last executing test programs: 12.740119511s ago: executing program 1 (id=792): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') read$FUSE(r0, &(0x7f00000019c0)={0x2020}, 0x2020) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x5, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x24008004) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000680)={"e2859501099928bfcfb4fde644bcab2c", 0x0, 0x0, {0xc, 0x3ff}, {0xfff, 0x5}, 0x8000000000, [0xffffffff, 0x1, 0x1, 0x7, 0x6, 0x0, 0x5, 0xe99, 0x0, 0x8e, 0x6, 0x9, 0x0, 0xfffffffffffffffa, 0x5, 0x9]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000003a00)={{}, r2, 0x8, @unused=[0x8b, 0xfff, 0x9], @subvolid=0x4}) splice(0xffffffffffffffff, &(0x7f0000000280)=0xb4e, r1, &(0x7f0000000780)=0x64d1, 0x2, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000040)={r0, 0x3, {0x0, 0x0, 0x0, 0x3, 0x8, 0x0, 0x2, 0x2, 0x15, "5f9375be473862906df623e9a134335101feff1d342c7ee864e46d8f13ee42405489d0742e8031cc48a0124be6a5b5ff8d368d166cb945a65f46414093a142f7", "42df62bfa3d2cfdbcda182017ab32acffe839a6cded7e21a05a49df0f930a65940788fd229f218def2b6dcdd4c17d6050aefa2d4c02f5cb81e8bc09ad83c7a6a", "75f421a4ecabf3391375496be6b9c86c71695a900b3adeca089712d7ec33d056", [0x3, 0x4]}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 11.632846281s ago: executing program 1 (id=795): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r2, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 6.643145499s ago: executing program 1 (id=826): r0 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 6.411946617s ago: executing program 2 (id=831): r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x101400, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0)={0x20, 0x18, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x0, 0xd, 0x7, &(0x7f0000000100)={0x17, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe97a04bc517b5452b3b94bce47509d"}}) 6.340218962s ago: executing program 1 (id=833): syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0800cd0000000600740033008020090008021100000108021100000050"], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.095066335s ago: executing program 1 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.817723347s ago: executing program 1 (id=837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r2, &(0x7f00000001c0)=""/64, 0xfdef) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 5.697764555s ago: executing program 3 (id=838): r0 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x24, 0x0) r1 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0xd378, 0x0, 0x3, 0x2f0}, &(0x7f0000001980), &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000001c00)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) accept(r0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) 5.192354313s ago: executing program 3 (id=840): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='mountstats\x00') read$FUSE(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') 5.065225678s ago: executing program 0 (id=841): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}}, 0x1c) 4.780144927s ago: executing program 3 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) unlink(&(0x7f0000000100)='./file1\x00') 4.658986124s ago: executing program 2 (id=843): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 4.477297507s ago: executing program 3 (id=844): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4.372758972s ago: executing program 0 (id=845): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_notify={{0x3b, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x54}}}, 0xd) 4.309979325s ago: executing program 2 (id=846): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a30000000002800048008000240000000001400030073797a5f74756e000000000000000000080001400000000014000000110001"], 0x9c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaa2aaaaaaaaaa08004d"], 0x0) 4.15539355s ago: executing program 2 (id=847): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffafff, 0x1000, 0x2, 0x33d}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000180)={0x2, 0x8000000000000000, @status={[0x3, 0x2, 0x0, 0x9, 0x0, 0x81]}, [0xf3, 0x75f, 0x6, 0x2, 0x5, 0xb, 0x1, 0x9, 0x0, 0x75, 0xe13, 0xec, 0x7, 0x3, 0x81, 0x74a2, 0x1, 0xe0, 0x9, 0x9ed1, 0x5, 0x4, 0x42, 0x8, 0x5, 0x101, 0xfffffffffffffffb, 0x3, 0x1, 0x2, 0x8, 0x3ff, 0xfffffffffffffe00, 0x7f01, 0x8, 0xc366, 0x7fffffff, 0xffffffff00000000, 0x8b7, 0x8, 0x4, 0x6, 0x5, 0x39, 0x6, 0x94, 0x0, 0xc7, 0x6, 0x5c6f, 0x9, 0x1ff, 0xc, 0x800, 0x4, 0x7ff, 0x100, 0x1f, 0xc, 0xe8, 0xffffffff96cc4caa, 0xb8fe, 0x4, 0x9]}) 3.736088085s ago: executing program 3 (id=848): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x49, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.488646838s ago: executing program 2 (id=849): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) write$snapshot(r0, 0x0, 0x0) 2.787832577s ago: executing program 4 (id=851): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40045304, &(0x7f0000000100)={{}, {0x0, 0x3}, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x0, 0x8, 0x7, {0x6}, 0x3e8}) 2.736189971s ago: executing program 3 (id=852): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x1, 0x5, 0x17a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1e}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) io_uring_enter(r3, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 2.668322537s ago: executing program 0 (id=853): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x6) 2.507926053s ago: executing program 4 (id=854): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.885613998s ago: executing program 0 (id=855): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x5eb, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @random="000dce859570", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x34, 0x5dd, 0x65, 0x0, 0x40, 0x2, 0x0, @local, @local}, {0x16, 0x9, 0x0, @local, "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"}}}}}, 0x0) 1.626689668s ago: executing program 4 (id=856): r0 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x0) write$snapshot(0xffffffffffffffff, 0x0, 0x0) 1.37780483s ago: executing program 0 (id=857): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)={0x2, 0xe, 0xe, 0x8, 0x5, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_address={0x3, 0x17, 0x2b, 0x80, 0x0, @in={0x2, 0x4e21, @multicast2}}]}, 0x28}}, 0x804) 1.136765386s ago: executing program 4 (id=858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.049384755s ago: executing program 0 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200004a000000c0001"], 0x3c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 656.363657ms ago: executing program 4 (id=860): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = dup2(r0, r0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 36.267359ms ago: executing program 2 (id=861): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) pwrite64(r0, &(0x7f0000000140)="966407e20fe94d0d0c1de61cbbb2fa4b60e620685ff991c5904c089562a3f123cebc", 0x22, 0x2) 0s ago: executing program 4 (id=862): syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, 0x0, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="0800cd0000000600740033008020090008021100000108021100000050"], 0x98}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): T9] ath6kl: Unable to send get target info: -71 [ 174.700684][ T9] ath6kl: Failed to init ath6kl core: -71 [ 174.717906][ T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 174.745035][ T5868] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 174.765493][ T9] usb 1-1: USB disconnect, device number 25 [ 175.815324][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 175.820162][ T5868] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.820190][ T5868] usb 3-1: config 0 has no interfaces? [ 175.823897][ T5868] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 175.823927][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 175.823949][ T5868] usb 3-1: SerialNumber: syz [ 175.934049][ T5868] usb 3-1: config 0 descriptor?? [ 176.382447][ T6695] netlink: 'syz.1.251': attribute type 21 has an invalid length. [ 176.404624][ T6695] 9p: Bad value for 'wfdno' [ 176.598135][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.255'. [ 176.925509][ T807] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 177.084248][ T807] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 177.084303][ T807] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 177.084327][ T807] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 177.084352][ T807] usb 1-1: config 1 interface 1 has no altsetting 0 [ 177.210570][ T807] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 177.210603][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.210625][ T807] usb 1-1: Product: syz [ 177.210641][ T807] usb 1-1: Manufacturer: syz [ 177.210656][ T807] usb 1-1: SerialNumber: syz [ 177.315311][ T5970] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 177.502402][ T5970] usb 2-1: not running at top speed; connect to a high speed hub [ 177.504273][ T5970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.504298][ T5970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.523131][ T807] usb 1-1: selecting invalid altsetting 0 [ 177.523441][ T807] usb 1-1: selecting invalid altsetting 0 [ 177.523513][ T807] cdc_ncm 1-1:1.0: bind() failure [ 177.581926][ T807] usb 1-1: selecting invalid altsetting 0 [ 177.581973][ T807] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -22 [ 177.582451][ T807] usb 1-1: selecting invalid altsetting 0 [ 177.582490][ T807] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -22 [ 177.583838][ T807] usb 1-1: selecting invalid altsetting 0 [ 177.583870][ T807] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 177.610918][ T5970] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.610948][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.610969][ T5970] usb 2-1: Product: Ћ [ 177.610983][ T5970] usb 2-1: SerialNumber: syz [ 177.676014][ T807] usb 1-1: USB disconnect, device number 26 [ 177.911049][ T5970] usb 2-1: 0:2 : does not exist [ 177.991472][ T5970] usb 2-1: USB disconnect, device number 11 [ 178.088269][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.439228][ T6723] mkiss: ax0: crc mode is auto. [ 178.759449][ T9] usb 3-1: USB disconnect, device number 12 [ 178.876718][ T6733] program syz.0.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.915462][ T36] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 179.077673][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 179.081070][ T36] usb 4-1: config 1 interface 0 altsetting 248 bulk endpoint 0x1 has invalid maxpacket 64 [ 179.081101][ T36] usb 4-1: config 1 interface 0 altsetting 248 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 179.081128][ T36] usb 4-1: config 1 interface 0 has no altsetting 0 [ 179.084206][ T36] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 179.084238][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.084252][ T36] usb 4-1: Product: syz [ 179.084262][ T36] usb 4-1: Manufacturer: syz [ 179.084272][ T36] usb 4-1: SerialNumber: syz [ 179.151662][ T6730] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 179.310907][ T806] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 179.384005][ T6730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.384695][ T6730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.399839][ T5881] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 179.456884][ T36] usb 4-1: USB disconnect, device number 12 [ 179.488235][ T806] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.488265][ T806] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 179.488287][ T806] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.492563][ T806] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 179.492595][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.492618][ T806] usb 3-1: Product: syz [ 179.492634][ T806] usb 3-1: Manufacturer: syz [ 179.492650][ T806] usb 3-1: SerialNumber: syz [ 179.600399][ T806] usb 3-1: config 0 descriptor?? [ 179.900986][ T5970] usb 3-1: USB disconnect, device number 13 [ 180.208171][ T5881] usb 5-1: unable to get BOS descriptor or descriptor too short [ 180.210213][ T5881] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 180.210251][ T5881] usb 5-1: can't read configurations, error -71 [ 180.453258][ T6757] mkiss: ax0: crc mode is auto. [ 180.804435][ T6775] sctp: [Deprecated]: syz.4.280 (pid 6775) Use of int in max_burst socket option. [ 180.804435][ T6775] Use struct sctp_assoc_value instead [ 180.996481][ T806] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 181.514107][ T806] usb 2-1: Using ep0 maxpacket: 8 [ 181.580785][ T5881] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.833660][ T806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.833688][ T806] usb 2-1: config 0 has no interfaces? [ 181.853650][ T806] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 181.853681][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 181.853703][ T806] usb 2-1: SerialNumber: syz [ 181.889324][ T806] usb 2-1: config 0 descriptor?? [ 181.895255][ T5970] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 181.911004][ T5881] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 181.911024][ T5881] usb 5-1: config 0 has no interface number 0 [ 181.917315][ T5881] usb 5-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=f0.54 [ 181.917344][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.917366][ T5881] usb 5-1: Product: syz [ 181.917381][ T5881] usb 5-1: Manufacturer: syz [ 181.917395][ T5881] usb 5-1: SerialNumber: syz [ 181.989508][ T5881] usb 5-1: config 0 descriptor?? [ 182.047576][ T5970] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 182.047596][ T5970] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 182.047609][ T5970] usb 1-1: config 220 has no interface number 2 [ 182.047710][ T5970] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 182.047736][ T5970] usb 1-1: config 220 interface 0 has no altsetting 0 [ 182.047755][ T5970] usb 1-1: config 220 interface 76 has no altsetting 0 [ 182.047767][ T5970] usb 1-1: config 220 interface 1 has no altsetting 0 [ 182.050855][ T5970] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 182.050886][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.050906][ T5970] usb 1-1: Product: syz [ 182.050920][ T5970] usb 1-1: Manufacturer: syz [ 182.050934][ T5970] usb 1-1: SerialNumber: syz [ 182.587382][ T5970] usb 1-1: selecting invalid altsetting 0 [ 182.602778][ T5970] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 182.602875][ T5970] uvcvideo 1-1:220.0: No valid video chain found. [ 182.699936][ T5970] usb 1-1: selecting invalid altsetting 0 [ 182.699988][ T5970] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 182.753739][ T5970] usb 1-1: USB disconnect, device number 27 [ 183.245340][ T806] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 183.395391][ T806] usb 3-1: Using ep0 maxpacket: 16 [ 183.407693][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.413620][ T806] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 183.413652][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.499672][ T806] usb 3-1: config 0 descriptor?? [ 183.992383][ T5881] cdc_subset 5-1:0.1: probe with driver cdc_subset failed with error -71 [ 184.035289][ T5881] usb 5-1: USB disconnect, device number 13 [ 184.071464][ T806] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 184.071514][ T806] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 184.071542][ T806] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 184.071570][ T806] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 184.071596][ T806] nzxt-kraken2 0003:1E71:170E.0003: unknown main item tag 0x0 [ 184.128053][ T6803] mkiss: ax0: crc mode is auto. [ 184.144040][ T6808] sctp: [Deprecated]: syz.0.291 (pid 6808) Use of int in max_burst socket option. [ 184.144040][ T6808] Use struct sctp_assoc_value instead [ 184.161772][ T6793] ptrace attach of "./syz-executor exec"[5795] was attempted by "./syz-executor exec"[6793] [ 184.193094][ T806] nzxt-kraken2 0003:1E71:170E.0003: hidraw0: USB HID v0.05 Device [HID 1e71:170e] on usb-dummy_hcd.2-1/input0 [ 184.215066][ T37] kauditd_printk_skb: 197 callbacks suppressed [ 184.215086][ T37] audit: type=1326 audit(1770696153.823:1042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1867caaf79 code=0x7ffc0000 [ 184.215287][ T37] audit: type=1326 audit(1770696153.823:1043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1867caaf79 code=0x7ffc0000 [ 184.259298][ T37] audit: type=1326 audit(1770696153.863:1044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1867caaf79 code=0x7ffc0000 [ 184.259373][ T37] audit: type=1326 audit(1770696153.863:1045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1867caaf79 code=0x7ffc0000 [ 184.259487][ T37] audit: type=1326 audit(1770696153.863:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f1867caaf79 code=0x7ffc0000 [ 184.259600][ T37] audit: type=1326 audit(1770696153.863:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1867caaf79 code=0x7ffc0000 [ 184.265264][ T37] audit: type=1326 audit(1770696153.873:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1867caaf79 code=0x7ffc0000 [ 184.265372][ T37] audit: type=1326 audit(1770696153.863:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1867caaf79 code=0x7ffc0000 [ 184.269844][ T37] audit: type=1326 audit(1770696153.883:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1867c6b84e code=0x7ffc0000 [ 184.292735][ T37] audit: type=1326 audit(1770696153.903:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6807 comm="syz.4.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1867caaf79 code=0x7ffc0000 [ 184.584804][ T806] usb 3-1: USB disconnect, device number 14 [ 184.701637][ T6814] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 184.770499][ T6812] fido_id[6812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 184.991630][ T6821] netlink: 56 bytes leftover after parsing attributes in process `syz.2.296'. [ 184.991670][ T6821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.296'. [ 184.991688][ T6821] netlink: 31 bytes leftover after parsing attributes in process `syz.2.296'. [ 184.991704][ T6821] netlink: 'syz.2.296': attribute type 3 has an invalid length. [ 184.991717][ T6821] netlink: 'syz.2.296': attribute type 2 has an invalid length. [ 184.991731][ T6821] netlink: 31 bytes leftover after parsing attributes in process `syz.2.296'. [ 185.088471][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 185.268767][ T6828] loop3: detected capacity change from 0 to 1 [ 185.294163][ T6003] Dev loop3: unable to read RDB block 1 [ 185.294212][ T6003] loop3: unable to read partition table [ 185.311544][ T6003] loop3: partition table beyond EOD, truncated [ 185.340246][ T6828] Dev loop3: unable to read RDB block 1 [ 185.340295][ T6828] loop3: unable to read partition table [ 185.340522][ T6828] loop3: partition table beyond EOD, truncated [ 185.340563][ T6828] loop_reread_partitions: partition scan of loop3 (þ被xüŸÑø éÚ¬§ÊdƤ´à–ƒÝ¡¯¨) failed (rc=-5) [ 185.475261][ T5868] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 185.526796][ T5970] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 185.551584][ T9] usb 2-1: USB disconnect, device number 12 [ 185.637737][ T5868] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 185.637768][ T5868] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 185.637791][ T5868] usb 5-1: config 220 has no interface number 2 [ 185.637870][ T5868] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 185.637900][ T5868] usb 5-1: config 220 interface 0 has no altsetting 0 [ 185.637920][ T5868] usb 5-1: config 220 interface 76 has no altsetting 0 [ 185.637940][ T5868] usb 5-1: config 220 interface 1 has no altsetting 0 [ 185.643134][ T5868] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 185.643859][ T5868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.643884][ T5868] usb 5-1: Product: syz [ 185.643899][ T5868] usb 5-1: Manufacturer: syz [ 185.643914][ T5868] usb 5-1: SerialNumber: syz [ 185.768867][ T6840] FAULT_INJECTION: forcing a failure. [ 185.768867][ T6840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.768902][ T6840] CPU: 0 UID: 0 PID: 6840 Comm: syz.0.301 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.768926][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 185.768939][ T6840] Call Trace: [ 185.768947][ T6840] [ 185.768955][ T6840] dump_stack_lvl+0xe8/0x150 [ 185.768993][ T6840] should_fail_ex+0x46b/0x600 [ 185.769022][ T6840] _copy_to_user+0x31/0xb0 [ 185.769056][ T6840] sk_getsockopt+0x2266/0x2790 [ 185.769078][ T6840] ? get_pid_task+0x20/0x1f0 [ 185.769111][ T6840] ? __pfx_sk_getsockopt+0x10/0x10 [ 185.769144][ T6840] ? __lock_acquire+0x6b5/0x2cf0 [ 185.769173][ T6840] ? __might_fault+0xaf/0x130 [ 185.769202][ T6840] ? __might_fault+0xaf/0x130 [ 185.769249][ T6840] do_sock_getsockopt+0x223/0x3f0 [ 185.769277][ T6840] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 185.769302][ T6840] ? __fget_files+0x3a6/0x420 [ 185.769330][ T6840] ? __fget_files+0x2a/0x420 [ 185.769366][ T6840] __x64_sys_getsockopt+0x1aa/0x250 [ 185.769398][ T6840] do_syscall_64+0xe2/0xf80 [ 185.769429][ T6840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.769449][ T6840] ? trace_irq_disable+0x37/0x100 [ 185.769474][ T6840] ? clear_bhb_loop+0x60/0xb0 [ 185.769498][ T6840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.769517][ T6840] RIP: 0033:0x7fc5e153af79 [ 185.769534][ T6840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.769550][ T6840] RSP: 002b:00007fc5df78e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 185.769571][ T6840] RAX: ffffffffffffffda RBX: 00007fc5e17b5fa0 RCX: 00007fc5e153af79 [ 185.769586][ T6840] RDX: 0000000000000014 RSI: 0000000000000001 RDI: 0000000000000004 [ 185.769597][ T6840] RBP: 00007fc5df78e090 R08: 0000200000000080 R09: 0000000000000000 [ 185.769610][ T6840] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 185.769630][ T6840] R13: 00007fc5e17b6038 R14: 00007fc5e17b5fa0 R15: 00007fff20a655f8 [ 185.769662][ T6840] [ 186.123030][ T6845] sctp: [Deprecated]: syz.2.303 (pid 6845) Use of int in max_burst socket option. [ 186.123030][ T6845] Use struct sctp_assoc_value instead [ 186.149329][ T5868] usb 5-1: selecting invalid altsetting 0 [ 186.151904][ T5868] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 186.151941][ T5868] uvcvideo 5-1:220.0: No valid video chain found. [ 186.211814][ T5868] usb 5-1: selecting invalid altsetting 0 [ 186.211843][ T5868] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 186.285971][ T5868] usb 5-1: USB disconnect, device number 14 [ 186.454774][ T6856] FAULT_INJECTION: forcing a failure. [ 186.454774][ T6856] name failslab, interval 1, probability 0, space 0, times 0 [ 186.454808][ T6856] CPU: 0 UID: 0 PID: 6856 Comm: syz.0.306 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.454831][ T6856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 186.454842][ T6856] Call Trace: [ 186.454850][ T6856] [ 186.454858][ T6856] dump_stack_lvl+0xe8/0x150 [ 186.454892][ T6856] should_fail_ex+0x46b/0x600 [ 186.454919][ T6856] ? __alloc_skb+0x1d7/0x390 [ 186.454940][ T6856] should_failslab+0xa8/0x100 [ 186.454971][ T6856] ? __alloc_skb+0x1d7/0x390 [ 186.454989][ T6856] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 186.455017][ T6856] ? lockdep_hardirqs_on+0x7a/0x110 [ 186.455049][ T6856] ? __alloc_skb+0x193/0x390 [ 186.455071][ T6856] __alloc_skb+0x1d7/0x390 [ 186.455097][ T6856] ctrl_getfamily+0x3d0/0x5c0 [ 186.455127][ T6856] ? __pfx_ctrl_getfamily+0x10/0x10 [ 186.455150][ T6856] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 186.455183][ T6856] genl_family_rcv_msg_doit+0x22a/0x330 [ 186.455208][ T6856] ? __asan_memcpy+0x40/0x70 [ 186.455234][ T6856] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 186.455288][ T6856] ? lockdep_hardirqs_on+0x7a/0x110 [ 186.455380][ T6856] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 186.455421][ T6856] genl_rcv_msg+0x61c/0x7a0 [ 186.455453][ T6856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.455477][ T6856] ? __pfx_ctrl_getfamily+0x10/0x10 [ 186.455505][ T6856] ? __pfx_ref_tracker_free+0x10/0x10 [ 186.455530][ T6856] ? __skb_clone+0x63/0x7a0 [ 186.455562][ T6856] netlink_rcv_skb+0x232/0x4b0 [ 186.455597][ T6856] ? __pfx_genl_rcv_msg+0x10/0x10 [ 186.455624][ T6856] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 186.455674][ T6856] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.455707][ T6856] ? netlink_deliver_tap+0x2e/0x1b0 [ 186.455744][ T6856] genl_rcv+0x28/0x40 [ 186.455766][ T6856] netlink_unicast+0x831/0x9f0 [ 186.455807][ T6856] ? __pfx_netlink_unicast+0x10/0x10 [ 186.455835][ T6856] ? __alloc_skb+0x193/0x390 [ 186.455857][ T6856] ? netlink_sendmsg+0x650/0xb40 [ 186.455889][ T6856] ? skb_put+0x11b/0x210 [ 186.455917][ T6856] netlink_sendmsg+0x813/0xb40 [ 186.455960][ T6856] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.456005][ T6856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.456039][ T6856] __sys_sendto+0x72a/0x7d0 [ 186.456069][ T6856] ? __pfx___sys_sendto+0x10/0x10 [ 186.456120][ T6856] ? exc_page_fault+0x6a/0xc0 [ 186.456157][ T6856] ? do_user_addr_fault+0xc7c/0x1360 [ 186.456186][ T6856] __x64_sys_sendto+0xde/0x100 [ 186.456214][ T6856] do_syscall_64+0xe2/0xf80 [ 186.456246][ T6856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.456267][ T6856] ? trace_irq_disable+0x37/0x100 [ 186.456295][ T6856] ? clear_bhb_loop+0x60/0xb0 [ 186.456328][ T6856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.456351][ T6856] RIP: 0033:0x7fc5e14fb84e [ 186.456371][ T6856] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 186.456391][ T6856] RSP: 002b:00007fc5df78ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 186.456414][ T6856] RAX: ffffffffffffffda RBX: 00007fc5df78e6c0 RCX: 00007fc5e14fb84e [ 186.456430][ T6856] RDX: 0000000000000020 RSI: 00007fc5df78d000 RDI: 0000000000000005 [ 186.456444][ T6856] RBP: 0000000000000000 R08: 00007fc5df78cf04 R09: 000000000000000c [ 186.456457][ T6856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 186.456470][ T6856] R13: 00007fc5df78cf58 R14: 00007fc5df78d000 R15: 0000000000000000 [ 186.456504][ T6856] [ 186.505851][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.792591][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 186.792675][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 186.792735][ T9] usb 2-1: config 220 has no interface number 2 [ 186.792935][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 186.793017][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 186.793072][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 186.793145][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 186.896139][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 186.896164][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.896179][ T9] usb 2-1: Product: syz [ 186.896190][ T9] usb 2-1: Manufacturer: syz [ 186.896200][ T9] usb 2-1: SerialNumber: syz [ 187.191371][ T6862] dlm: no local IP address has been set [ 187.191391][ T6862] dlm: cannot start dlm midcomms -107 [ 187.381521][ T806] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 187.411925][ T9] usb 2-1: selecting invalid altsetting 0 [ 187.413617][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 187.413666][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 187.464419][ T9] usb 2-1: selecting invalid altsetting 0 [ 187.464465][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 187.487582][ T9] usb 2-1: USB disconnect, device number 13 [ 187.545344][ T806] usb 3-1: Using ep0 maxpacket: 8 [ 187.550456][ T806] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 187.550485][ T806] usb 3-1: config 127 has an invalid descriptor of length 48, skipping remainder of the config [ 187.550504][ T806] usb 3-1: config 127 has no interface number 1 [ 187.550561][ T806] usb 3-1: config 127 interface 171 has no altsetting 0 [ 187.553622][ T806] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 187.553652][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.553673][ T806] usb 3-1: Product: syz [ 187.553688][ T806] usb 3-1: Manufacturer: syz [ 187.553702][ T806] usb 3-1: SerialNumber: syz [ 187.723170][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 187.906932][ T9] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 187.962808][ T806] xr_serial 3-1:127.171: xr_serial converter detected [ 188.040991][ T806] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 188.041058][ T806] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 188.065227][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 188.067468][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.067493][ T9] usb 1-1: config 0 has no interfaces? [ 188.068942][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 188.068971][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.068992][ T9] usb 1-1: SerialNumber: syz [ 188.125641][ T806] usb 3-1: USB disconnect, device number 16 [ 188.133289][ T9] usb 1-1: config 0 descriptor?? [ 188.159665][ T806] xr_serial 3-1:127.171: device disconnected [ 188.262968][ T6877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.316'. [ 188.674783][ T5977] usb 1-1: USB disconnect, device number 28 [ 189.755272][ T5970] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 189.909913][ T6898] dlm: no local IP address has been set [ 189.909928][ T6898] dlm: cannot start dlm midcomms -107 [ 189.938158][ T5970] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.938195][ T5970] usb 5-1: config 0 has no interface number 0 [ 189.940740][ T5970] usb 5-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=f0.54 [ 189.940770][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.940790][ T5970] usb 5-1: Product: syz [ 189.940805][ T5970] usb 5-1: Manufacturer: syz [ 189.940820][ T5970] usb 5-1: SerialNumber: syz [ 190.040623][ T5970] usb 5-1: config 0 descriptor?? [ 190.164138][ T6904] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 190.164176][ T6904] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 190.198196][ T6904] vhci_hcd vhci_hcd.0: Device attached [ 190.242832][ T6906] erspan1: entered allmulticast mode [ 190.425454][ T5977] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 190.532314][ T9] usb 40-1: SetAddress Request (2) to port 0 [ 190.532416][ T9] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 190.597689][ T5977] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.597719][ T5977] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 190.597910][ T5977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 190.597978][ T5977] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 190.598007][ T5977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.665315][ T6908] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 190.684720][ T5977] hub 1-1:1.0: bad descriptor, ignoring hub [ 190.684763][ T5977] hub 1-1:1.0: probe with driver hub failed with error -5 [ 190.699516][ T5977] cdc_wdm 1-1:1.0: skipping garbage [ 190.699537][ T5977] cdc_wdm 1-1:1.0: skipping garbage [ 190.776918][ T5977] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 190.776957][ T5977] cdc_wdm 1-1:1.0: Unknown control protocol [ 190.808623][ T6911] vhci_hcd: connection reset by peer [ 190.840742][ T5979] vhci_hcd vhci_hcd.3: stop threads [ 190.854125][ T5979] vhci_hcd vhci_hcd.3: release socket [ 190.883427][ T5979] vhci_hcd vhci_hcd.3: disconnect device [ 191.001158][ T5977] usb 1-1: USB disconnect, device number 29 [ 191.132814][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.331'. [ 191.413494][ T6931] FAULT_INJECTION: forcing a failure. [ 191.413494][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 191.413529][ T6931] CPU: 1 UID: 0 PID: 6931 Comm: syz.1.335 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.413550][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 191.413561][ T6931] Call Trace: [ 191.413568][ T6931] [ 191.413575][ T6931] dump_stack_lvl+0xe8/0x150 [ 191.413607][ T6931] should_fail_ex+0x46b/0x600 [ 191.413633][ T6931] should_failslab+0xa8/0x100 [ 191.413663][ T6931] __kmalloc_noprof+0xdf/0x7c0 [ 191.413689][ T6931] ? tomoyo_encode+0x28b/0x550 [ 191.413718][ T6931] tomoyo_encode+0x28b/0x550 [ 191.413745][ T6931] tomoyo_realpath_from_path+0x58d/0x5d0 [ 191.413771][ T6931] ? tomoyo_domain+0xd8/0x130 [ 191.413802][ T6931] ? tomoyo_path_number_perm+0x219/0x630 [ 191.413862][ T6931] tomoyo_path_number_perm+0x246/0x630 [ 191.413896][ T6931] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 191.413926][ T6931] ? __lock_acquire+0x6b5/0x2cf0 [ 191.413950][ T6931] ? do_raw_spin_lock+0x12b/0x2f0 [ 191.414001][ T6931] ? __fget_files+0x2a/0x420 [ 191.414035][ T6931] ? __fget_files+0x2a/0x420 [ 191.414063][ T6931] ? __fget_files+0x3a6/0x420 [ 191.414094][ T6931] ? __fget_files+0x2a/0x420 [ 191.414131][ T6931] security_file_ioctl+0xc3/0x2a0 [ 191.414157][ T6931] __se_sys_ioctl+0x47/0x170 [ 191.414186][ T6931] do_syscall_64+0xe2/0xf80 [ 191.414219][ T6931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.414240][ T6931] ? trace_irq_disable+0x37/0x100 [ 191.414267][ T6931] ? clear_bhb_loop+0x60/0xb0 [ 191.414293][ T6931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.414315][ T6931] RIP: 0033:0x7f2ae16aaf79 [ 191.414335][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.414355][ T6931] RSP: 002b:00007f2adf906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.414378][ T6931] RAX: ffffffffffffffda RBX: 00007f2ae1925fa0 RCX: 00007f2ae16aaf79 [ 191.414393][ T6931] RDX: 0000200000000080 RSI: 0000000000008993 RDI: 0000000000000004 [ 191.414407][ T6931] RBP: 00007f2adf906090 R08: 0000000000000000 R09: 0000000000000000 [ 191.414421][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.414433][ T6931] R13: 00007f2ae1926038 R14: 00007f2ae1925fa0 R15: 00007ffd4d010338 [ 191.414468][ T6931] [ 191.424807][ T6931] ERROR: Out of memory at tomoyo_realpath_from_path. [ 191.571851][ T6930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.334'. [ 191.752719][ T5970] cdc_subset 5-1:0.1: probe with driver cdc_subset failed with error -71 [ 191.768828][ T5970] usb 5-1: USB disconnect, device number 15 [ 191.838678][ T6935] netlink: 'syz.1.336': attribute type 1 has an invalid length. [ 191.875915][ T6937] dlm: no local IP address has been set [ 191.875930][ T6937] dlm: cannot start dlm midcomms -107 [ 191.890349][ T5977] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 192.055262][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 192.266017][ T5977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.266054][ T5977] usb 3-1: config 0 has no interfaces? [ 192.267364][ T5977] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 192.267394][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.267416][ T5977] usb 3-1: SerialNumber: syz [ 192.370733][ T6943] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 193.273125][ T5977] usb 3-1: config 0 descriptor?? [ 193.525300][ T5977] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 193.798436][ T5970] usb 3-1: USB disconnect, device number 17 [ 193.805260][ T5977] usb 5-1: device descriptor read/64, error -71 [ 194.015719][ T5868] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 194.045233][ T5977] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 194.095335][ T36] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 194.175427][ T5977] usb 5-1: device descriptor read/64, error -71 [ 194.194352][ T5868] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 194.194381][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.194403][ T5868] usb 2-1: Product: syz [ 194.194418][ T5868] usb 2-1: Manufacturer: syz [ 194.194435][ T5868] usb 2-1: SerialNumber: syz [ 194.240924][ T5868] usb 2-1: config 0 descriptor?? [ 194.287024][ T5977] usb usb5-port1: attempt power cycle [ 194.464826][ T36] usb 4-1: config 83 contains an unexpected descriptor of type 0x2, skipping [ 194.464859][ T36] usb 4-1: config 83 has an invalid interface number: 121 but max is 3 [ 194.464883][ T36] usb 4-1: config 83 has an invalid interface number: 37 but max is 3 [ 194.464906][ T36] usb 4-1: config 83 has an invalid descriptor of length 0, skipping remainder of the config [ 194.464927][ T36] usb 4-1: config 83 has 3 interfaces, different from the descriptor's value: 4 [ 194.464951][ T36] usb 4-1: config 83 has no interface number 1 [ 194.464969][ T36] usb 4-1: config 83 has no interface number 2 [ 194.465059][ T36] usb 4-1: config 83 interface 0 altsetting 164 has an invalid descriptor for endpoint zero, skipping [ 194.465084][ T36] usb 4-1: config 83 interface 0 altsetting 164 has a duplicate endpoint with address 0x5, skipping [ 194.465359][ T36] usb 4-1: config 83 interface 0 altsetting 164 has an invalid descriptor for endpoint zero, skipping [ 194.465386][ T36] usb 4-1: config 83 interface 0 altsetting 164 has an invalid descriptor for endpoint zero, skipping [ 194.465413][ T36] usb 4-1: config 83 interface 0 altsetting 164 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 194.465527][ T36] usb 4-1: config 83 interface 37 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 194.465566][ T36] usb 4-1: config 83 interface 0 has no altsetting 0 [ 194.465585][ T36] usb 4-1: config 83 interface 121 has no altsetting 0 [ 194.465604][ T36] usb 4-1: config 83 interface 37 has no altsetting 0 [ 194.559246][ T36] usb 4-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=9b.7d [ 194.559334][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.559396][ T36] usb 4-1: Product: syz [ 194.559439][ T36] usb 4-1: Manufacturer: syz [ 194.559481][ T36] usb 4-1: SerialNumber: syz [ 194.613150][ T5868] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.765270][ T5977] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 194.790097][ T5977] usb 5-1: device descriptor read/8, error -71 [ 195.786218][ T6962] FAULT_INJECTION: forcing a failure. [ 195.786218][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 195.786258][ T6962] CPU: 0 UID: 0 PID: 6962 Comm: syz.0.345 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.786283][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 195.786298][ T6962] Call Trace: [ 195.786307][ T6962] [ 195.786317][ T6962] dump_stack_lvl+0xe8/0x150 [ 195.786357][ T6962] should_fail_ex+0x46b/0x600 [ 195.786389][ T6962] should_failslab+0xa8/0x100 [ 195.786426][ T6962] __kmalloc_cache_noprof+0x83/0x6b0 [ 195.786459][ T6962] ? sctp_add_bind_addr+0x8c/0x370 [ 195.786495][ T6962] sctp_add_bind_addr+0x8c/0x370 [ 195.786531][ T6962] sctp_copy_local_addr_list+0x314/0x4f0 [ 195.786565][ T6962] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 195.786596][ T6962] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 195.786629][ T6962] ? sctp_v6_is_any+0x64/0x80 [ 195.786672][ T6962] ? sctp_copy_one_addr+0x93/0x360 [ 195.786705][ T6962] sctp_bind_addr_copy+0xb3/0x3c0 [ 195.786737][ T6962] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 195.786767][ T6962] sctp_connect_new_asoc+0x2ff/0x6b0 [ 195.786793][ T6962] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 195.786820][ T6962] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 195.786845][ T6962] ? lockdep_hardirqs_on+0x7a/0x110 [ 195.786877][ T6962] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 195.786911][ T6962] ? security_sctp_bind_connect+0x7e/0x2c0 [ 195.786939][ T6962] sctp_sendmsg+0x14c0/0x2990 [ 195.786989][ T6962] ? __pfx_sctp_sendmsg+0x10/0x10 [ 195.787043][ T6962] ? __might_fault+0xaf/0x130 [ 195.787076][ T6962] ? __might_fault+0xaf/0x130 [ 195.787117][ T6962] ? sock_rps_record_flow+0x19/0x400 [ 195.787144][ T6962] ? inet_sendmsg+0x2f4/0x370 [ 195.787172][ T6962] __sys_sendto+0x643/0x7d0 [ 195.787202][ T6962] ? __pfx___sys_sendto+0x10/0x10 [ 195.787253][ T6962] ? ksys_write+0x248/0x270 [ 195.787283][ T6962] ? __pfx_ksys_write+0x10/0x10 [ 195.787316][ T6962] __x64_sys_sendto+0xde/0x100 [ 195.787344][ T6962] do_syscall_64+0xe2/0xf80 [ 195.787375][ T6962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.787399][ T6962] ? clear_bhb_loop+0x60/0xb0 [ 195.787427][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.787448][ T6962] RIP: 0033:0x7fc5e153af79 [ 195.787468][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.787487][ T6962] RSP: 002b:00007fc5df74c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 195.787510][ T6962] RAX: ffffffffffffffda RBX: 00007fc5e17b6180 RCX: 00007fc5e153af79 [ 195.787527][ T6962] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000005 [ 195.787540][ T6962] RBP: 00007fc5df74c090 R08: 000020000005ffe4 R09: 000000000000001c [ 195.787554][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.787567][ T6962] R13: 00007fc5e17b6218 R14: 00007fc5e17b6180 R15: 00007fff20a655f8 [ 195.787603][ T6962] [ 197.350239][ T5113] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 197.356908][ T5113] Bluetooth: hci1: Injecting HCI hardware error event [ 197.366413][ T5113] Bluetooth: hci1: hardware error 0x00 [ 197.475371][ T5868] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 197.515541][ T9] usb 40-1: device descriptor read/8, error -110 [ 198.675730][ T6966] FAULT_INJECTION: forcing a failure. [ 198.675730][ T6966] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 198.675767][ T6966] CPU: 0 UID: 0 PID: 6966 Comm: syz.4.346 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.675793][ T6966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 198.675805][ T6966] Call Trace: [ 198.675813][ T6966] [ 198.675822][ T6966] dump_stack_lvl+0xe8/0x150 [ 198.675856][ T6966] should_fail_ex+0x46b/0x600 [ 198.675886][ T6966] prepare_alloc_pages+0x22a/0x6b0 [ 198.675927][ T6966] __alloc_frozen_pages_noprof+0x12f/0x380 [ 198.675964][ T6966] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 198.676000][ T6966] ? __pfx_policy_nodemask+0x10/0x10 [ 198.676027][ T6966] ? do_raw_spin_lock+0x12b/0x2f0 [ 198.676057][ T6966] alloc_pages_mpol+0xd1/0x380 [ 198.676093][ T6966] alloc_pages_noprof+0xce/0x1e0 [ 198.676125][ T6966] pte_alloc_one+0x23/0x380 [ 198.676156][ T6966] __do_fault+0xd1/0x390 [ 198.676190][ T6966] do_pte_missing+0x66a/0x2e60 [ 198.676225][ T6966] ? rt_spin_unlock+0x160/0x200 [ 198.676254][ T6966] ? __pmd_alloc+0x6e7/0x860 [ 198.676287][ T6966] handle_mm_fault+0xd0a/0x13c0 [ 198.676324][ T6966] ? handle_mm_fault+0xe7/0x13c0 [ 198.676355][ T6966] ? __pfx_handle_mm_fault+0x10/0x10 [ 198.676397][ T6966] ? __lock_acquire+0x6b5/0x2cf0 [ 198.676432][ T6966] ? lock_mm_and_find_vma+0xa7/0x340 [ 198.676468][ T6966] do_user_addr_fault+0x75b/0x1360 [ 198.676506][ T6966] exc_page_fault+0x6a/0xc0 [ 198.676538][ T6966] asm_exc_page_fault+0x26/0x30 [ 198.676559][ T6966] RIP: 0010:__put_user_4+0xd/0x20 [ 198.676589][ T6966] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 198.676607][ T6966] RSP: 0018:ffffc9001c68fc90 EFLAGS: 00050202 [ 198.676626][ T6966] RAX: 0000000000000044 RBX: 0000000000000000 RCX: 0000200000002f80 [ 198.676640][ T6966] RDX: 0000000000000000 RSI: ffffffff8d59cd30 RDI: ffffffff8b862b80 [ 198.676653][ T6966] RBP: 0000000000000044 R08: ffffffff820f7fdf R09: ffff888035b0d030 [ 198.676667][ T6966] R10: dffffc0000000000 R11: fffffbfff1e90f2f R12: 00000000000000c9 [ 198.676681][ T6966] R13: dffffc0000000000 R14: ffff888028ee6800 R15: 0000200000002f80 [ 198.676704][ T6966] ? __might_fault+0xaf/0x130 [ 198.676740][ T6966] vt_do_diacrit+0x57b/0xb70 [ 198.676767][ T6966] vt_ioctl+0x10ee/0x20c0 [ 198.676803][ T6966] ? __pfx_vt_ioctl+0x10/0x10 [ 198.676831][ T6966] ? __asan_memset+0x22/0x50 [ 198.676855][ T6966] ? smack_file_ioctl+0x263/0x360 [ 198.676890][ T6966] ? __pfx_smack_file_ioctl+0x10/0x10 [ 198.676931][ T6966] ? __fget_files+0x3a6/0x420 [ 198.676961][ T6966] ? __fget_files+0x2a/0x420 [ 198.676994][ T6966] tty_ioctl+0x92e/0xde0 [ 198.677019][ T6966] ? __pfx_tty_ioctl+0x10/0x10 [ 198.677042][ T6966] __se_sys_ioctl+0xff/0x170 [ 198.677067][ T6966] do_syscall_64+0xe2/0xf80 [ 198.677097][ T6966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.677118][ T6966] ? trace_irq_disable+0x37/0x100 [ 198.677143][ T6966] ? clear_bhb_loop+0x60/0xb0 [ 198.677168][ T6966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.677189][ T6966] RIP: 0033:0x7f1867caaf79 [ 198.677207][ T6966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.677225][ T6966] RSP: 002b:00007f1865f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.677246][ T6966] RAX: ffffffffffffffda RBX: 00007f1867f25fa0 RCX: 00007f1867caaf79 [ 198.677261][ T6966] RDX: 0000200000002f80 RSI: 0000000000004b4a RDI: 0000000000000003 [ 198.677274][ T6966] RBP: 00007f1865f06090 R08: 0000000000000000 R09: 0000000000000000 [ 198.677287][ T6966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.677298][ T6966] R13: 00007f1867f26038 R14: 00007f1867f25fa0 R15: 00007ffe25880798 [ 198.677331][ T6966] [ 198.978786][ T9] usb usb40-port1: attempt power cycle [ 199.405465][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.405586][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.444983][ T807] usb 2-1: USB disconnect, device number 14 [ 199.631976][ T6977] dlm: no local IP address has been set [ 199.631996][ T6977] dlm: cannot start dlm midcomms -107 [ 199.693049][ T9] usb usb40-port1: unable to enumerate USB device [ 199.856847][ T5881] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 199.938026][ T36] cdc_acm 4-1:83.0: skipping garbage [ 199.938049][ T36] cdc_acm 4-1:83.0: skipping garbage [ 199.938063][ T36] cdc_acm 4-1:83.0: skipping garbage [ 199.938076][ T36] cdc_acm 4-1:83.0: skipping garbage [ 199.938090][ T36] cdc_acm 4-1:83.0: skipping garbage [ 200.028405][ T5881] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.028445][ T5881] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.028484][ T5881] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.028512][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.097660][ T6974] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.190544][ T5881] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.255310][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 200.334581][ T36] usb 4-1: USB disconnect, device number 13 [ 200.419201][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.419237][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.419284][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.419360][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.668476][ T5113] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 200.719766][ T6983] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 200.877375][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.631620][ T7006] ucma_write: process 216 (syz.4.357) changed security contexts after opening file descriptor, this is not allowed. [ 202.836058][ T5936] usb 3-1: USB disconnect, device number 18 [ 202.901626][ T7025] netlink: 16 bytes leftover after parsing attributes in process `syz.3.366'. [ 203.055574][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 203.207548][ T5868] usb 2-1: USB disconnect, device number 15 [ 203.223196][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 203.223229][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 203.223251][ T9] usb 1-1: config 220 has no interface number 2 [ 203.223338][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 203.223371][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 203.223391][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 203.223412][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 203.267390][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 203.267424][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.267447][ T9] usb 1-1: Product: syz [ 203.267463][ T9] usb 1-1: Manufacturer: syz [ 203.267480][ T9] usb 1-1: SerialNumber: syz [ 203.645275][ T5936] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 203.729031][ T9] usb 1-1: selecting invalid altsetting 0 [ 203.756096][ T9] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 203.756133][ T9] uvcvideo 1-1:220.0: No valid video chain found. [ 203.781975][ T9] usb 1-1: selecting invalid altsetting 0 [ 203.782019][ T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 203.807358][ T9] usb 1-1: USB disconnect, device number 30 [ 203.810955][ T7038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.371'. [ 203.865522][ T5936] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 203.865552][ T5936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.865603][ T5936] usb 3-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 203.865633][ T5936] usb 3-1: config 0 interface 0 has no altsetting 0 [ 203.865668][ T5936] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 203.865673][ T37] kauditd_printk_skb: 67 callbacks suppressed [ 203.865689][ T37] audit: type=1326 audit(1770696173.423:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 203.865695][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.865739][ T37] audit: type=1326 audit(1770696173.423:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 203.865785][ T37] audit: type=1326 audit(1770696173.423:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 203.865831][ T37] audit: type=1326 audit(1770696173.423:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 203.865877][ T37] audit: type=1326 audit(1770696173.433:1123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 203.865923][ T37] audit: type=1326 audit(1770696173.433:1124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 203.865968][ T37] audit: type=1326 audit(1770696173.433:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 203.866013][ T37] audit: type=1326 audit(1770696173.433:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 203.866073][ T37] audit: type=1326 audit(1770696173.433:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 203.866106][ T37] audit: type=1326 audit(1770696173.433:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7037 comm="syz.1.371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 204.183361][ T5936] usb 3-1: config 0 descriptor?? [ 204.202103][ T5936] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 204.561070][ T5868] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 204.725409][ T5868] usb 2-1: Using ep0 maxpacket: 8 [ 204.749469][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 204.749507][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.749532][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.749558][ T5868] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 204.749585][ T5868] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 204.749628][ T5868] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 204.749653][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.849114][ T5868] usb 2-1: config 0 descriptor?? [ 204.851977][ T7041] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 204.965337][ T9] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 205.104981][ C0] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 205.109453][ T5804] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 205.296584][ T7054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.297131][ T7054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.389151][ T5113] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 205.394714][ T5977] usb 2-1: USB disconnect, device number 16 [ 205.613364][ T7062] netlink: 100 bytes leftover after parsing attributes in process `syz.3.378'. [ 205.979530][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'. [ 206.045443][ T5868] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 206.205394][ T5868] usb 1-1: Using ep0 maxpacket: 32 [ 206.211095][ T5868] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 206.211124][ T5868] usb 1-1: config 0 has no interface number 0 [ 206.211157][ T5868] usb 1-1: config 0 interface 182 has no altsetting 0 [ 206.242009][ T5868] usb 1-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 206.242042][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.242120][ T5868] usb 1-1: Product: syz [ 206.242142][ T5868] usb 1-1: Manufacturer: syz [ 206.242156][ T5868] usb 1-1: SerialNumber: syz [ 206.287879][ T5868] usb 1-1: config 0 descriptor?? [ 206.313310][ T5868] hub 1-1:0.182: bad descriptor, ignoring hub [ 206.313352][ T5868] hub 1-1:0.182: probe with driver hub failed with error -5 [ 206.521696][ T5868] kaweth 1-1:0.182: Firmware present in device. [ 206.550012][ T5936] usb 3-1: USB disconnect, device number 19 [ 206.685584][ T5977] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 206.837559][ T5977] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 206.837592][ T5977] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 206.837614][ T5977] usb 2-1: config 220 has no interface number 2 [ 206.837692][ T5977] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 206.837723][ T5977] usb 2-1: config 220 interface 0 has no altsetting 0 [ 206.837743][ T5977] usb 2-1: config 220 interface 76 has no altsetting 0 [ 206.837763][ T5977] usb 2-1: config 220 interface 1 has no altsetting 0 [ 206.840779][ T5977] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 206.840808][ T5977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.840829][ T5977] usb 2-1: Product: syz [ 206.840845][ T5977] usb 2-1: Manufacturer: syz [ 206.840859][ T5977] usb 2-1: SerialNumber: syz [ 206.959746][ T5868] kaweth 1-1:0.182: Statistics collection: 0 [ 206.959764][ T5868] kaweth 1-1:0.182: Multicast filter limit: 0 [ 206.959851][ T5868] kaweth 1-1:0.182: MTU: 0 [ 206.959866][ T5868] kaweth 1-1:0.182: Read MAC address 00:00:00:00:00:00 [ 207.020558][ T7086] FAULT_INJECTION: forcing a failure. [ 207.020558][ T7086] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.020597][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.2.387 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 207.020623][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 207.020636][ T7086] Call Trace: [ 207.020645][ T7086] [ 207.020654][ T7086] dump_stack_lvl+0xe8/0x150 [ 207.020691][ T7086] should_fail_ex+0x46b/0x600 [ 207.020724][ T7086] prepare_alloc_pages+0x22a/0x6b0 [ 207.020766][ T7086] __alloc_frozen_pages_noprof+0x12f/0x380 [ 207.020804][ T7086] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 207.020843][ T7086] ? __pfx_policy_nodemask+0x10/0x10 [ 207.020885][ T7086] alloc_pages_bulk_noprof+0x5f1/0x7d0 [ 207.020926][ T7086] ? alloc_pages_noprof+0xe3/0x1e0 [ 207.020964][ T7086] __kasan_populate_vmalloc+0xc1/0x1d0 [ 207.020992][ T7086] ? rt_spin_unlock+0x160/0x200 [ 207.021022][ T7086] alloc_vmap_area+0xdbc/0x14a0 [ 207.021070][ T7086] ? __pfx_alloc_vmap_area+0x10/0x10 [ 207.021101][ T7086] ? __kmalloc_cache_node_noprof+0x296/0x6e0 [ 207.021133][ T7086] ? __get_vm_area_node+0x171/0x350 [ 207.021161][ T7086] ? copy_process+0x517/0x3cf0 [ 207.021186][ T7086] __get_vm_area_node+0x226/0x350 [ 207.021223][ T7086] __vmalloc_node_range_noprof+0x372/0x1730 [ 207.021255][ T7086] ? copy_process+0x517/0x3cf0 [ 207.021282][ T7086] ? percpu_ref_get_many+0x19/0x140 [ 207.021326][ T7086] ? percpu_ref_get_many+0x19/0x140 [ 207.021378][ T7086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.021418][ T7086] ? memcpy_and_pad+0x48/0x80 [ 207.021447][ T7086] __vmalloc_node_noprof+0xc2/0x100 [ 207.021477][ T7086] ? copy_process+0x517/0x3cf0 [ 207.021499][ T7086] ? copy_process+0x517/0x3cf0 [ 207.021527][ T7086] dup_task_struct+0x228/0x9a0 [ 207.021554][ T7086] ? rt_spin_unlock+0x160/0x200 [ 207.021585][ T7086] copy_process+0x517/0x3cf0 [ 207.021619][ T7086] ? __might_fault+0xaf/0x130 [ 207.021651][ T7086] ? __might_fault+0xaf/0x130 [ 207.021695][ T7086] ? __pfx_copy_process+0x10/0x10 [ 207.021723][ T7086] ? __asan_memset+0x22/0x50 [ 207.021755][ T7086] kernel_clone+0x249/0x7f0 [ 207.021785][ T7086] ? __pfx_kernel_clone+0x10/0x10 [ 207.021833][ T7086] __se_sys_clone3+0x33c/0x360 [ 207.021865][ T7086] ? __pfx___se_sys_clone3+0x10/0x10 [ 207.021926][ T7086] ? __pfx_ksys_write+0x10/0x10 [ 207.021985][ T7086] do_syscall_64+0xe2/0xf80 [ 207.022021][ T7086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.022044][ T7086] ? trace_irq_disable+0x37/0x100 [ 207.022073][ T7086] ? clear_bhb_loop+0x60/0xb0 [ 207.022102][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.022125][ T7086] RIP: 0033:0x7f469718af79 [ 207.022145][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.022166][ T7086] RSP: 002b:00007f46953a3ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 207.022189][ T7086] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f469718af79 [ 207.022205][ T7086] RDX: 00007f46953a3f10 RSI: 0000000000000058 RDI: 00007f46953a3f10 [ 207.022220][ T7086] RBP: 00007f46953a4090 R08: 0000000000000000 R09: 0000000000000058 [ 207.022235][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.022249][ T7086] R13: 00007f4697406218 R14: 00007f4697406180 R15: 00007ffce12a1708 [ 207.022284][ T7086] [ 207.022622][ T7086] syz.2.387: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 207.022959][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.2.387 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 207.022985][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 207.022999][ T7086] Call Trace: [ 207.023007][ T7086] [ 207.023016][ T7086] dump_stack_lvl+0xe8/0x150 [ 207.023052][ T7086] warn_alloc+0x263/0x3e0 [ 207.023090][ T7086] ? kasan_quarantine_put+0xbb/0x1f0 [ 207.023120][ T7086] ? __pfx_warn_alloc+0x10/0x10 [ 207.023156][ T7086] ? __get_vm_area_node+0x23f/0x350 [ 207.023182][ T7086] ? __get_vm_area_node+0x171/0x350 [ 207.023211][ T7086] ? copy_process+0x517/0x3cf0 [ 207.023239][ T7086] ? __get_vm_area_node+0x23f/0x350 [ 207.023276][ T7086] __vmalloc_node_range_noprof+0x397/0x1730 [ 207.023312][ T7086] ? percpu_ref_get_many+0x19/0x140 [ 207.023368][ T7086] ? percpu_ref_get_many+0x19/0x140 [ 207.023414][ T7086] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 207.023454][ T7086] ? memcpy_and_pad+0x48/0x80 [ 207.023483][ T7086] __vmalloc_node_noprof+0xc2/0x100 [ 207.023514][ T7086] ? copy_process+0x517/0x3cf0 [ 207.023538][ T7086] ? copy_process+0x517/0x3cf0 [ 207.023565][ T7086] dup_task_struct+0x228/0x9a0 [ 207.023594][ T7086] ? rt_spin_unlock+0x160/0x200 [ 207.023626][ T7086] copy_process+0x517/0x3cf0 [ 207.023662][ T7086] ? __might_fault+0xaf/0x130 [ 207.023695][ T7086] ? __might_fault+0xaf/0x130 [ 207.023751][ T7086] ? __pfx_copy_process+0x10/0x10 [ 207.023780][ T7086] ? __asan_memset+0x22/0x50 [ 207.023810][ T7086] kernel_clone+0x249/0x7f0 [ 207.023841][ T7086] ? __pfx_kernel_clone+0x10/0x10 [ 207.023888][ T7086] __se_sys_clone3+0x33c/0x360 [ 207.023920][ T7086] ? __pfx___se_sys_clone3+0x10/0x10 [ 207.023981][ T7086] ? __pfx_ksys_write+0x10/0x10 [ 207.024021][ T7086] do_syscall_64+0xe2/0xf80 [ 207.024054][ T7086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.024075][ T7086] ? trace_irq_disable+0x37/0x100 [ 207.024103][ T7086] ? clear_bhb_loop+0x60/0xb0 [ 207.024130][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.024152][ T7086] RIP: 0033:0x7f469718af79 [ 207.024171][ T7086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.024190][ T7086] RSP: 002b:00007f46953a3ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 207.024212][ T7086] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f469718af79 [ 207.024227][ T7086] RDX: 00007f46953a3f10 RSI: 0000000000000058 RDI: 00007f46953a3f10 [ 207.024242][ T7086] RBP: 00007f46953a4090 R08: 0000000000000000 R09: 0000000000000058 [ 207.024256][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.024270][ T7086] R13: 00007f4697406218 R14: 00007f4697406180 R15: 00007ffce12a1708 [ 207.024304][ T7086] [ 207.024319][ T7086] Mem-Info: [ 207.024332][ T7086] active_anon:253 inactive_anon:9328 isolated_anon:0 [ 207.024332][ T7086] active_file:5530 inactive_file:37961 isolated_file:0 [ 207.024332][ T7086] unevictable:768 dirty:307 writeback:0 [ 207.024332][ T7086] slab_reclaimable:11471 slab_unreclaimable:101300 [ 207.024332][ T7086] mapped:33293 shmem:4226 pagetables:1295 [ 207.024332][ T7086] sec_pagetables:0 bounce:0 [ 207.024332][ T7086] kernel_misc_reclaimable:0 [ 207.024332][ T7086] free:1324869 free_pcp:3719 free_cma:0 [ 207.024398][ T7086] Node 0 active_anon:1012kB inactive_anon:37312kB active_file:21916kB inactive_file:151844kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133172kB dirty:1228kB writeback:0kB shmem:15368kB kernel_stack:13240kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.024450][ T7086] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 207.024497][ T7086] Node 0 DMA free:15344kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.024560][ T7086] lowmem_reserve[]: 0 2507 2507 2507 2507 [ 207.024597][ T7086] Node 0 DMA32 free:1384764kB boost:0kB min:3932kB low:6472kB high:9012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1012kB inactive_anon:37312kB active_file:21916kB inactive_file:151844kB unevictable:1536kB writepending:1228kB zspages:0kB present:3129332kB managed:2567172kB mlocked:0kB bounce:0kB free_pcp:14844kB local_pcp:11572kB free_cma:0kB [ 207.024666][ T7086] lowmem_reserve[]: 0 0 0 0 0 [ 207.024701][ T7086] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 207.024763][ T7086] lowmem_reserve[]: 0 0 0 0 0 [ 207.024798][ T7086] Node 1 Normal free:3899368kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 207.024863][ T7086] lowmem_reserve[]: 0 0 0 0 0 [ 207.024904][ T7086] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 207.025056][ T7086] Node 0 DMA32: 733*4kB (UM) 677*8kB (UME) 630*16kB (UME) 226*32kB (UME) 106*64kB (UME) 23*128kB (UME) 25*256kB (UME) 11*512kB (UME) 2*1024kB (UM) 6*2048kB (ME) 323*4096kB (UM) = 1384764kB [ 207.025277][ T7086] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 207.025394][ T7086] Node 1 Normal: 210*4kB (UE) 50*8kB (UME) 35*16kB (UME) 207*32kB (UME) 90*64kB (UME) 31*128kB (UME) 13*256kB (UME) 8*512kB (UME) 5*1024kB (UME) 1*2048kB (U) 944*4096kB (M) = 3899368kB [ 207.025573][ T7086] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.025591][ T7086] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 207.025609][ T7086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 207.025628][ T7086] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 207.025645][ T7086] 47713 total pagecache pages [ 207.025658][ T7086] 0 pages in swap cache [ 207.025666][ T7086] Free swap = 124996kB [ 207.025675][ T7086] Total swap = 124996kB [ 207.025684][ T7086] 2097051 pages RAM [ 207.025691][ T7086] 0 pages HighMem/MovableOnly [ 207.025699][ T7086] 423488 pages reserved [ 207.025707][ T7086] 0 pages cma reserved [ 208.642465][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.669479][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.779892][ T5868] kaweth 1-1:0.182: probe with driver kaweth failed with error -5 [ 208.951743][ T5868] usb 1-1: USB disconnect, device number 31 [ 209.000883][ T5977] usb 2-1: selecting invalid altsetting 0 [ 209.003503][ T5977] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 209.003539][ T5977] uvcvideo 2-1:220.0: No valid video chain found. [ 209.026721][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 209.026817][ T9] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 209.097704][ T5977] usb 2-1: selecting invalid altsetting 0 [ 209.097747][ T5977] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 209.101244][ T9] usb 5-1: config 0 descriptor?? [ 209.121891][ T9] usb 5-1: can't set config #0, error -71 [ 209.137643][ T5977] usb 2-1: USB disconnect, device number 17 [ 209.422705][ T9] usb 5-1: USB disconnect, device number 20 [ 209.541713][ T7105] FAULT_INJECTION: forcing a failure. [ 209.541713][ T7105] name failslab, interval 1, probability 0, space 0, times 0 [ 209.541775][ T7105] CPU: 1 UID: 0 PID: 7105 Comm: syz.4.390 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 209.541801][ T7105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 209.541815][ T7105] Call Trace: [ 209.541824][ T7105] [ 209.541834][ T7105] dump_stack_lvl+0xe8/0x150 [ 209.541872][ T7105] should_fail_ex+0x46b/0x600 [ 209.541903][ T7105] ? prepare_creds+0x30/0x820 [ 209.541934][ T7105] should_failslab+0xa8/0x100 [ 209.541966][ T7105] ? prepare_creds+0x30/0x820 [ 209.541994][ T7105] kmem_cache_alloc_noprof+0x83/0x6a0 [ 209.542032][ T7105] prepare_creds+0x30/0x820 [ 209.542068][ T7105] copy_creds+0x10e/0xa30 [ 209.542107][ T7105] copy_process+0x91c/0x3cf0 [ 209.542145][ T7105] ? __might_fault+0xaf/0x130 [ 209.542188][ T7105] ? __pfx_copy_process+0x10/0x10 [ 209.542217][ T7105] ? __asan_memset+0x22/0x50 [ 209.542247][ T7105] kernel_clone+0x249/0x7f0 [ 209.542277][ T7105] ? __pfx_kernel_clone+0x10/0x10 [ 209.542325][ T7105] __se_sys_clone3+0x33c/0x360 [ 209.542363][ T7105] ? __pfx___se_sys_clone3+0x10/0x10 [ 209.542459][ T7105] do_syscall_64+0xe2/0xf80 [ 209.542494][ T7105] ? rcu_is_watching+0x15/0xb0 [ 209.542520][ T7105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.542544][ T7105] ? clear_bhb_loop+0x60/0xb0 [ 209.542572][ T7105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.542595][ T7105] RIP: 0033:0x7f1867caaf79 [ 209.542615][ T7105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.542637][ T7105] RSP: 002b:00007f1865ec3ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 209.542660][ T7105] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f1867caaf79 [ 209.542677][ T7105] RDX: 00007f1865ec3f10 RSI: 0000000000000058 RDI: 00007f1865ec3f10 [ 209.542692][ T7105] RBP: 00007f1865ec4090 R08: 0000000000000000 R09: 0000000000000058 [ 209.542706][ T7105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 209.542720][ T7105] R13: 00007f1867f26218 R14: 00007f1867f26180 R15: 00007ffe25880798 [ 209.542755][ T7105] [ 210.445457][ T5868] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 211.478026][ T5868] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 211.478061][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.487508][ T5868] usb 3-1: config 0 descriptor?? [ 211.560710][ T5868] usb 3-1: selecting invalid altsetting 3 [ 211.560738][ T5868] comedi comedi5: could not set alternate setting 3 in high speed [ 211.560756][ T5868] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 211.596678][ T5868] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 211.649012][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 211.830306][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 211.835903][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 211.835940][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.835965][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.835991][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 211.836015][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 211.836057][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 211.836083][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.847641][ T9] usb 5-1: config 0 descriptor?? [ 212.028402][ T5868] usb 3-1: USB disconnect, device number 20 [ 212.033037][ T5113] Bluetooth: hci5: urb ffff888010cfd900 submission failed (90) [ 212.105297][ T807] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 212.105506][ T5936] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 212.174395][ T9] usb 5-1: USB disconnect, device number 21 [ 212.275430][ T807] usb 1-1: Using ep0 maxpacket: 8 [ 212.282519][ T5936] usb 4-1: config 54 has an invalid interface number: 7 but max is 0 [ 212.282550][ T5936] usb 4-1: config 54 has no interface number 0 [ 212.283950][ T807] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.314153][ T807] usb 1-1: config 13 has an invalid interface number: 183 but max is 0 [ 212.314183][ T807] usb 1-1: config 13 has no interface number 0 [ 212.314231][ T807] usb 1-1: config 13 interface 183 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 212.314263][ T807] usb 1-1: config 13 interface 183 altsetting 4 endpoint 0x89 has an invalid bInterval 248, changing to 11 [ 212.314295][ T807] usb 1-1: config 13 interface 183 has no altsetting 0 [ 212.353230][ T5936] usb 4-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=73.fa [ 212.353264][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.353285][ T5936] usb 4-1: Product: syz [ 212.353300][ T5936] usb 4-1: Manufacturer: syz [ 212.353316][ T5936] usb 4-1: SerialNumber: syz [ 212.412805][ T807] usb 1-1: string descriptor 0 read error: -22 [ 212.413027][ T807] usb 1-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=68.eb [ 212.413110][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.486695][ T807] uvcvideo 1-1:13.183: Found multiple Units with ID 1 [ 212.486868][ T807] uvcvideo 1-1:13.183: Found multiple Units with ID 1 [ 212.487222][ T807] uvcvideo 1-1:13.183: Found multiple Units with ID 1 [ 212.487549][ T807] uvcvideo 1-1:13.183: Found UVC 0.00 device (05a9:264a) [ 212.487792][ T807] uvcvideo 1-1:13.183: No valid video chain found. [ 212.687765][ T5936] usb 4-1: bad CDC descriptors [ 212.719906][ T5936] usb 4-1: USB disconnect, device number 14 [ 212.992532][ T7134] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 213.085241][ T5936] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 213.847040][ T5977] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 214.036869][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.036907][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.036932][ T5936] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.036978][ T5936] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.037003][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.044187][ T5936] usb 3-1: config 0 descriptor?? [ 214.146072][ T5977] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 214.146102][ T5977] usb 5-1: config 0 has no interface number 0 [ 214.154018][ T5977] usb 5-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=f0.54 [ 214.154049][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.154063][ T5977] usb 5-1: Product: syz [ 214.154072][ T5977] usb 5-1: Manufacturer: syz [ 214.154093][ T5977] usb 5-1: SerialNumber: syz [ 214.234543][ T5989] usb 1-1: USB disconnect, device number 32 [ 214.278054][ T5977] usb 5-1: config 0 descriptor?? [ 214.587911][ T5936] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 215.335510][ T7158] loop6: detected capacity change from 0 to 2099792 [ 216.389983][ T5977] cdc_subset 5-1:0.1: probe with driver cdc_subset failed with error -71 [ 216.420138][ T5977] usb 5-1: USB disconnect, device number 22 [ 216.525531][ T9] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 216.818062][ T5113] Bluetooth: hci2: command 0x0406 tx timeout [ 217.565230][ T5977] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 217.787436][ T5977] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 217.787469][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.834494][ T5977] usb 5-1: config 0 descriptor?? [ 217.887142][ T5977] usb 5-1: selecting invalid altsetting 3 [ 217.887167][ T5977] comedi comedi5: could not set alternate setting 3 in high speed [ 217.887184][ T5977] usbduxsigma 5-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 217.887515][ T5936] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 217.945746][ T5977] usbduxsigma 5-1:0.0: probe with driver usbduxsigma failed with error -22 [ 219.236734][ T5936] usb 4-1: not running at top speed; connect to a high speed hub [ 219.242090][ T5881] usb 5-1: USB disconnect, device number 23 [ 219.389447][ T5936] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 219.389473][ T5936] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 219.447881][ T5936] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.447914][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.447935][ T5936] usb 4-1: Product: Ћ [ 219.447951][ T5936] usb 4-1: SerialNumber: syz [ 219.469487][ T5882] usb 3-1: USB disconnect, device number 21 [ 219.890112][ T5882] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 219.946709][ T5936] usb 4-1: 0:2 : does not exist [ 219.996978][ T5936] usb 4-1: USB disconnect, device number 15 [ 220.068056][ T5882] usb 3-1: not running at top speed; connect to a high speed hub [ 220.073361][ T5882] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 220.073391][ T5882] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 220.073700][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.131996][ T5882] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.132029][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.132053][ T5882] usb 3-1: Product: Ћ [ 220.132070][ T5882] usb 3-1: SerialNumber: syz [ 220.466205][ T5882] usb 3-1: 0:2 : does not exist [ 220.559624][ T5882] usb 3-1: USB disconnect, device number 22 [ 220.561291][ T5936] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 220.742169][ T5936] usb 5-1: config 83 contains an unexpected descriptor of type 0x2, skipping [ 220.742199][ T5936] usb 5-1: config 83 has an invalid interface number: 121 but max is 3 [ 220.742221][ T5936] usb 5-1: config 83 has an invalid interface number: 37 but max is 3 [ 220.742242][ T5936] usb 5-1: config 83 has an invalid descriptor of length 0, skipping remainder of the config [ 220.742263][ T5936] usb 5-1: config 83 has 3 interfaces, different from the descriptor's value: 4 [ 220.742284][ T5936] usb 5-1: config 83 has no interface number 1 [ 220.742302][ T5936] usb 5-1: config 83 has no interface number 2 [ 220.742410][ T5936] usb 5-1: config 83 interface 0 altsetting 164 has an invalid descriptor for endpoint zero, skipping [ 220.742431][ T5936] usb 5-1: config 83 interface 0 altsetting 164 has a duplicate endpoint with address 0x5, skipping [ 220.742453][ T5936] usb 5-1: config 83 interface 0 altsetting 164 has an invalid descriptor for endpoint zero, skipping [ 220.742472][ T5936] usb 5-1: config 83 interface 0 altsetting 164 has an invalid descriptor for endpoint zero, skipping [ 220.742492][ T5936] usb 5-1: config 83 interface 0 altsetting 164 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 220.742530][ T5936] usb 5-1: config 83 interface 37 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 220.742553][ T5936] usb 5-1: config 83 interface 0 has no altsetting 0 [ 220.742570][ T5936] usb 5-1: config 83 interface 121 has no altsetting 0 [ 220.742587][ T5936] usb 5-1: config 83 interface 37 has no altsetting 0 [ 220.751786][ T5936] usb 5-1: New USB device found, idVendor=1519, idProduct=0452, bcdDevice=9b.7d [ 220.751874][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.751936][ T5936] usb 5-1: Product: syz [ 220.751977][ T5936] usb 5-1: Manufacturer: syz [ 220.752011][ T5936] usb 5-1: SerialNumber: syz [ 221.938767][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 221.947196][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 222.176759][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 222.475522][ T807] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 222.530138][ T5936] cdc_acm 5-1:83.0: skipping garbage [ 222.530161][ T5936] cdc_acm 5-1:83.0: skipping garbage [ 222.530175][ T5936] cdc_acm 5-1:83.0: skipping garbage [ 222.530187][ T5936] cdc_acm 5-1:83.0: skipping garbage [ 222.530200][ T5936] cdc_acm 5-1:83.0: skipping garbage [ 222.642602][ T807] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.642631][ T807] usb 2-1: config 0 has no interface number 0 [ 222.652391][ T807] usb 2-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=f0.54 [ 222.652469][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.652525][ T807] usb 2-1: Product: syz [ 222.652569][ T807] usb 2-1: Manufacturer: syz [ 222.652611][ T807] usb 2-1: SerialNumber: syz [ 222.718293][ T5936] usb 5-1: USB disconnect, device number 24 [ 222.721341][ T807] usb 2-1: config 0 descriptor?? [ 224.433129][ T807] cdc_subset 2-1:0.1: probe with driver cdc_subset failed with error -71 [ 224.504954][ T807] usb 2-1: USB disconnect, device number 18 [ 224.799476][ T5989] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 225.372782][ T5989] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 225.372806][ T5989] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.411408][ T5989] usb 3-1: config 0 descriptor?? [ 225.450541][ T5989] usb 3-1: selecting invalid altsetting 3 [ 225.450568][ T5989] comedi comedi5: could not set alternate setting 3 in high speed [ 225.450584][ T5989] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 225.495355][ T5989] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 225.881754][ T5881] usb 3-1: USB disconnect, device number 23 [ 228.065687][ T37] kauditd_printk_skb: 131 callbacks suppressed [ 228.065709][ T37] audit: type=1326 audit(1770696197.683:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e153af79 code=0x7ffc0000 [ 228.066708][ T37] audit: type=1326 audit(1770696197.683:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc5e153af79 code=0x7ffc0000 [ 228.066910][ T37] audit: type=1326 audit(1770696197.683:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e153af79 code=0x7ffc0000 [ 228.067291][ T37] audit: type=1326 audit(1770696197.683:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7263 comm="syz.0.440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e153af79 code=0x7ffc0000 [ 239.474233][ T7281] support for cryptoloop has been removed. Use dm-crypt instead. [ 239.515957][ T5936] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 239.666576][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 239.668886][ T5936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.674537][ T5936] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 239.674567][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.674589][ T5936] usb 5-1: Product: syz [ 239.674603][ T5936] usb 5-1: Manufacturer: syz [ 239.674619][ T5936] usb 5-1: SerialNumber: syz [ 239.741762][ T5936] usb 5-1: config 0 descriptor?? [ 239.759299][ T37] audit: type=1326 audit(1770696209.363:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 239.760999][ T37] audit: type=1326 audit(1770696209.373:1265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ae166b84e code=0x7ffc0000 [ 239.812326][ T37] audit: type=1326 audit(1770696209.423:1266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2ae166b84e code=0x7ffc0000 [ 239.836871][ T7290] FAULT_INJECTION: forcing a failure. [ 239.836871][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 239.836909][ T7290] CPU: 0 UID: 0 PID: 7290 Comm: syz.1.447 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 239.836943][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 239.836956][ T7290] Call Trace: [ 239.836965][ T7290] [ 239.836974][ T7290] dump_stack_lvl+0xe8/0x150 [ 239.837012][ T7290] should_fail_ex+0x46b/0x600 [ 239.837043][ T7290] ? __alloc_skb+0x1d7/0x390 [ 239.837066][ T7290] should_failslab+0xa8/0x100 [ 239.837100][ T7290] ? __alloc_skb+0x1d7/0x390 [ 239.837120][ T7290] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 239.837152][ T7290] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.837186][ T7290] ? __alloc_skb+0x193/0x390 [ 239.837209][ T7290] __alloc_skb+0x1d7/0x390 [ 239.837237][ T7290] audit_log_start+0x419/0xa40 [ 239.837267][ T7290] ? __pfx_audit_log_start+0x10/0x10 [ 239.837289][ T7290] ? kasan_save_track+0x4f/0x80 [ 239.837314][ T7290] ? kasan_save_track+0x3e/0x80 [ 239.837346][ T7290] ? __kasan_kmalloc+0x93/0xb0 [ 239.837372][ T7290] ? __kmalloc_noprof+0x235/0x7c0 [ 239.837398][ T7290] ? security_prepare_creds+0x52/0x360 [ 239.837420][ T7290] ? prepare_creds+0x57d/0x820 [ 239.837448][ T7290] ? __sys_setuid+0x91/0x620 [ 239.837465][ T7290] ? do_syscall_64+0xe2/0xf80 [ 239.837494][ T7290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.837528][ T7290] audit_seccomp+0x63/0x190 [ 239.837552][ T7290] __seccomp_filter+0xd48/0x1ef0 [ 239.837597][ T7290] ? __pfx___seccomp_filter+0x10/0x10 [ 239.837629][ T7290] ? setid_policy_lookup+0x24/0x560 [ 239.837652][ T7290] ? setid_policy_lookup+0x24/0x560 [ 239.837680][ T7290] ? setid_policy_lookup+0x24/0x560 [ 239.837706][ T7290] ? commit_creds+0xb56/0xf60 [ 239.837752][ T7290] ? __secure_computing+0xe1/0x2a0 [ 239.837792][ T7290] syscall_trace_enter+0xa9/0x160 [ 239.837821][ T7290] do_syscall_64+0xbb/0xf80 [ 239.837854][ T7290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.837876][ T7290] ? trace_irq_disable+0x37/0x100 [ 239.837905][ T7290] ? clear_bhb_loop+0x60/0xb0 [ 239.837932][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.837955][ T7290] RIP: 0033:0x7f2ae166b84e [ 239.837975][ T7290] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 239.837995][ T7290] RSP: 002b:00007f2adf905fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.838019][ T7290] RAX: ffffffffffffffda RBX: 00007f2adf9066c0 RCX: 00007f2ae166b84e [ 239.838035][ T7290] RDX: 000000000000000f RSI: 00007f2adf9060a0 RDI: 0000000000000005 [ 239.838049][ T7290] RBP: 00007f2adf906090 R08: 0000000000000000 R09: 0000000000000000 [ 239.838063][ T7290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.838077][ T7290] R13: 00007f2ae1926038 R14: 00007f2ae1925fa0 R15: 00007ffd4d010338 [ 239.838112][ T7290] [ 239.854552][ T37] audit: type=1326 audit(1770696209.423:1267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 239.870487][ T7290] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 239.870561][ T7290] audit: out of memory in audit_log_start [ 239.874245][ T37] audit: type=1326 audit(1770696209.483:1268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2ae166b84e code=0x7ffc0000 [ 239.874386][ T37] audit: type=1326 audit(1770696209.483:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2ae166b84e code=0x7ffc0000 [ 239.874501][ T37] audit: type=1326 audit(1770696209.483:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 239.954657][ T37] audit: type=1326 audit(1770696209.483:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.1.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ae16aaf79 code=0x7ffc0000 [ 240.004441][ T5936] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 240.082505][ T7275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.083066][ T7275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.147072][ T5970] usb 5-1: USB disconnect, device number 25 [ 240.925831][ T5977] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 240.965234][ T806] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 240.995306][ T5936] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 241.195263][ T5970] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 241.309566][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 241.311907][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.313428][ T5936] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 241.313460][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 241.313483][ T5936] usb 2-1: SerialNumber: syz [ 241.326193][ T806] usb 5-1: Using ep0 maxpacket: 16 [ 241.917226][ T5977] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 241.917258][ T5977] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 241.917281][ T5977] usb 1-1: config 220 has no interface number 2 [ 241.917434][ T5977] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 241.917517][ T5977] usb 1-1: config 220 interface 0 has no altsetting 0 [ 241.917538][ T5977] usb 1-1: config 220 interface 76 has no altsetting 0 [ 241.917559][ T5977] usb 1-1: config 220 interface 1 has no altsetting 0 [ 241.922828][ T5977] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 241.923094][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.923119][ T5977] usb 1-1: Product: syz [ 241.923136][ T5977] usb 1-1: Manufacturer: syz [ 241.923153][ T5977] usb 1-1: SerialNumber: syz [ 241.950518][ T806] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 241.950611][ T806] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 241.950653][ T806] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.950682][ T806] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.960122][ T806] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 241.960156][ T806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.960180][ T806] usb 5-1: Product: syz [ 241.960196][ T806] usb 5-1: Manufacturer: syz [ 241.960213][ T806] usb 5-1: SerialNumber: syz [ 242.275825][ T5970] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.275866][ T5970] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.275908][ T5970] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.275934][ T5970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.396980][ T7321] netlink: 'syz.2.454': attribute type 2 has an invalid length. [ 242.397052][ T7321] netlink: 51 bytes leftover after parsing attributes in process `syz.2.454'. [ 242.546621][ T5936] usb 2-1: config 0 descriptor?? [ 242.562258][ T5936] hso 2-1:0.0: Not our interface [ 242.574325][ T7311] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 242.623703][ T5970] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.783401][ T7304] netlink: 9 bytes leftover after parsing attributes in process `syz.4.451'. [ 242.979869][ T7325] netlink: 5 bytes leftover after parsing attributes in process `syz.4.451'. [ 243.093226][ T7304] gretap0: entered promiscuous mode [ 243.257706][ T7325] 0ªî{X¹¦: renamed from gretap0 [ 243.296135][ T5977] usb 1-1: selecting invalid altsetting 0 [ 243.296614][ T5977] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 243.296647][ T5977] uvcvideo 1-1:220.0: No valid video chain found. [ 243.342240][ T5977] usb 1-1: selecting invalid altsetting 0 [ 243.342283][ T5977] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 243.374328][ T7325] 0ªî{X¹¦: left promiscuous mode [ 243.374356][ T7325] 0ªî{X¹¦: entered allmulticast mode [ 243.399417][ T5977] usb 1-1: USB disconnect, device number 33 [ 243.432442][ T806] usb 5-1: USB disconnect, device number 26 [ 243.453327][ T7325] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 243.798982][ T7287] udevd[7287]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 243.805300][ T5977] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 243.956151][ T5977] usb 3-1: Using ep0 maxpacket: 8 [ 243.975261][ T5977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.975314][ T5977] usb 3-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 243.975339][ T5977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.031510][ T5977] usb 3-1: config 0 descriptor?? [ 244.471583][ T5977] usbhid 3-1:0.0: can't add hid device: -71 [ 244.471712][ T5977] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 244.502311][ T5977] usb 3-1: USB disconnect, device number 24 [ 244.989210][ T5977] usb 4-1: USB disconnect, device number 16 [ 245.748463][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.466'. [ 245.995876][ T5977] usb 2-1: USB disconnect, device number 19 [ 246.307295][ T7389] binder: 7388:7389 ioctl 400c620e 200000000240 returned -22 [ 246.564556][ T7395] sctp: [Deprecated]: syz.1.471 (pid 7395) Use of int in max_burst socket option. [ 246.564556][ T7395] Use struct sctp_assoc_value instead [ 246.821761][ T7404] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.855225][ T5977] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 247.114815][ T5936] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 247.127527][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.127565][ T5977] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.127607][ T5977] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 247.127633][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.133194][ T5977] usb 2-1: config 0 descriptor?? [ 247.287678][ T5936] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 247.287712][ T5936] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 247.287736][ T5936] usb 4-1: config 220 has no interface number 2 [ 247.287817][ T5936] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 247.287849][ T5936] usb 4-1: config 220 interface 0 has no altsetting 0 [ 247.287871][ T5936] usb 4-1: config 220 interface 76 has no altsetting 0 [ 247.287892][ T5936] usb 4-1: config 220 interface 1 has no altsetting 0 [ 247.290925][ T5936] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 247.290958][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.290982][ T5936] usb 4-1: Product: syz [ 247.290998][ T5936] usb 4-1: Manufacturer: syz [ 247.291015][ T5936] usb 4-1: SerialNumber: syz [ 247.448321][ T5977] playstation 0003:054C:0DF2.0005: item fetching failed at offset 4/5 [ 247.449154][ T5977] playstation 0003:054C:0DF2.0005: Parse failed [ 247.449241][ T5977] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -22 [ 247.617190][ T5977] usb 2-1: USB disconnect, device number 20 [ 247.695591][ T5936] usb 4-1: selecting invalid altsetting 0 [ 247.714189][ T5936] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 247.714224][ T5936] uvcvideo 4-1:220.0: No valid video chain found. [ 247.780284][ T5936] usb 4-1: selecting invalid altsetting 0 [ 247.780327][ T5936] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 247.802621][ T5936] usb 4-1: USB disconnect, device number 17 [ 247.825276][ T806] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 247.925357][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 247.985187][ T806] usb 1-1: Using ep0 maxpacket: 16 [ 247.989286][ T806] usb 1-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 247.989319][ T806] usb 1-1: config 1 interface 0 has no altsetting 0 [ 247.992275][ T806] usb 1-1: New USB device found, idVendor=05c6, idProduct=920d, bcdDevice=e5.23 [ 247.992306][ T806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.992329][ T806] usb 1-1: Product: syz [ 247.992346][ T806] usb 1-1: Manufacturer: syz [ 247.992361][ T806] usb 1-1: SerialNumber: syz [ 248.298961][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.300002][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.350648][ T806] usb 1-1: USB disconnect, device number 34 [ 248.616813][ T7427] trusted_key: syz.3.482 sent an empty control message without MSG_MORE. [ 248.757359][ T7431] dlm: no local IP address has been set [ 248.757375][ T7431] dlm: cannot start dlm midcomms -107 [ 249.125043][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 249.658613][ T807] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 250.096105][ T5977] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 250.129480][ T807] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.129502][ T807] usb 1-1: config 0 has no interface number 0 [ 250.134740][ T807] usb 1-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=f0.54 [ 250.134772][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.134795][ T807] usb 1-1: Product: syz [ 250.134810][ T807] usb 1-1: Manufacturer: syz [ 250.134826][ T807] usb 1-1: SerialNumber: syz [ 250.195943][ T807] usb 1-1: config 0 descriptor?? [ 250.265234][ T5977] usb 5-1: Using ep0 maxpacket: 16 [ 250.267607][ T5977] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 250.267692][ T5977] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 250.267733][ T5977] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 250.267761][ T5977] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.270690][ T5977] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 250.270719][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.270740][ T5977] usb 5-1: Product: syz [ 250.270756][ T5977] usb 5-1: Manufacturer: syz [ 250.270773][ T5977] usb 5-1: SerialNumber: syz [ 250.549554][ T7454] netlink: 'syz.2.492': attribute type 1 has an invalid length. [ 251.073944][ T7457] loop6: detected capacity change from 0 to 2099792 [ 252.313786][ T807] cdc_subset 1-1:0.1: probe with driver cdc_subset failed with error -71 [ 252.410659][ T5977] usb 5-1: USB disconnect, device number 27 [ 252.480052][ T807] usb 1-1: USB disconnect, device number 35 [ 252.581875][ T7287] udevd[7287]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.607396][ T7465] dlm: no local IP address has been set [ 252.607410][ T7465] dlm: cannot start dlm midcomms -107 [ 252.798957][ T5970] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 252.848916][ T5970] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.064009][ T7473] fido_id[7473]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 253.238000][ T5977] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 254.087523][ T5977] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 254.087558][ T5977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.121837][ T5977] usb 2-1: config 0 descriptor?? [ 254.150651][ T5977] usb 2-1: selecting invalid altsetting 3 [ 254.150676][ T5977] comedi comedi5: could not set alternate setting 3 in high speed [ 254.150693][ T5977] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 254.179685][ T5977] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 254.537300][ T5936] usb 2-1: USB disconnect, device number 21 [ 254.649523][ T7487] /dev/nullb0: Can't open blockdev [ 255.309323][ T7499] netlink: 56 bytes leftover after parsing attributes in process `syz.2.505'. [ 255.637566][ T7486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.595884][ T5881] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 256.676929][ T7504] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 256.757289][ T5881] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.757320][ T5881] usb 4-1: config 0 has no interface number 0 [ 256.760023][ T5881] usb 4-1: New USB device found, idVendor=0547, idProduct=2727, bcdDevice=f0.54 [ 256.760054][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.760075][ T5881] usb 4-1: Product: syz [ 256.760091][ T5881] usb 4-1: Manufacturer: syz [ 256.760105][ T5881] usb 4-1: SerialNumber: syz [ 256.816237][ T5881] usb 4-1: config 0 descriptor?? [ 256.909438][ T7510] dlm: no local IP address has been set [ 256.909455][ T7510] dlm: cannot start dlm midcomms -107 [ 257.125364][ T807] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 257.255623][ T807] usb 1-1: device descriptor read/64, error -71 [ 257.496094][ T807] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 257.645238][ T807] usb 1-1: device descriptor read/64, error -71 [ 259.650523][ T7541] dvmrp1: tun_chr_ioctl cmd 2147767519 [ 260.865265][ T807] usb usb1-port1: attempt power cycle [ 261.123034][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.123108][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.129019][ T5881] cdc_subset 4-1:0.1: probe with driver cdc_subset failed with error -71 [ 262.168953][ T5881] usb 4-1: USB disconnect, device number 18 [ 263.005580][ T5881] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 263.155248][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 263.163829][ T5881] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 263.163859][ T5881] usb 3-1: config 1 has no interface number 0 [ 263.163929][ T5881] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 263.163957][ T5881] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 263.163983][ T5881] usb 3-1: config 1 interface 105 has no altsetting 0 [ 263.231896][ T5881] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 263.231929][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.231951][ T5881] usb 3-1: Product: syz [ 263.231965][ T5881] usb 3-1: Manufacturer: syz [ 263.231979][ T5881] usb 3-1: SerialNumber: syz [ 263.277544][ T7584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.277680][ T7584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.683697][ T7584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.683836][ T7584] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 263.875635][ T806] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 264.025888][ T806] usb 4-1: Using ep0 maxpacket: 32 [ 264.055891][ T806] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.056487][ T806] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.056515][ T806] usb 4-1: config 0 interface 0 has no altsetting 0 [ 264.056550][ T806] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 264.056975][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.110050][ T5881] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 264.111849][ T5881] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 264.122525][ T5881] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 264.159583][ T806] usb 4-1: config 0 descriptor?? [ 264.378235][ T5881] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f6:27:c7:7d:ef:d1 [ 264.471305][ T5881] usb 3-1: USB disconnect, device number 25 [ 264.504077][ T5881] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 264.581540][ T806] usbhid 4-1:0.0: can't add hid device: -71 [ 264.581692][ T806] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 264.624466][ T806] usb 4-1: USB disconnect, device number 19 [ 264.779245][ T7624] ieee802154 phy0 wpan0: encryption failed: -22 [ 264.831037][ T5881] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 264.831195][ T5881] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 264.831335][ T5881] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 265.293752][ T7643] input: syz0 as /devices/virtual/input/input26 [ 265.865282][ T5881] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 266.015333][ T5881] usb 2-1: Using ep0 maxpacket: 8 [ 266.017922][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 266.019329][ T5881] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.048650][ T5881] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 266.048683][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.048706][ T5881] usb 2-1: Product: syz [ 266.048721][ T5881] usb 2-1: Manufacturer: syz [ 266.048737][ T5881] usb 2-1: SerialNumber: syz [ 266.342996][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.343029][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.093635][ T7654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.093669][ T7654] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.934131][ T7686] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 268.133425][ T5881] usb 2-1: USB disconnect, device number 22 [ 268.365386][ T5977] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 268.435448][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 268.527306][ T5977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.527337][ T5977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.529094][ T5977] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 268.529127][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 268.529142][ T5977] usb 4-1: SerialNumber: syz [ 268.574342][ T7697] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3324779913 (13299119652 ns) > initial count (1572190792 ns). Using initial count to start timer. [ 268.625263][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 268.628675][ T9] usb 1-1: config 0 has an invalid interface number: 158 but max is 0 [ 268.628706][ T9] usb 1-1: config 0 has no interface number 0 [ 268.632275][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=704c, bcdDevice=32.51 [ 268.632307][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.632331][ T9] usb 1-1: Product: syz [ 268.632365][ T9] usb 1-1: Manufacturer: syz [ 268.632381][ T9] usb 1-1: SerialNumber: syz [ 268.692142][ T9] usb 1-1: config 0 descriptor?? [ 268.709722][ T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704c [ 268.823015][ T5977] usb 4-1: 0:2 : does not exist [ 268.926028][ T9] gspca_sn9c20x: Write register 1000 failed -71 [ 268.926070][ T9] gspca_sn9c20x: Device initialization failed [ 268.926175][ T9] gspca_sn9c20x 1-1:0.158: probe with driver gspca_sn9c20x failed with error -71 [ 268.933308][ T5977] usb 4-1: USB disconnect, device number 20 [ 268.975516][ T9] usb 1-1: USB disconnect, device number 39 [ 269.100557][ T7287] udevd[7287]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 269.985331][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 270.081797][ T7724] syzkaller1: entered promiscuous mode [ 270.081826][ T7724] syzkaller1: entered allmulticast mode [ 270.140965][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.141022][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 270.141049][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.174723][ T9] usb 1-1: config 0 descriptor?? [ 270.613736][ T9] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 270.695399][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input27 [ 271.442320][ T9] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 271.499775][ T9] usb 1-1: USB disconnect, device number 40 [ 271.628849][ T7744] fido_id[7744]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 271.700702][ T7741] syz.2.602 (7741) used greatest stack depth: 17456 bytes left [ 271.889554][ T5801] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 274.305321][ T5977] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 274.455234][ T5977] usb 1-1: Using ep0 maxpacket: 32 [ 274.459391][ T5977] usb 1-1: config 5 has an invalid interface number: 139 but max is 0 [ 274.459421][ T5977] usb 1-1: config 5 has no interface number 0 [ 274.463433][ T5977] usb 1-1: New USB device found, idVendor=1c9e, idProduct=9b01, bcdDevice=d2.6a [ 274.463467][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.463490][ T5977] usb 1-1: Product: syz [ 274.463506][ T5977] usb 1-1: Manufacturer: syz [ 274.463522][ T5977] usb 1-1: SerialNumber: syz [ 274.783752][ T5977] option 1-1:5.139: GSM modem (1-port) converter detected [ 274.805812][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 274.848365][ T5977] usb 1-1: USB disconnect, device number 41 [ 274.852151][ T5977] option 1-1:5.139: device disconnected [ 275.129532][ T7792] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.495299][ T807] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 275.645300][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 275.657641][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 275.665215][ T807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.665253][ T807] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.665296][ T807] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.665321][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.717572][ T807] usb 4-1: config 0 descriptor?? [ 275.808202][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 275.808296][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 275.808314][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.859656][ T9] usb 1-1: config 0 descriptor?? [ 276.167149][ T807] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max [ 276.207964][ T807] microsoft 0003:045E:07DA.0008: unknown main item tag 0x7 [ 276.244948][ T807] HID 045e:07da: Invalid code 65791 type 1 [ 276.253018][ T807] HID 045e:07da: Invalid code 768 type 1 [ 276.253627][ T807] HID 045e:07da: Invalid code 769 type 1 [ 276.253661][ T807] HID 045e:07da: Invalid code 770 type 1 [ 276.253676][ T807] HID 045e:07da: Invalid code 771 type 1 [ 276.253695][ T807] HID 045e:07da: Invalid code 772 type 1 [ 276.253962][ T807] HID 045e:07da: Invalid code 773 type 1 [ 276.253979][ T807] HID 045e:07da: Invalid code 774 type 1 [ 276.253994][ T807] HID 045e:07da: Invalid code 775 type 1 [ 276.254008][ T807] HID 045e:07da: Invalid code 776 type 1 [ 276.335579][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 276.335665][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 276.445707][ T807] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0008/input/input28 [ 276.446493][ T9] usb 1-1: USB disconnect, device number 42 [ 276.529540][ T807] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 276.573188][ T807] usb 4-1: USB disconnect, device number 21 [ 276.759880][ T7819] fido_id[7819]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 277.111662][ T7831] netlink: 124 bytes leftover after parsing attributes in process `syz.3.639'. [ 277.155428][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 278.700314][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.700346][ T9] usb 2-1: config 0 has no interfaces? [ 278.700380][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 278.700405][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.707440][ T9] usb 2-1: config 0 descriptor?? [ 279.055279][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 279.177217][ T5882] usb 2-1: USB disconnect, device number 23 [ 279.216459][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.216489][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.218007][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 279.218038][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 279.218060][ T9] usb 1-1: SerialNumber: syz [ 280.457429][ T37] audit: type=1326 audit(1770696506.070:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7849 comm="syz.2.648" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f469718af79 code=0x0 [ 281.105498][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.649'. [ 281.327116][ T9] usb 1-1: 0:2 : does not exist [ 281.405713][ T9] usb 1-1: USB disconnect, device number 43 [ 281.815008][ T7287] udevd[7287]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.600518][ T7880] pim6reg1: entered promiscuous mode [ 283.600545][ T7880] pim6reg1: entered allmulticast mode [ 288.705255][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 288.865259][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 288.867606][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 288.867637][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.900155][ T9] usb 1-1: config 0 descriptor?? [ 289.035251][ T5977] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 289.185338][ T5883] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 289.188756][ T5977] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 289.188784][ T5977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.255204][ T5977] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.255241][ T5977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.255264][ T5977] usb 5-1: SerialNumber: syz [ 289.345661][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 289.354429][ T9] wacom 0003:17EF:6004.0009: unknown main item tag 0x6 [ 289.367657][ T5883] usb 4-1: config 0 has no interfaces? [ 289.381079][ T5883] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 289.381112][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.381193][ T5883] usb 4-1: Product: syz [ 289.381211][ T5883] usb 4-1: Manufacturer: syz [ 289.381228][ T5883] usb 4-1: SerialNumber: syz [ 289.445229][ T5883] usb 4-1: config 0 descriptor?? [ 289.506161][ T5977] usb 5-1: 0:2 : does not exist [ 289.506246][ T5977] usb 5-1: unit 255 not found! [ 289.536122][ T5977] usb 5-1: USB disconnect, device number 28 [ 289.559385][ T9] usb 1-1: USB disconnect, device number 44 [ 289.668320][ T7931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.668894][ T7931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.706627][ T37] audit: type=1326 audit(1770696515.320:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7928 comm="syz.3.678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0607abaf79 code=0x0 [ 289.789138][ T7287] udevd[7287]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.820277][ T5882] usb 4-1: USB disconnect, device number 22 [ 290.030011][ T7942] binder: 7941:7942 ioctl c0306201 2000000003c0 returned -14 [ 290.057904][ T7943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 295.399350][ T7990] binder: 7987:7990 ioctl 0 0 returned -22 [ 300.146103][ T8017] binder: 8006:8017 ioctl 4018620d 0 returned -22 [ 300.149712][ T8017] binder: 8006:8017 ioctl c0306201 0 returned -14 [ 300.151520][ T8017] binder: 8006:8017 ioctl c0306201 0 returned -14 [ 301.844722][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.0.710'. [ 306.085219][ T5882] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 306.317951][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 306.317988][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.318025][ T5882] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 306.318049][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.569232][ T5882] usb 1-1: config 0 descriptor?? [ 307.771143][ T5882] hid-rmi 0003:1532:011D.000A: item fetching failed at offset 0/2 [ 307.785880][ T5882] hid-rmi 0003:1532:011D.000A: parse failed [ 307.785954][ T5882] hid-rmi 0003:1532:011D.000A: probe with driver hid-rmi failed with error -22 [ 307.931285][ T5977] usb 1-1: USB disconnect, device number 45 [ 310.878345][ T5977] IPVS: starting estimator thread 0... [ 311.085404][ T8084] IPVS: using max 12 ests per chain, 28800 per kthread [ 312.035218][ T5881] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 312.195246][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 312.197766][ T5881] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 312.197797][ T5881] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 312.197818][ T5881] usb 1-1: config 0 has no interface number 0 [ 312.200635][ T5881] usb 1-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 312.200662][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.200681][ T5881] usb 1-1: Product: syz [ 312.200694][ T5881] usb 1-1: Manufacturer: syz [ 312.200707][ T5881] usb 1-1: SerialNumber: syz [ 312.218007][ T5881] usb 1-1: config 0 descriptor?? [ 312.242554][ T5881] net1080 1-1:0.183: probe with driver net1080 failed with error -22 [ 313.067401][ T5882] usb 1-1: USB disconnect, device number 46 [ 313.468235][ T8106] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.735'. [ 315.634705][ T8128] netlink: 'syz.4.743': attribute type 4 has an invalid length. [ 315.883958][ T8132] netlink: 'syz.4.743': attribute type 4 has an invalid length. [ 316.319378][ T8118] syz.2.741 (8118): drop_caches: 2 [ 317.073222][ T8126] netlink: 'syz.3.740': attribute type 4 has an invalid length. [ 322.285840][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.285917][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.690222][ T8188] random: crng reseeded on system resumption [ 325.530684][ T8216] syz.0.770 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 326.378186][ T8215] netlink: 12 bytes leftover after parsing attributes in process `syz.3.772'. [ 331.195536][ T8248] erspan0: entered promiscuous mode [ 332.027484][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 333.243491][ T8269] netlink: 'syz.3.786': attribute type 10 has an invalid length. [ 333.631492][ T8265] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 333.631537][ T8265] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 333.631556][ T8265] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 333.780293][ T8267] evm: overlay not supported [ 334.246493][ T8269] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 335.659886][ T8287] netlink: 'syz.4.791': attribute type 29 has an invalid length. [ 335.668396][ T8289] netlink: 'syz.4.791': attribute type 29 has an invalid length. [ 335.713480][ T8287] netlink: 500 bytes leftover after parsing attributes in process `syz.4.791'. [ 336.328984][ T8297] block nbd3: shutting down sockets [ 336.401740][ T8303] block nbd3: NBD_DISCONNECT [ 336.401772][ T8303] block nbd3: Send disconnect failed -32 [ 337.623518][ T8310] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 337.623797][ T8310] block device autoloading is deprecated and will be removed. [ 338.021806][ T8314] netlink: 'syz.3.801': attribute type 107 has an invalid length. [ 339.006718][ T8334] netlink: 'syz.2.810': attribute type 1 has an invalid length. [ 341.685283][ T807] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 341.835195][ T807] usb 3-1: Using ep0 maxpacket: 32 [ 341.837747][ T807] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 341.837779][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.843501][ T807] usb 3-1: config 0 descriptor?? [ 342.087621][ T807] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 342.197412][ T807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 342.215619][ T807] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 342.215691][ T807] usb 3-1: media controller created [ 342.318513][ T807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.364802][ T8404] bridge0: port 3(syz_tun) entered blocking state [ 342.378752][ T8404] bridge0: port 3(syz_tun) entered disabled state [ 342.397100][ T8404] syz_tun: entered allmulticast mode [ 342.401003][ T8404] syz_tun: entered promiscuous mode [ 342.404724][ T8404] bridge0: port 3(syz_tun) entered blocking state [ 342.404870][ T8404] bridge0: port 3(syz_tun) entered forwarding state [ 342.510732][ T807] az6027: usb out operation failed. (-71) [ 342.512100][ T807] az6027: usb out operation failed. (-71) [ 342.512119][ T807] stb0899_attach: Driver disabled by Kconfig [ 342.512130][ T807] az6027: no front-end attached [ 342.512130][ T807] [ 342.512587][ T807] az6027: usb out operation failed. (-71) [ 342.512615][ T807] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 342.558387][ T807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 342.595675][ T807] dvb-usb: schedule remote query interval to 400 msecs. [ 342.595700][ T807] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 342.624465][ T807] usb 3-1: USB disconnect, device number 26 [ 342.943315][ T8410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.071544][ T8410] bond0: (slave rose0): Enslaving as an active interface with an up link [ 343.108567][ T807] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 343.187725][ T8415] 9pnet_virtio: no channels available for device syz [ 343.775227][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 344.242135][ T8423] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.259649][ T8423] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 344.538465][ T8423] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.538626][ T8423] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 344.622484][ T8423] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 344.696710][ T8423] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 344.696780][ T8423] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 344.797044][ T8423] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 344.797173][ T8423] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 345.165231][ T5883] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 345.172537][ T8456] random: crng reseeded on system resumption [ 345.315188][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 345.317754][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 345.320886][ T5883] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 345.320916][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.320939][ T5883] usb 3-1: Product: syz [ 345.320955][ T5883] usb 3-1: Manufacturer: syz [ 345.320971][ T5883] usb 3-1: SerialNumber: syz [ 345.338486][ T5883] usb 3-1: config 0 descriptor?? [ 345.372872][ T5883] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 345.373000][ T5883] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 345.436424][ T8463] binder: BINDER_SET_CONTEXT_MGR already set [ 345.436440][ T8463] binder: 8461:8463 ioctl 4018620d 200000000040 returned -16 [ 345.549044][ T8439] random: crng reseeded on system resumption [ 346.073666][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 346.575385][ T5804] Bluetooth: hci2: command 0x0406 tx timeout [ 346.635742][ T5883] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 346.737201][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 346.780140][ T5883] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 346.780176][ T5883] em28xx 3-1:0.0: board has no eeprom [ 346.836716][ T5804] Bluetooth: hci4: command 0x0406 tx timeout [ 346.875251][ T5883] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 346.875293][ T5883] em28xx 3-1:0.0: dvb set to bulk mode. [ 346.875660][ T5989] em28xx 3-1:0.0: Binding DVB extension [ 346.996690][ T5883] usb 3-1: USB disconnect, device number 27 [ 346.998954][ T5883] em28xx 3-1:0.0: Disconnecting em28xx [ 347.185828][ T8484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.246881][ T8484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.255738][ T8484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.298935][ T5989] em28xx 3-1:0.0: Registering input extension [ 347.299520][ T5883] em28xx 3-1:0.0: Closing input extension [ 347.395507][ T8488] netlink: 'syz.0.859': attribute type 10 has an invalid length. [ 347.457969][ T5883] em28xx 3-1:0.0: Freeing device [ 348.095239][ T5804] Bluetooth: hci0: command 0x0406 tx timeout [ 348.129770][ T68] ------------[ cut here ]------------ [ 348.129786][ T68] intreq != rdev->scan_req && intreq != rdev->int_scan_req [ 348.129802][ T68] WARNING: net/wireless/scan.c:1194 at cfg80211_scan_done+0x2d8/0x460, CPU#0: kworker/u8:4/68 [ 348.129845][ T68] Modules linked in: [ 348.129874][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.129905][ T68] Tainted: [L]=SOFTLOCKUP [ 348.129913][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 348.129929][ T68] Workqueue: events_unbound cfg80211_wiphy_work [ 348.129961][ T68] RIP: 0010:cfg80211_scan_done+0x2d8/0x460 [ 348.129987][ T68] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 17 55 64 f7 90 0f 0b 90 e9 2a fe ff ff e8 09 55 64 f7 90 <0f> 0b 90 e9 d0 fe ff ff e8 fb 54 64 f7 48 8d 3d a4 44 f9 04 67 48 [ 348.130008][ T68] RSP: 0018:ffffc9000153f8e0 EFLAGS: 00010293 [ 348.130027][ T68] RAX: ffffffff8a5ec557 RBX: ffff888029e95418 RCX: ffff88801bb83c00 [ 348.130045][ T68] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.130059][ T68] RBP: ffffc9000153f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 348.130073][ T68] R10: dffffc0000000000 R11: fffffbfff1e90f2f R12: ffff888060dc0278 [ 348.130090][ T68] R13: dffffc0000000000 R14: ffff888029e95400 R15: ffff888060dc0860 [ 348.130107][ T68] FS: 0000000000000000(0000) GS:ffff8881265b1000(0000) knlGS:0000000000000000 [ 348.130126][ T68] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 348.130149][ T68] CR2: 00007f1867cf86c0 CR3: 0000000010cdc000 CR4: 00000000003526f0 [ 348.130175][ T68] Call Trace: [ 348.130182][ T68] [ 348.130196][ T68] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 348.130221][ T68] __ieee80211_scan_completed+0x550/0xb20 [ 348.130249][ T68] cfg80211_wiphy_work+0x2ab/0x450 [ 348.130272][ T68] ? process_scheduled_works+0xa0f/0x17a0 [ 348.130290][ T68] process_scheduled_works+0xaec/0x17a0 [ 348.130327][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.130342][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.130359][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.130372][ T68] ? schedule+0x90/0x360 [ 348.130403][ T68] worker_thread+0xda6/0x1360 [ 348.130439][ T68] kthread+0x726/0x8b0 [ 348.130462][ T68] ? __pfx_worker_thread+0x10/0x10 [ 348.130477][ T68] ? __pfx_kthread+0x10/0x10 [ 348.130497][ T68] ? rt_spin_unlock+0x14f/0x200 [ 348.130520][ T68] ? rt_spin_unlock+0x160/0x200 [ 348.130537][ T68] ? __pfx_kthread+0x10/0x10 [ 348.130558][ T68] ret_from_fork+0x51b/0xa40 [ 348.130578][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 348.130594][ T68] ? __switch_to+0xc82/0x1410 [ 348.130622][ T68] ? __pfx_kthread+0x10/0x10 [ 348.130643][ T68] ret_from_fork_asm+0x1a/0x30 [ 348.130680][ T68] [ 348.130688][ T68] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 348.130702][ T68] CPU: 0 UID: 0 PID: 68 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.130724][ T68] Tainted: [L]=SOFTLOCKUP [ 348.130729][ T68] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 348.130740][ T68] Workqueue: events_unbound cfg80211_wiphy_work [ 348.130761][ T68] Call Trace: [ 348.130767][ T68] [ 348.130773][ T68] vpanic+0x1e0/0x670 [ 348.130799][ T68] panic+0xc5/0xd0 [ 348.130821][ T68] ? __pfx_panic+0x10/0x10 [ 348.130851][ T68] ? ret_from_fork_asm+0x1a/0x30 [ 348.130880][ T68] __warn+0x315/0x4a0 [ 348.130901][ T68] ? cfg80211_scan_done+0x2d8/0x460 [ 348.130917][ T68] ? cfg80211_scan_done+0x2d8/0x460 [ 348.130933][ T68] __report_bug+0x29a/0x540 [ 348.130974][ T68] ? cfg80211_scan_done+0x2d8/0x460 [ 348.131008][ T68] ? __pfx___report_bug+0x10/0x10 [ 348.131034][ T68] ? __lock_acquire+0x6b5/0x2cf0 [ 348.131061][ T68] ? cfg80211_scan_done+0x2d8/0x460 [ 348.131077][ T68] report_bug+0x16a/0x220 [ 348.131099][ T68] ? cfg80211_scan_done+0x2d8/0x460 [ 348.131113][ T68] ? cfg80211_scan_done+0x2da/0x460 [ 348.131128][ T68] handle_bug+0x98/0x200 [ 348.131180][ T68] exc_invalid_op+0x1a/0x50 [ 348.131204][ T68] asm_exc_invalid_op+0x1a/0x20 [ 348.131227][ T68] RIP: 0010:cfg80211_scan_done+0x2d8/0x460 [ 348.131250][ T68] Code: 75 7b 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 17 55 64 f7 90 0f 0b 90 e9 2a fe ff ff e8 09 55 64 f7 90 <0f> 0b 90 e9 d0 fe ff ff e8 fb 54 64 f7 48 8d 3d a4 44 f9 04 67 48 [ 348.131270][ T68] RSP: 0018:ffffc9000153f8e0 EFLAGS: 00010293 [ 348.131290][ T68] RAX: ffffffff8a5ec557 RBX: ffff888029e95418 RCX: ffff88801bb83c00 [ 348.131314][ T68] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 348.131324][ T68] RBP: ffffc9000153f9a8 R08: 0000000000000000 R09: 0000000000000000 [ 348.131334][ T68] R10: dffffc0000000000 R11: fffffbfff1e90f2f R12: ffff888060dc0278 [ 348.131347][ T68] R13: dffffc0000000000 R14: ffff888029e95400 R15: ffff888060dc0860 [ 348.131366][ T68] ? cfg80211_scan_done+0x2d7/0x460 [ 348.131394][ T68] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 348.131418][ T68] __ieee80211_scan_completed+0x550/0xb20 [ 348.131445][ T68] cfg80211_wiphy_work+0x2ab/0x450 [ 348.131468][ T68] ? process_scheduled_works+0xa0f/0x17a0 [ 348.131485][ T68] process_scheduled_works+0xaec/0x17a0 [ 348.131522][ T68] ? __pfx_process_scheduled_works+0x10/0x10 [ 348.131537][ T68] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.131554][ T68] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 348.131567][ T68] ? schedule+0x90/0x360 [ 348.131596][ T68] worker_thread+0xda6/0x1360 [ 348.131631][ T68] kthread+0x726/0x8b0 [ 348.131654][ T68] ? __pfx_worker_thread+0x10/0x10 [ 348.131670][ T68] ? __pfx_kthread+0x10/0x10 [ 348.131688][ T68] ? rt_spin_unlock+0x14f/0x200 [ 348.131711][ T68] ? rt_spin_unlock+0x160/0x200 [ 348.131728][ T68] ? __pfx_kthread+0x10/0x10 [ 348.131749][ T68] ret_from_fork+0x51b/0xa40 [ 348.131768][ T68] ? __pfx_ret_from_fork+0x10/0x10 [ 348.131785][ T68] ? __switch_to+0xc82/0x1410 [ 348.131812][ T68] ? __pfx_kthread+0x10/0x10 [ 348.131833][ T68] ret_from_fork_asm+0x1a/0x30 [ 348.131870][ T68] [ 348.132045][ T68] Kernel Offset: disabled