last executing test programs: 1m25.292991797s ago: executing program 2 (id=329): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000040)={0x4, 0x407, 0x9, &(0x7f0000000340)=[0x5, 0x0, 0x9, 0x4, 0x6, 0x0, 0xfffffffffffffffa, 0xa3, 0x8, 0x2, 0x2, 0x400000000008, 0x3, 0x10000000002, 0x7, 0x8, 0x7fffffff, 0x5, 0x4, 0x9883, 0x3ff, 0x10001, 0x8, 0x80000000002, 0x4, 0x9, 0x2, 0x1fd, 0x5, 0x81, 0x1, 0x5, 0x5, 0x2, 0x80, 0x40, 0xfffffffffffffff9, 0x1e4657b0, 0x9, 0x81, 0x200000000800000, 0x6, 0xc00, 0x2e2, 0x101, 0x6, 0x9, 0x8, 0x7f, 0x401, 0x5, 0x9, 0x7fff, 0xec, 0x7ffffffffffffffe, 0x8, 0x5, 0x5, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0x8deb, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x7, 0x7fffffffffffffff, 0xfffffffffffff000, 0x7, 0xe54, 0xae8e, 0x1e30fa4c, 0xa, 0xfffffffffffffffe, 0x4, 0x9f, 0x3, 0x7, 0xfffffffffffffad6, 0xffff7ffffffffff9, 0x10000, 0x3, 0xd, 0xad65, 0x1, 0xdb50, 0x7, 0xe, 0x3, 0x3ff, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffc, 0x401, 0x8, 0x1e4b, 0x2, 0x79, 0xb, 0x10000, 0xe, 0x2, 0x48, 0x3, 0xfffffffffffffffb, 0x0, 0x4, 0xa, 0x7, 0x9, 0x2, 0x1d, 0x80, 0x8, 0xd, 0x4, 0x2, 0x6, 0x80000000, 0x401, 0xfffc, 0x3, 0x80000000007, 0xea8, 0x1]}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)={0x29}) 1m25.04960286s ago: executing program 2 (id=331): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000001e00010d00c2ca8d1200000007000000", @ANYRES32=r1], 0x74}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m24.045396317s ago: executing program 2 (id=338): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r1, 0x400, 0x0) fcntl$setown(r1, 0x8, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m23.970565041s ago: executing program 2 (id=339): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') 1m23.841688028s ago: executing program 2 (id=341): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r2, &(0x7f0000000340), 0x0}, 0x20) 1m22.944454174s ago: executing program 2 (id=350): mkdir(0x0, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 1m22.412810262s ago: executing program 32 (id=350): mkdir(0x0, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 4.987643991s ago: executing program 0 (id=1000): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) 3.630128388s ago: executing program 5 (id=1013): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000240)={r1, r2, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x0, 0x0, 0x3}) 3.388945772s ago: executing program 5 (id=1015): r0 = userfaultfd(0x801) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x10b500, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup2(r0, r0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000000)={0x4, 0x0, 0x0, r3, 0x100000}) 3.17140557s ago: executing program 5 (id=1017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000001840)={@random="b931b2d41475", @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x38, 0x3c, 0x0, @private0, @mcast2, {[@dstopts={0xc, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x101}]}], {0x0, 0x0, 0x18, 0x0, @wg=@data={0x4, 0xffff, 0x2}}}}}}}, 0x0) 3.12067669s ago: executing program 3 (id=1018): r0 = syz_io_uring_setup(0x497, &(0x7f0000000a40)={0x0, 0xea0f, 0x100, 0x4, 0x151}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x8, 0x0, @fd, 0x8, 0x7, 0x5, 0x0, 0x1, {0x1, r3}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.065734482s ago: executing program 5 (id=1019): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 2.807287097s ago: executing program 3 (id=1022): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/112, 0x349b7f55) request_key(&(0x7f00000001c0)='pkcs7_test\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f00000002c0)='\xff\xff\xff\xff\xff\xff', r0) 2.524102606s ago: executing program 5 (id=1024): syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x73851bc5, 0x2) poll(&(0x7f0000000040)=[{r1, 0x8030}, {r0, 0x80}], 0x2, 0x8001) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041, 0xffffffff}) 2.47743684s ago: executing program 3 (id=1025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0}}], 0x1, 0x4880) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x406c091}, 0x0) 2.441839796s ago: executing program 4 (id=1026): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x5, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff]}) 2.352305041s ago: executing program 3 (id=1027): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x6}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x2923, 0x6800, 0x6, 0x8, 0x2b, 0x6, 0x2, 0x3, 0x6, 0xe7, 0xbe, 0x2, 0x484c}, {0x3, 0x2, 0x6, 0xf, 0x7, 0x8, 0xc6, 0x5, 0x5, 0x3, 0x3, 0x1, 0x7}, {0xbfaa, 0xfffa, 0xf, 0x9, 0x0, 0x7, 0x3, 0x3, 0x9, 0x13, 0x79, 0x74, 0x6}], 0xd5d}) 2.283260267s ago: executing program 5 (id=1028): r0 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)=ANY=[], 0x0) 2.250502948s ago: executing program 4 (id=1029): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 2.093207965s ago: executing program 4 (id=1030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 1.995555315s ago: executing program 3 (id=1031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r3, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x14d, 0x4000}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) 1.820297603s ago: executing program 3 (id=1032): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000440)={&(0x7f00000003c0)=[{0x0, 0x2000, 0x0, 0x0}, {0x6, 0x2811, 0x0, 0x0}], 0x2}) 1.820086506s ago: executing program 4 (id=1033): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x27, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf3, 0xfbfffffb, 0x39, 0x747d5e13, 0x8, 0x99, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x80, 0x800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x0, 0x1ff, 0x8000, 0xfffffffe, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0xa, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c33, 0x3, 0x5, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x8, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x9, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd3, 0x7, 0x20, 0x404, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x9, 0x80000001, 0x8, 0x3f92, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x1000, 0x80000001, 0x4, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x218c, 0x8001, 0x47, 0x0, 0x3, 0x4, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x8, 0x95e, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x7, 0x0, 0x5, 0x1e2, 0x4, 0x9, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x20000002, 0x5, 0x800, 0xa80a, 0x65f413f9, 0xfffffff8, 0x20008, 0x8a8, 0x2, 0x40, 0x40000409, 0x7, 0x4, 0x4, 0x10, 0x4, 0x0, 0x7fff, 0x0, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{&(0x7f00000012c0)=""/41, 0x29}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.757748366s ago: executing program 0 (id=1034): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x48940, 0x0) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 1.598037638s ago: executing program 4 (id=1035): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000280)=@req3={0x2, 0x0, 0x7fff, 0xecd, 0x2, 0x14, 0xfff}, 0x1c) 1.580388716s ago: executing program 0 (id=1036): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) sendto(r0, &(0x7f0000000040)="bd", 0x1, 0x4, 0x0, 0x0) 1.380376232s ago: executing program 4 (id=1038): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000000c0)=[{0x4, 0x5201, 0x1, &(0x7f0000000300)='/'}, {0xfffc, 0xd010, 0x0, 0x0}], 0x2}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.291090722s ago: executing program 0 (id=1039): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x1}, 0x8) 993.287536ms ago: executing program 1 (id=1040): socket$inet_tcp(0x2, 0x1, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 832.437618ms ago: executing program 1 (id=1041): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) sendmmsg$inet_sctp(r0, &(0x7f0000001880)=[{&(0x7f0000000000)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@sndinfo={0x20, 0x84, 0x2, {0x2, 0x200, 0xb54, 0xffff070d}}], 0x20}], 0x1, 0x10) 710.406189ms ago: executing program 1 (id=1042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x86dd, 0x6, 0x0, 0x4}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xff, 0x80, '\r'}}}}}}}, 0x1d) 450.970032ms ago: executing program 1 (id=1043): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x4, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 310.131676ms ago: executing program 1 (id=1044): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x1c, r1, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 232.048547ms ago: executing program 0 (id=1045): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) listen(r0, 0x5) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000008440)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e24, 0x4e23, [0x3, 0xb16, 0xf, 0xc3], [0x4, 0x0, 0x4, 0x7], 0x0, [0x1, 0x7fffffff]}, 0x9, 0xecd6}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x20040000) 47.732146ms ago: executing program 0 (id=1046): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000f40)={r1}, &(0x7f0000000040)=0x8) 0s ago: executing program 1 (id=1047): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x3, 0x9}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x9, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0xe], [0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x5, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0xfffffffd, 0x1ff, 0x0, 0x0, 0x0, 0x2, 0xe, 0xbbf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4], [0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x0, 0xfffffffc, 0x1000, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, 0x40, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd, 0x0, 0xfffd}, 0x4d, [0x400, 0x6, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffff, 0x3, 0x0, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x2], [0xffffffff, 0x3, 0x7, 0x0, 0x0, 0x6, 0x0, 0xfffffff7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x81, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0xfffffffd, 0x3, 0x10000000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x7fffffc, 0x1, 0x0, 0x7fff, 0x0, 0x800003, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x10000], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x5, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 89.848140][ T5822] cgroup: Unknown subsys name 'net' [ 90.017633][ T5822] cgroup: Unknown subsys name 'cpuset' [ 90.027994][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.847882][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 94.551690][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 94.557750][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 94.560510][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 94.574298][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 94.574706][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 94.588647][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 94.594572][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 94.597173][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 94.603908][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 94.610810][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 94.668977][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 94.677463][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 94.685629][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 94.694106][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 94.704440][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.797421][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.805962][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.815567][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.819014][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.824290][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.832094][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.839726][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.848648][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.862840][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.872274][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.480204][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 95.673870][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 95.687007][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 95.733766][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 95.824792][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.832596][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.842238][ T5834] bridge_slave_0: entered allmulticast mode [ 95.849987][ T5834] bridge_slave_0: entered promiscuous mode [ 95.908422][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.917969][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.926053][ T5834] bridge_slave_1: entered allmulticast mode [ 95.934371][ T5834] bridge_slave_1: entered promiscuous mode [ 95.954745][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 96.056189][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.105732][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.181276][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.188887][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.196388][ T5848] bridge_slave_0: entered allmulticast mode [ 96.204306][ T5848] bridge_slave_0: entered promiscuous mode [ 96.245812][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.253568][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.260987][ T5843] bridge_slave_0: entered allmulticast mode [ 96.269888][ T5843] bridge_slave_0: entered promiscuous mode [ 96.286738][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.294509][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.301936][ T5833] bridge_slave_0: entered allmulticast mode [ 96.311212][ T5833] bridge_slave_0: entered promiscuous mode [ 96.319574][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.327085][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.335133][ T5848] bridge_slave_1: entered allmulticast mode [ 96.342770][ T5848] bridge_slave_1: entered promiscuous mode [ 96.368529][ T5834] team0: Port device team_slave_0 added [ 96.377902][ T5834] team0: Port device team_slave_1 added [ 96.388280][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.396129][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.404139][ T5843] bridge_slave_1: entered allmulticast mode [ 96.411770][ T5843] bridge_slave_1: entered promiscuous mode [ 96.426110][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.434076][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.441852][ T5833] bridge_slave_1: entered allmulticast mode [ 96.450303][ T5833] bridge_slave_1: entered promiscuous mode [ 96.567501][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.581196][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.609627][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.637366][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.664869][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.672580][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.700499][ T5840] Bluetooth: hci1: command tx timeout [ 96.700702][ T5840] Bluetooth: hci0: command tx timeout [ 96.715054][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.732021][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.741583][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.751057][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.760615][ T5847] bridge_slave_0: entered allmulticast mode [ 96.769291][ T5847] bridge_slave_0: entered promiscuous mode [ 96.780174][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.821232][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.830575][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.859437][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.866347][ T51] Bluetooth: hci2: command tx timeout [ 96.893297][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.900670][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.908670][ T5847] bridge_slave_1: entered allmulticast mode [ 96.914876][ T51] Bluetooth: hci4: command tx timeout [ 96.916838][ T5847] bridge_slave_1: entered promiscuous mode [ 96.926877][ T51] Bluetooth: hci3: command tx timeout [ 96.947584][ T5848] team0: Port device team_slave_0 added [ 97.016982][ T5833] team0: Port device team_slave_0 added [ 97.025516][ T5848] team0: Port device team_slave_1 added [ 97.034537][ T5833] team0: Port device team_slave_1 added [ 97.056237][ T5843] team0: Port device team_slave_0 added [ 97.068399][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.129255][ T5834] hsr_slave_0: entered promiscuous mode [ 97.137840][ T5834] hsr_slave_1: entered promiscuous mode [ 97.148042][ T5843] team0: Port device team_slave_1 added [ 97.158205][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.183399][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.190996][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.221945][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.237263][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.244991][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.272642][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.322327][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.330110][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.358626][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.415517][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.424414][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.453445][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.490458][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.492659][ T3094] cfg80211: failed to load regulatory.db [ 97.502465][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.531692][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.546798][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.554559][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.581556][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.616259][ T5847] team0: Port device team_slave_0 added [ 97.675394][ T5847] team0: Port device team_slave_1 added [ 97.711865][ T5833] hsr_slave_0: entered promiscuous mode [ 97.719230][ T5833] hsr_slave_1: entered promiscuous mode [ 97.725932][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.734169][ T5833] Cannot create hsr debugfs directory [ 97.826375][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.833640][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.861165][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.917196][ T5848] hsr_slave_0: entered promiscuous mode [ 97.924609][ T5848] hsr_slave_1: entered promiscuous mode [ 97.931775][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.941079][ T5848] Cannot create hsr debugfs directory [ 97.949491][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.957397][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.985834][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.073355][ T5843] hsr_slave_0: entered promiscuous mode [ 98.080239][ T5843] hsr_slave_1: entered promiscuous mode [ 98.087996][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.096227][ T5843] Cannot create hsr debugfs directory [ 98.235584][ T5847] hsr_slave_0: entered promiscuous mode [ 98.242260][ T5847] hsr_slave_1: entered promiscuous mode [ 98.249358][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.257396][ T5847] Cannot create hsr debugfs directory [ 98.659278][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.712571][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.740300][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.753511][ T51] Bluetooth: hci0: command tx timeout [ 98.753543][ T5840] Bluetooth: hci1: command tx timeout [ 98.765548][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.838021][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.876570][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.899449][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.913406][ T5840] Bluetooth: hci2: command tx timeout [ 98.926775][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.993442][ T5840] Bluetooth: hci3: command tx timeout [ 98.998937][ T5840] Bluetooth: hci4: command tx timeout [ 99.003068][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.019378][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.058822][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.069385][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.226569][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.237931][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.263750][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.277182][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.358449][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.383864][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.462687][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.474586][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.489505][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.514816][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.528815][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.546164][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.553965][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.568068][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.575342][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.604340][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.630683][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.638474][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.671764][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.679454][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.775075][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.814647][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.921692][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.935864][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.965066][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.972209][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.058425][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.066064][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.154734][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.189605][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.197624][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.279632][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.287170][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.371871][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.462426][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.568000][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.612555][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.641162][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.649871][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.742631][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.750227][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.843081][ T5840] Bluetooth: hci0: command tx timeout [ 100.843208][ T51] Bluetooth: hci1: command tx timeout [ 100.899691][ T5834] veth0_vlan: entered promiscuous mode [ 100.958316][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.981451][ T5834] veth1_vlan: entered promiscuous mode [ 100.993568][ T51] Bluetooth: hci2: command tx timeout [ 101.073560][ T51] Bluetooth: hci4: command tx timeout [ 101.074097][ T5840] Bluetooth: hci3: command tx timeout [ 101.105527][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.121084][ T5833] veth0_vlan: entered promiscuous mode [ 101.187824][ T5843] veth0_vlan: entered promiscuous mode [ 101.211409][ T5834] veth0_macvtap: entered promiscuous mode [ 101.231541][ T5834] veth1_macvtap: entered promiscuous mode [ 101.252050][ T5833] veth1_vlan: entered promiscuous mode [ 101.324807][ T5843] veth1_vlan: entered promiscuous mode [ 101.345740][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.372802][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.397088][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.417710][ T5848] veth0_vlan: entered promiscuous mode [ 101.434296][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.445316][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.457616][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.469106][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.540628][ T5848] veth1_vlan: entered promiscuous mode [ 101.578306][ T5833] veth0_macvtap: entered promiscuous mode [ 101.611279][ T5833] veth1_macvtap: entered promiscuous mode [ 101.629310][ T5843] veth0_macvtap: entered promiscuous mode [ 101.665366][ T5843] veth1_macvtap: entered promiscuous mode [ 101.747810][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.770991][ T5848] veth0_macvtap: entered promiscuous mode [ 101.826447][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.838912][ T5848] veth1_macvtap: entered promiscuous mode [ 101.852306][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.867654][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.879215][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.892700][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.904661][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.958405][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.970206][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.979512][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.026548][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.040960][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.050401][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.060309][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.069601][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.096516][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.134479][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.143735][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.153900][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.162989][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.188299][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.198263][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.328150][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 102.401322][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.425516][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.495685][ T5847] veth0_vlan: entered promiscuous mode [ 102.533170][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.541195][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.589943][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.606330][ T5847] veth1_vlan: entered promiscuous mode [ 102.621759][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.735981][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.762472][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.773401][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.781559][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.911436][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.921702][ T5840] Bluetooth: hci0: command tx timeout [ 102.923577][ T51] Bluetooth: hci1: command tx timeout [ 102.948966][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.016906][ T5847] veth0_macvtap: entered promiscuous mode [ 103.068915][ T5847] veth1_macvtap: entered promiscuous mode [ 103.083793][ T51] Bluetooth: hci2: command tx timeout [ 103.154381][ T51] Bluetooth: hci3: command tx timeout [ 103.159231][ T5840] Bluetooth: hci4: command tx timeout [ 103.259958][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.309109][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.379952][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.399381][ T5955] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.433022][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.474801][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.497543][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.815831][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.842320][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.977883][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.014144][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.620271][ T5968] syz.4.5 (5968) used greatest stack depth: 20040 bytes left [ 105.263739][ T10] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 105.497180][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 105.519124][ T10] usb 2-1: no configurations [ 105.554226][ T10] usb 2-1: can't read configurations, error -22 [ 105.843006][ T5931] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.039091][ T5931] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 106.059005][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.165679][ T5931] usb 1-1: config 0 descriptor?? [ 106.404774][ T5931] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 106.608901][ T5931] [drm:udl_init] *ERROR* Selecting channel failed [ 106.669475][ T5931] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 106.703102][ T5931] [drm] Initialized udl on minor 2 [ 106.712772][ T5931] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.747716][ T5931] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 106.759835][ T5959] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.788364][ T5959] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 106.807356][ T5931] usb 1-1: USB disconnect, device number 2 [ 106.830227][ T5959] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 106.961688][ T6005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.955827][ T6059] netlink: 272 bytes leftover after parsing attributes in process `syz.1.45'. [ 110.195644][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 110.254905][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.48'. [ 110.735076][ T6065] ipvlan2: entered promiscuous mode [ 112.568384][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 113.040691][ T5851] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.200935][ T5851] usb 4-1: Using ep0 maxpacket: 32 [ 113.234786][ T5851] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.274704][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.339279][ T5851] usb 4-1: config 0 descriptor?? [ 113.598536][ T5851] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 113.651066][ T5851] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.705508][ T5851] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 113.743715][ T5851] usb 4-1: media controller created [ 113.801447][ T6129] netlink: 'syz.2.75': attribute type 1 has an invalid length. [ 113.831505][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.75'. [ 113.889359][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.031996][ T5851] az6027: usb out operation failed. (-71) [ 114.060536][ T5851] az6027: usb out operation failed. (-71) [ 114.085131][ T5851] stb0899_attach: Driver disabled by Kconfig [ 114.104194][ T5851] az6027: no front-end attached [ 114.104194][ T5851] [ 114.143302][ T5851] az6027: usb out operation failed. (-71) [ 114.149205][ T5851] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 114.190426][ T5851] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 114.221974][ T6141] overlayfs: invalid origin (0000) [ 114.248424][ T5851] dvb-usb: schedule remote query interval to 400 msecs. [ 114.270267][ T5851] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 114.333496][ T5851] usb 4-1: USB disconnect, device number 2 [ 114.541830][ T5851] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 114.579626][ T5942] IPVS: starting estimator thread 0... [ 114.711251][ T6153] IPVS: using max 27 ests per chain, 64800 per kthread [ 115.427025][ T30] audit: type=1326 audit(1754059242.153:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6177 comm="syz.2.96" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde5818eb69 code=0x0 [ 116.160197][ T6204] Illegal XDP return value 1971503156 on prog (id 16) dev N/A, expect packet loss! [ 116.415416][ T5959] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.433278][ T6211] mmap: syz.4.111 (6211) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.595023][ T5959] usb 4-1: Using ep0 maxpacket: 16 [ 116.622647][ T5959] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 116.647088][ T5959] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 116.671809][ T5959] usb 4-1: config 0 has no interface number 0 [ 116.709455][ T5959] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 116.733270][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.756321][ T5959] usb 4-1: Product: syz [ 116.760741][ T5959] usb 4-1: Manufacturer: syz [ 116.785154][ T5959] usb 4-1: SerialNumber: syz [ 116.826238][ T5959] usb 4-1: config 0 descriptor?? [ 116.858395][ T5959] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 116.883051][ T5959] usb 4-1: No valid video chain found. [ 116.919668][ T6226] syz.4.117 uses obsolete (PF_INET,SOCK_PACKET) [ 117.111198][ T5942] usb 4-1: USB disconnect, device number 3 [ 117.385085][ T5920] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 117.567255][ T5920] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.580599][ T5920] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.619038][ T5920] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 117.639767][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.881267][ T5920] usb 2-1: usb_control_msg returned -32 [ 117.890993][ T5920] usbtmc 2-1:16.0: can't read capabilities [ 118.495303][ T5920] usb 2-1: USB disconnect, device number 4 [ 118.930122][ T6280] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.957126][ T6280] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 118.969097][ T6280] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 118.977418][ T6280] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 120.395004][ T6322] syzkaller1: entered promiscuous mode [ 120.403088][ T6322] syzkaller1: entered allmulticast mode [ 121.007624][ T6342] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.216436][ T6402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.178'. [ 123.344257][ T6402] Zero length message leads to an empty skb [ 123.948736][ T6418] netlink: 'syz.0.184': attribute type 4 has an invalid length. [ 123.990435][ T6418] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.184'. [ 125.653124][ T5959] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.845995][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 125.877158][ T5959] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 125.902992][ T5959] usb 5-1: config 1 has no interface number 0 [ 125.954441][ T5959] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 125.967570][ T5959] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 126.101328][ T5959] usb 5-1: config 1 interface 105 has no altsetting 0 [ 126.116167][ T5959] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 126.133848][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.142360][ T5959] usb 5-1: Product: syz [ 126.166112][ T6464] netlink: 48 bytes leftover after parsing attributes in process `syz.0.205'. [ 126.176648][ T5959] usb 5-1: Manufacturer: syz [ 126.181454][ T5959] usb 5-1: SerialNumber: syz [ 126.200234][ T6448] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 126.220556][ T6448] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 126.671384][ T6448] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 126.683447][ T6448] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 126.723302][ T5920] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 126.933113][ T5920] usb 2-1: Using ep0 maxpacket: 32 [ 126.942151][ T5920] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 126.973413][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.024091][ T5920] usb 2-1: config 0 descriptor?? [ 127.070358][ T5920] gspca_main: sq930x-2.14.0 probing 041e:403c [ 127.143958][ T5942] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.315771][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.340643][ T5959] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 127.369260][ T5942] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 127.393580][ T5959] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 127.405333][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.435117][ T5942] usb 3-1: config 0 descriptor?? [ 127.468020][ T5959] aqc111 5-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 127.523528][ T5959] usb 5-1: USB disconnect, device number 2 [ 127.563187][ T5959] aqc111 5-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.4-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 127.698620][ T6491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.217'. [ 127.871679][ T5942] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 127.884072][ T5942] lg-g15 0003:046D:C222.0001: unknown main item tag 0x0 [ 127.895193][ T5942] lg-g15 0003:046D:C222.0001: item fetching failed at offset 2/7 [ 127.914657][ T6491] IPVS: Error joining to the multicast group [ 127.925287][ T5942] lg-g15 0003:046D:C222.0001: probe with driver lg-g15 failed with error -22 [ 127.965892][ T5959] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 128.003104][ T5959] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 128.036580][ T5959] aqc111 5-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 128.068142][ T5920] gspca_sq930x: ucbus_write failed -71 [ 128.084733][ T5920] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 128.106595][ T5942] usb 3-1: USB disconnect, device number 2 [ 128.133425][ T5920] usb 2-1: USB disconnect, device number 5 [ 128.280633][ T6499] Bluetooth: MGMT ver 1.23 [ 128.562699][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 128.819424][ T6513] netlink: 32 bytes leftover after parsing attributes in process `syz.4.228'. [ 129.826353][ T6537] loop9: detected capacity change from 0 to 7 [ 129.880652][ T6537] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 129.911567][ T6537] loop9: partition table partially beyond EOD, truncated [ 129.974233][ T6537] loop9: p1 size 2433217042 extends beyond EOD, truncated [ 130.258339][ T5846] udevd[5846]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 130.803303][ T5942] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.008408][ T5942] usb 4-1: Using ep0 maxpacket: 32 [ 131.048920][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.100040][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.141888][ T5942] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 131.184455][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.225118][ T5942] usb 4-1: config 0 descriptor?? [ 131.463807][ T5931] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 131.673059][ T5931] usb 2-1: Using ep0 maxpacket: 16 [ 131.713369][ T5931] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 131.721736][ T5931] usb 2-1: config 0 has no interface number 0 [ 131.752180][ T5942] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 131.770237][ T5931] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.815522][ T5931] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 131.845200][ T5931] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 131.903029][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 131.942910][ T5931] usb 2-1: Product: syz [ 131.993376][ T5931] usb 2-1: SerialNumber: syz [ 132.006760][ T24] usb 4-1: USB disconnect, device number 4 [ 132.024270][ T5931] usb 2-1: config 0 descriptor?? [ 132.068172][ T5931] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 132.111105][ T5931] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input8 [ 132.325189][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 132.342341][ T6583] fido_id[6583]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 132.746281][ T5920] usb 2-1: USB disconnect, device number 6 [ 132.860818][ T5920] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 132.976003][ T6604] smc: net device bond0 applied user defined pnetid SYZ0 [ 133.014389][ T6604] smc: net device bond0 erased user defined pnetid SYZ0 [ 133.322272][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.330278][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.415346][ T6646] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 136.005334][ T30] audit: type=1326 audit(1754059262.733:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6687 comm="syz.4.303" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f099298eb69 code=0x0 [ 136.435012][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 136.445918][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 136.494098][ T6704] netlink: 'syz.2.308': attribute type 10 has an invalid length. [ 136.554388][ T6704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.578587][ T6704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.609785][ T6704] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 137.214832][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.393369][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 137.404415][ T24] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 137.426044][ T6728] loop2: detected capacity change from 0 to 7 [ 137.432924][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.463022][ T24] usb 4-1: Product: syz [ 137.468921][ T24] usb 4-1: Manufacturer: syz [ 137.469165][ T6728] Dev loop2: unable to read RDB block 7 [ 137.476001][ T24] usb 4-1: SerialNumber: syz [ 137.493090][ T6728] loop2: unable to read partition table [ 137.513134][ T24] usb 4-1: config 0 descriptor?? [ 137.513740][ T6728] loop2: partition table beyond EOD, truncated [ 137.538484][ T6728] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 137.757806][ T24] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 138.043564][ T5931] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.230926][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 138.248982][ T5931] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 138.268888][ T5931] usb 2-1: config 0 has no interface number 0 [ 138.288453][ T5931] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 138.302604][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.315631][ T5931] usb 2-1: Product: syz [ 138.320059][ T5931] usb 2-1: Manufacturer: syz [ 138.327337][ T5931] usb 2-1: SerialNumber: syz [ 138.346784][ T5931] usb 2-1: config 0 descriptor?? [ 138.377283][ T5931] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 138.513084][ T5840] Bluetooth: hci0: command 0x0c1a tx timeout [ 138.565964][ T24] gspca_sunplus: reg_w_riv err -71 [ 138.580426][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 138.590089][ T5931] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 138.617768][ T24] usb 4-1: USB disconnect, device number 5 [ 138.624593][ T5931] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 138.879647][ T6755] netlink: 84 bytes leftover after parsing attributes in process `syz.2.331'. [ 138.973706][ T6757] gfs2: not a GFS2 filesystem [ 139.042096][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 139.053565][ T5931] usb 2-1: USB disconnect, device number 7 [ 139.074831][ T5931] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 139.108371][ T5931] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 139.145399][ T5931] quatech2 2-1:0.51: device disconnected [ 139.978071][ T6778] loop6: detected capacity change from 0 to 1 [ 139.998650][ T6778] Dev loop6: unable to read RDB block 1 [ 140.005437][ T6778] loop6: unable to read partition table [ 140.011582][ T6778] loop6: partition table beyond EOD, truncated [ 140.028220][ T6778] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 140.824055][ T6795] netlink: 'syz.1.349': attribute type 11 has an invalid length. [ 140.845991][ T6794] capability: warning: `syz.4.347' uses deprecated v2 capabilities in a way that may be insecure [ 140.884253][ T30] audit: type=1400 audit(1754059267.613:4): lsm=SMACK fn=smack_inode_set_acl action=denied subject="w" object="_" requested=w pid=6792 comm="syz.4.347" name="77" dev="tmpfs" ino=407 [ 141.579760][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.598329][ T6806] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.355'. [ 141.672979][ T5959] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.803256][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.869589][ T5959] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 141.900887][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.944817][ T5959] usb 2-1: config 0 descriptor?? [ 141.989890][ T5959] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 142.115924][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.346601][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.397882][ T5959] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 142.423527][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 142.435373][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 142.444872][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 142.471550][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 142.480450][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 142.807930][ T5959] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 142.958172][ T49] bridge_slave_1: left allmulticast mode [ 142.971488][ T49] bridge_slave_1: left promiscuous mode [ 142.994265][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.034491][ T5959] usb 2-1: USB disconnect, device number 8 [ 143.088509][ T49] bridge_slave_0: left allmulticast mode [ 143.105551][ T49] bridge_slave_0: left promiscuous mode [ 143.112223][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.450480][ T6845] kvm: user requested TSC rate below hardware speed [ 143.993182][ T5984] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 144.209175][ T5984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.243527][ T5984] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 144.256937][ T5984] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.266775][ T5984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.303863][ T5984] usb 2-1: config 0 descriptor?? [ 144.389617][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.463779][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.494765][ T49] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 144.516410][ T49] bond0 (unregistering): Released all slaves [ 144.593968][ T51] Bluetooth: hci0: command tx timeout [ 144.781189][ T5920] usb 2-1: USB disconnect, device number 9 [ 145.310668][ T6892] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.383'. [ 145.865826][ T5942] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.953676][ T49] hsr_slave_0: left promiscuous mode [ 145.980253][ T49] hsr_slave_1: left promiscuous mode [ 145.993863][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.042664][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.068171][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.110275][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 146.152810][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 146.176753][ T49] veth1_macvtap: left promiscuous mode [ 146.186503][ T49] veth0_macvtap: left promiscuous mode [ 146.200824][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.217305][ T5942] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.227641][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.243429][ T5942] usb 1-1: config 0 descriptor?? [ 146.454213][ T6927] ======================================================= [ 146.454213][ T6927] WARNING: The mand mount option has been deprecated and [ 146.454213][ T6927] and is ignored by this kernel. Remove the mand [ 146.454213][ T6927] option from the mount to silence this warning. [ 146.454213][ T6927] ======================================================= [ 146.577063][ T6931] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 146.601131][ T6931] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 146.685793][ T51] Bluetooth: hci0: command tx timeout [ 146.763925][ T5942] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 147.072386][ T5920] usb 1-1: USB disconnect, device number 3 [ 147.992647][ T49] team0 (unregistering): Port device team_slave_1 removed [ 148.126178][ T49] team0 (unregistering): Port device team_slave_0 removed [ 148.671576][ T6821] chnl_net:caif_netlink_parms(): no params data found [ 148.712148][ T6964] veth1_macvtap: left promiscuous mode [ 148.727728][ T6964] macsec0: entered promiscuous mode [ 148.753646][ T51] Bluetooth: hci0: command tx timeout [ 148.773959][ T6967] netlink: 'syz.1.409': attribute type 2 has an invalid length. [ 148.781954][ T6967] netlink: 'syz.1.409': attribute type 22 has an invalid length. [ 149.369748][ T6821] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.412272][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.463116][ T6821] bridge_slave_0: entered allmulticast mode [ 149.492784][ T6821] bridge_slave_0: entered promiscuous mode [ 149.548035][ T6821] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.575827][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.601264][ T6821] bridge_slave_1: entered allmulticast mode [ 149.632742][ T6821] bridge_slave_1: entered promiscuous mode [ 149.868590][ T6821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.945534][ T6821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.286153][ T6821] team0: Port device team_slave_0 added [ 150.309062][ T6821] team0: Port device team_slave_1 added [ 150.659151][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.687489][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.775244][ T6821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.827443][ T6821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.833190][ T51] Bluetooth: hci0: command tx timeout [ 150.874726][ T6821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.883376][ T5920] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.949647][ T6821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.092089][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.130372][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.160696][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.178686][ T5920] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.192390][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.290573][ T5920] usb 4-1: config 0 descriptor?? [ 151.320159][ T7032] netlink: 452 bytes leftover after parsing attributes in process `syz.0.430'. [ 151.356933][ T6821] hsr_slave_0: entered promiscuous mode [ 151.377323][ T6821] hsr_slave_1: entered promiscuous mode [ 151.394236][ T6821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.413283][ T5851] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 151.432821][ T6821] Cannot create hsr debugfs directory [ 151.536734][ T30] audit: type=1326 audit(1754059278.253:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7034 comm="syz.0.431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8790d8eb69 code=0x0 [ 151.585969][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.598253][ T5851] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.631950][ T5851] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.676771][ T5851] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.712932][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.773503][ T5851] usb 5-1: config 0 descriptor?? [ 151.779705][ T5920] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 152.157938][ T5942] usb 4-1: USB disconnect, device number 6 [ 152.282270][ T5851] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 152.405957][ T6821] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.503938][ T6821] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.541238][ T6821] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.579815][ T6821] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.870987][ T6821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.971696][ T6821] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.023738][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.031841][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.068267][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.078193][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.440158][ T7071] use of bytesused == 0 is deprecated and will be removed in the future, [ 153.547314][ T7071] use the actual size instead. [ 154.108299][ T7090] Bluetooth: MGMT ver 1.23 [ 154.129119][ T7090] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 154.264022][ T6821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.364774][ T5920] usb 5-1: USB disconnect, device number 3 [ 154.535532][ T30] audit: type=1800 audit(1754059281.253:6): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.446" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 154.927432][ T7114] netlink: 'syz.3.450': attribute type 29 has an invalid length. [ 154.941620][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.993194][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.441961][ T24] kernel write not supported for file /media1 (pid: 24 comm: kworker/1:0) [ 156.212762][ T6821] veth0_vlan: entered promiscuous mode [ 156.275479][ T6821] veth1_vlan: entered promiscuous mode [ 156.460134][ T6821] veth0_macvtap: entered promiscuous mode [ 156.522536][ T6821] veth1_macvtap: entered promiscuous mode [ 156.661539][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.704962][ T6821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.747735][ T6821] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.798567][ T6821] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.829893][ T6821] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.849502][ T6821] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.220210][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.292421][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.452610][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.497494][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.333270][ T5984] psmouse serio3: Failed to reset mouse on : -5 [ 159.762914][ T5942] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.894931][ T7242] loop2: detected capacity change from 0 to 7 [ 159.935817][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 159.944154][ T7245] veth0_to_bond: entered allmulticast mode [ 159.956971][ T5846] Dev loop2: unable to read RDB block 7 [ 159.968966][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.991505][ T5846] loop2: AHDI p1 p2 [ 160.002741][ T5846] loop2: partition table partially beyond EOD, truncated [ 160.003938][ T5942] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.023903][ T5846] loop2: p1 start 1702258030 is beyond EOD, truncated [ 160.062178][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.090998][ T7242] Dev loop2: unable to read RDB block 7 [ 160.120212][ T7242] loop2: AHDI p1 p2 [ 160.125632][ T5942] usb 4-1: config 0 descriptor?? [ 160.145220][ T7242] loop2: partition table partially beyond EOD, truncated [ 160.186422][ T7242] loop2: p1 start 1702258030 is beyond EOD, truncated [ 160.360620][ T5942] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 160.823428][ T5942] usb 4-1: USB disconnect, device number 7 [ 160.901095][ T7271] overlayfs: conflicting lowerdir path [ 160.959611][ T7272] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 161.583413][ T5942] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 161.768844][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.833304][ T5942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.877590][ T5942] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.900672][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.922956][ T5984] misc userio: Buffer overflowed, userio client isn't keeping up [ 161.958918][ T5942] usb 1-1: config 0 descriptor?? [ 162.024379][ T30] audit: type=1326 audit(1754059288.753:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7298 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298eb69 code=0x7ffc0000 [ 162.135349][ T30] audit: type=1326 audit(1754059288.753:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7298 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298eb69 code=0x7ffc0000 [ 162.223799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 162.276847][ T30] audit: type=1326 audit(1754059288.783:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7298 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f099298eb69 code=0x7ffc0000 [ 162.415958][ T30] audit: type=1326 audit(1754059288.793:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7298 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298eb69 code=0x7ffc0000 [ 162.474639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 162.519449][ T5942] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 162.572928][ T30] audit: type=1326 audit(1754059288.793:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7298 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f099298eb69 code=0x7ffc0000 [ 162.715720][ T5942] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input12 [ 162.728618][ T30] audit: type=1326 audit(1754059288.793:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7298 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f099298eb69 code=0x7ffc0000 [ 162.902715][ T30] audit: type=1326 audit(1754059288.823:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7298 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f099292ad69 code=0x7ffc0000 [ 163.040957][ T30] audit: type=1326 audit(1754059288.823:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7298 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f099292ad69 code=0x7ffc0000 [ 163.103894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.124007][ T5942] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 163.210273][ T30] audit: type=1326 audit(1754059288.823:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7298 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f099292ad69 code=0x7ffc0000 [ 163.239664][ T5984] input: PS/2 Generic Mouse as /devices/serio3/input/input11 [ 163.262639][ T5942] usb 1-1: USB disconnect, device number 4 [ 163.385163][ T30] audit: type=1326 audit(1754059288.823:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7298 comm="syz.4.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f099292ad69 code=0x7ffc0000 [ 163.553870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 163.583153][ T5984] psmouse serio3: Failed to enable mouse on [ 163.654392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.708210][ T7331] fido_id[7331]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 163.783386][ T7340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.521'. [ 163.825812][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.835800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.852988][ T7340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.521'. [ 164.669305][ T7359] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 164.749699][ T7361] sp0: Synchronizing with TNC [ 164.803641][ T7364] netlink: 428 bytes leftover after parsing attributes in process `syz.3.529'. [ 164.886958][ T7364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.529'. [ 165.245966][ T7378] syzkaller1: entered promiscuous mode [ 165.300055][ T7378] syzkaller1: entered allmulticast mode [ 166.323215][ T5984] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 166.593234][ T5984] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 166.741337][ T5984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.851008][ T5984] usb 2-1: config 0 descriptor?? [ 168.013098][ T5984] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 168.068536][ T5984] usb 2-1: USB disconnect, device number 10 [ 168.816592][ T7444] netlink: 16 bytes leftover after parsing attributes in process `syz.1.556'. [ 170.357216][ T51] Bluetooth: hci4: command tx timeout [ 170.493016][ T5984] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 170.673102][ T5984] usb 4-1: Using ep0 maxpacket: 32 [ 170.716423][ T5984] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 170.733091][ T5984] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 170.770616][ T5984] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 170.842965][ T5984] usb 4-1: config 1 has no interface number 0 [ 170.849625][ T5984] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 170.902912][ T5984] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 170.938258][ T5984] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 170.965056][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.989582][ T5984] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 171.180253][ T7486] tipc: Started in network mode [ 171.197465][ T7486] tipc: Node identity 7365725f69643d3, cluster identity 4711 [ 171.205909][ T7486] tipc: Enabling of bearer rejected, failed to enable media [ 171.209118][ T5984] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 171.265357][ T7489] vivid-003: disconnect [ 171.298980][ T7489] vivid-003: reconnect [ 171.572555][ T5942] IPVS: starting estimator thread 0... [ 171.683153][ T7501] IPVS: using max 22 ests per chain, 52800 per kthread [ 171.834761][ T24] usb 4-1: USB disconnect, device number 8 [ 171.876412][ T24] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 172.509965][ T7528] ip6gretap0: entered promiscuous mode [ 172.537557][ T7528] macsec1: entered promiscuous mode [ 172.573191][ T7528] macsec1: entered allmulticast mode [ 172.624595][ T7528] ip6gretap0: entered allmulticast mode [ 173.843090][ T5984] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 174.025718][ T5984] usb 4-1: Using ep0 maxpacket: 16 [ 174.082078][ T5984] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 174.117002][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.149797][ T5984] usb 4-1: Product: syz [ 174.170155][ T5984] usb 4-1: Manufacturer: syz [ 174.185942][ T5984] usb 4-1: SerialNumber: syz [ 174.207955][ T5984] usb 4-1: config 0 descriptor?? [ 174.226601][ T5984] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 174.478876][ T7579] netlink: 520 bytes leftover after parsing attributes in process `syz.5.602'. [ 174.624549][ T7583] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.089087][ T5984] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 175.173022][ T5984] usb 4-1: USB disconnect, device number 9 [ 175.555483][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 175.616314][ T5851] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.748590][ T24] usb 1-1: config 0 has no interfaces? [ 175.755719][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.783437][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.806514][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.807255][ T7607] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 175.831063][ T24] usb 1-1: config 0 descriptor?? [ 175.852979][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.855817][ T7607] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 175.903042][ T5851] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.942256][ T5851] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.966563][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.982407][ T7611] netlink: 'syz.5.616': attribute type 12 has an invalid length. [ 175.992076][ T5851] usb 2-1: config 0 descriptor?? [ 176.023545][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.616'. [ 176.035711][ T7611] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 176.180417][ T7615] bridge0: port 3(syz_tun) entered blocking state [ 176.204727][ T7615] bridge0: port 3(syz_tun) entered disabled state [ 176.212215][ T7615] syz_tun: entered allmulticast mode [ 176.235169][ T7615] syz_tun: entered promiscuous mode [ 176.244526][ T7615] bridge0: port 3(syz_tun) entered blocking state [ 176.251511][ T7615] bridge0: port 3(syz_tun) entered forwarding state [ 176.302651][ T7593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.315858][ T5984] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 176.336792][ T7593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.386289][ T5942] usb 1-1: USB disconnect, device number 5 [ 176.476621][ T5851] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 176.496836][ T5984] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 176.518182][ T5984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.560876][ T5984] usb 5-1: config 0 descriptor?? [ 176.591924][ T5984] cp210x 5-1:0.0: cp210x converter detected [ 176.843331][ T5920] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 177.004528][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 177.011667][ T5984] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 177.021458][ T5206] udevd[5206]: worker [6832] terminated by signal 33 (Unknown signal 33) [ 177.032801][ T5920] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 177.036994][ T5206] udevd[5206]: worker [6832] failed while handling '/devices/virtual/block/loop0' [ 177.058217][ T5984] usb 5-1: cp210x converter now attached to ttyUSB0 [ 177.075848][ T5920] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 177.091664][ T5920] usb 4-1: config 0 interface 0 has no altsetting 0 [ 177.121897][ T5920] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e [ 177.131708][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.157955][ T5920] usb 4-1: Product: syz [ 177.162604][ T5920] usb 4-1: Manufacturer: syz [ 177.187050][ T5920] usb 4-1: SerialNumber: syz [ 177.197911][ T5920] usb 4-1: config 0 descriptor?? [ 177.253924][ T5942] usb 5-1: USB disconnect, device number 4 [ 177.277800][ T5942] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 177.299200][ T5942] cp210x 5-1:0.0: device disconnected [ 177.639949][ T5920] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 177.738553][ T7640] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 178.299179][ T5920] usb 4-1: USB disconnect, device number 10 [ 178.532446][ T5942] usb 2-1: USB disconnect, device number 11 [ 179.419595][ T7684] random: crng reseeded on system resumption [ 180.221039][ T7729] 9pnet: p9_errstr2errno: server reported unknown error @΂0x0000000000000003 [ 180.427784][ T7732] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 180.463038][ T10] IPVS: starting estimator thread 0... [ 180.552949][ T7739] IPVS: using max 26 ests per chain, 62400 per kthread [ 180.843753][ T5942] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 181.033034][ T5942] usb 6-1: Using ep0 maxpacket: 16 [ 181.047632][ T5942] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 181.078851][ T5942] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 181.090660][ T5942] usb 6-1: config 0 interface 0 has no altsetting 0 [ 181.101019][ T5942] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 0.00 [ 181.125942][ T5931] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 181.141420][ T5942] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 181.158791][ T5942] usb 6-1: SerialNumber: syz [ 181.177410][ T5942] usb 6-1: config 0 descriptor?? [ 181.187574][ T7741] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 181.213751][ T7741] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 181.335018][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 181.371577][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.393902][ T5942] rc_core: IR keymap rc-hauppauge not found [ 181.400586][ T5942] Registered IR keymap rc-empty [ 181.414636][ T5931] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 181.443705][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 181.452073][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.500151][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 181.513321][ T5931] usb 2-1: config 0 descriptor?? [ 181.558635][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 181.627335][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input14 [ 181.731703][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 181.763383][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 181.817698][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 181.843463][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 181.884869][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 181.924484][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 181.994330][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 182.002384][ T5931] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 182.053728][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 182.084922][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 182.134926][ T5942] mceusb 6-1:0.0: Error: mce write urb status = -71 [ 182.187879][ T5942] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 182.222167][ T5942] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 182.267059][ T5931] usb 2-1: USB disconnect, device number 12 [ 182.306398][ T5942] usb 6-1: USB disconnect, device number 2 [ 182.333255][ T7775] fido_id[7775]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 182.863386][ T5920] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 183.010852][ T7793] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 183.025529][ T5942] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 183.053156][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 183.062259][ T5920] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 183.079003][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.140273][ T5920] usb 1-1: config 0 descriptor?? [ 183.215775][ T5942] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 183.233402][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.267597][ T5942] usb 5-1: config 0 descriptor?? [ 183.303461][ T5942] cp210x 5-1:0.0: cp210x converter detected [ 183.657238][ T5920] nti 0003:0757:0A00.0009: unknown main item tag 0x2 [ 183.696021][ T5920] nti 0003:0757:0A00.0009: unknown main item tag 0x2 [ 183.713314][ T5920] nti 0003:0757:0A00.0009: unknown main item tag 0x5 [ 183.715183][ T5942] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 183.741303][ T5920] nti 0003:0757:0A00.0009: unknown main item tag 0x7 [ 183.773771][ T5920] nti 0003:0757:0A00.0009: unknown main item tag 0x7 [ 183.791471][ T5920] nti 0003:0757:0A00.0009: unknown main item tag 0x2 [ 183.793871][ T5942] cp210x 5-1:0.0: GPIO initialisation failed: -524 [ 183.826967][ T5920] nti 0003:0757:0A00.0009: invalid report_size 543453793 [ 183.875028][ T5920] nti 0003:0757:0A00.0009: item 0 4 1 7 parsing failed [ 183.881131][ T5942] usb 5-1: cp210x converter now attached to ttyUSB0 [ 183.904232][ T5920] nti 0003:0757:0A00.0009: probe with driver nti failed with error -22 [ 183.973980][ T5920] usb 1-1: USB disconnect, device number 6 [ 184.006037][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.5.673'. [ 184.058172][ T7812] sctp: [Deprecated]: syz.3.672 (pid 7812) Use of int in max_burst socket option deprecated. [ 184.058172][ T7812] Use struct sctp_assoc_value instead [ 184.151566][ T5851] usb 5-1: USB disconnect, device number 5 [ 184.171191][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.5.673'. [ 184.212239][ T5851] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 184.231683][ T5851] cp210x 5-1:0.0: device disconnected [ 185.668042][ T7865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.691'. [ 185.701140][ T7865] syz_tun: entered promiscuous mode [ 186.430472][ T5920] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.562262][ T7891] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 186.636284][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.661309][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.708879][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.763026][ T5920] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.802940][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.834722][ T5920] usb 2-1: config 0 descriptor?? [ 187.362231][ T5920] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 187.636570][ T24] usb 2-1: USB disconnect, device number 13 [ 188.349637][ T7952] netlink: 'syz.0.719': attribute type 6 has an invalid length. [ 188.833257][ T5920] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 188.993076][ T5851] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 189.025353][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.045497][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.066261][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 189.115595][ T5920] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 189.128558][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.161245][ T5920] usb 5-1: config 0 descriptor?? [ 189.174108][ T5851] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 189.207158][ T5851] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.217657][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 189.228112][ T5851] usb 2-1: SerialNumber: syz [ 189.643963][ T5920] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 189.924608][ T7988] geneve1: entered promiscuous mode [ 189.935046][ T24] usb 5-1: USB disconnect, device number 6 [ 189.948011][ T7988] geneve1: left promiscuous mode [ 190.018459][ T5851] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 190.286978][ T5931] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 190.311999][ T24] usb 2-1: USB disconnect, device number 14 [ 190.331898][ T24] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 190.492205][ T5931] usb 6-1: Using ep0 maxpacket: 16 [ 190.511111][ T8004] pimreg3: entered allmulticast mode [ 190.520621][ T5931] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.562891][ T5931] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 190.590153][ T5931] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 190.600178][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 190.633604][ T5931] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.694168][ T5931] usb 6-1: config 0 descriptor?? [ 190.741277][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 190.812292][ T8008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.860001][ T8008] bond0: (slave rose0): Enslaving as an active interface with an up link [ 191.108400][ T7986] raw-gadget.0 gadget.5: fail, usb_ep_set_halt returned -11 [ 191.157414][ T5931] usbhid 6-1:0.0: can't add hid device: -71 [ 191.187066][ T5931] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 191.229086][ T5931] usb 6-1: USB disconnect, device number 3 [ 191.724306][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 191.895358][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.926210][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.953019][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 191.987169][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.041412][ T24] usb 5-1: config 0 descriptor?? [ 192.511850][ T24] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 192.553055][ T24] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 192.582962][ T24] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 192.601546][ T24] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 192.622193][ T24] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 192.681780][ T24] cm6533_jd 0003:0D8C:0022.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 192.830876][ T24] usb 5-1: USB disconnect, device number 7 [ 192.899289][ T8065] fido_id[8065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 193.572443][ T8085] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005 [ 194.010902][ T8102] process 'syz.1.771' launched './file0' with NULL argv: empty string added [ 194.113341][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 194.189119][ T8109] capability: warning: `syz.5.757' uses 32-bit capabilities (legacy support in use) [ 194.343550][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.370884][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.414952][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 194.456757][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 194.516745][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.564311][ T24] usb 5-1: config 0 descriptor?? [ 194.775109][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.781817][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.915577][ T8128] input: syz1 as /devices/virtual/input/input15 [ 195.046799][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 195.101958][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 195.142287][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 195.172397][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 195.219946][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 195.247134][ T24] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 195.309136][ T24] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 195.431935][ T24] usb 5-1: USB disconnect, device number 8 [ 195.504040][ T8137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.782'. [ 195.617745][ T8143] fido_id[8143]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 196.247379][ T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 196.444510][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 196.510427][ T24] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 196.531668][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.583283][ T24] usb 6-1: config 0 descriptor?? [ 196.805959][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 196.859925][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 196.910498][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 196.932676][ T24] usb 6-1: media controller created [ 196.990173][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.714336][ T24] az6027: usb out operation failed. (-71) [ 197.730192][ T24] stb0899_attach: Driver disabled by Kconfig [ 197.765994][ T24] az6027: no front-end attached [ 197.765994][ T24] [ 197.789396][ T24] az6027: usb out operation failed. (-71) [ 197.801408][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 197.831490][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input16 [ 197.896893][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 197.935219][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 197.980864][ T24] usb 6-1: USB disconnect, device number 4 [ 198.277898][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 199.893991][ T5942] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 200.048245][ T8268] syzkaller1: entered promiscuous mode [ 200.054200][ T8268] syzkaller1: entered allmulticast mode [ 200.056078][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 200.081269][ T5942] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 200.104381][ T5942] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 200.114798][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 200.124391][ T5942] usb 1-1: Product: syz [ 200.130902][ T5942] usb 1-1: Manufacturer: syz [ 200.139620][ T5942] usb 1-1: SerialNumber: syz [ 200.172427][ T5942] usb 1-1: config 0 descriptor?? [ 200.199356][ T8264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 200.224221][ T5942] hub 1-1:0.0: bad descriptor, ignoring hub [ 200.231915][ T5942] hub 1-1:0.0: probe with driver hub failed with error -5 [ 200.728484][ T8288] vcan0: tx drop: invalid sa for name 0x0000040000000000 [ 200.983870][ T8264] usb 1-1: reset high-speed USB device number 7 using dummy_hcd [ 201.085813][ T8303] syzkaller1: entered promiscuous mode [ 201.092044][ T8303] syzkaller1: entered allmulticast mode [ 201.211294][ T8264] usb 1-1: device firmware changed [ 201.248521][ T5984] usb 1-1: USB disconnect, device number 7 [ 201.314095][ T8307] binder: 8305:8307 ioctl c0306201 2000000001c0 returned -14 [ 201.433952][ T5984] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 201.603461][ T5984] usb 1-1: Using ep0 maxpacket: 32 [ 201.627355][ T5984] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 201.659844][ T5984] usb 1-1: string descriptor 0 read error: -22 [ 201.675055][ T5984] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 201.695924][ T5984] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 201.733082][ T24] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 201.736024][ T5984] usb 1-1: config 0 descriptor?? [ 201.778442][ T8285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.834717][ T5984] hub 1-1:0.0: bad descriptor, ignoring hub [ 201.841246][ T5984] hub 1-1:0.0: probe with driver hub failed with error -5 [ 201.883159][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.5.851'. [ 201.940737][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.972055][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 201.992075][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 202.007702][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 202.054768][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 202.097484][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 202.116213][ T24] usb 2-1: Manufacturer: syz [ 202.147750][ T24] usb 2-1: config 0 descriptor?? [ 202.213272][ T5984] usb 1-1: USB disconnect, device number 8 [ 202.518325][ T24] rc_core: IR keymap rc-hauppauge not found [ 202.547598][ T24] Registered IR keymap rc-empty [ 202.557612][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.588904][ T8340] can0: slcan on ttyS3. [ 202.603031][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.659041][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 202.713832][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 202.730244][ T8340] can0 (unregistered): slcan off ttyS3. [ 202.768822][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.823022][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.855096][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.894007][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.916072][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 202.963154][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 203.004963][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 203.074737][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 203.118442][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 203.174793][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 203.213291][ T24] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 203.249868][ T24] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 203.271869][ T24] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 203.302943][ T5942] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 203.336117][ T24] usb 2-1: USB disconnect, device number 15 [ 203.477340][ T5942] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.526956][ T5942] usb 1-1: config 0 interface 0 has no altsetting 0 [ 203.559716][ T5942] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 203.599421][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.662562][ T5942] usb 1-1: config 0 descriptor?? [ 204.218287][ T5942] input: HID 054c:03d5 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:054C:03D5.000E/input/input18 [ 204.340580][ T5942] sony 0003:054C:03D5.000E: input,hidraw0: USB HID v0.00 Joystick [HID 054c:03d5] on usb-dummy_hcd.0-1/input0 [ 204.437959][ T5942] usb 1-1: USB disconnect, device number 9 [ 204.625908][ T8388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.873'. [ 204.755029][ T5984] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 204.795015][ T8387] fido_id[8387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 204.936597][ T5984] usb 6-1: Using ep0 maxpacket: 8 [ 204.960848][ T5984] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 204.994771][ T5984] usb 6-1: config 179 has no interface number 0 [ 205.013700][ T5984] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 205.049561][ T5984] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 205.104242][ T5984] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 205.131094][ T5984] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 205.159363][ T5984] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 205.191193][ T5984] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 205.230088][ T5984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.270085][ T8385] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 205.814325][ T5984] usb 6-1: USB disconnect, device number 5 [ 205.814396][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 205.829240][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 206.091501][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056028c00: rx timeout, send abort [ 206.143394][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 206.322996][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 206.337327][ T10] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 206.363089][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.372041][ T10] usb 1-1: Product: syz [ 206.393181][ T10] usb 1-1: Manufacturer: syz [ 206.398333][ T10] usb 1-1: SerialNumber: syz [ 206.414129][ T10] usb 1-1: config 0 descriptor?? [ 206.430708][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 206.601450][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056028c00: abort rx timeout. Force session deactivation [ 206.893910][ T8447] warning: `syz.1.891' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 207.414509][ T8457] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 207.450299][ T5942] kernel write not supported for file /419/clear_refs (pid: 5942 comm: kworker/1:5) [ 207.481754][ T10] gspca_ov534_9: reg_w failed -71 [ 207.525757][ T8463] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 207.694914][ T8468] loop2: detected capacity change from 0 to 7 [ 207.724312][ T8468] Dev loop2: unable to read RDB block 7 [ 207.743175][ T8468] loop2: unable to read partition table [ 207.759985][ T8468] loop2: partition table beyond EOD, truncated [ 207.786706][ T10] gspca_ov534_9: Unknown sensor 0000 [ 207.786825][ T10] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 207.789800][ T8468] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 207.797176][ T10] usb 1-1: USB disconnect, device number 10 [ 208.697044][ T8499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.110503][ T8501] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.375350][ T8501] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.567085][ T8494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.910'. [ 209.605139][ T8501] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.631186][ T8511] batadv_slave_0: entered promiscuous mode [ 209.656101][ T8513] netlink: 'syz.1.918': attribute type 29 has an invalid length. [ 209.769168][ T8501] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.851239][ T8510] batadv_slave_0: left promiscuous mode [ 210.493631][ T5942] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 210.541523][ T8501] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.591753][ T8501] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.634283][ T8501] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.668485][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.687295][ T8501] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.696792][ T5942] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 210.720440][ T5942] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 210.752989][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.798759][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 210.806821][ T5942] usb 2-1: config 0 descriptor?? [ 210.844773][ T5942] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 210.878177][ T5942] dvb-usb: bulk message failed: -22 (3/0) [ 210.927252][ T5942] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 210.959805][ T5942] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 210.990347][ T5942] usb 2-1: media controller created [ 211.001309][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.021966][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 211.047721][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 211.083214][ T8531] dvb-usb: bulk message failed: -22 (2/0) [ 211.104082][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 211.121956][ T5942] dvb-usb: bulk message failed: -22 (6/0) [ 211.130274][ T5942] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 211.166114][ T5942] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 211.167155][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.226515][ T5942] dvb-usb: schedule remote query interval to 150 msecs. [ 211.247796][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.264563][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.283021][ T5942] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 211.291198][ T10] usb 1-1: config 0 descriptor?? [ 211.323969][ T5942] usb 2-1: USB disconnect, device number 16 [ 211.449626][ T5942] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 211.750225][ T10] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x3 [ 211.771071][ T10] plantronics 0003:047F:FFFF.000F: unbalanced collection at end of report description [ 211.788210][ T10] plantronics 0003:047F:FFFF.000F: parse failed [ 211.795669][ T10] plantronics 0003:047F:FFFF.000F: probe with driver plantronics failed with error -22 [ 212.039539][ T10] usb 1-1: USB disconnect, device number 11 [ 212.599459][ T30] kauditd_printk_skb: 142 callbacks suppressed [ 212.599488][ T30] audit: type=1326 audit(1754059339.311:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 212.745046][ T30] audit: type=1326 audit(1754059339.341:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 212.832175][ T30] audit: type=1326 audit(1754059339.341:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 212.884777][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.947'. [ 212.894718][ T30] audit: type=1326 audit(1754059339.341:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 212.919226][ T30] audit: type=1326 audit(1754059339.341:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 212.941800][ T5942] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 213.013262][ T30] audit: type=1326 audit(1754059339.341:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 213.061250][ T30] audit: type=1326 audit(1754059339.341:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 213.122938][ T5942] usb 5-1: Using ep0 maxpacket: 32 [ 213.156761][ T5942] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 213.166064][ T5942] usb 5-1: config 0 has no interface number 0 [ 213.176265][ T30] audit: type=1326 audit(1754059339.341:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 213.229207][ T5942] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 213.248952][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.252135][ T8598] netlink: 40 bytes leftover after parsing attributes in process `syz.3.950'. [ 213.270610][ T30] audit: type=1326 audit(1754059339.341:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 213.299296][ T5942] usb 5-1: Product: syz [ 213.309921][ T5942] usb 5-1: Manufacturer: syz [ 213.337277][ T8598] netlink: 3 bytes leftover after parsing attributes in process `syz.3.950'. [ 213.348432][ T5942] usb 5-1: SerialNumber: syz [ 213.355754][ T8602] netlink: 27 bytes leftover after parsing attributes in process `syz.5.952'. [ 213.374623][ T5942] usb 5-1: config 0 descriptor?? [ 213.394359][ T30] audit: type=1326 audit(1754059339.341:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8582 comm="syz.5.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 213.424796][ T5942] smsc95xx v2.0.0 [ 213.737603][ T8613] syzkaller1: entered promiscuous mode [ 213.778799][ T8613] syzkaller1: entered allmulticast mode [ 214.013023][ T5959] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 214.245513][ T5959] usb 4-1: unable to get BOS descriptor or descriptor too short [ 214.276265][ T5959] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 214.293135][ T5959] usb 4-1: can't read configurations, error -71 [ 214.454746][ T5942] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 214.474387][ T5942] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 214.486327][ T5942] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 214.499320][ T5942] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 214.548979][ T5942] usb 5-1: USB disconnect, device number 9 [ 216.493189][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 216.667247][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 216.679028][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.703112][ T24] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 216.766597][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 216.825894][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.856565][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.892669][ T24] usb 6-1: Product: syz [ 216.908700][ T24] usb 6-1: Manufacturer: syz [ 216.929238][ T24] usb 6-1: SerialNumber: syz [ 217.315052][ T8642] Bluetooth: hci4: command 0x0406 tx timeout [ 217.315615][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 217.321271][ T8642] Bluetooth: hci2: command 0x0406 tx timeout [ 217.330722][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 217.764444][ T8690] sock: sock_set_timeout: `syz.0.987' (pid 8690) tries to set negative timeout [ 217.779412][ T8691] team0: entered allmulticast mode [ 217.799254][ T8691] team_slave_0: entered allmulticast mode [ 217.812620][ T8691] team_slave_1: entered allmulticast mode [ 217.820544][ T8691] team0: left allmulticast mode [ 217.853421][ T8691] team_slave_0: left allmulticast mode [ 217.860431][ T8691] team_slave_1: left allmulticast mode [ 218.016966][ T24] cdc_ncm 6-1:1.0: bind() failure [ 218.067695][ T24] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 218.204406][ T24] usb 6-1: USB disconnect, device number 6 [ 218.743910][ T5851] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 218.904843][ T5851] usb 2-1: Using ep0 maxpacket: 32 [ 218.935567][ T5851] usb 2-1: config 0 interface 0 has no altsetting 0 [ 218.968263][ T5851] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 218.990504][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.035446][ T5851] usb 2-1: config 0 descriptor?? [ 219.146898][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 219.146919][ T30] audit: type=1326 audit(1754059345.871:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8728 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 219.177413][ T30] audit: type=1326 audit(1754059345.871:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8728 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 219.208352][ T30] audit: type=1326 audit(1754059345.871:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8728 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 219.263004][ T5959] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 219.268572][ T30] audit: type=1326 audit(1754059345.881:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8728 comm="syz.5.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3570d8eb69 code=0x7ffc0000 [ 219.433078][ T5959] usb 5-1: Using ep0 maxpacket: 16 [ 219.466124][ T5959] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 219.476410][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.491220][ T5959] usb 5-1: Product: syz [ 219.500023][ T5959] usb 5-1: Manufacturer: syz [ 219.513065][ T5959] usb 5-1: SerialNumber: syz [ 219.521092][ T5959] usb 5-1: config 0 descriptor?? [ 219.846154][ T5851] corsair-cpro 0003:1B1C:0C10.0010: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 219.965934][ T5959] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 220.024226][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 220.027124][ T5851] corsair-cpro 0003:1B1C:0C10.0010: probe with driver corsair-cpro failed with error -71 [ 220.051566][ T5959] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 220.083552][ T5959] usb 5-1: media controller created [ 220.158287][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 220.170279][ T8726] dtv5100: wlen = 0, aborting. [ 220.228275][ T5851] usb 2-1: USB disconnect, device number 17 [ 220.255817][ T5959] zl10353_read_register: readreg error (reg=127, ret==0) [ 220.286732][ T5959] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 220.296750][ T5959] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 220.331181][ T5959] usb 5-1: USB disconnect, device number 10 [ 220.477093][ T5959] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 221.172927][ T5959] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 221.343029][ T5959] usb 2-1: Using ep0 maxpacket: 32 [ 221.360167][ T5959] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 221.365235][ T8776] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 221.380556][ T8777] vivid-000: disconnect [ 221.390023][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.398444][ T8773] vivid-000: reconnect [ 221.405667][ T5959] usb 2-1: Product: syz [ 221.410213][ T5959] usb 2-1: Manufacturer: syz [ 221.415818][ T5959] usb 2-1: SerialNumber: syz [ 221.437487][ T5959] usb 2-1: config 0 descriptor?? [ 221.669279][ T8764] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1020'. [ 221.709983][ T5959] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 221.729326][ T5959] peak_usb 2-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 221.795046][ T5959] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 221.831611][ T5959] usb 2-1: USB disconnect, device number 18 [ 221.863139][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 221.936622][ T8790] input: syz1 as /devices/virtual/input/input20 [ 222.049686][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.086020][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 222.100335][ T30] audit: type=1804 audit(1754059348.811:177): pid=8795 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.1034" name=2F6E6577726F6F742F3230322F66696C65302FE91F7189591E9233614B dev="hugetlbfs" ino=21605 res=1 errno=0 [ 222.136875][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.151099][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.171548][ T10] usb 6-1: Product: syz [ 222.182896][ T10] usb 6-1: Manufacturer: syz [ 222.187632][ T10] usb 6-1: SerialNumber: syz [ 222.303333][ T5984] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 222.346298][ T8799] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.462726][ T8784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.473035][ T5984] usb 4-1: Using ep0 maxpacket: 16 [ 222.478162][ T8784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.499124][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 222.511952][ T5984] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 222.553172][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.561341][ T5984] usb 4-1: Product: syz [ 222.568785][ T10] usb 6-1: USB disconnect, device number 7 [ 222.587146][ T5984] usb 4-1: Manufacturer: syz [ 222.596531][ T5984] usb 4-1: SerialNumber: syz [ 222.606368][ T5984] usb 4-1: config 0 descriptor?? [ 222.646422][ T5959] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 222.815416][ T5959] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.831196][ T5959] usb 5-1: config 0 has no interface number 0 [ 222.853893][ T5959] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 222.869893][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.880795][ T5959] usb 5-1: Product: syz [ 222.905781][ T5959] usb 5-1: Manufacturer: syz [ 222.910683][ T5959] usb 5-1: SerialNumber: syz [ 222.920704][ T5959] usb 5-1: config 0 descriptor?? [ 223.031849][ T5984] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 223.043228][ T10] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 223.057863][ T5984] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 223.071392][ T5984] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 223.094982][ T5984] usb 4-1: media controller created [ 223.146206][ T5959] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 223.154990][ T5984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.164438][ T5959] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 223.207277][ T5959] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 223.217524][ T5959] usb 5-1: media controller created [ 223.230305][ T10] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 223.242078][ T10] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 223.254270][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.263904][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 223.264883][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 223.287165][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 223.300344][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.312460][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.408997][ T5959] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 223.567848][ T10] usb 6-1: usb_control_msg returned -71 [ 223.615070][ T10] usbtmc 6-1:16.0: can't read capabilities [ 223.694484][ T10] usb 6-1: USB disconnect, device number 8 [ 223.734818][ T8794] dtv5100: wlen = 0, aborting. [ 223.740061][ T5984] zl10353_read_register: readreg error (reg=127, ret==0) [ 223.757825][ T5984] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 223.796891][ T5984] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 223.808675][ T8802] ------------[ cut here ]------------ [ 223.814722][ T8802] usb 4-1: BOGUS control dir, pipe 80000d80 doesn't match bRequestType c0 [ 223.854209][ T5984] usb 4-1: USB disconnect, device number 13 [ 223.870870][ T8822] input: syz0 as /devices/virtual/input/input21 [ 223.885857][ T8802] WARNING: CPU: 0 PID: 8802 at drivers/usb/core/urb.c:413 usb_submit_urb+0x115d/0x1890 [ 223.896913][ T8802] Modules linked in: [ 223.901728][ T8802] CPU: 0 UID: 0 PID: 8802 Comm: syz.4.1038 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 223.913362][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.924488][ T8802] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 223.930194][ T8802] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 5c 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 14 47 6b fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 223.950769][ C0] vkms_vblank_simulate: vblank timer overrun [ 223.957374][ T8802] RSP: 0018:ffffc9000ea07830 EFLAGS: 00010246 [ 223.963646][ T8802] RAX: 11db3f6c4c1cb800 RBX: ffff8881427c4000 RCX: 0000000000080000 [ 223.972236][ T8802] RDX: ffffc9000cefd000 RSI: 0000000000003b98 RDI: 0000000000003b99 [ 223.980406][ T8802] RBP: 1ffff11028870b1c R08: ffffc9000ea07547 R09: 1ffff92001d40ea8 [ 223.988637][ T8802] R10: dffffc0000000000 R11: fffff52001d40ea9 R12: ffff8881443858e0 [ 223.997033][ T8802] R13: dffffc0000000000 R14: 0000000080000d80 R15: ffff88801ea83de0 [ 224.005671][ T8802] FS: 00007f09938af6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 224.016188][ T8802] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 224.023626][ T8802] CR2: 0000001b3061cff8 CR3: 000000007663c000 CR4: 00000000003526f0 [ 224.032111][ T8802] Call Trace: [ 224.035708][ T8802] [ 224.038886][ T8802] usb_start_wait_urb+0x114/0x4c0 [ 224.044576][ T8802] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 224.050585][ T8802] usb_control_msg+0x232/0x3e0 [ 224.055513][ T8802] dtv5100_i2c_msg+0x250/0x330 [ 224.060542][ T8802] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 224.065790][ T8802] __i2c_transfer+0x874/0x2170 [ 224.070647][ T8802] ? i2c_transfer+0x11d/0x3a0 [ 224.075615][ T8802] ? __pfx___i2c_transfer+0x10/0x10 [ 224.080956][ T8802] ? rt_mutex_lock_nested+0x172/0x1e0 [ 224.086605][ T8802] ? i2c_transfer+0x11d/0x3a0 [ 224.091430][ T8802] i2c_transfer+0x25b/0x3a0 [ 224.096438][ T8802] ? __pfx_i2c_transfer+0x10/0x10 [ 224.102037][ T8802] ? _copy_from_user+0x94/0xb0 [ 224.108063][ T8802] i2cdev_ioctl_rdwr+0x460/0x740 [ 224.114281][ T8802] i2cdev_ioctl+0x64b/0x7f0 [ 224.119439][ T8802] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 224.124758][ T8802] ? __fget_files+0x3a0/0x420 [ 224.129885][ T8802] ? __fget_files+0x2a/0x420 [ 224.134800][ T8802] ? bpf_lsm_file_ioctl+0x9/0x20 [ 224.140287][ T8802] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 224.145688][ T8802] __se_sys_ioctl+0xfc/0x170 [ 224.150540][ T8802] do_syscall_64+0xfa/0x3b0 [ 224.155423][ T8802] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.160671][ T8802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.167037][ T8802] ? clear_bhb_loop+0x60/0xb0 [ 224.172210][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.178613][ T8802] RIP: 0033:0x7f099298eb69 [ 224.183517][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.206364][ T8802] RSP: 002b:00007f09938af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.215747][ T8802] RAX: ffffffffffffffda RBX: 00007f0992bb5fa0 RCX: 00007f099298eb69 [ 224.224359][ T8802] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 224.232577][ T8802] RBP: 00007f0992a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 224.241550][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.250078][ T8802] R13: 0000000000000000 R14: 00007f0992bb5fa0 R15: 00007fff2d684608 [ 224.258452][ T8802] [ 224.261601][ T8802] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 224.269110][ T8802] CPU: 0 UID: 0 PID: 8802 Comm: syz.4.1038 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 224.279548][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 224.290084][ T8802] Call Trace: [ 224.293479][ T8802] [ 224.296515][ T8802] dump_stack_lvl+0x99/0x250 [ 224.301301][ T8802] ? __asan_memcpy+0x40/0x70 [ 224.306012][ T8802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.311251][ T8802] ? __pfx__printk+0x10/0x10 [ 224.315878][ T8802] panic+0x2db/0x790 [ 224.319980][ T8802] ? __pfx_panic+0x10/0x10 [ 224.324444][ T8802] __warn+0x31b/0x4b0 [ 224.328630][ T8802] ? usb_submit_urb+0x115d/0x1890 [ 224.333767][ T8802] ? usb_submit_urb+0x115d/0x1890 [ 224.339234][ T8802] report_bug+0x2be/0x4f0 [ 224.343668][ T8802] ? usb_submit_urb+0x115d/0x1890 [ 224.348968][ T8802] ? usb_submit_urb+0x115d/0x1890 [ 224.354106][ T8802] ? usb_submit_urb+0x115f/0x1890 [ 224.359319][ T8802] handle_bug+0x84/0x160 [ 224.363723][ T8802] exc_invalid_op+0x1a/0x50 [ 224.368503][ T8802] asm_exc_invalid_op+0x1a/0x20 [ 224.373718][ T8802] RIP: 0010:usb_submit_urb+0x115d/0x1890 [ 224.379462][ T8802] Code: 0f b6 44 05 00 84 c0 0f 85 10 06 00 00 45 0f b6 04 24 48 c7 c7 20 5c 33 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 14 47 6b fa 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 e0 f3 ff ff 89 e9 80 [ 224.399799][ T8802] RSP: 0018:ffffc9000ea07830 EFLAGS: 00010246 [ 224.406058][ T8802] RAX: 11db3f6c4c1cb800 RBX: ffff8881427c4000 RCX: 0000000000080000 [ 224.414500][ T8802] RDX: ffffc9000cefd000 RSI: 0000000000003b98 RDI: 0000000000003b99 [ 224.423061][ T8802] RBP: 1ffff11028870b1c R08: ffffc9000ea07547 R09: 1ffff92001d40ea8 [ 224.431405][ T8802] R10: dffffc0000000000 R11: fffff52001d40ea9 R12: ffff8881443858e0 [ 224.439592][ T8802] R13: dffffc0000000000 R14: 0000000080000d80 R15: ffff88801ea83de0 [ 224.448242][ T8802] usb_start_wait_urb+0x114/0x4c0 [ 224.453659][ T8802] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 224.459415][ T8802] usb_control_msg+0x232/0x3e0 [ 224.464308][ T8802] dtv5100_i2c_msg+0x250/0x330 [ 224.469102][ T8802] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 224.474076][ T8802] __i2c_transfer+0x874/0x2170 [ 224.479232][ T8802] ? i2c_transfer+0x11d/0x3a0 [ 224.484278][ T8802] ? __pfx___i2c_transfer+0x10/0x10 [ 224.489780][ T8802] ? rt_mutex_lock_nested+0x172/0x1e0 [ 224.495230][ T8802] ? i2c_transfer+0x11d/0x3a0 [ 224.500019][ T8802] i2c_transfer+0x25b/0x3a0 [ 224.504545][ T8802] ? __pfx_i2c_transfer+0x10/0x10 [ 224.509756][ T8802] ? _copy_from_user+0x94/0xb0 [ 224.514646][ T8802] i2cdev_ioctl_rdwr+0x460/0x740 [ 224.519793][ T8802] i2cdev_ioctl+0x64b/0x7f0 [ 224.524420][ T8802] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 224.529459][ T8802] ? __fget_files+0x3a0/0x420 [ 224.534216][ T8802] ? __fget_files+0x2a/0x420 [ 224.538930][ T8802] ? bpf_lsm_file_ioctl+0x9/0x20 [ 224.544337][ T8802] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 224.549381][ T8802] __se_sys_ioctl+0xfc/0x170 [ 224.554516][ T8802] do_syscall_64+0xfa/0x3b0 [ 224.559293][ T8802] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.564686][ T8802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.571023][ T8802] ? clear_bhb_loop+0x60/0xb0 [ 224.575922][ T8802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.582213][ T8802] RIP: 0033:0x7f099298eb69 [ 224.586740][ T8802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.607760][ T8802] RSP: 002b:00007f09938af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 224.616627][ T8802] RAX: ffffffffffffffda RBX: 00007f0992bb5fa0 RCX: 00007f099298eb69 [ 224.625071][ T8802] RDX: 0000200000000200 RSI: 0000000000000707 RDI: 0000000000000004 [ 224.633520][ T8802] RBP: 00007f0992a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 224.641690][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.650119][ T8802] R13: 0000000000000000 R14: 00007f0992bb5fa0 R15: 00007fff2d684608 [ 224.658407][ T8802] [ 224.661807][ T8802] Kernel Offset: disabled [ 224.666227][ T8802] Rebooting in 86400 seconds..