last executing test programs: 10m17.40303036s ago: executing program 1 (id=3428): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x5f8e0af0733be127, 0x14}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 10m16.264454089s ago: executing program 1 (id=3429): socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x4, 0x2, 0x7ff, 0x3, 0x8, 0x21e0, 0x6, 0x1, 0x8, 0x1d, 0x8, 0x0, 0xffffffffffffffff, 0x1, 0xcda, 0x2], 0x2, 0x2}) tkill(r0, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000100)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f00000005c0)='./bus\x00', 0x628c2, 0x19) 10m14.075604777s ago: executing program 1 (id=3432): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) clock_gettime(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r1, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000500)={{0xdddd1000, 0x2, 0x8, 0xd6, 0x2d, 0x8, 0x36, 0x40, 0x3, 0x7, 0x3, 0x1}, {0x10000, 0xffff1000, 0xdbf25b399a4ac241, 0x0, 0x0, 0x6, 0xfa, 0x6, 0x5, 0xff, 0x8, 0x7}, {0x6000, 0x10000, 0x9, 0x4, 0x7, 0x6, 0x4, 0x9, 0x4, 0x8d, 0x5, 0x81}, {0x10000, 0x3004, 0x3, 0x5, 0x7, 0x4, 0x6, 0x4, 0x3, 0x0, 0x8, 0x3}, {0xf000, 0x100000, 0x3, 0x0, 0x0, 0x4, 0x8, 0x4, 0x8, 0xb1, 0xc3, 0x8}, {0xd000, 0xeeef0000, 0x10, 0x5, 0x4e, 0x5, 0x3, 0x50, 0x3c, 0x5, 0xd, 0xfa}, {0x10000, 0x2, 0x8, 0x6, 0x63, 0x5, 0x1, 0x7, 0x6, 0x81, 0x4, 0x1}, {0x2000, 0x2000, 0xe, 0x3, 0x8, 0x9, 0x4, 0x4, 0x8, 0xa0, 0x9, 0x81}, {0x1, 0x101}, {0x1000, 0x7}, 0x10000, 0x0, 0x0, 0x40000, 0x8, 0x1, 0xdddd1000, [0x1c00000000000000, 0x401, 0x490, 0xa208]}) write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() ptrace$getenv(0x4201, r3, 0x1, &(0x7f0000000180)) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c0000000000850000001e00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 10m13.764951605s ago: executing program 1 (id=3433): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1}]}) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) prlimit64(0x0, 0xe, 0x0, 0x0) io_setup(0x8, 0x0) syz_open_procfs(0x0, 0x0) request_key(0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_gettime(0x3, &(0x7f0000000800)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xc989, 0x0, 0x1, 0x274}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r3, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 10m12.554443866s ago: executing program 1 (id=3438): userfaultfd(0x80001) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001380)=ANY=[@ANYBLOB="d15aecbec5b0a2fa2424059a67f565c91219b69d4236f03e64c4658628e78aeacf2893c87033eda35890589c23861332fd85985dcb890b44692f5b9a15a51d5fc0ef97a07e3256d06bfb5b49d6f149a6fea666a5c8a647efe2e43ff1e900ee9450f458cb9335610d2617ac1cb860e1", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x24004800) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 10m11.424968563s ago: executing program 1 (id=3445): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @remote}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400000000408000140000000001400000011"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010077673100"/108], 0x80}}, 0x4000000) close(r7) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x3ec, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) 9m56.344316872s ago: executing program 32 (id=3445): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @remote}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380080002400000000408000140000000001400000011"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a01080000000000000000020000010900020073797a30000000000900010073797a30000000002c00038008000240000000000800014000000000180003801400010077673100"/108], 0x80}}, 0x4000000) close(r7) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000040)={r5, 0x1, 0x6}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x40002202, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x3e000000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x3ec, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e}, 0x6d) 4m57.016469179s ago: executing program 0 (id=4180): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 4m56.629894776s ago: executing program 0 (id=4183): socket$netlink(0x10, 0x3, 0x14) syz_open_dev$sg(0x0, 0x0, 0x40000) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x4}, 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m49.557249173s ago: executing program 0 (id=4187): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0) 4m43.280655728s ago: executing program 0 (id=4202): syz_open_procfs(0x0, &(0x7f00000000c0)='autogroup\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xc89f, 0x1000, 0x0, 0x20002fa}) socket$inet(0x2, 0x80001, 0x84) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r4, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0x2}, @connect={{0x2, 0x3}, {0x1}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time={0x1}, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'wg1\x00', 0x4000}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) syz_open_dev$sndmidi(&(0x7f0000000080), 0xc, 0x109042) syz_open_dev$amidi(&(0x7f0000000040), 0x2, 0x2) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TIOCSTI(r6, 0x5412, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpgrp(0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 4m43.069808983s ago: executing program 2 (id=4204): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x10001150, 0x800, 0x13, 0x1b2}, &(0x7f0000000140), &(0x7f0000000400)) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x4801000000000000}, 0x0) 4m41.567165394s ago: executing program 2 (id=4205): memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x100000000001, 0x0) fcntl$setstatus(r5, 0x4, 0x2c00) write$binfmt_script(r8, &(0x7f0000020140)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x10009) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4, 0x0, 0x3}}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r10 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 4m39.624024242s ago: executing program 2 (id=4206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x792d8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, 0x0, 0x0, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4m38.421922018s ago: executing program 2 (id=4209): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000280)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) syz_open_dev$vcsa(0x0, 0x1, 0x1a1300) r5 = socket(0x28, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x40, 0xffffffff}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r8, 0x6, 0xb, 0x0, &(0x7f0000000300)) 4m30.78459456s ago: executing program 0 (id=4216): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x800, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0xa, 0x4, 0xc135, 0x4, 0x5, 0xaf9d, 0x0, 0x4, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x9, 0xa, 0x101, 0xfffffffe, 0xfffd, 0x7, 0x40000003, 0x2089, 0xcaa3, 0x1000, 0x8, 0x8000003, 0xe69, 0x3, 0xc, 0x4083, 0x1, 0xfffffff8]}) 4m30.665205076s ago: executing program 2 (id=4217): ioctl$DRM_IOCTL_GEM_CLOSE(0xffffffffffffffff, 0x40086409, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x716a}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0xf8}}, 0x0) 4m30.545159287s ago: executing program 0 (id=4220): ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='sched_switch\x00', r3, 0x0, 0x3ff}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 4m28.406656342s ago: executing program 2 (id=4223): socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x4, 0x2, 0x7ff, 0x3, 0x8, 0x21e0, 0x6, 0x1, 0x8, 0x1d, 0x8, 0x0, 0xffffffffffffffff, 0x1, 0xcda, 0x2], 0x2, 0x2}) tkill(0x0, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f00000005c0)='./bus\x00', 0x628c2, 0x19) 4m14.890844514s ago: executing program 33 (id=4220): ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000640)='sched_switch\x00', r3, 0x0, 0x3ff}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080000001e000000000a0000040500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 4m12.800365785s ago: executing program 34 (id=4223): socket$inet6(0xa, 0x3, 0x8000000003c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000300)={[0x4, 0x2, 0x7ff, 0x3, 0x8, 0x21e0, 0x6, 0x1, 0x8, 0x1d, 0x8, 0x0, 0xffffffffffffffff, 0x1, 0xcda, 0x2], 0x2, 0x2}) tkill(0x0, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) open(&(0x7f00000005c0)='./bus\x00', 0x628c2, 0x19) 19.025619088s ago: executing program 5 (id=4636): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 18.889303085s ago: executing program 5 (id=4638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r3, 0xffffffffffffffff, 0x0) 17.757220016s ago: executing program 5 (id=4640): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000"], 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="800037e9220ca1", 0x7, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast2, 0xf}, 0x1c) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4ba2930", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000005000400040000000800110000000000050021000100000008001800ac1414bb06000300070000000500220001000000"], 0x44}}, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x294}}, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 16.40856815s ago: executing program 5 (id=4643): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',gro', @ANYBLOB]) r2 = openat$dlm_control(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0xfffffffffffffe2f) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r4}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000fe27008500000008000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0xe, 0xfe, &(0x7f0000000740)="000000000000c000ee6e3e20630c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 12.693823236s ago: executing program 4 (id=4648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r3, 0xffffffffffffffff, 0x0) 10.485045938s ago: executing program 4 (id=4649): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49f, 0x0, 0x0, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x60, @empty}}, 0x0, 0x0, 0x60000000, 0x0, 0xb3550aa4ba878396}, 0x9c) 10.337962245s ago: executing program 5 (id=4651): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000"], 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="800037e9220ca1", 0x7, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast2, 0xf}, 0x1c) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4ba2930", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000005000400040000000800110000000000050021000100000008001800ac1414bb06000300070000000500220001000000"], 0x44}}, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x294}}, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 10.193770059s ago: executing program 3 (id=4652): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7f7c, 0x6, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x6}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000380)) 6.466591751s ago: executing program 5 (id=4653): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x10001150, 0x800, 0x13, 0x1b2}, &(0x7f0000000140), &(0x7f0000000400)) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f00000000c0), 0x2c8, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x4801000000000000}, 0x0) 6.465768835s ago: executing program 3 (id=4654): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040054) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prlimit64(0x0, 0x0, &(0x7f0000000640)={0x2, 0x3}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 6.421117062s ago: executing program 4 (id=4655): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) fsopen(0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x0) r5 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r5, &(0x7f0000001ec0)=[{{&(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e21, 0x2}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000000c0)="732937f138d7c40702f77475b57693bcf99aa9da6bc32da1da780dd1b4756b6b6882ce89cb38a54e328e646ff15be751", 0x30}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000000000001701000003080100"], 0x10}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10) 5.07803337s ago: executing program 4 (id=4656): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2b, 0x80801, 0x1) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x801) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 4.702503284s ago: executing program 3 (id=4657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r3, 0xffffffffffffffff, 0x0) 4.666032713s ago: executing program 4 (id=4658): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3.568735317s ago: executing program 4 (id=4659): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) readv(r2, &(0x7f0000002680)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.568012459s ago: executing program 3 (id=4660): sigaltstack(&(0x7f0000000000)={0x0, 0x80000000}, &(0x7f0000000280)={&(0x7f0000000140)=""/193, 0x0, 0xc1}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) 3.228420449s ago: executing program 3 (id=4661): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000"], 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000000100)="800037e9220ca1", 0x7, 0x0, &(0x7f0000000140)={0xa, 0x4e24, 0x6, @mcast2, 0xf}, 0x1c) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000240), &(0x7f0000000280)={'U-', 0x1}, 0x16, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="f4ba2930", @ANYRES16=0x0, @ANYBLOB="6ba425bd7000fbdbdf250100000005000400040000000800110000000000050021000100000008001800ac1414bb06000300070000000500220001000000"], 0x44}}, 0x40004) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) syz_io_uring_setup(0x34b7, 0x0, &(0x7f00000001c0), &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x294}}, 0x4048014) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) shutdown(r4, 0x1) 0s ago: executing program 3 (id=4662): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7f7c, 0x6, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000380)={r2}) kernel console output (not intermixed with test programs): ice firmware [ 1294.191278][ T61] Bluetooth: hci2: link tx timeout [ 1294.193941][ T61] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1295.917848][T14991] usb 3-1: USB disconnect, device number 13 [ 1295.988976][ T61] Bluetooth: hci2: link tx timeout [ 1295.988997][ T61] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1295.989227][ T61] Bluetooth: hci2: link tx timeout [ 1295.989239][ T61] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1295.989254][ T61] Bluetooth: hci2: link tx timeout [ 1295.989263][ T61] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1298.054754][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 1299.042784][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.104993][ T1833] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1299.112470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.234925][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.315918][ C0] vkms_vblank_simulate: vblank timer overrun [ 1299.510117][ T1833] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1299.510149][ T1833] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1299.510174][ T1833] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1299.557286][ T1833] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1299.557317][ T1833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.557337][ T1833] usb 1-1: Product: syz [ 1299.557351][ T1833] usb 1-1: Manufacturer: syz [ 1299.557364][ T1833] usb 1-1: SerialNumber: syz [ 1299.655858][ T1833] usb 1-1: config 0 descriptor?? [ 1299.656921][T17790] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1299.657674][T17790] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1299.674430][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.674501][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1299.719849][ T1833] usb 1-1: ucan: probing device on interface #0 [ 1300.213421][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 1300.323116][ T1833] ucan 1-1:0.0: probe with driver ucan failed with error -71 [ 1300.427234][ T1833] usb 1-1: USB disconnect, device number 2 [ 1301.163290][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1301.164283][T17806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3814'. [ 1304.055466][ C0] vkms_vblank_simulate: vblank timer overrun [ 1304.120500][ C0] vkms_vblank_simulate: vblank timer overrun [ 1304.394187][ C0] vkms_vblank_simulate: vblank timer overrun [ 1304.808853][ C0] vkms_vblank_simulate: vblank timer overrun [ 1305.489400][ C0] vkms_vblank_simulate: vblank timer overrun [ 1305.741547][ C0] vkms_vblank_simulate: vblank timer overrun [ 1305.956551][ T1833] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1306.065155][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3827'. [ 1306.370174][ T1833] usb 3-1: Using ep0 maxpacket: 32 [ 1306.372267][ T1833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.372300][ T1833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.372323][ T1833] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1306.372336][ T1833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.375932][ T1833] usb 3-1: config 0 descriptor?? [ 1306.379082][ T1833] hub 3-1:0.0: USB hub found [ 1307.284215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.325739][ T1833] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 1307.389649][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3831'. [ 1307.421679][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3831'. [ 1307.537613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1307.560748][ T1833] usbhid 3-1:0.0: can't add hid device: -71 [ 1307.560861][ T1833] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1307.615913][ T1833] usb 3-1: USB disconnect, device number 14 [ 1307.852892][ C0] vkms_vblank_simulate: vblank timer overrun [ 1309.436955][T17873] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3837'. [ 1309.487411][T17875] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3837'. [ 1310.672343][T17885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 1312.151606][T17894] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1312.151648][T17894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1314.966433][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3846'. [ 1314.967361][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3846'. [ 1316.143062][T17917] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1316.208192][T17921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1319.624936][T17944] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3860'. [ 1320.088236][T17947] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1320.088284][T17947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1320.417702][T17957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1320.420017][T17957] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3865'. [ 1322.506800][T17970] fuse: Bad value for 'fd' [ 1323.847826][T17983] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3872'. [ 1325.260127][T17990] openvswitch: netlink: nsh attribute has 65535 unknown bytes. [ 1325.260167][T17990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1325.522567][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 1325.602521][T17996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 1327.322579][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 1337.102117][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'. [ 1337.103847][T18088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'. [ 1337.404191][T18094] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3905'. [ 1338.258342][T18102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1338.317334][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3909'. [ 1340.548718][T18125] netlink: 584 bytes leftover after parsing attributes in process `syz.5.3914'. [ 1342.828583][ T44] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1343.145743][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1343.147000][ T44] usb 1-1: not running at top speed; connect to a high speed hub [ 1343.158232][ T44] usb 1-1: config 7 has an invalid interface number: 104 but max is 0 [ 1343.158261][ T44] usb 1-1: config 7 has no interface number 0 [ 1343.158294][ T44] usb 1-1: config 7 interface 104 has no altsetting 0 [ 1343.177565][ T44] usb 1-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=aa.c1 [ 1343.177595][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1343.177615][ T44] usb 1-1: Product: syz [ 1343.177628][ T44] usb 1-1: Manufacturer: syz [ 1343.177643][ T44] usb 1-1: SerialNumber: syz [ 1343.376504][T18145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.778654][ T44] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 1343.778822][ T44] gspca_mr97310a: reg write [21] error -22 [ 1343.778936][ T44] mr97310a 1-1:7.104: probe with driver mr97310a failed with error -22 [ 1343.795883][ T44] usb 1-1: USB disconnect, device number 3 [ 1344.327452][T18152] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3922'. [ 1345.648932][T18162] overlayfs: missing 'lowerdir' [ 1346.497104][T18173] netlink: 584 bytes leftover after parsing attributes in process `syz.3.3927'. [ 1348.413723][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3928'. [ 1348.428343][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3928'. [ 1348.905135][T15150] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1350.704045][T15150] usb 4-1: device descriptor read/64, error -71 [ 1351.612814][T15150] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1355.953104][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3942'. [ 1355.953936][T18219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3942'. [ 1356.400702][T14852] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1356.513494][ C1] vkms_vblank_simulate: vblank timer overrun [ 1356.577871][T14852] usb 1-1: device descriptor read/64, error -71 [ 1356.800990][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.306570][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.341321][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.399602][T14852] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1357.445768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.546768][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.653012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1357.993202][ C1] vkms_vblank_simulate: vblank timer overrun [ 1358.134024][T14852] usb 1-1: device descriptor read/64, error -71 [ 1358.249718][T14852] usb usb1-port1: attempt power cycle [ 1358.424691][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.373119][ C1] vkms_vblank_simulate: vblank timer overrun [ 1359.375393][T14852] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1359.421194][T14852] usb 1-1: device descriptor read/8, error -71 [ 1359.506110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.062608][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.062677][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.548041][ T37] audit: type=1326 audit(1762143042.881:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ef9efc9 code=0x7ffc0000 [ 1362.549918][ T37] audit: type=1326 audit(1762143042.881:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ef9efc9 code=0x7ffc0000 [ 1362.550897][ T37] audit: type=1326 audit(1762143042.881:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd4ef9efc9 code=0x7ffc0000 [ 1362.551378][ T37] audit: type=1326 audit(1762143042.881:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ef9efc9 code=0x7ffc0000 [ 1362.552093][ T37] audit: type=1326 audit(1762143042.881:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ef9efc9 code=0x7ffc0000 [ 1362.552378][ T37] audit: type=1326 audit(1762143042.881:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcd4ef9efc9 code=0x7ffc0000 [ 1362.559006][ T37] audit: type=1326 audit(1762143042.881:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ef9efc9 code=0x7ffc0000 [ 1362.559044][ T37] audit: type=1326 audit(1762143042.881:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ef9efc9 code=0x7ffc0000 [ 1362.559068][ T37] audit: type=1326 audit(1762143042.881:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fcd4ef9efc9 code=0x7ffc0000 [ 1362.564234][ T37] audit: type=1326 audit(1762143042.891:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18263 comm="syz.5.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ef9efc9 code=0x7ffc0000 [ 1364.005750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.108791][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.528195][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.646196][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.894647][ C0] vkms_vblank_simulate: vblank timer overrun [ 1365.412610][T17362] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1365.638777][T17362] usb 6-1: device descriptor read/64, error -71 [ 1365.945010][T17362] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1366.226955][T17362] usb 6-1: device descriptor read/64, error -71 [ 1366.464815][T17362] usb usb6-port1: attempt power cycle [ 1367.394153][T17362] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1367.416324][T17362] usb 6-1: device descriptor read/8, error -71 [ 1367.863920][T17362] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1368.073851][T17362] usb 6-1: device not accepting address 6, error -71 [ 1368.074294][T17362] usb usb6-port1: unable to enumerate USB device [ 1371.296172][ C0] vkms_vblank_simulate: vblank timer overrun [ 1372.858760][T18339] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3978'. [ 1372.995076][ C0] vkms_vblank_simulate: vblank timer overrun [ 1373.180849][T15150] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1373.371163][T15150] usb 1-1: device descriptor read/64, error -71 [ 1373.984610][T15150] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1374.130298][T15150] usb 1-1: device descriptor read/64, error -71 [ 1374.706046][T15150] usb usb1-port1: attempt power cycle [ 1376.309078][ T44] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1376.710169][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 1378.454924][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1378.454981][ T44] usb 5-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1378.455008][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1378.455043][ T44] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1378.455067][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1378.462109][ T44] usb 5-1: config 0 descriptor?? [ 1378.487082][ T44] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1379.064826][ T44] usb 5-1: USB disconnect, device number 5 [ 1379.251856][T18363] syz.2.3985 (18363) used greatest stack depth: 17264 bytes left [ 1379.574173][T14991] IPVS: starting estimator thread 0... [ 1379.658431][T18386] IPVS: using max 9 ests per chain, 21600 per kthread [ 1380.408393][ T5886] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1380.610309][ C0] vkms_vblank_simulate: vblank timer overrun [ 1380.644768][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1380.644802][ T5886] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1380.651970][ T5886] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1380.652000][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.652020][ T5886] usb 5-1: Product: syz [ 1380.652035][ T5886] usb 5-1: Manufacturer: syz [ 1380.652049][ T5886] usb 5-1: SerialNumber: syz [ 1380.772618][ T5886] usb 5-1: config 0 descriptor?? [ 1381.134397][T14991] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1381.246234][T15150] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1381.336190][T14991] usb 3-1: Using ep0 maxpacket: 32 [ 1381.341223][T14991] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1381.341255][T14991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.390841][T14991] usb 3-1: config 0 descriptor?? [ 1381.406022][T15150] usb 4-1: Using ep0 maxpacket: 16 [ 1381.413138][T14991] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1381.413351][T15150] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.413405][T15150] usb 4-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1381.413434][T15150] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1381.413468][T15150] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1381.413492][T15150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1381.721482][T15150] usb 4-1: config 0 descriptor?? [ 1381.753405][T15150] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1382.512987][T14991] gspca_sq930x: ucbus_write failed -71 [ 1382.513086][T14991] sq930x 3-1:0.0: probe with driver sq930x failed with error -71 [ 1382.558694][T14991] usb 3-1: USB disconnect, device number 15 [ 1383.025899][ T5897] usb 5-1: USB disconnect, device number 6 [ 1383.596503][ C0] vkms_vblank_simulate: vblank timer overrun [ 1383.969867][ T5897] usb 4-1: USB disconnect, device number 34 [ 1385.224935][ T5813] Bluetooth: hci4: connection err: -111 [ 1389.282853][T18499] netlink: get zone limit has 4 unknown bytes [ 1390.993819][ T5886] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1391.768515][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 1392.064638][ T5886] usb 6-1: config 0 has an invalid interface number: 66 but max is 0 [ 1392.064670][ T5886] usb 6-1: config 0 has no interface number 0 [ 1392.064706][ T5886] usb 6-1: config 0 interface 66 has no altsetting 0 [ 1392.443022][ T5886] usb 6-1: New USB device found, idVendor=14aa, idProduct=0226, bcdDevice=94.82 [ 1392.443055][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.443077][ T5886] usb 6-1: Product: syz [ 1392.443091][ T5886] usb 6-1: Manufacturer: syz [ 1392.443104][ T5886] usb 6-1: SerialNumber: syz [ 1393.263206][ T5886] usb 6-1: config 0 descriptor?? [ 1393.298213][ T5886] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in warm state. [ 1393.298832][ T5886] dvb-usb: bulk message failed: -22 (2/0) [ 1393.298847][ T5886] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1393.301924][ T5886] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (Typhoon/Freecom)) [ 1393.301985][ T5886] usb 6-1: media controller created [ 1393.327495][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1393.497656][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1393.497691][T18516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4035'. [ 1394.256412][ T5886] usb 6-1: DVB: registering adapter 1 frontend 0 (WideView USB DVB-T)... [ 1394.267826][ T5886] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1394.481887][ T5886] rc_core: IR keymap rc-dtt200u not found [ 1394.481911][ T5886] Registered IR keymap rc-empty [ 1394.486241][ T5886] rc rc0: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 1394.513468][ T5886] input: WideView WT-220U PenType Receiver (Typhoon/Freecom) as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input7 [ 1394.692526][ T5886] dvb-usb: schedule remote query interval to 300 msecs. [ 1394.692558][ T5886] dvb-usb: WideView WT-220U PenType Receiver (Typhoon/Freecom) successfully initialized and connected. [ 1394.724323][ T5886] usb 6-1: USB disconnect, device number 7 [ 1395.049191][T18531] dlm: no local IP address has been set [ 1395.049210][T18531] dlm: cannot start dlm midcomms -107 [ 1396.652859][ T5886] dvb-usb: WideView WT-220U PenType Receiver (Typh successfully deinitialized and disconnected. [ 1397.068685][T18548] netlink: get zone limit has 4 unknown bytes [ 1399.127203][T14991] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1399.469806][T14991] usb 4-1: Using ep0 maxpacket: 32 [ 1399.667812][T15150] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1400.035221][T14991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.035258][T14991] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1400.035300][T14991] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1400.035325][T14991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.069394][T14991] usb 4-1: config 0 descriptor?? [ 1400.073502][T14991] hub 4-1:0.0: USB hub found [ 1400.246479][T15150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.246602][T15150] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1400.246628][T15150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.498220][T15150] usb 5-1: config 0 descriptor?? [ 1400.516994][T15150] pwc: Askey VC010 type 2 USB webcam detected. [ 1400.659999][T18570] evm: overlay not supported [ 1400.665513][T14991] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1400.676178][T18569] fuse: Unknown parameter 'group_i00000000000000000000' [ 1400.921029][T15150] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1400.927386][T15150] pwc: recv_control_msg error -32 req 02 val 2700 [ 1400.930724][T15150] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1400.931852][T15150] pwc: recv_control_msg error -32 req 04 val 1000 [ 1400.934290][T15150] pwc: recv_control_msg error -32 req 04 val 1300 [ 1400.936784][T15150] pwc: recv_control_msg error -32 req 04 val 1400 [ 1400.942539][T15150] pwc: recv_control_msg error -32 req 02 val 2000 [ 1400.947782][T15150] pwc: recv_control_msg error -32 req 02 val 2100 [ 1400.949711][T15150] pwc: recv_control_msg error -32 req 04 val 1500 [ 1400.982705][T14991] usbhid 4-1:0.0: can't add hid device: -71 [ 1400.984152][T14991] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1401.028294][T15150] pwc: recv_control_msg error -32 req 02 val 2500 [ 1401.034246][T15150] pwc: recv_control_msg error -32 req 02 val 2400 [ 1401.035961][T15150] pwc: recv_control_msg error -32 req 02 val 2600 [ 1401.036915][T15150] pwc: recv_control_msg error -32 req 02 val 2900 [ 1401.041545][T15150] pwc: recv_control_msg error -32 req 02 val 2800 [ 1401.167490][T15150] pwc: recv_control_msg error -32 req 04 val 1100 [ 1401.397945][T14991] usb 4-1: USB disconnect, device number 35 [ 1401.457221][T15150] pwc: Registered as video103. [ 1401.646079][T15150] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 1401.764370][T15150] usb 5-1: USB disconnect, device number 7 [ 1402.413829][T14991] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1402.563774][T14991] usb 1-1: Using ep0 maxpacket: 8 [ 1402.566460][T14991] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1402.566488][T14991] usb 1-1: config 0 has no interface number 0 [ 1402.566535][T14991] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1402.566577][T14991] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1402.566600][T14991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.590818][T14991] usb 1-1: config 0 descriptor?? [ 1402.619633][T14991] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1402.673681][T15150] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1402.823678][T15150] usb 5-1: Using ep0 maxpacket: 16 [ 1402.829800][T15150] usb 5-1: config 1 has an invalid interface number: 62 but max is 0 [ 1402.829828][T15150] usb 5-1: config 1 has no interface number 0 [ 1402.829932][T15150] usb 5-1: config 1 interface 62 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.829963][T15150] usb 5-1: config 1 interface 62 altsetting 253 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1402.829986][T15150] usb 5-1: config 1 interface 62 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 0 [ 1402.830010][T15150] usb 5-1: config 1 interface 62 altsetting 253 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1402.830064][T15150] usb 5-1: config 1 interface 62 has no altsetting 0 [ 1402.831515][T15150] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1402.831596][T15150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1402.831611][T15150] usb 5-1: SerialNumber: syz [ 1402.930973][T15150] cdc_acm 5-1:1.62: probe with driver cdc_acm failed with error -12 [ 1403.106622][ T5886] usb 5-1: USB disconnect, device number 8 [ 1403.206010][T18514] usb 1-1: USB disconnect, device number 11 [ 1406.579957][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4061'. [ 1406.604470][T18617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4061'. [ 1406.806259][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 1406.806277][ T37] audit: type=1326 audit(1762143087.156:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18620 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0965d3efc9 code=0x7ffc0000 [ 1406.809447][ T37] audit: type=1326 audit(1762143087.156:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18620 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0965d3efc9 code=0x7ffc0000 [ 1406.809745][ T37] audit: type=1326 audit(1762143087.156:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18620 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0965d3efc9 code=0x7ffc0000 [ 1406.810203][ T37] audit: type=1326 audit(1762143087.156:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18620 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0965d3efc9 code=0x7ffc0000 [ 1406.810807][ T37] audit: type=1326 audit(1762143087.156:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18620 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0965d3efc9 code=0x7ffc0000 [ 1406.822084][ T37] audit: type=1326 audit(1762143087.156:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18620 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0965d3efc9 code=0x7ffc0000 [ 1406.865457][ T37] audit: type=1326 audit(1762143087.217:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18620 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0965d3efc9 code=0x7ffc0000 [ 1406.865514][ T37] audit: type=1326 audit(1762143087.217:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18620 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0965d3efc9 code=0x7ffc0000 [ 1406.891933][ T37] audit: type=1326 audit(1762143087.247:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18620 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0965d3efc9 code=0x7ffc0000 [ 1406.893945][ T37] audit: type=1326 audit(1762143087.247:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18620 comm="syz.4.4065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0965d3efc9 code=0x7ffc0000 [ 1406.905816][T18626] dlm: no local IP address has been set [ 1406.905826][T18626] dlm: cannot start dlm midcomms -107 [ 1407.775290][T18631] tipc: Started in network mode [ 1407.775311][T18631] tipc: Node identity fa1329a6e871, cluster identity 4711 [ 1407.776066][T18631] tipc: Enabled bearer , priority 0 [ 1407.777004][T18631] syzkaller0: entered promiscuous mode [ 1407.777019][T18631] syzkaller0: entered allmulticast mode [ 1407.940592][ T5897] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1408.092193][T18635] tipc: Resetting bearer [ 1408.140283][ T5897] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.140645][T18629] tipc: Resetting bearer [ 1408.140817][ T5897] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1408.140832][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.153866][ T5897] usb 5-1: config 0 descriptor?? [ 1408.291341][ T5897] pwc: Askey VC010 type 2 USB webcam detected. [ 1408.477558][T18629] tipc: Disabling bearer [ 1408.569645][ T5897] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1408.570506][ T5897] pwc: recv_control_msg error -32 req 02 val 2700 [ 1408.571515][ T5897] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1408.572204][ T5897] pwc: recv_control_msg error -32 req 04 val 1000 [ 1408.573187][ T5897] pwc: recv_control_msg error -32 req 04 val 1300 [ 1408.574143][ T5897] pwc: recv_control_msg error -32 req 04 val 1400 [ 1408.574815][ T5897] pwc: recv_control_msg error -32 req 02 val 2000 [ 1408.575795][ T5897] pwc: recv_control_msg error -32 req 02 val 2100 [ 1408.576642][ T5897] pwc: recv_control_msg error -32 req 04 val 1500 [ 1408.577631][ T5897] pwc: recv_control_msg error -32 req 02 val 2500 [ 1408.578301][ T5897] pwc: recv_control_msg error -32 req 02 val 2400 [ 1408.579126][ T5897] pwc: recv_control_msg error -32 req 02 val 2600 [ 1408.580335][ T5897] pwc: recv_control_msg error -32 req 02 val 2900 [ 1408.580994][ T5897] pwc: recv_control_msg error -32 req 02 val 2800 [ 1408.583608][ T5897] pwc: recv_control_msg error -32 req 04 val 1100 [ 1408.584075][ T5897] pwc: recv_control_msg error -71 req 04 val 1200 [ 1408.599086][ T5897] pwc: Registered as video103. [ 1408.604163][ T5897] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 1408.754148][ T5897] usb 5-1: USB disconnect, device number 9 [ 1411.926748][T18649] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4070'. [ 1415.980925][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4083'. [ 1415.985907][ T5886] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1416.015368][T18685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4083'. [ 1416.176154][ T5886] usb 4-1: Using ep0 maxpacket: 32 [ 1416.178619][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.178638][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1416.178664][ T5886] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1416.178677][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.184670][ T5886] usb 4-1: config 0 descriptor?? [ 1416.211204][ T5886] hub 4-1:0.0: USB hub found [ 1416.257681][T18514] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1416.413819][T18514] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1416.415226][T18514] usb 3-1: not running at top speed; connect to a high speed hub [ 1416.418900][T18514] usb 3-1: config 1 has an invalid interface number: 3 but max is 2 [ 1416.418928][T18514] usb 3-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 1416.419055][T18514] usb 3-1: too many endpoints for config 1 interface 3 altsetting 1: 36, using maximum allowed: 30 [ 1416.419258][T18514] usb 3-1: config 1 interface 3 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 1416.419371][T18514] usb 3-1: config 1 interface 3 has no altsetting 0 [ 1416.435770][T18514] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1416.435800][T18514] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.435832][T18514] usb 3-1: Product: syz [ 1416.435847][T18514] usb 3-1: Manufacturer: syz [ 1416.435912][T18514] usb 3-1: SerialNumber: syz [ 1416.482771][ T5886] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1417.421301][T18514] usb 3-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 1417.421331][T18514] usb 3-1: found format II with max.bitrate = 2, frame size=9914 [ 1417.421788][T18514] usb 3-1: 2:1 : unknown format tag 0x2 is detected. processed as MPEG. [ 1417.421810][T18514] usb 3-1: found format II with max.bitrate = 2, frame size=9914 [ 1417.524259][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 1417.524381][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1417.568780][T18514] usb 3-1: 2:1: cannot set freq 16511538 to ep 0x82 [ 1417.615091][ T5886] usb 4-1: USB disconnect, device number 36 [ 1419.001681][T18514] usb 3-1: USB disconnect, device number 16 [ 1419.633742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1419.858671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1420.376478][ C1] vkms_vblank_simulate: vblank timer overrun [ 1420.546387][ C1] vkms_vblank_simulate: vblank timer overrun [ 1420.903661][ C1] vkms_vblank_simulate: vblank timer overrun [ 1422.493295][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.493855][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.042705][T18741] fuse: Bad value for 'user_id' [ 1423.042718][T18741] fuse: Bad value for 'user_id' [ 1423.097754][ T5791] kernel write not supported for file /dsp1 (pid: 5791 comm: kworker/0:3) [ 1424.085797][T18754] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4102'. [ 1424.330220][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.402743][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.495396][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.601892][ C0] vkms_vblank_simulate: vblank timer overrun [ 1425.699966][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.086481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.141134][T18771] Bluetooth: hci0: unsupported parameter 255 [ 1426.141149][T18771] Bluetooth: hci0: unsupported parameter 255 [ 1426.459808][ T5890] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1426.465616][ T5897] libceph: connect (1)[c::]:6789 error -101 [ 1426.465822][ T5897] libceph: mon0 (1)[c::]:6789 connect error [ 1426.544686][T18784] ceph: No mds server is up or the cluster is laggy [ 1426.602143][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.665593][ T5890] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1426.665613][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.665624][ T5890] usb 3-1: Product: syz [ 1426.665632][ T5890] usb 3-1: Manufacturer: syz [ 1426.665639][ T5890] usb 3-1: SerialNumber: syz [ 1426.711636][ T5890] usb 3-1: config 0 descriptor?? [ 1426.818817][T18797] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4118'. [ 1427.027799][ C0] vkms_vblank_simulate: vblank timer overrun [ 1427.284152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1427.923062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.103066][ T5890] usb 3-1: USB disconnect, device number 17 [ 1428.253157][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.519573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.341868][ C0] vkms_vblank_simulate: vblank timer overrun [ 1429.787833][T14991] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1429.928448][T18549] udevd[18549]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1429.979899][T14991] usb 5-1: Using ep0 maxpacket: 16 [ 1429.987942][T14991] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1429.987975][T14991] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1429.988009][T14991] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1429.988032][T14991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.103049][T14991] usb 5-1: config 0 descriptor?? [ 1430.717579][T14991] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1431.013760][T14991] usb 5-1: USB disconnect, device number 10 [ 1431.127563][T18829] fido_id[18829]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1434.977235][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.029659][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.055699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.105616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.351495][ C0] vkms_vblank_simulate: vblank timer overrun [ 1435.375232][ C0] vkms_vblank_simulate: vblank timer overrun [ 1441.939665][T14611] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1442.301259][T14611] usb 5-1: Using ep0 maxpacket: 16 [ 1442.612176][T14611] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1442.612210][T14611] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1442.612235][T14611] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1442.612271][T14611] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1442.612295][T14611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.770998][T14611] usb 5-1: config 0 descriptor?? [ 1443.220634][T14611] nzxt-smart2 0003:1E71:2009.000D: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1443.809489][T18923] fuse: Bad value for 'fd' [ 1443.811267][ T44] usb 5-1: USB disconnect, device number 11 [ 1444.260413][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4157'. [ 1444.262282][T18932] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4157'. [ 1446.783446][T18952] fuse: Bad value for 'fd' [ 1448.367742][T18965] Device name cannot be null; rc = [-22] [ 1450.046934][T18978] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 1451.317883][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4178'. [ 1451.335473][T18986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4178'. [ 1453.099086][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.235776][ C1] vkms_vblank_simulate: vblank timer overrun [ 1453.271354][T18997] dlm: no local IP address has been set [ 1453.271369][T18997] dlm: cannot start dlm midcomms -107 [ 1453.507934][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 1453.633115][T19008] input: syz1 as /devices/virtual/input/input10 [ 1454.894111][T14611] libceph: connect (1)[c::]:6789 error -101 [ 1454.899761][T14611] libceph: mon0 (1)[c::]:6789 connect error [ 1455.123373][T14611] libceph: connect (1)[c::]:6789 error -101 [ 1455.157366][T14611] libceph: mon0 (1)[c::]:6789 connect error [ 1455.419003][T14852] libceph: connect (1)[c::]:6789 error -101 [ 1455.569207][ T61] Bluetooth: hci1: command 0x1003 tx timeout [ 1455.582188][ T5813] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1455.939700][T14852] libceph: mon0 (1)[c::]:6789 connect error [ 1456.684670][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 1456.689605][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 1458.816684][T19008] ceph: No mds server is up or the cluster is laggy [ 1458.891413][ T5890] libceph: connect (1)[c::]:6789 error -101 [ 1458.891630][ T5890] libceph: mon0 (1)[c::]:6789 connect error [ 1459.008851][T14611] libceph: connect (1)[c::]:6789 error -101 [ 1459.009069][T14611] libceph: mon0 (1)[c::]:6789 connect error [ 1459.861239][T14937] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1460.010352][T14937] usb 1-1: Using ep0 maxpacket: 8 [ 1460.013188][T14937] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1460.013218][T14937] usb 1-1: config 0 has no interface number 0 [ 1460.013274][T14937] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1460.013319][T14937] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1460.013342][T14937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1460.018952][T14937] usb 1-1: config 0 descriptor?? [ 1460.079012][T14937] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1460.525884][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4191'. [ 1460.528025][T19028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4191'. [ 1464.679195][T19053] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 1465.223966][T19057] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4199'. [ 1465.360002][ T5886] usb 1-1: USB disconnect, device number 12 [ 1465.785017][T19069] dlm: no local IP address has been set [ 1465.785028][T19069] dlm: cannot start dlm midcomms -107 [ 1466.960491][ T1177] Bluetooth: hci1: Frame reassembly failed (-84) [ 1468.440938][ T5813] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1474.105100][ C1] vkms_vblank_simulate: vblank timer overrun [ 1475.476053][ C1] vkms_vblank_simulate: vblank timer overrun [ 1477.929890][T14611] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1477.989183][T19113] fuse: Bad value for 'fd' [ 1478.060098][T19114] comedi comedi0: fl512: I/O port conflict (0xa,16) [ 1478.089860][T14611] usb 4-1: Using ep0 maxpacket: 8 [ 1478.093521][T14611] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1478.093549][T14611] usb 4-1: config 0 has no interface number 0 [ 1478.093600][T14611] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1478.093642][T14611] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1478.093663][T14611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.366857][T14611] usb 4-1: config 0 descriptor?? [ 1480.509755][T14611] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1480.514735][T14611] usb 4-1: USB disconnect, device number 37 [ 1483.880770][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.880825][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.902068][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.048087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.651734][ C1] vkms_vblank_simulate: vblank timer overrun [ 1493.351521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1493.658780][ C1] vkms_vblank_simulate: vblank timer overrun [ 1494.365644][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.767868][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1495.785816][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1495.787266][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1495.807424][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1495.817045][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1496.192032][T14611] libceph: connect (1)[c::]:6789 error -101 [ 1496.192232][T14611] libceph: mon0 (1)[c::]:6789 connect error [ 1496.225708][T19201] ceph: No mds server is up or the cluster is laggy [ 1496.344801][ C1] vkms_vblank_simulate: vblank timer overrun [ 1496.679016][ T5890] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1497.872218][ T5813] Bluetooth: hci1: command tx timeout [ 1498.039114][ C1] vkms_vblank_simulate: vblank timer overrun [ 1498.046521][ T5890] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1498.046550][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.102031][ T5890] usb 4-1: config 0 descriptor?? [ 1498.128354][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4247'. [ 1498.152578][T19218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4247'. [ 1498.263569][ C1] vkms_vblank_simulate: vblank timer overrun [ 1498.435311][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1498.464821][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1498.479922][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1498.483130][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1498.512940][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1498.568339][ T5890] usbhid 4-1:0.0: can't add hid device: -71 [ 1498.568467][ T5890] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1498.605749][ T5890] usb 4-1: USB disconnect, device number 38 [ 1498.796453][T19196] lo speed is unknown, defaulting to 1000 [ 1499.054218][ C1] vkms_vblank_simulate: vblank timer overrun [ 1499.680551][T16024] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.947188][ T61] Bluetooth: hci1: command tx timeout [ 1500.375700][T16024] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.574821][T19221] lo speed is unknown, defaulting to 1000 [ 1500.657989][ T61] Bluetooth: hci2: command tx timeout [ 1500.748559][ C1] vkms_vblank_simulate: vblank timer overrun [ 1500.852403][T16024] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1501.943253][ C1] vkms_vblank_simulate: vblank timer overrun [ 1502.731514][ C1] vkms_vblank_simulate: vblank timer overrun [ 1502.733952][ T61] Bluetooth: hci1: command tx timeout [ 1502.735516][ T61] Bluetooth: hci2: command tx timeout [ 1502.804931][T16024] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.843879][ C1] vkms_vblank_simulate: vblank timer overrun [ 1503.348629][ C1] vkms_vblank_simulate: vblank timer overrun [ 1504.673634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1504.823281][ C1] vkms_vblank_simulate: vblank timer overrun [ 1504.925396][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.132199][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.156222][ T61] Bluetooth: hci1: command tx timeout [ 1505.156349][ T61] Bluetooth: hci2: command tx timeout [ 1505.282993][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.302618][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.476200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.668620][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.736019][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.010832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.132774][T19196] chnl_net:caif_netlink_parms(): no params data found [ 1507.138868][ C1] vkms_vblank_simulate: vblank timer overrun [ 1507.213147][ T5813] Bluetooth: hci2: command tx timeout [ 1508.304598][T19221] chnl_net:caif_netlink_parms(): no params data found [ 1508.309489][T16024] bridge_slave_1: left allmulticast mode [ 1508.309508][T16024] bridge_slave_1: left promiscuous mode [ 1508.309662][T16024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1508.534656][T16024] bridge_slave_0: left allmulticast mode [ 1508.534676][T16024] bridge_slave_0: left promiscuous mode [ 1508.534843][T16024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.469601][ C0] vkms_vblank_simulate: vblank timer overrun [ 1510.848852][ C0] vkms_vblank_simulate: vblank timer overrun [ 1510.957044][ C0] vkms_vblank_simulate: vblank timer overrun [ 1511.046403][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.067774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.768349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.962173][ C0] vkms_vblank_simulate: vblank timer overrun [ 1513.053610][ C0] vkms_vblank_simulate: vblank timer overrun [ 1513.144527][ C0] vkms_vblank_simulate: vblank timer overrun [ 1513.203443][ C0] vkms_vblank_simulate: vblank timer overrun [ 1513.472720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1513.578545][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.098149][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.248209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1515.535748][ T5791] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 1515.690124][ T5791] usb 5-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1515.690156][ T5791] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1515.693326][ T5791] usb 5-1: config 0 descriptor?? [ 1515.947964][T16024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1516.009054][T16024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1516.060841][T16024] bond0 (unregistering): Released all slaves [ 1516.114289][ T5791] usbhid 5-1:0.0: can't add hid device: -71 [ 1516.114426][ T5791] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1516.121477][ T5791] usb 5-1: USB disconnect, device number 12 [ 1516.462315][T19343] binfmt_misc: register: failed to install interpreter file ./file0 [ 1516.583975][T19345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1518.107836][T19196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1518.107983][T19196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.108262][T19196] bridge_slave_0: entered allmulticast mode [ 1518.167694][T19196] bridge_slave_0: entered promiscuous mode [ 1518.240332][T19196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.240471][T19196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.240739][T19196] bridge_slave_1: entered allmulticast mode [ 1518.243733][T19196] bridge_slave_1: entered promiscuous mode [ 1518.986179][T14611] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1519.136130][T14611] usb 6-1: Using ep0 maxpacket: 16 [ 1519.138700][T14611] usb 6-1: config 1 has an invalid interface number: 62 but max is 0 [ 1519.138716][T14611] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.138727][T14611] usb 6-1: config 1 has no interface number 0 [ 1519.138754][T14611] usb 6-1: config 1 interface 62 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 1519.138770][T14611] usb 6-1: config 1 interface 62 has no altsetting 0 [ 1519.139802][T14611] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1519.139818][T14611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1519.139829][T14611] usb 6-1: SerialNumber: syz [ 1519.243864][T14611] cdc_acm 6-1:1.62: skipping garbage [ 1519.452828][ T5791] usb 6-1: USB disconnect, device number 8 [ 1519.585489][ C0] vkms_vblank_simulate: vblank timer overrun [ 1519.603386][T19196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1519.940035][T19376] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1520.154264][T14611] lo speed is unknown, defaulting to 1000 [ 1520.159147][T19196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1520.343710][ C0] vkms_vblank_simulate: vblank timer overrun [ 1520.379347][ C0] vkms_vblank_simulate: vblank timer overrun [ 1520.595088][ C0] vkms_vblank_simulate: vblank timer overrun [ 1520.628504][T19221] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.629845][T19221] bridge0: port 1(bridge_slave_0) entered disabled state [ 1520.715858][T19221] bridge_slave_0: entered allmulticast mode [ 1520.718799][T19221] bridge_slave_0: entered promiscuous mode [ 1521.246343][T19221] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.246469][T19221] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.246702][T19221] bridge_slave_1: entered allmulticast mode [ 1521.258562][T19221] bridge_slave_1: entered promiscuous mode [ 1521.605539][T16024] hsr_slave_0: left promiscuous mode [ 1521.675014][T16024] hsr_slave_1: left promiscuous mode [ 1521.676110][T16024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1521.676135][T16024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1521.760569][T16024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1521.760599][T16024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.072551][T16024] veth1_macvtap: left promiscuous mode [ 1522.072660][T16024] veth0_macvtap: left promiscuous mode [ 1522.072933][T16024] veth1_vlan: left promiscuous mode [ 1522.073113][T16024] veth0_vlan: left promiscuous mode [ 1523.507168][ C0] vkms_vblank_simulate: vblank timer overrun [ 1523.968468][ C0] vkms_vblank_simulate: vblank timer overrun [ 1524.150783][T19405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1524.384633][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.163485][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.411188][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.595186][ C0] vkms_vblank_simulate: vblank timer overrun [ 1525.614771][ T5897] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 1526.204292][ T5897] usb 6-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1526.204325][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.223567][ T5897] usb 6-1: config 0 descriptor?? [ 1526.680906][ T5897] usbhid 6-1:0.0: can't add hid device: -71 [ 1526.681019][ T5897] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1526.716558][ T5897] usb 6-1: USB disconnect, device number 9 [ 1527.373795][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.423992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.484566][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.531891][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.595155][ C0] vkms_vblank_simulate: vblank timer overrun [ 1527.931931][T16024] team0 (unregistering): Port device team_slave_1 removed [ 1528.203150][T16024] team0 (unregistering): Port device team_slave_0 removed [ 1532.279924][T19196] team0: Port device team_slave_0 added [ 1532.457773][T19196] team0: Port device team_slave_1 added [ 1533.506781][T19221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1534.221173][T19221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1535.539206][T19196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1535.539222][T19196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.539257][T19196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1535.910738][T19196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1535.910754][T19196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1535.910777][T19196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1535.916041][T19221] team0: Port device team_slave_0 added [ 1536.204066][T19221] team0: Port device team_slave_1 added [ 1539.613854][T19221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1539.613869][T19221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1539.613893][T19221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1540.411111][T19196] hsr_slave_0: entered promiscuous mode [ 1540.412540][T19196] hsr_slave_1: entered promiscuous mode [ 1540.425073][T19196] debugfs: 'hsr0' already exists in 'hsr' [ 1540.425101][T19196] Cannot create hsr debugfs directory [ 1540.590219][T19221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1540.590236][T19221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1540.590263][T19221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.872194][T14991] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1544.027094][T14991] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.027155][T14991] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1544.027179][T14991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.043290][T14991] usb 6-1: config 0 descriptor?? [ 1544.059037][T14991] pwc: Askey VC010 type 2 USB webcam detected. [ 1544.287070][T19221] hsr_slave_0: entered promiscuous mode [ 1544.315204][T19221] hsr_slave_1: entered promiscuous mode [ 1544.319086][T19221] debugfs: 'hsr0' already exists in 'hsr' [ 1544.319113][T19221] Cannot create hsr debugfs directory [ 1544.464397][T14991] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1544.465456][T14991] pwc: recv_control_msg error -32 req 02 val 2700 [ 1544.466470][T14991] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1544.467702][T14991] pwc: recv_control_msg error -32 req 04 val 1000 [ 1544.473464][T14991] pwc: recv_control_msg error -32 req 04 val 1300 [ 1544.474323][T14991] pwc: recv_control_msg error -32 req 04 val 1400 [ 1544.475288][T14991] pwc: recv_control_msg error -32 req 02 val 2000 [ 1544.475941][T14991] pwc: recv_control_msg error -32 req 02 val 2100 [ 1544.477371][T14991] pwc: recv_control_msg error -32 req 04 val 1500 [ 1544.479824][T14991] pwc: recv_control_msg error -32 req 02 val 2500 [ 1544.488555][T14991] pwc: recv_control_msg error -32 req 02 val 2400 [ 1544.490332][T14991] pwc: recv_control_msg error -32 req 02 val 2600 [ 1544.493118][T14991] pwc: recv_control_msg error -32 req 02 val 2900 [ 1544.511579][T14991] pwc: recv_control_msg error -32 req 02 val 2800 [ 1544.710454][ T5813] Bluetooth: hci4: connection err: -111 [ 1544.716190][T14991] pwc: recv_control_msg error -71 req 04 val 1200 [ 1544.782451][T14991] pwc: Registered as video103. [ 1544.799982][T14991] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11 [ 1544.873451][T14991] usb 6-1: USB disconnect, device number 10 [ 1545.886137][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.886211][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.790347][T19550] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4337'. [ 1547.239777][T14852] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1547.433413][T14852] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1547.433440][T14852] usb 5-1: config 0 has no interface number 0 [ 1547.433497][T14852] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.433524][T14852] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.433561][T14852] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1547.433583][T14852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.811957][T14852] usb 5-1: config 0 descriptor?? [ 1548.145476][T16024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.268517][T14852] prodikeys 0003:041E:2801.000E: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 1548.296811][T14852] hid_prodikeys: hid-prodikeys: failed to find output report [ 1548.296811][T14852] [ 1548.347449][ T5813] Bluetooth: hci2: link tx timeout [ 1548.347920][ T5813] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1548.449096][ T5897] usb 5-1: USB disconnect, device number 13 [ 1548.644410][T19575] 9pnet_fd: Insufficient options for proto=fd [ 1548.648562][T16024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.184943][T16024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1549.858268][ T5897] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1550.048052][ T5897] usb 5-1: Using ep0 maxpacket: 32 [ 1550.062142][ T5897] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 1550.062169][ T5897] usb 5-1: config 0 has no interface number 0 [ 1550.062202][ T5897] usb 5-1: config 0 interface 182 has no altsetting 0 [ 1550.065768][ T5897] usb 5-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1550.065795][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.065816][ T5897] usb 5-1: Product: syz [ 1550.065830][ T5897] usb 5-1: Manufacturer: syz [ 1550.065844][ T5897] usb 5-1: SerialNumber: syz [ 1550.086738][ T5897] usb 5-1: config 0 descriptor?? [ 1550.129957][T16024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.150747][ T5897] hub 5-1:0.182: bad descriptor, ignoring hub [ 1550.150787][ T5897] hub 5-1:0.182: probe with driver hub failed with error -5 [ 1550.388561][ T5813] Bluetooth: hci2: command 0x0406 tx timeout [ 1550.443052][ T5897] kaweth 5-1:0.182: Firmware present in device. [ 1550.592782][ T5897] kaweth 5-1:0.182: Statistics collection: 0 [ 1550.592804][ T5897] kaweth 5-1:0.182: Multicast filter limit: 0 [ 1550.592815][ T5897] kaweth 5-1:0.182: MTU: 0 [ 1550.592823][ T5897] kaweth 5-1:0.182: Read MAC address 00:00:00:00:00:00 [ 1551.572742][T19196] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1551.618768][ T5897] kaweth 5-1:0.182: Error setting receive filter [ 1551.618943][ T5897] kaweth 5-1:0.182: probe with driver kaweth failed with error -5 [ 1551.626985][T19196] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1551.662314][ T5897] usb 5-1: USB disconnect, device number 14 [ 1551.747890][T19196] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1551.849103][T19196] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1552.606807][T16024] bridge_slave_1: left allmulticast mode [ 1552.606836][T16024] bridge_slave_1: left promiscuous mode [ 1552.607114][T16024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.661815][T19625] 9pnet_fd: Insufficient options for proto=fd [ 1552.678313][T16024] bridge_slave_0: left allmulticast mode [ 1552.678342][T16024] bridge_slave_0: left promiscuous mode [ 1552.678614][T16024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1553.176241][T14991] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1558.395697][T14991] usb 4-1: device descriptor read/64, error -110 [ 1558.681946][T14991] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1558.912957][T14991] usb 4-1: device descriptor read/64, error -32 [ 1559.048734][T14991] usb usb4-port1: attempt power cycle [ 1560.650746][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1560.675334][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1560.676864][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1560.678318][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1560.679833][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1560.850554][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1560.872650][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1560.878240][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1560.880234][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1560.881590][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1561.846238][T19674] 9pnet_fd: Insufficient options for proto=fd [ 1562.788917][ T5813] Bluetooth: hci3: command tx timeout [ 1562.950598][T14611] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1563.135186][T14611] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1563.135214][T14611] usb 6-1: config 0 has no interface number 0 [ 1563.135259][T14611] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1563.135282][T14611] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1563.135305][T14611] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1563.135317][T14611] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.138415][T14611] usb 6-1: config 0 descriptor?? [ 1563.400988][T16024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1563.465157][T16024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1563.503460][T16024] bond0 (unregistering): Released all slaves [ 1563.670659][T14611] usbhid 6-1:0.1: can't add hid device: -71 [ 1563.670774][T14611] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1563.694670][T14611] usb 6-1: USB disconnect, device number 11 [ 1563.902497][ T5813] Bluetooth: hci6: command tx timeout [ 1564.879124][ T5813] Bluetooth: hci3: command tx timeout [ 1565.428241][ C0] vkms_vblank_simulate: vblank timer overrun [ 1565.941817][T14991] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1566.178706][ T5813] Bluetooth: hci6: command tx timeout [ 1566.209992][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.409166][T16024] tipc: Left network mode [ 1566.417929][T19672] lo speed is unknown, defaulting to 1000 [ 1566.448609][T14991] usb 4-1: Using ep0 maxpacket: 32 [ 1566.450912][T14991] usb 4-1: config 0 has an invalid interface number: 182 but max is 0 [ 1566.450937][T14991] usb 4-1: config 0 has no interface number 0 [ 1566.450976][T14991] usb 4-1: config 0 interface 182 has no altsetting 0 [ 1566.454028][T14991] usb 4-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1566.454057][T14991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.454077][T14991] usb 4-1: Product: syz [ 1566.454092][T14991] usb 4-1: Manufacturer: syz [ 1566.454108][T14991] usb 4-1: SerialNumber: syz [ 1566.659770][T19670] lo speed is unknown, defaulting to 1000 [ 1566.771073][T14991] usb 4-1: config 0 descriptor?? [ 1566.851573][T14991] hub 4-1:0.182: bad descriptor, ignoring hub [ 1566.851616][T14991] hub 4-1:0.182: probe with driver hub failed with error -5 [ 1566.939823][ T5813] Bluetooth: hci3: command tx timeout [ 1567.067266][T14991] kaweth 4-1:0.182: Firmware present in device. [ 1567.208336][T14991] kaweth 4-1:0.182: Statistics collection: 0 [ 1567.208360][T14991] kaweth 4-1:0.182: Multicast filter limit: 0 [ 1567.208376][T14991] kaweth 4-1:0.182: MTU: 0 [ 1567.208389][T14991] kaweth 4-1:0.182: Read MAC address 00:00:00:00:00:00 [ 1567.858791][T14991] kaweth 4-1:0.182: Error setting receive filter [ 1567.859075][T14991] kaweth 4-1:0.182: probe with driver kaweth failed with error -5 [ 1567.932166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.958751][T14991] usb 4-1: USB disconnect, device number 42 [ 1568.125475][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.216505][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.618844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.622676][ T5813] Bluetooth: hci6: command tx timeout [ 1569.017207][ T5813] Bluetooth: hci3: command tx timeout [ 1569.027250][T18514] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1569.177802][T18514] usb 6-1: Using ep0 maxpacket: 16 [ 1569.180937][T18514] usb 6-1: config 3 has an invalid interface number: 155 but max is 0 [ 1569.180965][T18514] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.180986][T18514] usb 6-1: config 3 has no interface number 0 [ 1569.181018][T18514] usb 6-1: config 3 interface 155 has no altsetting 0 [ 1569.183926][T18514] usb 6-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 1569.183956][T18514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.183978][T18514] usb 6-1: Product: syz [ 1569.183993][T18514] usb 6-1: Manufacturer: syz [ 1569.184008][T18514] usb 6-1: SerialNumber: syz [ 1569.450172][T18514] uvcvideo 6-1:3.155: Found UVC 0.00 device syz (05a9:264a) [ 1569.450235][T18514] uvcvideo 6-1:3.155: No valid video chain found. [ 1569.457834][T18514] usb 6-1: USB disconnect, device number 12 [ 1570.696835][ T5813] Bluetooth: hci6: command tx timeout [ 1572.285490][T16024] hsr_slave_0: left promiscuous mode [ 1572.319848][T16024] hsr_slave_1: left promiscuous mode [ 1572.320899][T16024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1572.320923][T16024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1572.398907][T16024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1572.398936][T16024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1572.650762][T16024] veth1_macvtap: left promiscuous mode [ 1572.650883][T16024] veth0_macvtap: left promiscuous mode [ 1572.651153][T16024] veth1_vlan: left promiscuous mode [ 1572.651350][T16024] veth0_vlan: left promiscuous mode [ 1576.278087][T14852] libceph: connect (1)[c::]:6789 error -101 [ 1576.278292][T14852] libceph: mon0 (1)[c::]:6789 connect error [ 1576.285803][T14852] libceph: connect (1)[c::]:6789 error -101 [ 1576.286010][T14852] libceph: mon0 (1)[c::]:6789 connect error [ 1576.447797][T19781] ceph: No mds server is up or the cluster is laggy [ 1576.554769][T14852] libceph: connect (1)[c::]:6789 error -101 [ 1576.574648][T14852] libceph: mon0 (1)[c::]:6789 connect error [ 1577.300475][T19790] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4390'. [ 1579.271794][T16024] team0 (unregistering): Port device team_slave_1 removed [ 1579.511643][T16024] team0 (unregistering): Port device team_slave_0 removed [ 1582.339918][T19788] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4387'. [ 1582.788220][T19672] chnl_net:caif_netlink_parms(): no params data found [ 1582.816528][T19670] chnl_net:caif_netlink_parms(): no params data found [ 1586.870795][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1586.871001][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1587.032721][T19828] ceph: No mds server is up or the cluster is laggy [ 1588.506905][T19843] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4400'. [ 1588.879585][T19847] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4401'. [ 1589.298119][T19672] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.298276][T19672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.298553][T19672] bridge_slave_0: entered allmulticast mode [ 1589.301544][T19672] bridge_slave_0: entered promiscuous mode [ 1589.306036][T19670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1589.306173][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.306418][T19670] bridge_slave_0: entered allmulticast mode [ 1589.314823][T19670] bridge_slave_0: entered promiscuous mode [ 1589.663300][T19672] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.678704][T19672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.710545][T19672] bridge_slave_1: entered allmulticast mode [ 1589.818239][T19672] bridge_slave_1: entered promiscuous mode [ 1589.821826][T19670] bridge0: port 2(bridge_slave_1) entered blocking state [ 1589.821980][T19670] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.822199][T19670] bridge_slave_1: entered allmulticast mode [ 1589.855488][T19670] bridge_slave_1: entered promiscuous mode [ 1591.193585][T19672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.228458][T19670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1591.231849][T19672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.272346][T19670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1591.374266][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1591.524178][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1591.526823][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1591.526855][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1591.526896][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1591.526920][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.614433][ T10] usb 5-1: config 0 descriptor?? [ 1591.637854][ T10] hub 5-1:0.0: USB hub found [ 1591.854006][ T10] hub 5-1:0.0: 1 port detected [ 1593.071006][T16024] IPVS: stop unused estimator thread 0... [ 1593.127771][ T10] hub 5-1:0.0: activate --> -90 [ 1593.200469][T19672] team0: Port device team_slave_0 added [ 1593.207959][T19670] team0: Port device team_slave_0 added [ 1593.232245][T19672] team0: Port device team_slave_1 added [ 1593.236244][T19670] team0: Port device team_slave_1 added [ 1593.328922][ T10] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 1593.343291][ T10] usb 5-1: Failed to suspend device, error -71 [ 1593.345590][ T5886] usb 5-1: USB disconnect, device number 15 [ 1593.581249][T19903] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4413'. [ 1593.655513][T19672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.655525][T19672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.655540][T19672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.657396][T19670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1593.657409][T19670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.657431][T19670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1593.659289][T19672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.659302][T19672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.659327][T19672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1593.661089][T19670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1593.661101][T19670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1593.661126][T19670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.045534][T19909] 9pnet_fd: Insufficient options for proto=fd [ 1594.598359][ T5886] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1594.752466][ T5886] usb 5-1: Using ep0 maxpacket: 32 [ 1594.755405][ T5886] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 1594.755432][ T5886] usb 5-1: config 0 has no interface number 0 [ 1594.755467][ T5886] usb 5-1: config 0 interface 182 has no altsetting 0 [ 1594.759121][ T5886] usb 5-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1594.759150][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1594.759171][ T5886] usb 5-1: Product: syz [ 1594.759186][ T5886] usb 5-1: Manufacturer: syz [ 1594.759200][ T5886] usb 5-1: SerialNumber: syz [ 1594.786201][ T5886] usb 5-1: config 0 descriptor?? [ 1594.790531][ T5886] hub 5-1:0.182: bad descriptor, ignoring hub [ 1594.790567][ T5886] hub 5-1:0.182: probe with driver hub failed with error -5 [ 1595.066093][ T5886] kaweth 5-1:0.182: Firmware present in device. [ 1595.222632][ T5886] kaweth 5-1:0.182: Error reading configuration (-32), no net device created [ 1595.222901][ T5886] kaweth 5-1:0.182: probe with driver kaweth failed with error -5 [ 1595.263746][T19672] hsr_slave_0: entered promiscuous mode [ 1595.265359][T19672] hsr_slave_1: entered promiscuous mode [ 1595.266427][T19672] debugfs: 'hsr0' already exists in 'hsr' [ 1595.266450][T19672] Cannot create hsr debugfs directory [ 1595.295335][T19670] hsr_slave_0: entered promiscuous mode [ 1595.303937][T19670] hsr_slave_1: entered promiscuous mode [ 1595.305064][T19670] debugfs: 'hsr0' already exists in 'hsr' [ 1595.305087][T19670] Cannot create hsr debugfs directory [ 1595.421882][ T5897] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1595.575357][ T5897] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1595.575394][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.602128][ T5897] usb 4-1: config 0 descriptor?? [ 1596.015372][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 1596.016261][ T5897] usbhid 4-1:0.0: can't add hid device: -71 [ 1596.016402][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1596.063515][ T5897] usb 4-1: USB disconnect, device number 43 [ 1597.471101][ T10] usb 5-1: USB disconnect, device number 16 [ 1597.928926][T19950] 9pnet_fd: Insufficient options for proto=fd [ 1597.980602][T18514] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1598.130507][T18514] usb 6-1: Using ep0 maxpacket: 16 [ 1598.132971][T18514] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1598.133004][T18514] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1598.133037][T18514] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1598.133061][T18514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.145609][T18514] usb 6-1: config 0 descriptor?? [ 1598.646789][T18514] hid_parser_main: 1260 callbacks suppressed [ 1598.646813][T18514] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 1598.646845][T18514] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 1598.646874][T18514] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 1598.646901][T18514] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 1598.646927][T18514] nzxt-smart2 0003:1E71:2009.000F: unknown main item tag 0x0 [ 1598.701465][T18514] nzxt-smart2 0003:1E71:2009.000F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 1598.992365][ C1] usb 6-1: input irq status -75 received [ 1599.248224][ T10] usb 6-1: USB disconnect, device number 13 [ 1599.486334][T19971] fido_id[19971]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1601.019500][T16024] bridge_slave_1: left allmulticast mode [ 1601.019531][T16024] bridge_slave_1: left promiscuous mode [ 1601.019816][T16024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.898167][T19643] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1602.048077][T19643] usb 5-1: Using ep0 maxpacket: 32 [ 1602.050816][T19643] usb 5-1: config 0 has an invalid interface number: 182 but max is 0 [ 1602.050843][T19643] usb 5-1: config 0 has no interface number 0 [ 1602.050883][T19643] usb 5-1: config 0 interface 182 has no altsetting 0 [ 1602.054474][T19643] usb 5-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1602.054502][T19643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.054523][T19643] usb 5-1: Product: syz [ 1602.054538][T19643] usb 5-1: Manufacturer: syz [ 1602.054553][T19643] usb 5-1: SerialNumber: syz [ 1602.130528][T19643] usb 5-1: config 0 descriptor?? [ 1602.133867][T19643] hub 5-1:0.182: bad descriptor, ignoring hub [ 1602.133907][T19643] hub 5-1:0.182: probe with driver hub failed with error -5 [ 1602.262784][T16024] bridge_slave_0: left allmulticast mode [ 1602.262813][T16024] bridge_slave_0: left promiscuous mode [ 1602.264279][T16024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1602.378055][T19643] kaweth 5-1:0.182: Firmware present in device. [ 1602.568786][T19643] kaweth 5-1:0.182: Error reading configuration (-32), no net device created [ 1602.569071][T19643] kaweth 5-1:0.182: probe with driver kaweth failed with error -5 [ 1603.144398][T16024] bridge_slave_1: left allmulticast mode [ 1603.144520][T16024] bridge_slave_1: left promiscuous mode [ 1603.144771][T16024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1603.498604][T20000] binfmt_misc: register: failed to install interpreter file ./file0 [ 1603.683941][T16024] bridge_slave_0: left allmulticast mode [ 1603.683971][T16024] bridge_slave_0: left promiscuous mode [ 1603.684217][T16024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1604.747288][T14852] usb 5-1: USB disconnect, device number 17 [ 1605.117186][T16024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1605.166269][T19643] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1605.207137][T16024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1605.270968][T16024] bond0 (unregistering): Released all slaves [ 1605.339694][T19643] usb 5-1: Using ep0 maxpacket: 16 [ 1605.342047][T19643] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.342081][T19643] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1605.342103][T19643] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1605.342115][T19643] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.357266][T19643] usb 5-1: config 0 descriptor?? [ 1605.803393][T19643] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 1605.803433][T19643] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 1605.803460][T19643] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 1605.803486][T19643] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 1605.803512][T19643] nzxt-smart2 0003:1E71:2009.0010: unknown main item tag 0x0 [ 1605.812044][T19643] nzxt-smart2 0003:1E71:2009.0010: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1605.854145][T16024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1606.317321][ C0] usb 5-1: input irq status -75 received [ 1606.537823][T16024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1606.632939][T19643] usb 5-1: USB disconnect, device number 18 [ 1606.681511][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.681584][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.167801][T14852] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1607.392602][T16024] bond0 (unregistering): Released all slaves [ 1607.527763][T14852] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1607.527795][T14852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.534323][T14852] usb 4-1: config 0 descriptor?? [ 1608.232710][T14852] usbhid 4-1:0.0: can't add hid device: -71 [ 1608.232846][T14852] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1608.258952][T14852] usb 4-1: USB disconnect, device number 44 [ 1609.143933][ T5886] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1609.314946][ T5886] usb 6-1: Using ep0 maxpacket: 32 [ 1609.317547][ T5886] usb 6-1: config 0 has an invalid interface number: 182 but max is 0 [ 1609.317571][ T5886] usb 6-1: config 0 has no interface number 0 [ 1609.317606][ T5886] usb 6-1: config 0 interface 182 has no altsetting 0 [ 1609.390493][T16024] hsr_slave_0: left promiscuous mode [ 1609.396422][ T5886] usb 6-1: New USB device found, idVendor=05e9, idProduct=0009, bcdDevice=73.db [ 1609.396451][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.396469][ T5886] usb 6-1: Product: syz [ 1609.396478][ T5886] usb 6-1: Manufacturer: syz [ 1609.396486][ T5886] usb 6-1: SerialNumber: syz [ 1609.426309][ T5886] usb 6-1: config 0 descriptor?? [ 1609.453971][T16024] hsr_slave_1: left promiscuous mode [ 1609.454738][T16024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1609.455577][ T5886] hub 6-1:0.182: bad descriptor, ignoring hub [ 1609.455612][ T5886] hub 6-1:0.182: probe with driver hub failed with error -5 [ 1609.515752][T16024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1609.643235][ T5886] kaweth 6-1:0.182: Firmware present in device. [ 1609.763777][T16024] hsr_slave_0: left promiscuous mode [ 1609.803714][T16024] hsr_slave_1: left promiscuous mode [ 1609.805515][T16024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1609.864127][ T5886] kaweth 6-1:0.182: Error reading configuration (-32), no net device created [ 1609.864387][ T5886] kaweth 6-1:0.182: probe with driver kaweth failed with error -5 [ 1609.865325][T16024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1610.884377][T16024] team0 (unregistering): Port device team_slave_1 removed [ 1611.085483][T16024] team0 (unregistering): Port device team_slave_0 removed [ 1612.147842][ T5890] usb 6-1: USB disconnect, device number 14 [ 1614.682339][T16024] team0 (unregistering): Port device team_slave_1 removed [ 1614.841216][T16024] team0 (unregistering): Port device team_slave_0 removed [ 1615.387587][T20072] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4454'. [ 1622.985040][T20125] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4464'. [ 1624.019545][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1624.033672][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1624.035054][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1624.107512][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1624.135477][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1624.481243][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1624.488791][T20141] dlm: no local IP address has been set [ 1624.488800][T20141] dlm: cannot start dlm midcomms -107 [ 1624.560550][T19005] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1624.569804][T19005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1624.571215][ T13] Bluetooth: hci7: Frame reassembly failed (-84) [ 1624.571415][T19005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1624.574436][T19005] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1624.725892][T20134] lo speed is unknown, defaulting to 1000 [ 1626.309519][T20144] Bluetooth: hci1: command tx timeout [ 1626.510373][T20137] lo speed is unknown, defaulting to 1000 [ 1626.583979][T20144] Bluetooth: hci7: command 0x1003 tx timeout [ 1626.584385][ T5813] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1626.663854][ T5813] Bluetooth: hci2: command tx timeout [ 1627.630738][T20134] chnl_net:caif_netlink_parms(): no params data found [ 1628.343322][T20137] chnl_net:caif_netlink_parms(): no params data found [ 1629.040449][ T5813] Bluetooth: hci1: command tx timeout [ 1629.040459][T20144] Bluetooth: hci2: command tx timeout [ 1629.077802][T20193] netlink: 'syz.5.4474': attribute type 10 has an invalid length. [ 1629.137900][T20194] netlink: 'syz.5.4474': attribute type 10 has an invalid length. [ 1629.137925][T20194] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4474'. [ 1629.222411][ T5886] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1629.231462][T20134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.231636][T20134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.231904][T20134] bridge_slave_0: entered allmulticast mode [ 1629.240733][T20134] bridge_slave_0: entered promiscuous mode [ 1629.246710][T20193] batadv0: entered allmulticast mode [ 1629.254023][T20193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1629.271198][T20193] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1629.305325][T20194] batadv0: entered promiscuous mode [ 1629.343365][T20194] bond0: (slave batadv0): Releasing backup interface [ 1629.375968][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1629.376002][ T5886] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1629.376042][ T5886] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1629.376064][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.410767][T20194] bridge0: port 3(batadv0) entered blocking state [ 1629.410925][T20194] bridge0: port 3(batadv0) entered disabled state [ 1629.426898][T20134] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.427051][T20134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.427329][T20134] bridge_slave_1: entered allmulticast mode [ 1629.448748][T20134] bridge_slave_1: entered promiscuous mode [ 1629.464747][ T5886] usb 4-1: config 0 descriptor?? [ 1629.705295][ T5886] usbhid 4-1:0.0: can't add hid device: -71 [ 1629.705422][ T5886] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1629.726416][ T5886] usb 4-1: USB disconnect, device number 45 [ 1629.762809][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1629.762828][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1630.108775][T20224] dlm: no local IP address has been set [ 1630.108787][T20224] dlm: cannot start dlm midcomms -107 [ 1630.149549][ T1175] Bluetooth: hci3: Frame reassembly failed (-84) [ 1630.404957][T20134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.526964][T20134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.527241][T20137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1630.527453][T20137] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.527697][T20137] bridge_slave_0: entered allmulticast mode [ 1630.529533][T20137] bridge_slave_0: entered promiscuous mode [ 1630.712901][T20137] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.713043][T20137] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.713249][T20137] bridge_slave_1: entered allmulticast mode [ 1630.714804][T20137] bridge_slave_1: entered promiscuous mode [ 1631.061390][ T5813] Bluetooth: hci1: command tx timeout [ 1632.181855][ T5813] Bluetooth: hci3: command 0x1003 tx timeout [ 1632.186115][T20144] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1632.253637][T20144] Bluetooth: hci2: command tx timeout [ 1633.409888][T20144] Bluetooth: hci1: command tx timeout [ 1633.808869][T20250] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4487'. [ 1635.181977][T20144] Bluetooth: hci2: command tx timeout [ 1635.361313][T20134] team0: Port device team_slave_0 added [ 1635.661220][T20267] dlm: no local IP address has been set [ 1635.661234][T20267] dlm: cannot start dlm midcomms -107 [ 1635.716480][T20134] team0: Port device team_slave_1 added [ 1635.725141][ T1177] Bluetooth: hci3: Frame reassembly failed (-84) [ 1635.725232][ T1177] Bluetooth: hci3: Frame reassembly failed (-84) [ 1635.725305][ T1177] Bluetooth: hci3: Frame reassembly failed (-84) [ 1635.725481][ T1177] Bluetooth: hci3: Frame reassembly failed (-84) [ 1635.725563][ T1177] Bluetooth: hci3: Frame reassembly failed (-84) [ 1635.726008][ T1177] Bluetooth: hci3: Frame reassembly failed (-84) [ 1635.781303][T20137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1635.935809][T20137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1636.236302][T20134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1636.236319][T20134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.236345][T20134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1636.472544][T20134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1636.472560][T20134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.472586][T20134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1636.576067][T20137] team0: Port device team_slave_0 added [ 1636.813907][T20137] team0: Port device team_slave_1 added [ 1637.309994][T20137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1637.310012][T20137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.310038][T20137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1637.330909][T20134] hsr_slave_0: entered promiscuous mode [ 1637.332377][T20134] hsr_slave_1: entered promiscuous mode [ 1637.333370][T20134] debugfs: 'hsr0' already exists in 'hsr' [ 1637.333392][T20134] Cannot create hsr debugfs directory [ 1637.408053][T20137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1637.408069][T20137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1637.408095][T20137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1637.777553][ T5813] Bluetooth: hci3: command 0x1003 tx timeout [ 1637.812346][T20144] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1640.940285][T19643] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1641.305780][T19643] usb 6-1: Using ep0 maxpacket: 8 [ 1641.330311][T19643] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1641.330346][T19643] usb 6-1: config 0 has no interface number 0 [ 1641.330395][T19643] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1641.330434][T19643] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1641.330458][T19643] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.564677][T19643] usb 6-1: config 0 descriptor?? [ 1641.578440][T19643] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 1641.803187][T20137] hsr_slave_0: entered promiscuous mode [ 1641.804805][T20137] hsr_slave_1: entered promiscuous mode [ 1641.817970][T20137] debugfs: 'hsr0' already exists in 'hsr' [ 1641.817998][T20137] Cannot create hsr debugfs directory [ 1643.935569][T19643] usb 6-1: USB disconnect, device number 15 [ 1644.219876][T20334] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1646.203763][T20354] binfmt_misc: register: failed to install interpreter file ./file0 [ 1649.331208][T16024] bridge_slave_1: left allmulticast mode [ 1649.331238][T16024] bridge_slave_1: left promiscuous mode [ 1649.331495][T16024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.392207][T16024] bridge_slave_0: left allmulticast mode [ 1649.392236][T16024] bridge_slave_0: left promiscuous mode [ 1649.392501][T16024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.463212][T16024] bridge_slave_1: left allmulticast mode [ 1649.463232][T16024] bridge_slave_1: left promiscuous mode [ 1649.463379][T16024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.524221][T16024] bridge_slave_0: left allmulticast mode [ 1649.524241][T16024] bridge_slave_0: left promiscuous mode [ 1649.524394][T16024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.222774][T16024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.301146][T16024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.310319][ T5890] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1650.363548][T16024] bond0 (unregistering): Released all slaves [ 1650.470115][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 1650.477577][ T5890] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1650.477606][ T5890] usb 5-1: config 0 has no interface number 0 [ 1650.477657][ T5890] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1650.477696][ T5890] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1650.477721][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.533302][ T5890] usb 5-1: config 0 descriptor?? [ 1650.548939][ T5890] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1650.761011][T16024] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.864182][T16024] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.924973][T16024] bond0 (unregistering): Released all slaves [ 1652.573895][T20400] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1653.382692][T19643] usb 5-1: USB disconnect, device number 19 [ 1656.821704][T20433] binder: 20425:20433 ioctl c018620c 200000000100 returned -22 [ 1659.410674][T16024] hsr_slave_0: left promiscuous mode [ 1659.475524][T16024] hsr_slave_1: left promiscuous mode [ 1659.476665][T16024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.533053][T16024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1659.874863][T16024] hsr_slave_0: left promiscuous mode [ 1659.904821][T16024] hsr_slave_1: left promiscuous mode [ 1659.916202][T16024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1659.977482][T16024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.064119][T16024] team0 (unregistering): Port device team_slave_1 removed [ 1661.274688][T16024] team0 (unregistering): Port device team_slave_0 removed [ 1663.386082][T20451] 9pnet: Could not find request transport: fd0x0000000000000004 [ 1663.728056][T14991] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1663.763212][T16024] team0 (unregistering): Port device team_slave_1 removed [ 1663.882502][T14991] usb 6-1: Using ep0 maxpacket: 8 [ 1663.885057][T14991] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1663.885083][T14991] usb 6-1: config 0 has no interface number 0 [ 1663.885132][T14991] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1663.885156][T14991] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1663.885168][T14991] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.888328][T14991] usb 6-1: config 0 descriptor?? [ 1663.946615][T14991] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 1663.959656][T16024] team0 (unregistering): Port device team_slave_0 removed [ 1667.337865][ T5897] usb 6-1: USB disconnect, device number 16 [ 1668.246737][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.246812][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.328397][T20503] 9pnet_fd: Insufficient options for proto=fd [ 1673.572089][T20134] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1675.371568][T20134] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1677.738608][T20134] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1677.982952][T20134] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1678.134302][T19643] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1678.289662][T19643] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1678.289693][T19643] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1678.289720][T19643] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1678.871211][T19643] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1678.871244][T19643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1678.871265][T19643] usb 5-1: Product: syz [ 1678.871279][T19643] usb 5-1: Manufacturer: syz [ 1678.871294][T19643] usb 5-1: SerialNumber: syz [ 1679.767136][T19643] usb 5-1: config 0 descriptor?? [ 1679.768019][T20566] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1679.768176][T20566] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1679.770379][T19643] usb 5-1: ucan: probing device on interface #0 [ 1679.931309][ C1] vkms_vblank_simulate: vblank timer overrun [ 1680.102796][T20137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1680.290580][T20137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1680.380025][T20137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1680.620026][T19643] ucan 5-1:0.0 can0: registered device [ 1680.894979][T19643] ucan 5-1:0.0 can0: firmware string: YJ [ 1680.912597][T19643] usb 5-1: USB disconnect, device number 20 [ 1681.743271][ C1] vkms_vblank_simulate: vblank timer overrun [ 1682.377115][ C1] vkms_vblank_simulate: vblank timer overrun [ 1683.105057][ C1] vkms_vblank_simulate: vblank timer overrun [ 1683.247522][T20610] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4554'. [ 1683.249012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1683.310968][ T5813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1683.333177][ T5813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1683.334440][ T5813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1683.335602][ T5813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1683.336692][ T5813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1683.552658][T20611] lo speed is unknown, defaulting to 1000 [ 1683.627625][T20144] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1683.648385][T20144] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1683.654607][T20144] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1683.698137][T20144] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1683.707360][T20144] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1683.986298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1685.680785][T20144] Bluetooth: hci3: command tx timeout [ 1687.150818][T20608] lo speed is unknown, defaulting to 1000 [ 1687.930836][ T5813] Bluetooth: hci3: command tx timeout [ 1687.932515][ T5813] Bluetooth: hci6: command tx timeout [ 1689.891040][ C1] vkms_vblank_simulate: vblank timer overrun [ 1690.571938][ C1] vkms_vblank_simulate: vblank timer overrun [ 1690.574125][T19005] Bluetooth: hci6: command tx timeout [ 1690.574157][T19005] Bluetooth: hci3: command tx timeout [ 1692.636088][ T5813] Bluetooth: hci3: command tx timeout [ 1692.636111][ T5813] Bluetooth: hci6: command tx timeout [ 1693.589224][T20705] dlm: no local IP address has been set [ 1693.589273][T20705] dlm: cannot start dlm midcomms -107 [ 1694.824960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.871934][ T5813] Bluetooth: hci6: command tx timeout [ 1694.914746][T20611] chnl_net:caif_netlink_parms(): no params data found [ 1695.824108][T19005] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1695.846129][T20608] chnl_net:caif_netlink_parms(): no params data found [ 1696.957383][T17965] bridge_slave_1: left allmulticast mode [ 1696.957412][T17965] bridge_slave_1: left promiscuous mode [ 1696.957672][T17965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.060145][T17965] bridge_slave_0: left allmulticast mode [ 1697.060175][T17965] bridge_slave_0: left promiscuous mode [ 1697.062891][T17965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.866355][T17965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1697.932833][ T5897] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1697.952544][T17965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1698.010530][T17965] bond0 (unregistering): Released all slaves [ 1698.082667][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 1698.085044][ T5897] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1698.085069][ T5897] usb 4-1: config 0 has no interface number 0 [ 1698.085122][ T5897] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1698.085162][ T5897] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1698.085185][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.204378][ T5897] usb 4-1: config 0 descriptor?? [ 1698.233491][T20611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.234806][T20611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.235097][T20611] bridge_slave_0: entered allmulticast mode [ 1698.238061][T20611] bridge_slave_0: entered promiscuous mode [ 1698.273141][ T5897] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 1698.409642][T20611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.409781][T20611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.410055][T20611] bridge_slave_1: entered allmulticast mode [ 1698.424593][T20611] bridge_slave_1: entered promiscuous mode [ 1701.028924][ T5897] usb 4-1: USB disconnect, device number 46 [ 1701.702578][T20608] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.702686][T20608] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.702849][T20608] bridge_slave_0: entered allmulticast mode [ 1701.704619][T20608] bridge_slave_0: entered promiscuous mode [ 1701.762439][T20783] dlm: no local IP address has been set [ 1701.762480][T20783] dlm: cannot start dlm midcomms -107 [ 1701.821986][ T5897] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1701.930565][T17965] hsr_slave_0: left promiscuous mode [ 1701.963074][T17965] hsr_slave_1: left promiscuous mode [ 1701.963768][T17965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1701.989652][ T5897] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1701.989673][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1701.989687][ T5897] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1702.037134][ T5897] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1702.037153][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1702.037164][ T5897] usb 4-1: Product: syz [ 1702.037172][ T5897] usb 4-1: Manufacturer: syz [ 1702.037179][ T5897] usb 4-1: SerialNumber: syz [ 1702.074477][ T5897] usb 4-1: config 0 descriptor?? [ 1702.075311][T20775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1702.075443][T20775] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1702.077937][ T5897] usb 4-1: ucan: probing device on interface #0 [ 1702.171652][T17965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1703.401646][ T5897] usb 4-1: ucan: could not read protocol version, ret=-110 [ 1703.401663][ T5897] usb 4-1: ucan: probe failed; try to update the device firmware [ 1704.417348][T14611] usb 4-1: USB disconnect, device number 47 [ 1705.592162][T17965] team0 (unregistering): Port device team_slave_1 removed [ 1708.559953][ T5886] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1708.923707][ T5886] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1708.923775][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1708.923803][ T5886] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1708.985713][ T5886] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1708.985744][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.985765][ T5886] usb 5-1: Product: syz [ 1708.985780][ T5886] usb 5-1: Manufacturer: syz [ 1708.985796][ T5886] usb 5-1: SerialNumber: syz [ 1709.020014][T17965] team0 (unregistering): Port device team_slave_0 removed [ 1709.070362][ T5886] usb 5-1: config 0 descriptor?? [ 1709.071202][T20824] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1709.071328][T20824] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1709.130482][ T5886] usb 5-1: ucan: probing device on interface #0 [ 1709.531400][ T5886] usb 5-1: ucan: device reported invalid device info [ 1709.531424][ T5886] usb 5-1: ucan: probe failed; try to update the device firmware [ 1709.735391][ T5886] usb 5-1: USB disconnect, device number 21 [ 1709.853694][T20611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.854465][T20608] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.854632][T20608] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.854832][T20608] bridge_slave_1: entered allmulticast mode [ 1709.858539][T20608] bridge_slave_1: entered promiscuous mode [ 1710.126325][T20611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1710.507636][T20835] dlm: no local IP address has been set [ 1710.507678][T20835] dlm: cannot start dlm midcomms -107 [ 1711.529529][T20608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1711.550685][T20611] team0: Port device team_slave_0 added [ 1712.035104][T20608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1712.101673][T20611] team0: Port device team_slave_1 added [ 1713.108892][T20608] team0: Port device team_slave_0 added [ 1713.119792][T20611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.119807][T20611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.119831][T20611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1713.273764][T20608] team0: Port device team_slave_1 added [ 1713.277089][T20611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1713.277103][T20611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.277129][T20611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1713.573909][ T5886] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1713.723860][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 1713.730680][ T5886] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1713.730708][ T5886] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1713.730728][ T5886] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1713.730746][ T5886] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1713.730757][ T5886] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1713.730767][ T5886] usb 6-1: config 0 has no interface number 0 [ 1713.730796][ T5886] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1713.730810][ T5886] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1713.730822][ T5886] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1713.730842][ T5886] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1713.730856][ T5886] usb 6-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30 [ 1713.730879][ T5886] usb 6-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1713.730894][ T5886] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1713.730903][ T5886] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1713.744259][ T5886] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1713.744289][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.744308][ T5886] usb 6-1: Product: syz [ 1713.744322][ T5886] usb 6-1: Manufacturer: syz [ 1713.744336][ T5886] usb 6-1: SerialNumber: syz [ 1713.750357][ T5886] usb 6-1: config 0 descriptor?? [ 1713.788093][ T5886] usb 6-1: selecting invalid altsetting 2 [ 1713.942566][T20608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1713.942578][T20608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1713.942599][T20608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1714.005426][ C1] usb 6-1: async_complete: urb error -71 [ 1714.005837][ C1] usb 6-1: async_complete: urb error -71 [ 1714.005893][ C1] usb 6-1: async_complete: urb error -71 [ 1714.005946][ C1] usb 6-1: async_complete: urb error -71 [ 1714.008916][ T5886] get_1284_register: usb error -71 [ 1714.009046][ T5886] uss720 6-1:0.125: probe with driver uss720 failed with error -71 [ 1714.031060][ T5886] usb 6-1: USB disconnect, device number 17 [ 1714.127789][T20608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1714.127807][T20608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1714.127834][T20608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1715.816281][T20611] hsr_slave_0: entered promiscuous mode [ 1715.817280][T20611] hsr_slave_1: entered promiscuous mode [ 1715.817900][T20611] debugfs: 'hsr0' already exists in 'hsr' [ 1715.817915][T20611] Cannot create hsr debugfs directory [ 1716.967294][T20608] hsr_slave_0: entered promiscuous mode [ 1716.968780][T20608] hsr_slave_1: entered promiscuous mode [ 1716.969782][T20608] debugfs: 'hsr0' already exists in 'hsr' [ 1716.969805][T20608] Cannot create hsr debugfs directory [ 1717.164880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1717.349926][T20884] netlink: 'syz.5.4613': attribute type 2 has an invalid length. [ 1718.476887][T19005] Bluetooth: hci1: command 0x1003 tx timeout [ 1718.520109][ T5813] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1718.753850][ C1] vkms_vblank_simulate: vblank timer overrun [ 1719.556401][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.280931][ C1] vkms_vblank_simulate: vblank timer overrun [ 1720.580639][T20904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1720.580812][T20904] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1720.787296][T14991] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1720.983507][T14991] usb 5-1: Using ep0 maxpacket: 16 [ 1721.023673][T14991] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1721.023704][T14991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1721.023724][T14991] usb 5-1: Product: syz [ 1721.023738][T14991] usb 5-1: Manufacturer: syz [ 1721.023753][T14991] usb 5-1: SerialNumber: syz [ 1721.079477][T14991] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1721.079503][T14991] r8152-cfgselector 5-1: config 0 descriptor?? [ 1721.503039][T14991] r8152-cfgselector 5-1: USB disconnect, device number 22 [ 1722.607753][T20925] netlink: 'syz.4.4622': attribute type 2 has an invalid length. [ 1723.620516][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.300687][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.674729][ C1] vkms_vblank_simulate: vblank timer overrun [ 1724.961300][ C1] vkms_vblank_simulate: vblank timer overrun [ 1725.233059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1725.721091][ C1] vkms_vblank_simulate: vblank timer overrun [ 1726.128109][T20949] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4627'. [ 1726.500416][ C1] vkms_vblank_simulate: vblank timer overrun [ 1727.028930][ C1] vkms_vblank_simulate: vblank timer overrun [ 1727.821760][T17965] bridge_slave_1: left allmulticast mode [ 1727.821780][T17965] bridge_slave_1: left promiscuous mode [ 1727.821946][T17965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1728.107021][T17965] bridge_slave_0: left allmulticast mode [ 1728.107051][T17965] bridge_slave_0: left promiscuous mode [ 1728.107333][T17965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1728.315408][T18514] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1728.449240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1728.482696][T18514] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1728.482725][T18514] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1728.482745][T18514] usb 5-1: config 0 has no interface number 0 [ 1728.482792][T18514] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1728.482835][T18514] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1728.482858][T18514] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.556054][T18514] usb 5-1: config 0 descriptor?? [ 1728.686351][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.400262][ C1] vkms_vblank_simulate: vblank timer overrun [ 1729.503781][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.503853][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1729.548023][T18514] usbhid 5-1:0.1: couldn't find an input interrupt endpoint [ 1729.621267][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.006400][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.892980][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.994952][T17965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1730.996085][T20988] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4640'. [ 1731.061011][ T5890] usb 5-1: USB disconnect, device number 23 [ 1731.235273][T17965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1731.352909][ T5813] Bluetooth: hci6: link tx timeout [ 1731.366426][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.385307][ T5813] Bluetooth: hci6: link tx timeout [ 1731.386316][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.386528][ T5813] Bluetooth: hci6: link tx timeout [ 1731.386541][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.388926][ T5813] Bluetooth: hci6: link tx timeout [ 1731.388977][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.389390][ T5813] Bluetooth: hci6: link tx timeout [ 1731.389449][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.389790][ T5813] Bluetooth: hci6: link tx timeout [ 1731.389839][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.391614][ T5813] Bluetooth: hci6: link tx timeout [ 1731.391628][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.391827][ T5813] Bluetooth: hci6: link tx timeout [ 1731.391905][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.392299][ T5813] Bluetooth: hci6: link tx timeout [ 1731.392355][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.394676][ T5813] Bluetooth: hci6: link tx timeout [ 1731.394723][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.395378][ T5813] Bluetooth: hci6: link tx timeout [ 1731.395391][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.396570][ T5813] Bluetooth: hci6: link tx timeout [ 1731.396619][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.397016][ T5813] Bluetooth: hci6: link tx timeout [ 1731.397080][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.397478][ T5813] Bluetooth: hci6: link tx timeout [ 1731.397490][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1731.399012][ T5813] Bluetooth: hci6: link tx timeout [ 1731.399063][ T5813] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 1732.018421][T17965] bond0 (unregistering): Released all slaves [ 1732.362339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1732.460513][ C1] vkms_vblank_simulate: vblank timer overrun [ 1732.612862][T15150] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1732.795511][T15150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.795546][T15150] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1732.795587][T15150] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1732.795612][T15150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.845617][T15150] usb 5-1: config 0 descriptor?? [ 1732.904736][T17965] hsr_slave_0: left promiscuous mode [ 1732.945335][T17965] hsr_slave_1: left promiscuous mode [ 1732.947078][T17965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1733.152659][T17965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1733.464263][ C1] vkms_vblank_simulate: vblank timer overrun [ 1733.469462][ T5813] Bluetooth: hci6: command 0x0406 tx timeout [ 1734.177221][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.384487][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.422093][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1734.422667][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1734.422837][T15150] usbhid 5-1:0.0: can't add hid device: -32 [ 1734.422957][T15150] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1734.442325][T15150] usb 5-1: USB disconnect, device number 24 [ 1734.512506][ C1] vkms_vblank_simulate: vblank timer overrun [ 1734.845954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.238177][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.726505][ C1] vkms_vblank_simulate: vblank timer overrun [ 1735.849603][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.213525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1736.618689][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.562714][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.630739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1741.678274][T17965] team0 (unregistering): Port device team_slave_1 removed [ 1741.839875][T17965] team0 (unregistering): Port device team_slave_0 removed [ 1742.011956][ T5813] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1742.016924][ T5813] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1742.019954][ T5813] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1742.021022][ T5813] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1742.022183][ T5813] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1742.229409][ C1] vkms_vblank_simulate: vblank timer overrun [ 1742.934843][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.129673][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.337045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1743.563276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1744.193620][T19005] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1744.193651][T19005] CPU: 1 UID: 0 PID: 19005 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1744.193676][T19005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1744.193691][T19005] Workqueue: hci4 hci_rx_work [ 1744.193844][T19005] Call Trace: [ 1744.193854][T19005] [ 1744.193864][T19005] dump_stack_lvl+0x189/0x250 [ 1744.193905][T19005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1744.193938][T19005] ? __pfx__printk+0x10/0x10 [ 1744.193970][T19005] ? kernfs_path_from_node+0x2c/0x280 [ 1744.194006][T19005] ? kernfs_path_from_node+0x243/0x280 [ 1744.194027][T19005] ? kernfs_path_from_node+0x2c/0x280 [ 1744.194054][T19005] sysfs_create_dir_ns+0x259/0x280 [ 1744.194076][T19005] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1744.194158][T19005] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1744.194184][T19005] ? rt_spin_unlock+0x161/0x200 [ 1744.194211][T19005] kobject_add_internal+0x5a5/0xb50 [ 1744.194309][T19005] kobject_add+0x155/0x220 [ 1744.194359][T19005] ? __pfx_kobject_add+0x10/0x10 [ 1744.194400][T19005] ? get_device_parent+0x370/0x3a0 [ 1744.194484][T19005] device_add+0x408/0xb50 [ 1744.194519][T19005] hci_conn_add_sysfs+0xd5/0x1e0 [ 1744.194572][T19005] le_conn_complete_evt+0xf39/0x1500 [ 1744.194664][T19005] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1744.194694][T19005] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1744.194724][T19005] ? lockdep_hardirqs_on+0x9c/0x150 [ 1744.194758][T19005] ? skb_pull_data+0xfb/0x200 [ 1744.194825][T19005] hci_le_conn_complete_evt+0x187/0x450 [ 1744.194862][T19005] hci_event_packet+0x78f/0x1200 [ 1744.194891][T19005] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1744.194921][T19005] ? __pfx_hci_event_packet+0x10/0x10 [ 1744.194956][T19005] ? hci_send_to_monitor+0xe2/0x570 [ 1744.195014][T19005] hci_rx_work+0x46a/0xe80 [ 1744.195047][T19005] ? process_scheduled_works+0x9ef/0x17b0 [ 1744.195090][T19005] process_scheduled_works+0xae1/0x17b0 [ 1744.195151][T19005] ? __pfx_process_scheduled_works+0x10/0x10 [ 1744.195199][T19005] worker_thread+0x8a0/0xda0 [ 1744.195258][T19005] kthread+0x711/0x8a0 [ 1744.195295][T19005] ? __pfx_worker_thread+0x10/0x10 [ 1744.195320][T19005] ? __pfx_kthread+0x10/0x10 [ 1744.195354][T19005] ? rt_spin_unlock+0x150/0x200 [ 1744.195383][T19005] ? rt_spin_unlock+0x161/0x200 [ 1744.195403][T19005] ? __pfx_kthread+0x10/0x10 [ 1744.195435][T19005] ret_from_fork+0x4bc/0x870 [ 1744.195471][T19005] ? __pfx_ret_from_fork+0x10/0x10 [ 1744.195507][T19005] ? __switch_to_asm+0x39/0x70 [ 1744.195527][T19005] ? __switch_to_asm+0x33/0x70 [ 1744.195547][T19005] ? __pfx_kthread+0x10/0x10 [ 1744.195578][T19005] ret_from_fork_asm+0x1a/0x30 [ 1744.195621][T19005] [ 1744.195659][T19005] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1744.195701][T19005] Bluetooth: hci4: failed to register connection device [ 1744.209702][T20144] Bluetooth: hci1: command tx timeout [ 1744.244212][T20142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1744.260850][T20142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1744.262324][T20142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1744.265922][T20142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1744.338701][T20142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1746.277969][ T5813] Bluetooth: hci1: command tx timeout [ 1747.699040][ T5813] Bluetooth: hci2: command tx timeout [ 1748.356626][ T5813] Bluetooth: hci1: command tx timeout [ 1748.718698][T21036] lo speed is unknown, defaulting to 1000 [ 1748.836219][T15150] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006b: 0000 [#1] SMP KASAN PTI [ 1748.836239][T15150] KASAN: null-ptr-deref in range [0x0000000000000358-0x000000000000035f] [ 1748.836254][T15150] CPU: 0 UID: 0 PID: 15150 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1748.836270][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1748.836279][T15150] Workqueue: events l2cap_info_timeout [ 1748.836305][T15150] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1748.836329][T15150] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1748.836341][T15150] RSP: 0000:ffffc90005b07788 EFLAGS: 00010202 [ 1748.836352][T15150] RAX: dffffc0000000000 RBX: ffffffff889cf64e RCX: d0fd3ca6bd79b900 [ 1748.836363][T15150] RDX: 0000000000000000 RSI: ffffffff889cf64e RDI: 000000000000006b [ 1748.836372][T15150] RBP: ffffffff89ca2e35 R08: 0000000000000001 R09: 0000000000000000 [ 1748.836381][T15150] R10: dffffc0000000000 R11: ffffffff89ca2df0 R12: 0000000000000000 [ 1748.836391][T15150] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 1748.836400][T15150] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 1748.836412][T15150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1748.836421][T15150] CR2: 00005603c791bdd8 CR3: 000000004eae4000 CR4: 00000000003526f0 [ 1748.836435][T15150] Call Trace: [ 1748.836441][T15150] [ 1748.836448][T15150] __kasan_check_byte+0x12/0x40 [ 1748.836468][T15150] lock_acquire+0x8d/0x360 [ 1748.836488][T15150] ? lockdep_hardirqs_on+0x9c/0x150 [ 1748.836509][T15150] ? __cancel_work+0x254/0x2e0 [ 1748.836532][T15150] lock_sock_nested+0x3e/0x130 [ 1748.836553][T15150] ? l2cap_sock_ready_cb+0x45/0x140 [ 1748.836648][T15150] l2cap_sock_ready_cb+0x45/0x140 [ 1748.836661][T15150] l2cap_conn_start+0x76d/0xe50 [ 1748.836682][T15150] ? __pfx_l2cap_conn_start+0x10/0x10 [ 1748.836698][T15150] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1748.836718][T15150] ? lockdep_hardirqs_on+0x9c/0x150 [ 1748.836737][T15150] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1748.836756][T15150] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1748.836777][T15150] ? mutex_lock_nested+0x154/0x1d0 [ 1748.836791][T15150] ? l2cap_info_timeout+0x60/0xa0 [ 1748.836810][T15150] l2cap_info_timeout+0x68/0xa0 [ 1748.836827][T15150] ? process_scheduled_works+0x9ef/0x17b0 [ 1748.836844][T15150] process_scheduled_works+0xae1/0x17b0 [ 1748.836872][T15150] ? __pfx_process_scheduled_works+0x10/0x10 [ 1748.836896][T15150] worker_thread+0x8a0/0xda0 [ 1748.836916][T15150] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1748.836940][T15150] ? __kthread_parkme+0x7b/0x200 [ 1748.836963][T15150] kthread+0x711/0x8a0 [ 1748.836984][T15150] ? __pfx_worker_thread+0x10/0x10 [ 1748.837001][T15150] ? __pfx_kthread+0x10/0x10 [ 1748.837019][T15150] ? rt_spin_unlock+0x150/0x200 [ 1748.837037][T15150] ? rt_spin_unlock+0x161/0x200 [ 1748.837051][T15150] ? __pfx_kthread+0x10/0x10 [ 1748.837070][T15150] ret_from_fork+0x4bc/0x870 [ 1748.837087][T15150] ? __pfx_ret_from_fork+0x10/0x10 [ 1748.837107][T15150] ? __switch_to_asm+0x39/0x70 [ 1748.837124][T15150] ? __switch_to_asm+0x33/0x70 [ 1748.837148][T15150] ? __pfx_kthread+0x10/0x10 [ 1748.837170][T15150] ret_from_fork_asm+0x1a/0x30 [ 1748.837194][T15150] [ 1748.837208][T15150] Modules linked in: [ 1748.837226][T15150] ---[ end trace 0000000000000000 ]--- [ 1748.838285][T15150] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1748.838318][T15150] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 c3 cc cc cc cc cc 66 66 66 66 66 66 2e [ 1748.838334][T15150] RSP: 0000:ffffc90005b07788 EFLAGS: 00010202 [ 1748.838351][T15150] RAX: dffffc0000000000 RBX: ffffffff889cf64e RCX: d0fd3ca6bd79b900 [ 1748.838366][T15150] RDX: 0000000000000000 RSI: ffffffff889cf64e RDI: 000000000000006b [ 1748.838379][T15150] RBP: ffffffff89ca2e35 R08: 0000000000000001 R09: 0000000000000000 [ 1748.838391][T15150] R10: dffffc0000000000 R11: ffffffff89ca2df0 R12: 0000000000000000 [ 1748.838405][T15150] R13: 0000000000000358 R14: 0000000000000358 R15: 0000000000000001 [ 1748.838417][T15150] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 1748.838433][T15150] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1748.838446][T15150] CR2: 00005603c791bdd8 CR3: 000000004eae4000 CR4: 00000000003526f0 [ 1748.838470][T15150] Kernel panic - not syncing: Fatal exception [ 1748.838718][T15150] Kernel Offset: disabled