev="tmpfs" ino=983 res=1 errno=0 [ 818.833549][T31291] input: syz1 as /devices/virtual/input/input150 [ 819.319914][T31302] input: syz1 as /devices/virtual/input/input151 [ 820.276119][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 820.438090][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 820.450879][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 820.461689][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 820.471961][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.485181][T31335] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 820.503867][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 820.751737][ T10] usb 5-1: USB disconnect, device number 41 [ 821.268271][T31380] gre0: left promiscuous mode [ 821.273010][T31380] gre0: left allmulticast mode [ 821.281835][T31380] gretap0: entered promiscuous mode [ 821.295277][T31380] sit0: left promiscuous mode [ 821.333930][T31380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.342707][T31380] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.355219][T31380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 821.485948][T25626] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 821.582043][T31385] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9282'. [ 821.642301][T25626] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 821.675948][T25626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 821.704511][T25626] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 821.736844][T25626] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 821.767104][T25626] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 821.785891][T25626] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.807693][T25626] usb 6-1: config 0 descriptor?? [ 821.813515][T31379] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 822.246603][T25626] plantronics 0003:047F:FFFF.007B: reserved main item tag 0xd [ 822.258838][T25626] plantronics 0003:047F:FFFF.007B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 822.445834][ T5824] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 822.518103][T25626] usb 6-1: USB disconnect, device number 38 [ 822.605863][ T5824] usb 5-1: Using ep0 maxpacket: 32 [ 822.613154][ T5824] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 822.621770][ T5824] usb 5-1: config 0 has no interface number 0 [ 822.628569][ T5824] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 822.641307][ T5824] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 822.650755][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.658915][ T5824] usb 5-1: Product: syz [ 822.663130][ T5824] usb 5-1: Manufacturer: syz [ 822.668280][ T5824] usb 5-1: SerialNumber: syz [ 822.674684][ T5824] usb 5-1: config 0 descriptor?? [ 822.680568][T31397] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 822.894348][T31397] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 823.335833][ T5912] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 823.489539][ T5912] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 823.500678][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.509443][ T5912] usb 6-1: Product: syz [ 823.513911][ T5912] usb 6-1: Manufacturer: syz [ 823.519270][ T5912] usb 6-1: SerialNumber: syz [ 823.526442][ T5912] usb 6-1: config 0 descriptor?? [ 823.920252][ T5824] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 823.932591][ T5824] asix 5-1:0.188: probe with driver asix failed with error -71 [ 823.944173][ T5912] usb 6-1: Firmware: major: 122, minor: 42, hardware type: UNKNOWN (66) [ 823.956160][ T5824] usb 5-1: USB disconnect, device number 42 [ 824.145502][ T5912] usb 6-1: Read permanent extended address e6:cb:90:21:d6:84:5f:43 from device [ 824.155592][ T5912] usb 6-1: atusb_probe: initialization failed, error = -524 [ 824.164619][ T5912] atusb 6-1:0.0: probe with driver atusb failed with error -524 [ 824.259654][T31417] input: syz0 as /devices/virtual/input/input153 [ 824.400833][T25626] usb 6-1: USB disconnect, device number 39 [ 824.531438][T31424] gretap0: left promiscuous mode [ 824.561589][T31424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.572229][T31424] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.637606][T31424] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 824.656844][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 824.846250][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 824.856136][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.875795][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 824.887524][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 824.905936][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 824.949711][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 825.006699][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 825.046418][ T10] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 825.064446][ T10] usb 2-1: Manufacturer: syz [ 825.076345][ T10] usb 2-1: config 0 descriptor?? [ 825.378237][ T10] rc_core: IR keymap rc-hauppauge not found [ 825.394192][ T10] Registered IR keymap rc-empty [ 825.404181][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.438497][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.487448][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 825.520034][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input154 [ 825.539516][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.565936][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.587005][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.635905][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.675886][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.705932][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.725963][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.746245][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.765964][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.785960][ T10] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 825.810252][ T10] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 825.825992][ T10] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 825.846071][ T10] usb 2-1: USB disconnect, device number 6 [ 826.745901][ T10] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 826.897384][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.909003][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 826.919924][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 826.931429][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 826.940838][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.949121][ T10] usb 5-1: Product: syz [ 826.953417][ T10] usb 5-1: Manufacturer: syz [ 826.958137][ T10] usb 5-1: SerialNumber: syz [ 827.355843][ T57] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 827.505824][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 827.512698][ T57] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 827.524711][ T57] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 827.534946][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 827.545227][ T57] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 827.555865][ T57] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 827.569057][ T57] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 827.578328][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.795558][ T57] usb 6-1: GET_CAPABILITIES returned 0 [ 827.802765][ T57] usbtmc 6-1:16.0: can't read capabilities [ 827.977302][ T10] cdc_ncm 5-1:1.0: bind() failure [ 828.000656][ T10] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 828.009914][ T57] usb 6-1: USB disconnect, device number 40 [ 828.021000][ T10] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 828.035038][ T10] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 828.050685][ T10] usb 5-1: USB disconnect, device number 43 [ 828.631868][T31510] vivid-008: disconnect [ 828.679253][T31505] vivid-008: reconnect [ 829.715163][T31557] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 830.847510][ T30] audit: type=1326 audit(1768052119.004:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31586 comm="syz.1.9369" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff1539 code=0x0 [ 831.080583][T31597] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.9372'. [ 831.959812][T31618] netlink: 'syz.6.9382': attribute type 12 has an invalid length. [ 832.000130][T31618] netlink: 'syz.6.9382': attribute type 29 has an invalid length. [ 832.008622][ T5912] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 832.016484][T31618] netlink: 148 bytes leftover after parsing attributes in process `syz.6.9382'. [ 832.175867][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 832.193937][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.216226][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.235981][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 832.266167][ T5912] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 832.279312][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.291507][T31630] [ 832.293868][T31630] ===================================================== [ 832.300800][T31630] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 832.307853][ T5912] usb 2-1: config 0 descriptor?? [ 832.308698][T31630] syzkaller #0 Tainted: G L [ 832.308712][T31630] ----------------------------------------------------- [ 832.326625][T31630] syz.5.9388/31630 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 832.334365][T31630] ffffffff8dc0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 832.343110][T31630] [ 832.343110][T31630] and this task is already holding: [ 832.350492][T31630] ffff888033269420 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 832.359148][T31630] which would create a new lock dependency: [ 832.365053][T31630] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 832.372720][T31630] [ 832.372720][T31630] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 832.382247][T31630] (&dev->event_lock#2){..-.}-{3:3} [ 832.382288][T31630] [ 832.382288][T31630] ... which became SOFTIRQ-irq-safe at: [ 832.395620][T31630] lock_acquire+0x107/0x340 [ 832.400236][T31630] _raw_spin_lock_irqsave+0x40/0x60 [ 832.405523][T31630] input_event+0x76/0xe0 [ 832.409847][T31630] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 832.415560][T31630] __usb_hcd_giveback_urb+0x376/0x540 [ 832.421073][T31630] dummy_timer+0x85f/0x45b0 [ 832.425748][T31630] __hrtimer_run_queues+0x51c/0xc30 [ 832.431098][T31630] hrtimer_run_softirq+0x187/0x2b0 [ 832.436340][T31630] handle_softirqs+0x22b/0x7c0 [ 832.441214][T31630] __irq_exit_rcu+0x60/0x150 [ 832.445880][T31630] irq_exit_rcu+0x9/0x30 [ 832.450198][T31630] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 832.455929][T31630] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 832.461987][T31630] _raw_spin_unlock_irqrestore+0x47/0x80 [ 832.467696][T31630] dummy_urb_enqueue+0x58a/0x780 [ 832.472807][T31630] usb_hcd_submit_urb+0x328/0x1b80 [ 832.478092][T31630] atp_open+0x63/0xc0 [ 832.482165][T31630] input_open_device+0x1d3/0x390 [ 832.487191][T31630] mousedev_open_device+0xcc/0x150 [ 832.492389][T31630] mousedev_open+0x2ef/0x4a0 [ 832.497073][T31630] chrdev_open+0x4cc/0x5e0 [ 832.501575][T31630] do_dentry_open+0x7ce/0x1420 [ 832.506420][T31630] vfs_open+0x3b/0x340 [ 832.510570][T31630] path_openat+0x340e/0x3dd0 [ 832.515230][T31630] do_filp_open+0x1fa/0x410 [ 832.519811][T31630] do_sys_openat2+0x121/0x200 [ 832.524574][T31630] __x64_sys_openat+0x138/0x170 [ 832.529719][T31630] do_syscall_64+0xec/0xf80 [ 832.534304][T31630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.540303][T31630] [ 832.540303][T31630] to a SOFTIRQ-irq-unsafe lock: [ 832.547313][T31630] (tasklist_lock){.+.+}-{3:3} [ 832.547337][T31630] [ 832.547337][T31630] ... which became SOFTIRQ-irq-unsafe at: [ 832.559960][T31630] ... [ 832.559968][T31630] lock_acquire+0x107/0x340 [ 832.567123][T31630] _raw_read_lock+0x36/0x50 [ 832.571702][T31630] __do_wait+0xde/0x740 [ 832.576024][T31630] do_wait+0x1e8/0x4f0 [ 832.580173][T31630] kernel_wait+0xab/0x170 [ 832.584582][T31630] call_usermodehelper_exec_work+0xbe/0x230 [ 832.590556][T31630] process_scheduled_works+0xad1/0x1770 [ 832.596189][T31630] worker_thread+0x8a0/0xda0 [ 832.600912][T31630] kthread+0x711/0x8a0 [ 832.605058][T31630] ret_from_fork+0x510/0xa50 [ 832.609728][T31630] ret_from_fork_asm+0x1a/0x30 [ 832.614577][T31630] [ 832.614577][T31630] other info that might help us debug this: [ 832.614577][T31630] [ 832.624800][T31630] Chain exists of: [ 832.624800][T31630] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 832.624800][T31630] [ 832.637931][T31630] Possible interrupt unsafe locking scenario: [ 832.637931][T31630] [ 832.646428][T31630] CPU0 CPU1 [ 832.651781][T31630] ---- ---- [ 832.657214][T31630] lock(tasklist_lock); [ 832.661452][T31630] local_irq_disable(); [ 832.668191][T31630] lock(&dev->event_lock#2); [ 832.675386][T31630] lock(&f_owner->lock); [ 832.682231][T31630] [ 832.685681][T31630] lock(&dev->event_lock#2); [ 832.690547][T31630] [ 832.690547][T31630] *** DEADLOCK *** [ 832.690547][T31630] [ 832.698690][T31630] 5 locks held by syz.5.9388/31630: [ 832.703875][T31630] #0: ffff88804aa58420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 832.713109][T31630] #1: ffff8880487e82c8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: __start_renaming+0x148/0x410 [ 832.723823][T31630] #2: ffffffff9992baf8 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x72c/0x1ab0 [ 832.733313][T31630] #3: ffff888058020b28 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 832.743099][T31630] #4: ffff888033269420 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 832.752193][T31630] [ 832.752193][T31630] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 832.762606][T31630] -> (&dev->event_lock#2){..-.}-{3:3} { [ 832.768445][T31630] IN-SOFTIRQ-W at: [ 832.772588][T31630] lock_acquire+0x107/0x340 [ 832.779317][T31630] _raw_spin_lock_irqsave+0x40/0x60 [ 832.786518][T31630] input_event+0x76/0xe0 [ 832.792767][T31630] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 832.800397][T31630] __usb_hcd_giveback_urb+0x376/0x540 [ 832.807763][T31630] dummy_timer+0x85f/0x45b0 [ 832.814263][T31630] __hrtimer_run_queues+0x51c/0xc30 [ 832.821637][T31630] hrtimer_run_softirq+0x187/0x2b0 [ 832.828844][T31630] handle_softirqs+0x22b/0x7c0 [ 832.835604][T31630] __irq_exit_rcu+0x60/0x150 [ 832.842180][T31630] irq_exit_rcu+0x9/0x30 [ 832.848423][T31630] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 832.856051][T31630] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 832.864026][T31630] _raw_spin_unlock_irqrestore+0x47/0x80 [ 832.871643][T31630] dummy_urb_enqueue+0x58a/0x780 [ 832.878776][T31630] usb_hcd_submit_urb+0x328/0x1b80 [ 832.885882][T31630] atp_open+0x63/0xc0 [ 832.891942][T31630] input_open_device+0x1d3/0x390 [ 832.898871][T31630] mousedev_open_device+0xcc/0x150 [ 832.905977][T31630] mousedev_open+0x2ef/0x4a0 [ 832.912567][T31630] chrdev_open+0x4cc/0x5e0 [ 832.919070][T31630] do_dentry_open+0x7ce/0x1420 [ 832.925826][T31630] vfs_open+0x3b/0x340 [ 832.931890][T31630] path_openat+0x340e/0x3dd0 [ 832.938497][T31630] do_filp_open+0x1fa/0x410 [ 832.944998][T31630] do_sys_openat2+0x121/0x200 [ 832.951692][T31630] __x64_sys_openat+0x138/0x170 [ 832.958556][T31630] do_syscall_64+0xec/0xf80 [ 832.965242][T31630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.973223][T31630] INITIAL USE at: [ 832.977397][T31630] lock_acquire+0x107/0x340 [ 832.983804][T31630] _raw_spin_lock_irqsave+0x40/0x60 [ 832.990925][T31630] input_inject_event+0xa5/0x340 [ 832.997787][T31630] kbd_led_trigger_activate+0xbc/0x100 [ 833.005147][T31630] led_trigger_set+0x52d/0x950 [ 833.011814][T31630] led_trigger_set_default+0x260/0x2a0 [ 833.019185][T31630] led_classdev_register_ext+0x73d/0x960 [ 833.026733][T31630] input_leds_connect+0x517/0x790 [ 833.033674][T31630] input_register_device+0xd00/0x1170 [ 833.041046][T31630] atkbd_connect+0x73b/0xa50 [ 833.047540][T31630] serio_driver_probe+0x82/0xd0 [ 833.054378][T31630] really_probe+0x26d/0xad0 [ 833.060785][T31630] __driver_probe_device+0x18c/0x320 [ 833.068027][T31630] driver_probe_device+0x4f/0x240 [ 833.075226][T31630] __driver_attach+0x349/0x650 [ 833.081894][T31630] bus_for_each_dev+0x233/0x2b0 [ 833.088646][T31630] serio_handle_event+0x1f9/0x8d0 [ 833.095570][T31630] process_scheduled_works+0xad1/0x1770 [ 833.103017][T31630] worker_thread+0x8a0/0xda0 [ 833.109506][T31630] kthread+0x711/0x8a0 [ 833.115478][T31630] ret_from_fork+0x510/0xa50 [ 833.121965][T31630] ret_from_fork_asm+0x1a/0x30 [ 833.128645][T31630] } [ 833.131348][T31630] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 833.140649][T31630] -> (&new->fa_lock){...-}-{3:3} { [ 833.145857][T31630] IN-SOFTIRQ-R at: [ 833.149929][T31630] lock_acquire+0x107/0x340 [ 833.156419][T31630] _raw_read_lock_irqsave+0x48/0x60 [ 833.163435][T31630] kill_fasync+0x199/0x4d0 [ 833.169675][T31630] sock_wake_async+0x137/0x160 [ 833.176365][T31630] sock_def_readable+0x3c1/0x530 [ 833.183119][T31630] tcp_data_queue+0x1e14/0x5e30 [ 833.189794][T31630] tcp_rcv_established+0xf57/0x2580 [ 833.196813][T31630] tcp_v4_do_rcv+0xa90/0x1430 [ 833.203320][T31630] tcp_v4_rcv+0x2675/0x2f20 [ 833.210161][T31630] ip_protocol_deliver_rcu+0x221/0x440 [ 833.217442][T31630] ip_local_deliver_finish+0x3bb/0x6f0 [ 833.224802][T31630] NF_HOOK+0x30c/0x3a0 [ 833.230692][T31630] NF_HOOK+0x30c/0x3a0 [ 833.236679][T31630] __netif_receive_skb+0x143/0x380 [ 833.243607][T31630] process_backlog+0x54f/0x1340 [ 833.250279][T31630] __napi_poll+0xae/0x320 [ 833.256423][T31630] net_rx_action+0x64a/0xe00 [ 833.262834][T31630] handle_softirqs+0x22b/0x7c0 [ 833.269413][T31630] do_softirq+0x76/0xd0 [ 833.275468][T31630] __local_bh_enable_ip+0xf8/0x130 [ 833.282399][T31630] sk_stream_wait_memory+0x71f/0xf70 [ 833.289593][T31630] tcp_sendmsg_locked+0x1dfb/0x5520 [ 833.296704][T31630] tcp_sendmsg+0x2f/0x50 [ 833.302759][T31630] __sock_sendmsg+0x19c/0x270 [ 833.309251][T31630] __sys_sendto+0x3bd/0x520 [ 833.315608][T31630] __ia32_sys_sendto+0xdd/0x100 [ 833.322279][T31630] __do_fast_syscall_32+0x1dc/0x570 [ 833.329464][T31630] do_fast_syscall_32+0x34/0x80 [ 833.336139][T31630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 833.344293][T31630] INITIAL USE at: [ 833.348280][T31630] lock_acquire+0x107/0x340 [ 833.354523][T31630] _raw_write_lock_irq+0x3d/0x50 [ 833.361196][T31630] fasync_remove_entry+0xf1/0x1c0 [ 833.367966][T31630] tun_chr_fasync+0x87/0x1a0 [ 833.374300][T31630] __fput+0x8a2/0xa70 [ 833.380019][T31630] fput_close_sync+0x113/0x220 [ 833.386510][T31630] __ia32_sys_close+0x7f/0x110 [ 833.393173][T31630] __do_fast_syscall_32+0x1dc/0x570 [ 833.400101][T31630] do_fast_syscall_32+0x34/0x80 [ 833.406680][T31630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 833.414740][T31630] INITIAL READ USE at: [ 833.419143][T31630] lock_acquire+0x107/0x340 [ 833.425838][T31630] _raw_read_lock_irqsave+0x48/0x60 [ 833.433351][T31630] kill_fasync+0x199/0x4d0 [ 833.439937][T31630] sock_wake_async+0x137/0x160 [ 833.446869][T31630] sk_wake_async+0x184/0x280 [ 833.453637][T31630] unix_release_sock+0x747/0xc70 [ 833.460764][T31630] unix_release+0x92/0xd0 [ 833.467282][T31630] sock_close+0xc3/0x240 [ 833.473968][T31630] __fput+0x44c/0xa70 [ 833.480119][T31630] task_work_run+0x1d4/0x260 [ 833.486980][T31630] exit_to_user_mode_loop+0xef/0x4e0 [ 833.494446][T31630] __do_fast_syscall_32+0x398/0x570 [ 833.501922][T31630] do_fast_syscall_32+0x34/0x80 [ 833.509176][T31630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 833.517692][T31630] } [ 833.520292][T31630] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 833.529244][T31630] ... acquired at: [ 833.533183][T31630] _raw_read_lock_irqsave+0x48/0x60 [ 833.538666][T31630] kill_fasync+0x199/0x4d0 [ 833.543253][T31630] mousedev_notify_readers+0x6f1/0xc00 [ 833.548984][T31630] mousedev_event+0x602/0x1320 [ 833.553920][T31630] input_handle_events_default+0xd4/0x1a0 [ 833.559820][T31630] input_pass_values+0x288/0x890 [ 833.564951][T31630] input_event_dispose+0x330/0x6b0 [ 833.570232][T31630] input_inject_event+0x1dd/0x340 [ 833.575419][T31630] evdev_write+0x2fc/0x480 [ 833.580084][T31630] vfs_write+0x27e/0xb30 [ 833.584488][T31630] ksys_write+0x145/0x250 [ 833.589175][T31630] __do_fast_syscall_32+0x1dc/0x570 [ 833.594898][T31630] do_fast_syscall_32+0x34/0x80 [ 833.600029][T31630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 833.606543][T31630] [ 833.608947][T31630] -> (&f_owner->lock){....}-{3:3} { [ 833.614274][T31630] INITIAL USE at: [ 833.618189][T31630] lock_acquire+0x107/0x340 [ 833.624261][T31630] _raw_write_lock_irq+0x3d/0x50 [ 833.630765][T31630] __f_setown+0x67/0x370 [ 833.636655][T31630] tun_chr_fasync+0x128/0x1a0 [ 833.643172][T31630] do_vfs_ioctl+0x1064/0x1430 [ 833.649434][T31630] __ia32_compat_sys_ioctl+0x4bd/0x840 [ 833.656475][T31630] __do_fast_syscall_32+0x1dc/0x570 [ 833.663262][T31630] do_fast_syscall_32+0x34/0x80 [ 833.669949][T31630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 833.677935][T31630] INITIAL READ USE at: [ 833.682256][T31630] lock_acquire+0x107/0x340 [ 833.688836][T31630] _raw_read_lock_irqsave+0x48/0x60 [ 833.696032][T31630] send_sigio+0x38/0x370 [ 833.702285][T31630] dnotify_handle_event+0x169/0x440 [ 833.709569][T31630] fsnotify+0x1668/0x1ab0 [ 833.715894][T31630] __fsnotify_parent+0x4c9/0x5d0 [ 833.722913][T31630] notify_change+0xc55/0xf40 [ 833.729588][T31630] chmod_common+0x248/0x400 [ 833.736449][T31630] do_fchmodat+0x12d/0x200 [ 833.742866][T31630] __ia32_sys_fchmodat+0x7d/0x90 [ 833.749828][T31630] __do_fast_syscall_32+0x1dc/0x570 [ 833.757112][T31630] do_fast_syscall_32+0x34/0x80 [ 833.763957][T31630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 833.772276][T31630] } [ 833.774780][T31630] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 833.783628][T31630] ... acquired at: [ 833.787420][T31630] _raw_read_lock_irqsave+0x48/0x60 [ 833.792869][T31630] send_sigio+0x38/0x370 [ 833.797286][T31630] kill_fasync+0x24d/0x4d0 [ 833.801976][T31630] lease_break_callback+0x26/0x30 [ 833.807160][T31630] __break_lease+0x6e3/0x1490 [ 833.812010][T31630] vfs_mknod+0x443/0x580 [ 833.816420][T31630] unix_bind+0x543/0xe50 [ 833.820826][T31630] __sys_bind+0x2c6/0x3e0 [ 833.825320][T31630] __ia32_sys_bind+0x7a/0x90 [ 833.830073][T31630] __do_fast_syscall_32+0x1dc/0x570 [ 833.835450][T31630] do_fast_syscall_32+0x34/0x80 [ 833.840553][T31630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 833.847055][T31630] [ 833.849372][T31630] [ 833.849372][T31630] the dependencies between the lock to be acquired [ 833.849382][T31630] and SOFTIRQ-irq-unsafe lock: [ 833.862893][T31630] -> (tasklist_lock){.+.+}-{3:3} { [ 833.868014][T31630] HARDIRQ-ON-R at: [ 833.872004][T31630] lock_acquire+0x107/0x340 [ 833.878150][T31630] _raw_read_lock+0x36/0x50 [ 833.884391][T31630] __do_wait+0xde/0x740 [ 833.890188][T31630] do_wait+0x1e8/0x4f0 [ 833.895938][T31630] kernel_wait+0xab/0x170 [ 833.901921][T31630] call_usermodehelper_exec_work+0xbe/0x230 [ 833.909464][T31630] process_scheduled_works+0xad1/0x1770 [ 833.916745][T31630] worker_thread+0x8a0/0xda0 [ 833.922977][T31630] kthread+0x711/0x8a0 [ 833.928689][T31630] ret_from_fork+0x510/0xa50 [ 833.934924][T31630] ret_from_fork_asm+0x1a/0x30 [ 833.941420][T31630] SOFTIRQ-ON-R at: [ 833.945392][T31630] lock_acquire+0x107/0x340 [ 833.951668][T31630] _raw_read_lock+0x36/0x50 [ 833.957913][T31630] __do_wait+0xde/0x740 [ 833.963722][T31630] do_wait+0x1e8/0x4f0 [ 833.969446][T31630] kernel_wait+0xab/0x170 [ 833.975420][T31630] call_usermodehelper_exec_work+0xbe/0x230 [ 833.982948][T31630] process_scheduled_works+0xad1/0x1770 [ 833.990129][T31630] worker_thread+0x8a0/0xda0 [ 833.996366][T31630] kthread+0x711/0x8a0 [ 834.002096][T31630] ret_from_fork+0x510/0xa50 [ 834.008519][T31630] ret_from_fork_asm+0x1a/0x30 [ 834.014941][T31630] INITIAL USE at: [ 834.018868][T31630] lock_acquire+0x107/0x340 [ 834.025134][T31630] _raw_write_lock_irq+0x3d/0x50 [ 834.031710][T31630] copy_process+0x2185/0x3950 [ 834.037953][T31630] kernel_clone+0x21e/0x820 [ 834.044013][T31630] user_mode_thread+0xdd/0x140 [ 834.050330][T31630] rest_init+0x23/0x300 [ 834.056051][T31630] start_kernel+0x381/0x3d0 [ 834.062106][T31630] x86_64_start_reservations+0x24/0x30 [ 834.069122][T31630] x86_64_start_kernel+0x143/0x1c0 [ 834.075796][T31630] common_startup_64+0x13e/0x147 [ 834.082291][T31630] INITIAL READ USE at: [ 834.086604][T31630] lock_acquire+0x107/0x340 [ 834.093090][T31630] _raw_read_lock+0x36/0x50 [ 834.099577][T31630] __do_wait+0xde/0x740 [ 834.105740][T31630] do_wait+0x1e8/0x4f0 [ 834.111833][T31630] kernel_wait+0xab/0x170 [ 834.118266][T31630] call_usermodehelper_exec_work+0xbe/0x230 [ 834.126332][T31630] process_scheduled_works+0xad1/0x1770 [ 834.133898][T31630] worker_thread+0x8a0/0xda0 [ 834.140481][T31630] kthread+0x711/0x8a0 [ 834.146543][T31630] ret_from_fork+0x510/0xa50 [ 834.153293][T31630] ret_from_fork_asm+0x1a/0x30 [ 834.160227][T31630] } [ 834.162765][T31630] ... key at: [] tasklist_lock+0x18/0x40 [ 834.170575][T31630] ... acquired at: [ 834.174367][T31630] _raw_read_lock+0x36/0x50 [ 834.179044][T31630] send_sigio+0x101/0x370 [ 834.183540][T31630] dnotify_handle_event+0x169/0x440 [ 834.189003][T31630] fsnotify+0x180b/0x1ab0 [ 834.193501][T31630] fsnotify_move+0x1d7/0x5b0 [ 834.198337][T31630] vfs_rename+0x870/0xee0 [ 834.202866][T31630] do_renameat2+0x538/0x8e0 [ 834.207534][T31630] __ia32_sys_renameat2+0xce/0xe0 [ 834.212808][T31630] __do_fast_syscall_32+0x1dc/0x570 [ 834.218175][T31630] do_fast_syscall_32+0x34/0x80 [ 834.223279][T31630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.229855][T31630] [ 834.232169][T31630] [ 834.232169][T31630] stack backtrace: [ 834.238061][T31630] CPU: 0 UID: 0 PID: 31630 Comm: syz.5.9388 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.238084][T31630] Tainted: [L]=SOFTLOCKUP [ 834.238090][T31630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 834.238113][T31630] Call Trace: [ 834.238123][T31630] [ 834.238129][T31630] dump_stack_lvl+0xe8/0x150 [ 834.238151][T31630] __lock_acquire+0x2a95/0x2cf0 [ 834.238174][T31630] ? send_sigio+0x101/0x370 [ 834.238194][T31630] lock_acquire+0x107/0x340 [ 834.238207][T31630] ? send_sigio+0x101/0x370 [ 834.238226][T31630] ? do_raw_spin_lock+0x121/0x290 [ 834.238250][T31630] _raw_read_lock+0x36/0x50 [ 834.238264][T31630] ? send_sigio+0x101/0x370 [ 834.238282][T31630] send_sigio+0x101/0x370 [ 834.238302][T31630] dnotify_handle_event+0x169/0x440 [ 834.238320][T31630] fsnotify+0x180b/0x1ab0 [ 834.238338][T31630] ? __lock_acquire+0x6b6/0x2cf0 [ 834.238355][T31630] ? fsnotify+0x72c/0x1ab0 [ 834.238378][T31630] ? __pfx_fsnotify+0x10/0x10 [ 834.238400][T31630] ? dput+0x37/0x1a0 [ 834.238417][T31630] fsnotify_move+0x1d7/0x5b0 [ 834.238439][T31630] vfs_rename+0x870/0xee0 [ 834.238458][T31630] ? __pfx_vfs_rename+0x10/0x10 [ 834.238475][T31630] ? bpf_lsm_path_rename+0x9/0x20 [ 834.238495][T31630] ? security_path_rename+0x17d/0x490 [ 834.238519][T31630] do_renameat2+0x538/0x8e0 [ 834.238538][T31630] ? __pfx_do_renameat2+0x10/0x10 [ 834.238557][T31630] ? getname_flags+0x1e5/0x540 [ 834.238575][T31630] __ia32_sys_renameat2+0xce/0xe0 [ 834.238591][T31630] __do_fast_syscall_32+0x1dc/0x570 [ 834.238607][T31630] ? do_fast_syscall_32+0x34/0x80 [ 834.238624][T31630] do_fast_syscall_32+0x34/0x80 [ 834.238641][T31630] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 834.238665][T31630] RIP: 0023:0xf70dd539 [ 834.238679][T31630] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 834.238691][T31630] RSP: 002b:00000000f54cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 834.238707][T31630] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000440 [ 834.238718][T31630] RDX: 00000000ffffff9c RSI: 0000000080000000 RDI: 0000000000000004 [ 834.238727][T31630] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 834.238736][T31630] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 834.238746][T31630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 834.238759][T31630] [ 834.275643][T31634] loop4: detected capacity change from 0 to 7 [ 834.491135][T31634] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 834.497151][T31634] loop4: p1 size 2037579776 extends beyond EOD, truncated [ 834.505123][T31634] loop4: p2 start 4294901760 is beyond EOD, truncated [ 834.512422][T31634] loop4: p3 start 4294836224 is beyond EOD, truncated [ 834.533733][ T5912] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.007C/input/input155 [ 834.545383][T31634] loop4: p4 size 327680 extends beyond EOD, truncated [ 834.553715][T31634] loop4: p5 size 8323072 extends beyond EOD, truncated [ 834.562359][T31634] loop4: p6 start 8192 is beyond EOD, truncated [ 834.678682][ T5912] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.007C/input/input156 [ 834.706132][ T5912] kye 0003:0458:5011.007C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 835.636059][ C0] kye 0003:0458:5011.007C: usb_submit_urb(ctrl) failed: -1 [ 836.406917][ T57] usb 2-1: USB disconnect, device number 7 [ 841.495811][ T5834] Bluetooth: hci3: command 0x0406 tx timeout