last executing test programs: 6m7.365387254s ago: executing program 1 (id=117): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000341000/0x4000)=nil, 0x4000, 0x4) 6m7.199438168s ago: executing program 1 (id=120): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)="f56ed761e9c8219d", 0x8, 0xfffffffffffffffe) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "44ee4dcf6df6b457eba45bc88153e9b5cbf7cc1af7b76983c2717759237e827d8b738dbbf41db40d00"}, 0x48, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 6m7.037387454s ago: executing program 1 (id=123): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x11, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1, 0x4}, 0x38) 6m6.772271684s ago: executing program 1 (id=125): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000040)={0x4, 0x0, [{}, {0x0, 0x6}, {0x1, 0xfffffffb, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0xc0000000, 0x4, 0x1, 0x5, 0x3, 0x7f, 0x4}]}) 6m6.537082856s ago: executing program 1 (id=127): r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m6.47287024s ago: executing program 1 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008804"]) 5m51.421561607s ago: executing program 32 (id=129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = dup2(r0, r0) r2 = dup(r1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000020000008804"]) 3m19.140447436s ago: executing program 0 (id=2626): r0 = io_uring_setup(0x253c, &(0x7f0000000000)={0x0, 0x0, 0x1000, 0x3, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = semget$private(0x0, 0x4000000009, 0x0) semop(r1, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) 3m18.997785428s ago: executing program 0 (id=2628): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20ffc004) 3m18.822474206s ago: executing program 0 (id=2629): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000590000/0x1000)=nil, 0x1000, 0x17) 3m18.785785634s ago: executing program 0 (id=2630): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(0x0, &(0x7f0000001200)='./file0/file0\x00', 0x0, 0x84000, 0x0) 3m18.708040122s ago: executing program 0 (id=2631): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401390000000000000000000083ff050001000100"], 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m18.430434869s ago: executing program 0 (id=2634): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x1e0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x1b0, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0xfd}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x3, 0xe, 0x1e, 0x12, 0x11, 0x6}}, @TCA_CHOKE_PARMS={0xfffffffffffffede, 0x1, {0x8, 0x4002, 0x7, 0x4, 0x12, 0x17, 0x7}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x7f, 0x9, 0xc, 0x4, 0x6}}]}}]}, 0x1e0}}, 0x0) 3m18.25973929s ago: executing program 33 (id=2634): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x1e0, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x1b0, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0xfd}}, @TCA_CHOKE_STAB={0x104, 0x2, "547d9ed0effe82c024750032ea49f09c72384049bcc87e42ca7e2c78d6a85178e447e32b5f4e4fabff6fb16a40901dc4221e42eb745b6332c476d0c3aefed8dc95af179570cf8cc43bc29eb93c6e78f5e1153d3d7c1542f77dc4b29877e2002685e850f2969cf2164fbf8db7e1713786899d2a8ab03ca5accb2e9b50e1fb7a4e3681b35f0f68461daa4f4e1583b9a02195dee35ae7c8bca085399157d5f30c2ec691c39267b2655c782b363a11645a0c78a39fab8c0ce69f11f2db45ee16e2975a80664f687d01bd7444244a25bdb9ec5b0fa8b1afc0254ddbca2e22ca1b189502b74d7ec4665c23804df713183d428f50a0d64e31e110c707eb3fe69f437992"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x12}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0x3, 0xe, 0x1e, 0x12, 0x11, 0x6}}, @TCA_CHOKE_PARMS={0xfffffffffffffede, 0x1, {0x8, 0x4002, 0x7, 0x4, 0x12, 0x17, 0x7}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x4, 0x7f, 0x9, 0xc, 0x4, 0x6}}]}}]}, 0x1e0}}, 0x0) 2.981159662s ago: executing program 6 (id=5813): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000200), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5f4731e5de939cbc"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000508"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6, 0x0, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b97055b0fee1b227"}}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.818516543s ago: executing program 6 (id=5815): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x89, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x42040) 2.742224877s ago: executing program 6 (id=5818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r3}]}, 0x24}}, 0x0) 2.661913963s ago: executing program 6 (id=5819): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="e17f6ee9ce2b89c26658d58a1812a6e2b440e038d0f4e99b86b78afed1aec06e8c7c7764839b00c11156eb679ba04c116dc7fa281c23624f922af64433331138fd2a6aa6aa6b453f2a62512baecfc39b1c36cf25ec31361b693b530b4772b6580b56cd4f20505c3e5fef6058", 0xfffffeac}], 0x6, &(0x7f0000000040), 0xfffffffffffffc9e, 0x20040005}, 0x20000001) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2.585725143s ago: executing program 6 (id=5821): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b1c, 0x1c07, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xf9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x1}}}}}]}}]}}, 0x0) syz_usb_connect(0x3, 0x10a, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x8d, 0x99, 0xb1, 0xff, 0x584, 0xb020, 0x9bce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf8, 0x1, 0xf, 0x3, 0x0, 0x4, [{{0x9, 0x4, 0xd8, 0x1, 0x1, 0x25, 0x86, 0x64, 0x3b, [], [{{0x9, 0x5, 0x0, 0x3, 0x200, 0x1, 0x5, 0x5, [@generic={0xdd, 0x0, "b420c3b329c6107239e4aaf7d82d8839aefcba31e6a7369784fc0dd59223eb83e0264c405b492ea57ee01b04e8190a29f59b030c4d105627b16b25d9f58050675b16b221ca6ccb0690e35960ba85853c35d2773d3fadaaa35984ca9cc179f45787b83e3ec691fc84179f77e0db661804bee85e56a5e1aa61244e302e882563195181d0ad1f565acfd0a4566c1e2a594746dedbfe8524e0376e6c11088a2247a3193bff6140f8df17c4d2cc9b0f59a192ce817f1baa67815725275864ce2e86d3f36e9c21d730d3f6ff5749476733db53b9865d8bf84bd325a9f4e8"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 2.423108966s ago: executing program 4 (id=5825): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20004080}, 0x24000894) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.287376976s ago: executing program 4 (id=5826): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[]) 2.052231496s ago: executing program 4 (id=5831): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) readv(r0, &(0x7f0000000580)=[{&(0x7f0000000100)=""/67, 0x43}], 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f00000003c0)=[{0xfc, 0x0, 0x0, 0x0, @time={0x0, 0x101}, {0x0, 0xb8}, {0x0, 0x9}, @control={0x9, 0x9, 0xa}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x3ff}, {0x6, 0xfd}, {0x0, 0x3}, @control={0x7, 0x9fa, 0x6}}], 0x38) 1.671160924s ago: executing program 3 (id=5834): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x3, 0x0, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000730000400008000007"]) 1.460709932s ago: executing program 3 (id=5837): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgsnd(0x0, &(0x7f0000000380)=ANY=[], 0x8, 0x0) syz_clone(0x4eb82100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.272449573s ago: executing program 5 (id=5839): r0 = syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000180)=0x5) 1.083543177s ago: executing program 5 (id=5841): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz0\x00', {}, 0x1000000, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa345, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0xd, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x0, 0x2], [0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x54, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 1.065199821s ago: executing program 4 (id=5842): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000340)={0x0, 0x3}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xfd}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) 882.246082ms ago: executing program 2 (id=5843): r0 = gettid() r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x0) accept4$phonet_pipe(r1, 0x0, 0x0, 0x0) tkill(r0, 0x7) 854.197805ms ago: executing program 5 (id=5844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x1c, r1, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 784.001179ms ago: executing program 5 (id=5845): write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099c", 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c000280"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 746.763038ms ago: executing program 2 (id=5846): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000180)=0x8, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000840)=ANY=[], 0x0) 672.5921ms ago: executing program 3 (id=5847): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r1) 639.555622ms ago: executing program 6 (id=5848): r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 586.655753ms ago: executing program 2 (id=5849): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 576.271287ms ago: executing program 5 (id=5850): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000b00)=0x10001, 0x4) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/112, 0x70}, 0x2}], 0x1, 0x10162, 0x0) 469.460597ms ago: executing program 4 (id=5851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 468.939527ms ago: executing program 5 (id=5852): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000040)=0x80000000, 0x4) read$FUSE(r1, &(0x7f0000001640)={0x2020}, 0x2020) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 422.457052ms ago: executing program 3 (id=5853): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r0, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001f40)=""/4096, 0x1000}], 0x1}, 0x2}], 0x1, 0x10000, 0x0) 276.133431ms ago: executing program 2 (id=5854): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x10) rmdir(&(0x7f0000000000)='./file0\x00') 212.647073ms ago: executing program 3 (id=5855): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000574000/0x1000)=nil, 0x1000}}) 159.990996ms ago: executing program 2 (id=5856): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5, @rand_addr, 0x4}, 0x1c) 67.931793ms ago: executing program 4 (id=5857): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x60, 0x4, 0x2, {0x2, 0x30}}, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x0, 0x8}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x81, 0x1, "e8"}, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x1, "d3"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 441.401µs ago: executing program 3 (id=5858): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r1}) r2 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r0}) 0s ago: executing program 2 (id=5859): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001400030400000000000000000a3f0000", @ANYRES32=r1, @ANYBLOB="14000200ff2300000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x34}, 0x76, r1}) kernel console output (not intermixed with test programs): y Wait 00 [ 320.136098][ T5836] gspca_vc032x: I2c Bus Busy Wait 00 [ 320.147857][ T5836] gspca_vc032x: I2c Bus Busy Wait 00 [ 320.158673][ T5836] gspca_vc032x: I2c Bus Busy Wait 00 [ 320.173908][ T5836] gspca_vc032x: I2c Bus Busy Wait 00 [ 320.179668][ T5836] gspca_vc032x: I2c Bus Busy Wait 00 [ 320.185576][ T5836] gspca_vc032x: I2c Bus Busy Wait 00 [ 320.191254][ T5836] gspca_vc032x: I2c Bus Busy Wait 00 [ 320.207087][ T5836] gspca_vc032x: I2c Bus Busy Wait 00 [ 320.216978][ T5836] gspca_vc032x: I2c Bus Busy Wait 00 [ 320.227772][ T5836] gspca_vc032x: Unknown sensor... [ 320.250410][ T5836] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 320.274490][ T5836] usb 6-1: USB disconnect, device number 21 [ 320.721614][T14952] team0 (unregistering): Port device team_slave_1 removed [ 320.786854][T14952] team0 (unregistering): Port device team_slave_0 removed [ 321.512207][T15793] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.539365][T15793] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.564791][T15793] bridge_slave_0: entered allmulticast mode [ 321.580710][T15793] bridge_slave_0: entered promiscuous mode [ 321.598929][T15793] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.646721][T15793] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.659480][T15793] bridge_slave_1: entered allmulticast mode [ 321.676756][T15878] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3738'. [ 321.684208][T15793] bridge_slave_1: entered promiscuous mode [ 321.740692][T15878] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3738'. [ 321.907472][ T5829] Bluetooth: hci3: command tx timeout [ 321.965232][T15793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.001759][T15793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.163296][T15793] team0: Port device team_slave_0 added [ 322.185620][T15793] team0: Port device team_slave_1 added [ 322.319542][T15793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.335691][T15793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.383730][T15793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.441908][T15793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.448942][T15793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.519315][T15793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.676303][T15793] hsr_slave_0: entered promiscuous mode [ 322.697547][T15793] hsr_slave_1: entered promiscuous mode [ 323.149161][T15793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 323.159105][T15793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 323.169294][T15793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 323.178685][T15793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.246098][T15793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.270655][T15793] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.283353][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.290553][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.303474][T14952] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.310689][T14952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.615116][T15793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.739414][ T973] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 323.846266][T15793] veth0_vlan: entered promiscuous mode [ 323.878121][T15793] veth1_vlan: entered promiscuous mode [ 323.935199][ T973] usb 6-1: config 0 has an invalid interface number: 33 but max is 0 [ 323.938151][T15793] veth0_macvtap: entered promiscuous mode [ 323.943685][ T973] usb 6-1: config 0 has no interface number 0 [ 323.966947][T15793] veth1_macvtap: entered promiscuous mode [ 323.967969][ T973] usb 6-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 323.982526][ T5829] Bluetooth: hci3: command tx timeout [ 324.007181][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.017317][ T973] usb 6-1: config 0 descriptor?? [ 324.024515][ T973] usb-storage 6-1:0.33: USB Mass Storage device detected [ 324.034499][T15793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.047524][T15793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.060366][T15793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.071143][T15793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.081896][T15793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.097767][T15793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.110228][T15793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.122089][T15793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.133638][T15793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.153497][T15793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.164868][T15793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.175404][T15793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.185936][T15793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.196917][T15793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.207176][T15793] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.216348][T15793] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.239319][T15793] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.248057][T15793] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.290444][ T5822] usb 6-1: USB disconnect, device number 22 [ 324.377015][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.395110][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.422370][T14949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 324.435519][T14949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.599327][ T973] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 324.751913][ T973] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 324.782594][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.802720][ T973] usb 4-1: config 0 descriptor?? [ 325.247638][ T973] hid-led 0003:04D8:F372.0023: unknown main item tag 0x0 [ 325.286144][ T973] hid-led 0003:04D8:F372.0023: unknown main item tag 0x0 [ 325.307089][ T973] hid-led 0003:04D8:F372.0023: unknown main item tag 0x0 [ 325.333822][ T973] hid-led 0003:04D8:F372.0023: unknown main item tag 0x0 [ 325.360435][ T973] hid-led 0003:04D8:F372.0023: unknown main item tag 0x0 [ 325.391251][ T973] hid-led 0003:04D8:F372.0023: hidraw0: USB HID v1.01 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 325.453459][ T973] hid-led 0003:04D8:F372.0023: Greynut Luxafor initialized [ 325.476852][ T973] usb 4-1: USB disconnect, device number 26 [ 325.494776][T14929] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 325.521648][T14939] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 325.539105][T14939] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 325.571439][T14939] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 325.590589][T14939] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 325.606280][T14952] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 325.617208][T14939] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 325.635761][T14952] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 325.647937][ T11] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 325.657082][T14952] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 325.673717][ T11] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 325.686367][T14929] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 325.702180][T14929] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 325.716433][ T11] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 325.728146][T14929] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 325.743307][ T11] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 325.757120][T14929] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 325.767792][ T11] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 326.059333][ T5829] Bluetooth: hci3: command tx timeout [ 326.717751][T14929] Bluetooth: hci5: Frame reassembly failed (-84) [ 327.091284][T16040] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3801'. [ 327.360422][T14939] bond0: (slave bond1): link status definitely down, disabling slave [ 327.691646][ T5822] kernel read not supported for file /dsp1 (pid: 5822 comm: kworker/1:3) [ 327.712320][T16067] unknown channel width for channel at 909000KHz? [ 327.934377][T16075] lo: entered allmulticast mode [ 328.086347][T16074] lo: left allmulticast mode [ 328.359461][ T5869] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 328.520427][ T5869] usb 7-1: Using ep0 maxpacket: 32 [ 328.553986][ T5869] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 328.554015][ T5869] usb 7-1: config 0 has no interface number 0 [ 328.555764][ T5869] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 328.578794][ T5869] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.593830][ T5869] usb 7-1: Product: syz [ 328.598154][ T5869] usb 7-1: Manufacturer: syz [ 328.605519][ T5869] usb 7-1: SerialNumber: syz [ 328.607754][ T5869] usb 7-1: config 0 descriptor?? [ 328.610506][ T5869] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 328.784382][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 328.786435][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 328.850744][ T5869] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 328.852481][ T29] audit: type=1326 audit(1739180323.467:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16096 comm="syz.4.3826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6fff8cde9 code=0x0 [ 328.853066][ T5869] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 329.285856][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 329.295735][ T5836] usb 7-1: USB disconnect, device number 11 [ 329.313899][ T5836] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 329.322026][ T5836] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 329.322381][ T5836] quatech2 7-1:0.51: device disconnected [ 329.628206][T16113] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3832'. [ 329.795548][ T29] audit: type=1400 audit(1739180324.407:282): lsm=SMACK fn=smack_task_setpgid action=denied subject="w" object="_" requested=w pid=16115 comm="syz.4.3833" opid=16115 ocomm="syz.4.3833" [ 329.813733][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.243114][T16131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3840'. [ 330.320077][T16134] erofs (device nullb0): cannot find valid erofs superblock [ 330.620474][ T5868] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 330.733708][T16144] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3846'. [ 330.749715][T16144] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.760327][T16144] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.049320][ T5868] usb 6-1: Using ep0 maxpacket: 8 [ 331.070383][ T5868] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 331.089421][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 331.101238][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 331.113238][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 331.137425][ T5868] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 331.149333][ T5868] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.166995][ T5868] usb 6-1: Product: syz [ 331.177208][ T5868] usb 6-1: Manufacturer: syz [ 331.184959][ T5868] usb 6-1: SerialNumber: syz [ 331.196622][ T5868] usb 6-1: config 0 descriptor?? [ 331.227019][T16135] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 331.416398][T16162] veth0_virt_wifi: entered promiscuous mode [ 331.431589][T16162] veth0_virt_wifi: entered allmulticast mode [ 331.444485][T16162] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 331.459476][ T5868] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 331.480619][ T5868] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input33 [ 331.629389][ T5836] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 331.797532][ T5836] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 331.814526][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.827782][T16170] netlink: 'syz.3.3856': attribute type 39 has an invalid length. [ 331.830528][ T5836] usb 7-1: config 0 descriptor?? [ 331.852621][ T5836] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 331.944128][ C0] powermate: config urb returned -71 [ 331.949810][ C0] powermate: config urb returned -71 [ 331.955293][ C0] powermate: config urb returned -71 [ 331.961517][ T5868] usb 6-1: USB disconnect, device number 23 [ 331.967607][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 332.677989][ T5836] usb 7-1: USB disconnect, device number 12 [ 333.489470][ T5871] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 333.655662][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.686750][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.698775][ T5871] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 333.699404][ T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 333.708620][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.726518][ T5871] usb 4-1: config 0 descriptor?? [ 333.910203][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 333.918944][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.943034][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.957538][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 333.974363][ T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 333.985516][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.013326][ T25] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 334.022924][ T25] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 334.039335][ T25] usb 5-1: Manufacturer: syz [ 334.049838][ T25] usb 5-1: config 0 descriptor?? [ 334.153712][ T5871] sony 0003:054C:024B.0024: unexpected long global item [ 334.167369][ T5871] sony 0003:054C:024B.0024: parse failed [ 334.179425][ T5871] sony 0003:054C:024B.0024: probe with driver sony failed with error -22 [ 334.309544][ T25] rc_core: IR keymap rc-hauppauge not found [ 334.315767][ T25] Registered IR keymap rc-empty [ 334.322936][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.349749][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.373498][ T25] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 334.373876][ T5871] usb 4-1: USB disconnect, device number 27 [ 334.408290][ T25] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input34 [ 334.422863][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.450522][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.479387][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.499457][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.529342][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.549474][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.569664][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.589480][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.629417][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.659364][ T25] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 334.691705][ T25] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 334.703904][ T25] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 334.726402][ T25] usb 5-1: USB disconnect, device number 29 [ 336.310555][T16331] ALSA: mixer_oss: invalid OSS volume 'P²7{*;à»é+§$p ' [ 336.317924][T16331] ALSA: mixer_oss: invalid OSS volume '' [ 336.334430][T16331] ALSA: mixer_oss: invalid OSS volume 'b$Kf®Í7?]ÿ˜‘æ3séX' [ 336.350451][T16331] ALSA: mixer_oss: invalid OSS volume 'æƒKô×?Fõg' [ 336.363205][T16331] ALSA: mixer_oss: invalid OSS volume '¢ðš.L!¼tã8©yª»à¿ÈW¶+ûÑ$N§½Jsœ' [ 336.429814][T16337] ?: renamed from vlan0 (while UP) [ 336.696708][T16348] bridge_slave_0: invalid flags given to default FDB implementation [ 337.205158][ T29] audit: type=1326 audit(1739180331.807:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16365 comm="syz.4.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 337.278591][ T29] audit: type=1326 audit(1739180331.807:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16365 comm="syz.4.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 337.300164][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.328153][ T29] audit: type=1326 audit(1739180331.817:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16365 comm="syz.4.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 337.349744][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.419465][ T29] audit: type=1326 audit(1739180331.817:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16365 comm="syz.4.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 337.459398][ T29] audit: type=1326 audit(1739180331.817:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16365 comm="syz.4.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 337.480908][ C0] vkms_vblank_simulate: vblank timer overrun [ 337.565942][ T29] audit: type=1326 audit(1739180331.817:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16365 comm="syz.4.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 337.619332][ T29] audit: type=1326 audit(1739180331.817:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16365 comm="syz.4.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 337.705953][ T29] audit: type=1326 audit(1739180331.817:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16365 comm="syz.4.3941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 337.767663][T16388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3950'. [ 337.777612][T16388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3950'. [ 338.131512][T16404] input: syz1 as /devices/virtual/input/input35 [ 338.303644][T16410] netlink: 'syz.2.3962': attribute type 39 has an invalid length. [ 338.789672][T16427] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3970'. [ 338.811264][ T29] audit: type=1326 audit(1739180333.427:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16429 comm="syz.4.3972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x0 [ 338.832398][ C0] vkms_vblank_simulate: vblank timer overrun [ 338.849271][T16427] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3970'. [ 339.009503][ T25] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 339.172948][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 339.198657][ T25] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 339.218971][ T25] usb 6-1: config 179 has no interface number 0 [ 339.239522][ T5871] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 339.251473][ T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 339.269656][ T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 339.281057][ T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.304538][ T25] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 339.328681][ T25] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 339.358477][ T25] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 339.379478][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.399443][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 339.409227][ T5871] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 339.410863][T16428] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 339.439923][ T5871] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 339.449534][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.469356][ T5871] usb 3-1: Product: syz [ 339.496272][ T5871] usb 3-1: Manufacturer: syz [ 339.505814][ T5871] usb 3-1: SerialNumber: syz [ 339.522809][ T5871] usb 3-1: config 0 descriptor?? [ 339.536048][T16438] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 339.546557][ T5871] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.788336][ T25] usb 3-1: USB disconnect, device number 29 [ 339.875615][ T5836] usb 6-1: USB disconnect, device number 24 [ 339.881699][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 339.881745][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 340.051880][T16467] sctp: [Deprecated]: syz.6.3989 (pid 16467) Use of int in max_burst socket option. [ 340.051880][T16467] Use struct sctp_assoc_value instead [ 340.156006][T16472] delete_channel: no stack [ 340.777264][ T29] audit: type=1326 audit(1739180335.387:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16502 comm="syz.5.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8e6a983da7 code=0x7ffc0000 [ 340.798799][ C0] vkms_vblank_simulate: vblank timer overrun [ 341.113555][T16517] netlink: 'syz.2.4013': attribute type 9 has an invalid length. [ 341.377789][T16529] netlink: zone id is out of range [ 341.395237][T16529] netlink: zone id is out of range [ 341.403976][T16529] netlink: zone id is out of range [ 341.412692][T16529] netlink: zone id is out of range [ 341.417953][T16529] netlink: zone id is out of range [ 341.562412][T16540] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 341.572153][T16540] syzkaller1: linktype set to 780 [ 341.847169][T16552] netlink: 'syz.2.4031': attribute type 1 has an invalid length. [ 342.310351][T16574] input: syz0 as /devices/virtual/input/input37 [ 342.462803][T16584] netem: incorrect ge model size [ 342.468385][T16584] netem: change failed [ 342.949636][ T5871] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 342.959684][ T973] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 343.159861][ T973] usb 6-1: Using ep0 maxpacket: 8 [ 343.165597][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 343.185114][ T973] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 343.194063][ T5871] usb 3-1: config 0 has an invalid interface number: 101 but max is 0 [ 343.202404][ T973] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.213619][ T5871] usb 3-1: config 0 has no interface number 0 [ 343.226464][ T973] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.239789][ T5871] usb 3-1: config 0 interface 101 has no altsetting 0 [ 343.247394][ T5871] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=59.84 [ 343.265790][ T973] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.278211][ T973] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.297941][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.308793][ T5871] usb 3-1: config 0 descriptor?? [ 343.314087][ T973] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 343.325389][ T973] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.521896][T16626] batman_adv: batadv0: Adding interface: gretap2 [ 343.528307][T16626] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 343.545933][ T5871] usb 3-1: string descriptor 0 read error: -71 [ 343.561130][ T973] usb 6-1: GET_CAPABILITIES returned 0 [ 343.580799][ T5871] usb 3-1: USB disconnect, device number 30 [ 343.586852][ T973] usbtmc 6-1:16.0: can't read capabilities [ 343.646112][T16628] program syz.4.4066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 343.774208][ T973] usb 6-1: USB disconnect, device number 25 [ 343.799392][T16632] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4069'. [ 344.067303][T16646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4072'. [ 344.772319][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 344.772337][ T29] audit: type=1400 audit(1739180339.387:363): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=16681 comm="syz.6.4090" name="61" dev="tmpfs" ino=324 [ 345.086475][T16701] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4098'. [ 345.193868][ T973] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 345.215811][ T973] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 345.247848][ T973] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz1 [ 345.291958][ T29] audit: type=1326 audit(1739180339.907:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16712 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6a98cde9 code=0x7ffc0000 [ 345.313568][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.329537][ T29] audit: type=1326 audit(1739180339.907:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16712 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6a98cde9 code=0x7ffc0000 [ 345.361948][ T29] audit: type=1326 audit(1739180339.917:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16712 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8e6a98cde9 code=0x7ffc0000 [ 345.400566][ T29] audit: type=1326 audit(1739180340.017:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16712 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6a98cde9 code=0x7ffc0000 [ 345.432110][ T29] audit: type=1326 audit(1739180340.017:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16712 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6a98cde9 code=0x7ffc0000 [ 345.454101][ T5871] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 345.472182][ T29] audit: type=1326 audit(1739180340.017:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16717 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8e6a9bf6a5 code=0x7ffc0000 [ 345.569306][ T29] audit: type=1326 audit(1739180340.167:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16717 comm="syz.5.4102" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8e6a98cde9 code=0x7ffc0000 [ 345.642232][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 345.679880][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.712932][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.722659][T16728] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4107'. [ 345.755504][ T5871] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 345.766732][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.783837][ T5871] usb 4-1: config 0 descriptor?? [ 346.017473][ T5871] usbhid 4-1:0.0: can't add hid device: -71 [ 346.031815][ T5871] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 346.199059][ T5871] usb 4-1: USB disconnect, device number 28 [ 346.656563][ T29] audit: type=1326 audit(1739180341.267:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16758 comm="syz.3.4122" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda6038cde9 code=0x0 [ 346.957334][T16771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4125'. [ 346.975537][T16771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4125'. [ 347.145361][T16779] pim6reg: entered allmulticast mode [ 347.355815][T16791] tap0: tun_chr_ioctl cmd 1074025677 [ 347.362675][T16791] tap0: linktype set to 768 [ 347.526619][ T29] audit: type=1326 audit(1739180342.137:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16797 comm="syz.5.4141" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e6a98cde9 code=0x0 [ 347.593182][T16801] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.899728][T16820] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4150'. [ 348.033551][T16824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.907054][T16848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4163'. [ 348.955481][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4164'. [ 349.616269][T16875] netlink: 'syz.6.4175': attribute type 30 has an invalid length. [ 349.676068][T16877] sctp: [Deprecated]: syz.3.4176 (pid 16877) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.676068][T16877] Use struct sctp_sack_info instead [ 349.870480][T16881] netlink: 'syz.3.4178': attribute type 29 has an invalid length. [ 350.143772][ T29] audit: type=1326 audit(1739180344.757:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.5.4188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8e6a98cde9 code=0x0 [ 350.299861][ T5825] Bluetooth: hci5: command 0x1003 tx timeout [ 350.305653][ T5829] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 351.291577][T16940] mkiss: ax0: crc mode is auto. [ 352.089563][ T5871] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 352.249417][ T973] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 352.261590][ T5871] usb 7-1: Using ep0 maxpacket: 8 [ 352.286689][ T5871] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 352.308740][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.317096][ T5871] usb 7-1: Product: syz [ 352.327242][ T5871] usb 7-1: Manufacturer: syz [ 352.332982][ T5871] usb 7-1: SerialNumber: syz [ 352.345711][ T5871] usb 7-1: config 0 descriptor?? [ 352.439851][ T973] usb 6-1: Using ep0 maxpacket: 16 [ 352.456909][ T973] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 352.469259][ T973] usb 6-1: config 0 has no interface number 0 [ 352.487484][ T973] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.514903][ T973] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 352.536353][ T973] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 352.549229][ T973] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 352.588549][ T973] usb 6-1: Product: syz [ 352.601562][ T5871] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 352.607941][ T973] usb 6-1: SerialNumber: syz [ 352.625209][ T973] usb 6-1: config 0 descriptor?? [ 352.646110][ T973] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 352.655276][ T973] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input38 [ 352.866523][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 353.016211][ T5871] gspca_sunplus: reg_w_riv err -71 [ 353.022765][ T5871] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 353.040817][ T5871] usb 7-1: USB disconnect, device number 13 [ 353.071177][ C0] cm109_urb_ctl_callback: 11 callbacks suppressed [ 353.071204][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.088848][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.090511][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4241'. [ 353.097960][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.112499][ T5869] usb 6-1: USB disconnect, device number 26 [ 353.116304][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4241'. [ 353.118641][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.134297][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 353.155475][ T5869] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 353.506148][ T29] audit: type=1326 audit(1739180348.117:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17030 comm="syz.4.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 353.527941][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.541643][ T29] audit: type=1326 audit(1739180348.117:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17030 comm="syz.4.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 353.563242][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.570079][ T29] audit: type=1326 audit(1739180348.137:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17030 comm="syz.4.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 353.600693][ T29] audit: type=1326 audit(1739180348.147:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17030 comm="syz.4.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 353.622765][ T29] audit: type=1326 audit(1739180348.147:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17030 comm="syz.4.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6fff83da7 code=0x7ffc0000 [ 353.644712][ T29] audit: type=1326 audit(1739180348.147:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17030 comm="syz.4.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fff28fb9 code=0x7ffc0000 [ 353.675067][ T29] audit: type=1326 audit(1739180348.147:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17030 comm="syz.4.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6fff83da7 code=0x7ffc0000 [ 353.696621][ C0] vkms_vblank_simulate: vblank timer overrun [ 353.703920][ T29] audit: type=1326 audit(1739180348.147:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17030 comm="syz.4.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc6fff28fb9 code=0x7ffc0000 [ 353.753178][ T29] audit: type=1326 audit(1739180348.147:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17030 comm="syz.4.4248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc6fff83da7 code=0x7ffc0000 [ 353.795923][T17033] sock: sock_set_timeout: `syz.5.4250' (pid 17033) tries to set negative timeout [ 353.969831][T17043] program syz.6.4253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.769375][ T973] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 354.959437][ T973] usb 3-1: Using ep0 maxpacket: 16 [ 354.966727][ T973] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.999628][ T973] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.035035][ T973] usb 3-1: config 0 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.064277][ T973] usb 3-1: config 0 interface 0 has no altsetting 0 [ 355.081430][ T973] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 355.109782][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.140258][ T973] usb 3-1: config 0 descriptor?? [ 355.225838][T17097] sctp: [Deprecated]: syz.3.4279 (pid 17097) Use of int in maxseg socket option. [ 355.225838][T17097] Use struct sctp_assoc_value instead [ 355.340224][T17108] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4283'. [ 355.362287][T17109] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 355.375248][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4283'. [ 355.564087][ T973] magicmouse 0003:05AC:0265.0026: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.2-1/input0 [ 355.585007][ T973] magicmouse 0003:05AC:0265.0026: magicmouse input not registered [ 355.594387][T17119] netlink: 356 bytes leftover after parsing attributes in process `syz.3.4287'. [ 355.595565][ T973] magicmouse 0003:05AC:0265.0026: probe with driver magicmouse failed with error -12 [ 355.832544][ T973] usb 3-1: USB disconnect, device number 31 [ 356.024136][T17139] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 356.870724][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4318'. [ 356.901899][T17185] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4318'. [ 356.938579][T17185] gtp0: entered promiscuous mode [ 356.953450][T17185] gtp0: entered allmulticast mode [ 357.547545][T17217] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4334'. [ 357.939400][ T5836] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 358.007734][T17242] bridge0: entered promiscuous mode [ 358.014606][T17242] macvlan4: entered promiscuous mode [ 358.096636][ T5836] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 358.108063][ T5836] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 358.125690][ T5836] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 358.137557][ T5836] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 358.147363][ T25] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 358.155294][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.163625][ T5836] usb 5-1: Product: syz [ 358.167933][ T5836] usb 5-1: Manufacturer: syz [ 358.173468][ T5836] usb 5-1: SerialNumber: syz [ 358.219509][T14929] wlan1: Trigger new scan to find an IBSS to join [ 358.323168][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 358.349083][ T25] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.377228][ T25] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 358.392716][ T25] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 358.409059][ T25] usb 7-1: config 0 interface 0 has no altsetting 0 [ 358.429366][ T25] usb 7-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 358.438483][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.462257][ T25] usb 7-1: config 0 descriptor?? [ 358.808969][ T5836] usb 5-1: 0:2 : does not exist [ 359.018241][ T973] usb 5-1: USB disconnect, device number 30 [ 359.241486][ T25] corsair-cpro 0003:1B1C:0C10.0027: hidraw0: USB HID v0.00 Device [HID 1b1c:0c10] on usb-dummy_hcd.6-1/input0 [ 359.643576][T17293] hsr_slave_0: left promiscuous mode [ 359.653423][T17293] hsr_slave_1: left promiscuous mode [ 359.700815][ T25] corsair-cpro 0003:1B1C:0C10.0027: probe with driver corsair-cpro failed with error -110 [ 359.714458][ T25] usb 7-1: USB disconnect, device number 14 [ 359.791812][T17297] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4371'. [ 359.884243][T17301] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 359.902315][T17301] macsec1: entered promiscuous mode [ 359.907705][T17301] macsec1: entered allmulticast mode [ 359.914639][ T58] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 359.922937][T17301] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 360.071107][ T58] usb 6-1: config 0 has no interfaces? [ 360.076903][ T58] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 360.109274][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.137946][ T58] usb 6-1: config 0 descriptor?? [ 360.354504][ T58] usb 6-1: USB disconnect, device number 27 [ 360.550775][T17334] geneve2: entered promiscuous mode [ 360.556736][T17334] geneve2: entered allmulticast mode [ 360.722887][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 360.722905][ T29] audit: type=1326 audit(1739180355.327:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17338 comm="syz.4.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 360.785904][ T29] audit: type=1326 audit(1739180355.327:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17338 comm="syz.4.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 360.826444][ T29] audit: type=1326 audit(1739180355.327:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17338 comm="syz.4.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 360.848005][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.859995][ T29] audit: type=1326 audit(1739180355.327:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17338 comm="syz.4.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 360.881560][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.893760][T17343] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 360.909283][ T29] audit: type=1326 audit(1739180355.327:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17338 comm="syz.4.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 360.930849][ C0] vkms_vblank_simulate: vblank timer overrun [ 360.948426][T17342] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 360.967889][ T29] audit: type=1326 audit(1739180355.367:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17338 comm="syz.4.4388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6fff8cde9 code=0x7ffc0000 [ 361.062641][ T973] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 361.231081][ T973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.246405][ T973] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 361.261088][T14940] wlan1: Trigger new scan to find an IBSS to join [ 361.267667][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.288304][ T973] usb 5-1: config 0 descriptor?? [ 361.906707][ T973] razer 0003:1532:010E.0028: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0 [ 361.992564][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4405'. [ 362.108744][ T973] usb 5-1: USB disconnect, device number 31 [ 363.093096][ T29] audit: type=1326 audit(1739180357.707:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17399 comm="syz.6.4416" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f340618cde9 code=0x0 [ 363.114146][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.176518][ T5829] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 363.348547][T17393] syz.5.4414 (17393): drop_caches: 2 [ 363.348774][T17405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4419'. [ 363.697570][T17418] netlink: 'syz.4.4426': attribute type 1 has an invalid length. [ 363.712965][T17418] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.4426'. [ 363.825774][T17423] netlink: 312 bytes leftover after parsing attributes in process `syz.5.4427'. [ 364.113070][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4434'. [ 364.148719][T17438] kvm: kvm [17436]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x40 [ 364.177837][T17440] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4436'. [ 364.231606][ T11] wlan1: Trigger new scan to find an IBSS to join [ 364.978995][T17484] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4457'. [ 365.104265][T17491] pim6reg: entered allmulticast mode [ 365.117251][T17490] pim6reg: left allmulticast mode [ 365.188109][T14940] wlan1: Creating new IBSS network, BSSID 26:ba:31:7a:ca:55 [ 367.273373][ T5829] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 367.282083][ T5829] Bluetooth: hci3: Injecting HCI hardware error event [ 367.293903][ T5825] Bluetooth: hci3: hardware error 0x00 [ 367.475081][T17597] kvm: kvm [17596]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x98b5 [ 367.700029][T17615] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4515'. [ 368.511001][T17648] input: syz0 as /devices/virtual/input/input39 [ 368.878188][T17671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 369.167915][T17689] tipc: Started in network mode [ 369.174433][T17689] tipc: Node identity ff, cluster identity 4711 [ 369.180970][T17689] tipc: Enabling of bearer rejected, failed to enable media [ 369.219554][ T973] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 369.220127][ T25] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 369.370757][ T973] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.389360][ T973] usb 6-1: config 0 has no interfaces? [ 369.404914][ T25] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 369.405523][ T973] usb 6-1: New USB device found, idVendor=1199, idProduct=0120, bcdDevice=31.50 [ 369.419540][ T5825] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 369.429374][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.439956][ T25] usb 3-1: config 0 has no interface number 0 [ 369.446078][ T25] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 369.457542][ T25] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 369.469017][ T25] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 369.482480][ T25] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 369.491611][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.498609][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.508785][ T25] usb 3-1: config 0 descriptor?? [ 369.513879][ T973] usb 6-1: Product: syz [ 369.513898][ T973] usb 6-1: Manufacturer: syz [ 369.531644][T17679] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 369.533143][ T973] usb 6-1: SerialNumber: syz [ 369.563911][ T25] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 369.567257][ T973] usb 6-1: config 0 descriptor?? [ 369.754258][ T25] usb 3-1: USB disconnect, device number 32 [ 369.760420][T14939] usb 3-1: Failed to submit usb control message: -71 [ 369.781847][T14939] usb 3-1: unable to send the bmi data to the device: -71 [ 369.799315][T14939] usb 3-1: unable to get target info from device [ 369.806688][T14939] usb 3-1: could not get target info (-71) [ 369.818717][T14939] usb 3-1: could not probe fw (-71) [ 369.832790][ T5836] usb 6-1: USB disconnect, device number 28 [ 370.359530][T17738] can0: slcan on ttyS3. [ 370.434222][T17738] can0 (unregistered): slcan off ttyS3. [ 370.449516][T17738] Falling back ldisc for ttyS3. [ 370.996771][T17764] input: syz0 as /devices/virtual/input/input40 [ 371.100397][T17768] syz_tun: entered allmulticast mode [ 371.127182][T17768] dvmrp8: entered allmulticast mode [ 371.148640][T17767] syz_tun: left allmulticast mode [ 371.197931][T17767] dvmrp8: left allmulticast mode [ 371.679305][ T5871] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 371.839387][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 371.847089][ T5871] usb 5-1: config 1 has an invalid interface number: 128 but max is 1 [ 371.869787][ T5871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.900187][ T5871] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 371.929357][ T5871] usb 5-1: config 1 has no interface number 0 [ 371.935994][ T5871] usb 5-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.962473][ T5871] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.971825][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.980140][ T5871] usb 5-1: Product: syz [ 371.985593][ T5871] usb 5-1: Manufacturer: syz [ 371.992876][ T5871] usb 5-1: SerialNumber: syz [ 372.007721][ T5871] cdc_wdm 5-1:1.128: skipping garbage [ 372.016812][ T5871] cdc_wdm 5-1:1.128: invalid descriptor buffer length [ 372.029354][ T5871] cdc_wdm 5-1:1.128: probe with driver cdc_wdm failed with error -22 [ 372.291908][ T25] usb 5-1: USB disconnect, device number 32 [ 373.057284][ T29] audit: type=1326 audit(1739180367.667:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340618cde9 code=0x7ffc0000 [ 373.078881][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.110408][ T29] audit: type=1326 audit(1739180367.667:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340618cde9 code=0x7ffc0000 [ 373.147391][ T29] audit: type=1326 audit(1739180367.697:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f340618cde9 code=0x7ffc0000 [ 373.249532][ T29] audit: type=1326 audit(1739180367.697:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340618cde9 code=0x7ffc0000 [ 373.278229][ T29] audit: type=1326 audit(1739180367.697:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340618cde9 code=0x7ffc0000 [ 373.329004][ T29] audit: type=1326 audit(1739180367.697:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f340618cde9 code=0x7ffc0000 [ 373.421592][ T29] audit: type=1326 audit(1739180367.697:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340618cde9 code=0x7ffc0000 [ 373.465691][ T29] audit: type=1326 audit(1739180367.697:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340618cde9 code=0x7ffc0000 [ 373.524655][ T29] audit: type=1326 audit(1739180367.697:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f340618cde9 code=0x7ffc0000 [ 373.546140][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.570276][ T29] audit: type=1326 audit(1739180367.697:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17849 comm="syz.6.4623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f340618cde9 code=0x7ffc0000 [ 374.729290][ T5869] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 374.899506][ T5869] usb 6-1: Using ep0 maxpacket: 16 [ 374.908778][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.938972][ T5869] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.950385][ T5869] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 374.960248][T17935] netlink: 'syz.2.4665': attribute type 3 has an invalid length. [ 375.034278][ T5869] usb 6-1: New USB device found, idVendor=045e, idProduct=9994, bcdDevice=fc.3c [ 375.046339][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.071285][ T5869] usb 6-1: config 0 descriptor?? [ 375.284864][T17915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.293973][T17915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.389365][ T973] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 375.513708][ T5869] hid-generic 0003:045E:9994.0029: unknown main item tag 0x0 [ 375.532281][ T5869] hid-generic 0003:045E:9994.0029: unknown main item tag 0x0 [ 375.545093][ T5869] hid-generic 0003:045E:9994.0029: unknown main item tag 0x0 [ 375.555227][ T5869] hid-generic 0003:045E:9994.0029: unknown main item tag 0x0 [ 375.564172][ T973] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 375.573851][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.582398][ T5869] hid-generic 0003:045E:9994.0029: unknown main item tag 0x0 [ 375.592077][ T973] usb 5-1: config 0 descriptor?? [ 375.597182][ T5869] hid-generic 0003:045E:9994.0029: unknown main item tag 0x0 [ 375.605981][ T5869] hid-generic 0003:045E:9994.0029: unknown main item tag 0x0 [ 375.613659][ T5869] hid-generic 0003:045E:9994.0029: unknown main item tag 0x0 [ 375.623373][ T973] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 375.629763][ T5869] hid-generic 0003:045E:9994.0029: unbalanced collection at end of report description [ 375.640338][ T5869] hid-generic 0003:045E:9994.0029: probe with driver hid-generic failed with error -22 [ 375.744050][ T5836] usb 6-1: USB disconnect, device number 29 [ 376.039290][ T973] cpia1 5-1:0.0: unexpected state after lo power cmd: d0 [ 376.240090][T17979] serio: Serial port ptm0 [ 376.431276][ T973] gspca_cpia1: usb_control_msg 02, error -71 [ 376.443057][ T973] gspca_cpia1: usb_control_msg 05, error -71 [ 376.450565][ T973] cpia1 5-1:0.0: unexpected systemstate: d0 [ 376.458372][ T973] usb 5-1: USB disconnect, device number 33 [ 376.752856][T17992] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4692'. [ 378.129398][ T973] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 378.337704][ T973] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 378.354346][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.365759][ T973] usb 4-1: config 0 descriptor?? [ 378.410251][ T973] cp210x 4-1:0.0: cp210x converter detected [ 378.814232][ T973] usb 4-1: cp210x converter now attached to ttyUSB0 [ 378.943987][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.950557][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.020557][ T5836] usb 4-1: USB disconnect, device number 29 [ 379.030380][ T5836] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 379.089415][ T5836] cp210x 4-1:0.0: device disconnected [ 379.937234][T18064] netlink: 'syz.5.4724': attribute type 2 has an invalid length. [ 380.135361][T18076] netlink: 'syz.3.4728': attribute type 7 has an invalid length. [ 380.744426][T17997] Set syz1 is full, maxelem 65536 reached [ 380.848481][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4736'. [ 380.959326][ T973] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 381.128192][ T973] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 381.138513][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.160317][ T973] usb 3-1: config 0 descriptor?? [ 381.167267][ T973] cp210x 3-1:0.0: cp210x converter detected [ 381.571885][ T973] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 381.603666][ T973] usb 3-1: cp210x converter now attached to ttyUSB0 [ 381.804414][ T973] usb 3-1: USB disconnect, device number 33 [ 381.813984][ T973] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 381.857017][ T973] cp210x 3-1:0.0: device disconnected [ 381.887606][T18129] netlink: 71 bytes leftover after parsing attributes in process `syz.5.4755'. [ 382.123223][T18144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4761'. [ 382.379924][T18156] input: syz0 as /devices/virtual/input/input41 [ 382.735245][T18177] input: syz1 as /devices/virtual/input/input42 [ 382.781232][ T5836] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 382.941985][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.962699][ T5836] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.993050][ T5836] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 383.002748][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.028592][ T5836] usb 7-1: config 0 descriptor?? [ 383.189717][ T58] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 383.266329][T18205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4788'. [ 383.359633][ T58] usb 6-1: Using ep0 maxpacket: 16 [ 383.372137][ T58] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 383.387410][ T58] usb 6-1: config 0 has no interface number 0 [ 383.394054][ T58] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 383.404831][ T58] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 383.418638][ T58] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 383.433464][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.442042][ T58] usb 6-1: Product: syz [ 383.446584][ T58] usb 6-1: Manufacturer: syz [ 383.452316][ T58] usb 6-1: SerialNumber: syz [ 383.460019][ T5836] corsair 0003:1B1C:1B3E.002A: unknown main item tag 0x0 [ 383.467948][ T5836] corsair 0003:1B1C:1B3E.002A: unknown main item tag 0x0 [ 383.476179][ T5836] corsair 0003:1B1C:1B3E.002A: item fetching failed at offset 2/5 [ 383.485483][ T58] usb 6-1: config 0 descriptor?? [ 383.490675][ T5869] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 383.503331][T18192] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 383.519539][T18192] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 383.520200][ T5836] corsair 0003:1B1C:1B3E.002A: parse failed [ 383.539742][ T5836] corsair 0003:1B1C:1B3E.002A: probe with driver corsair failed with error -22 [ 383.650789][ T5869] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 383.674986][ T5869] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 383.681872][ T5836] usb 7-1: USB disconnect, device number 15 [ 383.686591][ T5869] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 383.760132][T18192] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 383.768058][ T5869] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 383.789646][T18192] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 383.797766][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.811100][T18204] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 384.411063][ T58] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 384.429635][ T58] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 384.449933][ T58] asix 6-1:0.251: probe with driver asix failed with error -71 [ 384.478186][ T58] usb 6-1: USB disconnect, device number 30 [ 384.629633][ T25] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 384.779419][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 384.786474][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 384.803784][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 384.826793][ T25] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 384.841976][ T25] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 384.868177][ T25] usb 3-1: Product: syz [ 384.874498][ T5869] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 384.889515][ T25] usb 3-1: Manufacturer: syz [ 384.893375][ T5869] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input43 [ 384.894142][ T25] usb 3-1: SerialNumber: syz [ 384.951384][ T25] usb 3-1: config 0 descriptor?? [ 384.976938][ C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 384.985258][ T5869] usb 4-1: USB disconnect, device number 30 [ 385.004994][T18250] ALSA: mixer_oss: invalid OSS volume 'DIG¨TAL1' [ 385.221503][ T25] usb 3-1: USB disconnect, device number 34 [ 385.848871][T18286] nbd: nbd3 already in use [ 385.895703][T18290] netem: unknown loss type 0 [ 385.939570][T18290] netem: change failed [ 386.086445][T18298] netlink: 'syz.3.4829': attribute type 1 has an invalid length. [ 386.111064][T18298] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4829'. [ 386.763338][T18336] cifs: Unknown parameter 'mode' [ 387.000674][T18347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4852'. [ 387.530461][T18370] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 387.771495][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4867'. [ 387.801723][T18383] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4867'. [ 387.832045][T18383] gtp1: entered promiscuous mode [ 387.837189][T18383] gtp1: entered allmulticast mode [ 387.976036][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 387.976049][ T29] audit: type=1326 audit(1739180382.587:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18389 comm="syz.5.4870" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e6a98cde9 code=0x0 [ 388.079382][ T5869] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 388.241141][ T5869] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 388.259234][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.277828][ T5869] usb 3-1: Product: syz [ 388.282473][ T5869] usb 3-1: Manufacturer: syz [ 388.289240][ T5869] usb 3-1: SerialNumber: syz [ 388.312651][ T5869] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 388.491530][ T5871] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 388.959573][ T25] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 388.976969][T18420] macsec0: entered promiscuous mode [ 388.984917][T18420] macsec2: entered allmulticast mode [ 388.997344][T18420] macsec0: entered allmulticast mode [ 389.005836][T18420] veth1_macvtap: entered allmulticast mode [ 389.127786][ T58] usb 3-1: USB disconnect, device number 35 [ 389.150872][ T25] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 389.169129][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.184914][ T25] usb 5-1: Product: syz [ 389.191055][ T25] usb 5-1: Manufacturer: syz [ 389.191360][T18428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4887'. [ 389.195900][ T25] usb 5-1: SerialNumber: syz [ 389.224381][ T25] usb 5-1: config 0 descriptor?? [ 389.539549][ T25] usb 5-1: USB disconnect, device number 34 [ 389.979473][ T5871] usb 3-1: Service connection timeout for: 257 [ 389.989391][ T5871] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 390.031508][ T5871] ath9k_htc: Failed to initialize the device [ 390.040343][ T58] usb 3-1: ath9k_htc: USB layer deinitialized [ 390.364032][ T5871] kernel write not supported for file /sequencer (pid: 5871 comm: kworker/0:6) [ 390.879581][ T5868] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 391.039488][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 391.042736][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.042770][ T5868] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.042792][ T5868] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.042826][ T5868] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 391.042859][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.045527][ T5868] usb 6-1: config 0 descriptor?? [ 391.483345][ T5868] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 391.509118][ T5868] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 391.536774][ T5868] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 391.544740][ T5868] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 391.562380][ T5868] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 391.577327][ T5868] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 391.597297][ T5868] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 391.607091][ T5868] microsoft 0003:045E:07DA.002B: unknown main item tag 0x4 [ 391.616181][ T5868] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 391.629072][T18525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4935'. [ 391.633998][ T5868] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 391.660235][ T5868] microsoft 0003:045E:07DA.002B: No inputs registered, leaving [ 391.679410][ T5868] microsoft 0003:045E:07DA.002B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 391.704457][ T5868] microsoft 0003:045E:07DA.002B: no inputs found [ 391.710958][ T5868] microsoft 0003:045E:07DA.002B: could not initialize ff, continuing anyway [ 391.724143][ T5868] usb 6-1: USB disconnect, device number 31 [ 391.928228][T18537] hsr0: entered promiscuous mode [ 391.936789][T18537] macvtap1: entered allmulticast mode [ 391.957954][T18537] hsr0: entered allmulticast mode [ 391.963214][T18537] hsr_slave_0: entered allmulticast mode [ 391.969647][T18537] hsr_slave_1: entered allmulticast mode [ 391.978551][T18537] hsr0: left allmulticast mode [ 391.993071][T18537] hsr_slave_0: left allmulticast mode [ 391.998573][T18537] hsr_slave_1: left allmulticast mode [ 392.203687][T18547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4944'. [ 393.589423][ T5868] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 393.751760][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.771711][T18612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.779051][T18612] IPv6: NLM_F_CREATE should be set when creating new route [ 393.786345][T18612] IPv6: NLM_F_CREATE should be set when creating new route [ 393.793652][T18612] IPv6: NLM_F_CREATE should be set when creating new route [ 393.809415][ T5868] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.826458][ T5868] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 393.849310][ T5868] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.870095][ T5868] usb 7-1: config 0 descriptor?? [ 393.879388][ T5869] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 394.031905][ T5869] usb 3-1: config 0 interface 0 has no altsetting 0 [ 394.044512][ T5869] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 394.059363][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.088633][ T5869] usb 3-1: config 0 descriptor?? [ 394.329816][ T5868] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 394.349614][ T5868] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 394.367565][ T5868] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 394.377647][ T5868] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 394.397939][ T5868] playstation 0003:054C:0DF2.002C: unknown main item tag 0x0 [ 394.408280][ T5868] playstation 0003:054C:0DF2.002C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 394.522452][ T5868] playstation 0003:054C:0DF2.002C: Invalid byte count transferred, expected 20 got 0 [ 394.532824][ T5868] playstation 0003:054C:0DF2.002C: Failed to retrieve DualSense pairing info: -22 [ 394.549353][ T5868] playstation 0003:054C:0DF2.002C: Failed to get MAC address from DualSense [ 394.579355][ T5868] playstation 0003:054C:0DF2.002C: Failed to create dualsense. [ 394.589527][ T5868] playstation 0003:054C:0DF2.002C: probe with driver playstation failed with error -22 [ 394.741695][ T25] usb 7-1: USB disconnect, device number 16 [ 394.924824][ T5869] video4linux radio48: keene_cmd_main failed (-71) [ 394.932043][ T5869] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 394.944006][ T5869] usb 3-1: USB disconnect, device number 36 [ 395.199368][ T5868] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 395.265357][T14929] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 395.369402][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 395.379286][ T5868] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 18273, setting to 1024 [ 395.398452][ T5868] usb 6-1: config 0 interface 0 has no altsetting 0 [ 395.442255][ T5868] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 395.462834][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.492961][ T5868] usb 6-1: config 0 descriptor?? [ 395.498649][T18657] Failed to get privilege flags for destination (handle=0x2:0x0) [ 395.510955][T18641] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 395.609933][T18663] block nbd3: not configured, cannot reconfigure [ 395.811308][ T58] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 395.969601][ T58] usb 3-1: Using ep0 maxpacket: 32 [ 395.970569][ T5868] cougar 0003:060B:500A.002D: usage count exceeds max: fixing up report descriptor [ 395.985831][ T5868] cougar 0003:060B:500A.002D: unexpected long global item [ 395.990234][ T58] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 395.993661][ T5868] cougar 0003:060B:500A.002D: parse failed [ 396.016005][ T5868] cougar 0003:060B:500A.002D: probe with driver cougar failed with error -22 [ 396.027086][ T58] usb 3-1: config 0 has no interface number 0 [ 396.041747][ T58] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 396.059456][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.078205][ T58] usb 3-1: Product: syz [ 396.084177][ T58] usb 3-1: Manufacturer: syz [ 396.094635][ T58] usb 3-1: SerialNumber: syz [ 396.110167][ T58] usb 3-1: config 0 descriptor?? [ 396.118278][ T58] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 396.188337][ T5868] usb 6-1: USB disconnect, device number 32 [ 396.681236][ C1] usb-serial ttyUSB0: qt2_process_read_urb - unsupported command 99 [ 396.692140][ T58] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 396.705173][ T58] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 396.779400][ T5868] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 396.908176][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 396.908584][ T973] usb 3-1: USB disconnect, device number 37 [ 396.941820][ T973] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 396.954113][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 396.969828][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 396.982935][ T973] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 396.994911][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 397.006941][ T5871] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 397.015056][ T973] quatech2 3-1:0.51: device disconnected [ 397.028868][ T5868] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 397.038222][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.046303][ T5868] usb 4-1: Product: syz [ 397.050670][ T5868] usb 4-1: Manufacturer: syz [ 397.055305][ T5868] usb 4-1: SerialNumber: syz [ 397.062477][ T5868] usb 4-1: config 0 descriptor?? [ 397.068086][T18698] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 397.078775][T18698] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 397.089958][ T5868] usb 4-1: ucan: probing device on interface #0 [ 397.140056][ T5869] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 397.190696][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 397.197221][ T5871] usb 5-1: config 0 has no interfaces? [ 397.203911][ T5871] usb 5-1: config 0 has no interfaces? [ 397.211722][ T5871] usb 5-1: config 0 has no interfaces? [ 397.218943][ T5871] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 397.228266][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.236397][ T5871] usb 5-1: Product: syz [ 397.240834][ T5871] usb 5-1: Manufacturer: syz [ 397.245517][ T5871] usb 5-1: SerialNumber: syz [ 397.256388][ T5871] usb 5-1: config 0 descriptor?? [ 397.342243][ T5869] usb 7-1: unable to get BOS descriptor or descriptor too short [ 397.352076][ T5869] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 397.359804][ T5869] usb 7-1: can't read configurations, error -71 [ 397.470968][ T58] usb 5-1: USB disconnect, device number 35 [ 397.905617][ T5868] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 397.923863][ T5868] usb 4-1: USB disconnect, device number 31 [ 398.587736][T18749] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 398.935284][T18767] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5040'. [ 399.335611][T18790] program syz.4.5050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.353848][T18792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5051'. [ 399.423173][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5052'. [ 399.525193][T18799] netlink: 243 bytes leftover after parsing attributes in process `syz.3.5056'. [ 399.536827][T18799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.550160][ C1] sd 0:0:1:0: [sda] tag#5109 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 399.560703][ C1] sd 0:0:1:0: [sda] tag#5109 CDB: Read(6) 08 00 00 00 00 00 [ 399.856668][T18813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5061'. [ 400.226393][ T5836] kernel write not supported for file /input/event2 (pid: 5836 comm: kworker/1:4) [ 400.555412][T18850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5078'. [ 401.039420][T18868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5087'. [ 401.089655][ T25] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 401.279473][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.307148][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.324347][ T25] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 401.336208][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.367571][ T25] usb 3-1: config 0 descriptor?? [ 402.195694][ T25] hid-led 0003:27B8:01ED.002E: probe with driver hid-led failed with error -71 [ 402.217906][ T25] usb 3-1: USB disconnect, device number 38 [ 403.369579][ T25] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 403.519411][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 403.534263][ T25] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 403.557556][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.589706][ T25] usb 5-1: Product: syz [ 403.597071][ T25] usb 5-1: Manufacturer: syz [ 403.602943][ T25] usb 5-1: SerialNumber: syz [ 403.611069][ T25] usb 5-1: config 0 descriptor?? [ 403.627612][ T25] gspca_main: sq930x-2.14.0 probing 2770:930c [ 403.646886][T18972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5134'. [ 404.010103][T18988] netlink: 'syz.3.5142': attribute type 1 has an invalid length. [ 404.029782][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5142'. [ 404.445813][ T25] gspca_sq930x: ucbus_write failed -71 [ 404.554016][T19010] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5152'. [ 404.573747][T19010] sch_fq: defrate 2 ignored. [ 404.679262][ T25] gspca_sq930x: Sensor ov9630 not yet treated [ 404.699336][ T25] sq930x 5-1:0.0: probe with driver sq930x failed with error -22 [ 404.729101][ T25] usb 5-1: USB disconnect, device number 36 [ 405.044126][ T29] audit: type=1326 audit(1739180399.657:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19024 comm="syz.3.5160" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fda6038cde9 code=0x0 [ 405.733460][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5173'. [ 405.753334][T19057] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5173'. [ 405.889734][ T5869] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 406.029486][ T5868] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 406.069528][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 406.081213][ T5869] usb 6-1: config index 0 descriptor too short (expected 50962, got 18) [ 406.096065][ T5869] usb 6-1: config 134 has too many interfaces: 172, using maximum allowed: 32 [ 406.108245][ T5869] usb 6-1: config 134 has an invalid descriptor of length 0, skipping remainder of the config [ 406.120290][ T5869] usb 6-1: config 134 has 0 interfaces, different from the descriptor's value: 172 [ 406.133629][ T5869] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 406.143670][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.152023][T19072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5179'. [ 406.161801][ T5869] usb 6-1: Product: syz [ 406.165985][ T5869] usb 6-1: Manufacturer: syz [ 406.171189][ T5869] usb 6-1: SerialNumber: syz [ 406.222623][ T5868] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 406.241568][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.254214][ T5868] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.266807][ T5868] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 406.280215][ T5868] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 406.289598][ T5868] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.301827][ T5868] usb 5-1: config 0 descriptor?? [ 406.319819][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 406.471104][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.482494][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.496012][ T25] usb 3-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 406.505757][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.519725][ T5871] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 406.526656][ T25] usb 3-1: config 0 descriptor?? [ 406.628028][ T5836] usb 6-1: USB disconnect, device number 33 [ 406.679448][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 406.699104][ T5871] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 406.708640][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 406.726739][ T5868] hid-picolcd 0003:04D8:C002.002F: item fetching failed at offset 5/7 [ 406.736922][ T5871] usb 4-1: Product: syz [ 406.741962][ T5868] hid-picolcd 0003:04D8:C002.002F: device report parse failed [ 406.749658][ T5871] usb 4-1: Manufacturer: syz [ 406.754285][ T5871] usb 4-1: SerialNumber: syz [ 406.766051][ T5868] hid-picolcd 0003:04D8:C002.002F: probe with driver hid-picolcd failed with error -22 [ 406.777655][ T5871] usb 4-1: config 0 descriptor?? [ 406.932716][ T5822] usb 5-1: USB disconnect, device number 37 [ 406.942679][ T25] wacom 0003:056A:0031.0030: hidraw0: USB HID v0.00 Device [HID 056a:0031] on usb-dummy_hcd.2-1/input0 [ 407.007249][ T25] usb 4-1: USB disconnect, device number 32 [ 407.153520][ T5869] usb 3-1: USB disconnect, device number 39 [ 408.716815][T19146] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5211'. [ 408.978604][T19154] program syz.3.5218 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 409.029513][ T5822] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 409.210862][ T5822] usb 3-1: config index 0 descriptor too short (expected 1298, got 18) [ 409.239421][ T5822] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 409.261717][ T5822] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 409.295323][ T5822] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 409.307344][ T5822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.329418][ T5822] usb 3-1: Product: syz [ 409.333636][ T5822] usb 3-1: Manufacturer: syz [ 409.364395][ T5822] usb 3-1: SerialNumber: syz [ 409.389925][ T5822] usb 3-1: config 0 descriptor?? [ 409.505152][T19174] openvswitch: netlink: nsh attribute has 65512 unknown bytes. [ 409.534136][T19174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.719033][T19183] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5231'. [ 410.090920][ T5871] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 410.224209][ T5822] usb 3-1: Firmware version (0.0) predates our first public release. [ 410.235922][ T5822] usb 3-1: Please update to version 0.2 or newer [ 410.269465][ T5871] usb 6-1: Using ep0 maxpacket: 32 [ 410.285057][ T5822] usb 3-1: USB disconnect, device number 40 [ 410.295043][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 410.309040][ T5871] usb 6-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 410.343298][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.380277][ T5871] usb 6-1: config 0 descriptor?? [ 410.827634][ T5871] holtek_mouse 0003:04D9:A072.0031: hidraw0: USB HID v0.03 Device [HID 04d9:a072] on usb-dummy_hcd.5-1/input0 [ 411.031282][T19236] serio: Serial port ttynull [ 411.047970][ T5822] usb 6-1: USB disconnect, device number 34 [ 411.234823][T19228] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.242392][T19228] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.307781][T19249] netlink: 'syz.6.5259': attribute type 2 has an invalid length. [ 411.450329][ T5871] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 411.621223][ T5871] usb 4-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 411.656131][ T5871] usb 4-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 411.699447][ T5871] usb 4-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 411.741061][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.756923][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 411.777947][T19228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.779570][ T5871] usb 4-1: SerialNumber: syz [ 411.852260][T19228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.022181][ T5871] rndis_host 4-1:253.0: RNDIS init failed, -71 [ 412.034596][ T5871] rndis_host 4-1:253.0: probe with driver rndis_host failed with error -71 [ 412.067727][ T5871] usb 4-1: USB disconnect, device number 33 [ 412.268944][T19228] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.288067][T19228] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.297294][T19228] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.306343][T19228] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.445127][T19228] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 412.461449][T19228] macsec1: left promiscuous mode [ 412.466603][T19228] macsec1: left allmulticast mode [ 412.733732][T19284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5275'. [ 413.134053][T19302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.159872][ T5868] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 413.339471][ T5868] usb 6-1: Using ep0 maxpacket: 16 [ 413.371957][ T5868] usb 6-1: config 0 has no interfaces? [ 413.381099][ T5868] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.402336][ T5868] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 413.426880][ T5868] usb 6-1: SerialNumber: syz [ 413.448323][ T5868] usb 6-1: config 0 descriptor?? [ 413.679077][ T5868] usb 6-1: USB disconnect, device number 35 [ 413.806819][T19333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5299'. [ 414.181277][T19356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.272172][ T5825] Bluetooth: hci4: unexpected event 0x2c length: 4 < 17 [ 414.669549][ T5822] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 414.819581][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 414.850360][ T5822] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 414.858787][ T5822] usb 4-1: config 0 has no interface number 0 [ 414.879239][ T5822] usb 4-1: config 0 interface 88 has no altsetting 0 [ 414.889555][ T5822] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 414.898863][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.912057][ T5822] usb 4-1: Product: syz [ 414.916246][ T5822] usb 4-1: Manufacturer: syz [ 414.935607][T19390] Process accounting resumed [ 414.939711][ T5822] usb 4-1: SerialNumber: syz [ 414.962219][ T5822] usb 4-1: config 0 descriptor?? [ 414.990989][ T5822] gspca_main: se401-2.14.0 probing 047d:5003 [ 415.549417][ T5822] usb 4-1: reset high-speed USB device number 34 using dummy_hcd [ 416.009559][ T5868] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 416.160905][ T5822] gspca_se401: read req failed req 0x06 error -71 [ 416.167457][ T5822] se401 4-1:0.88: probe with driver se401 failed with error -71 [ 416.186457][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 416.193710][ T5822] usb 4-1: USB disconnect, device number 34 [ 416.201992][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.222335][ T5868] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 416.247393][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.263938][ T5868] usb 3-1: config 0 descriptor?? [ 416.683388][ T5868] lua 0003:1E7D:2C2E.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.2-1/input0 [ 416.883240][ T5868] usb 3-1: USB disconnect, device number 41 [ 417.419540][ T5822] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 417.560450][ T5869] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 417.579328][ T5822] usb 5-1: Using ep0 maxpacket: 32 [ 417.592123][ T5822] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 417.606956][ T5822] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 417.617097][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.625514][ T5822] usb 5-1: Product: syz [ 417.630150][ T5822] usb 5-1: Manufacturer: syz [ 417.634769][ T5822] usb 5-1: SerialNumber: syz [ 417.645217][ T5822] usb 5-1: config 0 descriptor?? [ 417.653179][ T5822] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 417.719655][ T58] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 417.738700][ T5869] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.759246][ T5869] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 417.779894][ T5869] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 417.788965][ T5869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 417.798529][ T5869] usb 6-1: SerialNumber: syz [ 417.859092][ T5822] usb 5-1: USB disconnect, device number 38 [ 417.872478][ T58] usb 7-1: config 1 has an invalid interface number: 3 but max is 1 [ 417.889240][ T58] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.900124][ T58] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 417.909101][ T58] usb 7-1: config 1 has no interface number 2 [ 417.928491][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 417.952428][ T58] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 417.963749][ T58] usb 7-1: config 1 interface 3 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 417.981168][ T58] usb 7-1: config 1 interface 3 has no altsetting 0 [ 417.991253][ T58] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.001847][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.010486][ T58] usb 7-1: Product: syz [ 418.014939][ T58] usb 7-1: Manufacturer: syz [ 418.016086][ T5869] usb 6-1: 0:2 : does not exist [ 418.034883][ T5869] usb 6-1: USB disconnect, device number 36 [ 418.052134][ T58] usb 7-1: SerialNumber: syz [ 418.075749][T19496] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 418.092008][ T58] usb 7-1: selecting invalid altsetting 1 [ 418.523170][ T58] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 418.619278][ T58] cdc_ncm 7-1:1.0: bind() failure [ 418.627627][ T58] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 418.647667][ T58] cdc_ncm 7-1:1.1: bind() failure [ 418.879424][ T5836] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 418.897833][ T5822] usb 7-1: USB disconnect, device number 19 [ 419.209281][ T58] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 419.317164][T19566] loop9: detected capacity change from 0 to 1 [ 419.324414][T19566] Dev loop9: unable to read RDB block 1 [ 419.331523][T19566] loop9: unable to read partition table [ 419.337334][T19566] loop9: partition table beyond EOD, truncated [ 419.344306][T19566] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 419.362001][ T58] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.386223][ T58] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 419.395614][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.411785][ T58] usb 5-1: config 0 descriptor?? [ 419.628735][ T25] usb 5-1: USB disconnect, device number 39 [ 419.669328][ T58] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 419.826118][T19579] program syz.6.5412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.832402][ T58] usb 3-1: Using ep0 maxpacket: 8 [ 419.848728][ T58] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.872096][ T58] usb 3-1: config 0 has no interfaces? [ 419.882915][ T58] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 419.897837][ T58] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 419.906392][ T58] usb 3-1: Product: syz [ 419.913334][ T58] usb 3-1: Manufacturer: syz [ 419.918039][ T58] usb 3-1: SerialNumber: syz [ 419.932294][ T58] usb 3-1: config 0 descriptor?? [ 420.159811][ T58] usb 3-1: USB disconnect, device number 42 [ 420.209601][ T5869] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 420.372771][ T5869] usb 4-1: Using ep0 maxpacket: 8 [ 420.389856][ T5869] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 420.398390][ T5869] usb 4-1: config 0 has no interface number 0 [ 420.405146][ T5869] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 420.416164][ T5869] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 420.429493][ T5869] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 420.454098][ T5869] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 420.467929][ T5869] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 420.488911][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.518273][ T5869] usb 4-1: config 0 descriptor?? [ 420.542108][ T5869] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 420.771717][ T58] usb 4-1: USB disconnect, device number 35 [ 420.787729][ T58] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 421.076316][T19628] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5435'. [ 421.138335][T19632] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 421.191855][T19632] team0: Device macvtap1 failed to register rx_handler [ 421.223366][T19632] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 421.230964][T19628] nbd: socks must be embedded in a SOCK_ITEM attr [ 421.999415][ T5871] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 422.172076][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 422.182382][ T5871] usb 5-1: config 2 interface 0 has no altsetting 0 [ 422.192941][ T5871] usb 5-1: New USB device found, idVendor=2040, idProduct=b767, bcdDevice=8a.1b [ 422.218115][ T5871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.248373][ T5871] usb 5-1: Product: syz [ 422.258503][ T5871] usb 5-1: Manufacturer: syz [ 422.263649][ T5871] usb 5-1: SerialNumber: syz [ 422.503790][ T5825] Bluetooth: Unexpected continuation frame (len 10) [ 422.507327][ T5871] usb 5-1: dvb_usb_v2: found a 'Hauppauge 117xxx ATSC+' in warm state [ 422.548960][ T5871] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 422.576745][ T5871] dvbdev: DVB: registering new adapter (Hauppauge 117xxx ATSC+) [ 422.588850][ T5871] usb 5-1: media controller created [ 422.643326][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 422.676047][ T5871] usb 5-1: selecting invalid altsetting 1 [ 422.690171][ T5871] set interface failed [ 422.690861][ T5871] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 422.708498][ T5871] error writing reg: 0xff, val: 0x00 [ 422.750617][ T5871] dvb_usb_mxl111sf 5-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 422.788240][ T5871] usb 5-1: USB disconnect, device number 40 [ 423.300789][T19706] input: syz0 as /devices/virtual/input/input51 [ 423.848836][T19729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5481'. [ 423.884187][T19729] 8021q: adding VLAN 0 to HW filter on device team1 [ 424.434515][T19763] loop6: detected capacity change from 0 to 524287999 [ 424.443264][ C0] blk_print_req_error: 24 callbacks suppressed [ 424.443276][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.458590][ C0] buffer_io_error: 24 callbacks suppressed [ 424.458600][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.472495][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.481726][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.512595][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.521817][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.533185][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.542408][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.558605][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.567851][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.579255][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.588479][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.597343][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.606567][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.615612][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.624851][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.632799][T19763] ldm_validate_partition_table(): Disk read failed. [ 424.642016][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.651233][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.660047][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 424.669286][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 424.682029][T19763] Dev loop6: unable to read RDB block 0 [ 424.692582][T19763] loop6: unable to read partition table [ 424.700333][T19763] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 424.819373][ T58] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 424.979374][ T58] usb 3-1: Using ep0 maxpacket: 16 [ 424.993968][ T58] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 425.017100][ T58] usb 3-1: config 0 has no interface number 0 [ 425.031540][ T58] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 425.048988][ T58] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 425.065175][ T58] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.076520][ T58] usb 3-1: Product: syz [ 425.085710][ T29] audit: type=1326 audit(1739180675.699:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.5.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6a98cde9 code=0x7ffc0000 [ 425.113908][ T58] usb 3-1: Manufacturer: syz [ 425.118555][ T58] usb 3-1: SerialNumber: syz [ 425.134225][ T58] usb 3-1: config 0 descriptor?? [ 425.140463][T19767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 425.148886][ T29] audit: type=1326 audit(1739180675.699:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.5.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6a98cde9 code=0x7ffc0000 [ 425.172832][ T58] asix 3-1:0.251: probe with driver asix failed with error -22 [ 425.176446][ T29] audit: type=1326 audit(1739180675.699:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.5.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f8e6a98cde9 code=0x7ffc0000 [ 425.176483][ T29] audit: type=1326 audit(1739180675.699:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.5.5507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e6a98cde9 code=0x7ffc0000 [ 425.224365][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.410811][ T5871] usb 3-1: USB disconnect, device number 43 [ 425.899125][T19821] loop9: detected capacity change from 0 to 1 [ 425.906470][T19821] Dev loop9: unable to read RDB block 1 [ 425.912777][T19821] loop9: unable to read partition table [ 425.918636][T19821] loop9: partition table beyond EOD, truncated [ 425.925098][T19821] loop_reread_partitions: partition scan of loop9 (þ被xü°ŸÑà– ) failed (rc=-5) [ 425.949571][ T5836] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 426.109998][ T5836] usb 7-1: Using ep0 maxpacket: 16 [ 426.116776][ T5836] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 426.130411][ T5836] usb 7-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 426.149265][ T5836] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.158517][ T5836] usb 7-1: config 0 descriptor?? [ 426.176542][ T5836] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input53 [ 426.239552][ T58] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 426.389742][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 426.402748][ T58] usb 6-1: config 0 interface 0 has no altsetting 0 [ 426.412647][ T58] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 426.422433][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.432160][ T58] usb 6-1: Product: syz [ 426.437502][ T5181] bcm5974 7-1:0.0: could not read from device [ 426.444407][ T58] usb 6-1: Manufacturer: syz [ 426.450865][ T58] usb 6-1: SerialNumber: syz [ 426.456770][ T5181] bcm5974 7-1:0.0: could not read from device [ 426.467567][ T5836] usb 7-1: USB disconnect, device number 20 [ 426.476645][ T5181] bcm5974 7-1:0.0: could not read from device [ 426.486127][ T58] usb 6-1: config 0 descriptor?? [ 426.913852][ T58] gs_usb 6-1:0.0: Configuring for 3 interfaces [ 427.169290][T19843] netlink: 'syz.6.5534': attribute type 11 has an invalid length. [ 427.406271][T19853] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 427.523484][ T58] gs_usb 6-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 427.780051][ T58] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -71 [ 427.796165][ T58] usb 6-1: USB disconnect, device number 38 [ 428.070615][T19885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5552'. [ 428.311432][T19892] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 428.326370][T19892] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 428.629337][ T58] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 428.793826][ T58] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 428.836365][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.860061][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.893888][ T58] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 428.940529][ T58] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 428.966246][ T58] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 428.994860][ T58] usb 4-1: Manufacturer: syz [ 429.014037][ T58] usb 4-1: config 0 descriptor?? [ 429.443829][ T58] appleir 0003:05AC:8243.0033: unknown main item tag 0x0 [ 429.451917][ T58] appleir 0003:05AC:8243.0033: No inputs registered, leaving [ 429.481917][ T58] appleir 0003:05AC:8243.0033: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 429.740778][T19951] usb 4-1: USB disconnect, device number 36 [ 430.464924][T19921] veth1_macvtap: left allmulticast mode [ 430.536156][T19921] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.549771][T19921] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.566636][T19921] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.583910][T19921] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.720105][T19921] bond0: left allmulticast mode [ 430.725062][T19921] geneve0: left allmulticast mode [ 430.743616][T19921] syz_tun: left allmulticast mode [ 430.748702][T19921] bond0: left promiscuous mode [ 430.761724][T19921] geneve0: left promiscuous mode [ 430.767163][T19921] macvlan2: left promiscuous mode [ 430.777154][T19921] macvlan2: left allmulticast mode [ 430.815059][T19921] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.824994][T19921] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.834055][T19921] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.843129][T19921] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 430.887277][T19921] gtp0: left promiscuous mode [ 430.903926][T19921] gtp0: left allmulticast mode [ 430.916244][T19921] bridge0: left promiscuous mode [ 430.931588][T19921] macvlan4: left promiscuous mode [ 430.948310][T19921] gtp1: left promiscuous mode [ 430.956933][T19921] gtp1: left allmulticast mode [ 430.976895][T19921] macsec0: left allmulticast mode [ 430.989623][T19921] macsec2: left allmulticast mode [ 431.079808][T19949] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 431.151893][T19992] veth0_to_bridge: entered promiscuous mode [ 431.159363][T19991] veth0_to_bridge: left promiscuous mode [ 431.246380][T19949] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 431.331678][T19949] usb 4-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 431.348586][T19949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.352334][T20000] input: syz0 as /devices/virtual/input/input54 [ 431.364410][T19949] usb 4-1: Product: syz [ 431.385603][T19949] usb 4-1: Manufacturer: syz [ 431.390901][T19949] usb 4-1: SerialNumber: syz [ 431.396492][T20000] input: failed to attach handler leds to device input54, error: -6 [ 431.410926][T19949] usb 4-1: config 0 descriptor?? [ 431.427012][T19949] go7007-loader 4-1:0.0: can't handle multiple config [ 431.444733][T19949] go7007-loader 4-1:0.0: probe failed [ 431.650308][T19949] usb 4-1: USB disconnect, device number 37 [ 432.283764][T20046] sctp: [Deprecated]: syz.2.5615 (pid 20046) Use of int in maxseg socket option. [ 432.283764][T20046] Use struct sctp_assoc_value instead [ 432.679703][T19942] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 432.851727][T19942] usb 4-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 432.870272][T19942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.883393][T19942] usb 4-1: config 0 descriptor?? [ 432.920768][T19942] pwc: Creative Labs Webcam Pro Ex detected. [ 433.394171][T20102] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 433.419535][T20102] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 433.521609][T19942] pwc: recv_control_msg error -32 req 02 val 2b00 [ 433.539981][T19942] pwc: recv_control_msg error -32 req 02 val 2700 [ 433.547833][T19942] pwc: recv_control_msg error -71 req 04 val 1600 [ 433.560946][T19942] pwc: recv_control_msg error -71 req 02 val 2c00 [ 433.568598][T19942] pwc: recv_control_msg error -71 req 04 val 1000 [ 433.578836][T19942] pwc: recv_control_msg error -71 req 04 val 1300 [ 433.592209][T19942] pwc: recv_control_msg error -71 req 04 val 1400 [ 433.602201][T19942] pwc: recv_control_msg error -71 req 02 val 2000 [ 433.613487][T19942] pwc: recv_control_msg error -71 req 02 val 2100 [ 433.622811][T19942] pwc: recv_control_msg error -71 req 06 val 0600 [ 433.638277][T19942] pwc: recv_control_msg error -71 req 04 val 1500 [ 433.649015][T19942] pwc: recv_control_msg error -71 req 02 val 2500 [ 433.656864][T19942] pwc: recv_control_msg error -71 req 02 val 2400 [ 433.666849][T19942] pwc: recv_control_msg error -71 req 02 val 2600 [ 433.674679][T19942] pwc: recv_control_msg error -71 req 02 val 2900 [ 433.681932][T19942] pwc: recv_control_msg error -71 req 02 val 2800 [ 433.690011][T19942] pwc: recv_control_msg error -71 req 04 val 1100 [ 433.696964][T19942] pwc: recv_control_msg error -71 req 04 val 1200 [ 433.705190][T19942] pwc: Registered as video103. [ 433.711554][T19942] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input55 [ 433.724869][T19942] usb 4-1: USB disconnect, device number 38 [ 434.004936][T20120] input: syz0 as /devices/virtual/input/input56 [ 434.236513][ T29] audit: type=1800 audit(1739180684.849:466): pid=20132 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.5658" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 435.341410][T20172] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 435.351751][T19941] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 435.519550][T19949] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 435.519773][T19941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.544540][T19941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.571617][T19941] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 435.575629][T20155] block nbd5: shutting down sockets [ 435.615577][T19941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.647567][T19941] usb 3-1: config 0 descriptor?? [ 435.690973][T19949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.709559][T19949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.729566][T19949] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 435.738912][T19949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.760424][T19949] usb 4-1: config 0 descriptor?? [ 436.065521][T19941] stadia 0003:18D1:9400.0034: unbalanced delimiter at end of report description [ 436.102540][T19941] stadia 0003:18D1:9400.0034: parse failed [ 436.112657][T19941] stadia 0003:18D1:9400.0034: probe with driver stadia failed with error -22 [ 436.181166][T19949] cm6533_jd 0003:0D8C:0022.0035: unknown main item tag 0x0 [ 436.198156][T20191] vivid-000: disconnect [ 436.203164][T19949] cm6533_jd 0003:0D8C:0022.0035: unknown main item tag 0x0 [ 436.218118][T20190] vivid-000: reconnect [ 436.227356][T19949] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0035/input/input57 [ 436.269091][T19949] cm6533_jd 0003:0D8C:0022.0035: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 436.321035][T19941] usb 3-1: USB disconnect, device number 44 [ 436.394273][T19940] usb 4-1: USB disconnect, device number 39 [ 437.099611][T19949] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 437.239318][T19941] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 437.272963][ T5825] Bluetooth: hci0: unknown advertising packet type: 0x79 [ 437.273126][T19949] usb 6-1: no configurations [ 437.285906][T19949] usb 6-1: can't read configurations, error -22 [ 437.385559][T20238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5703'. [ 437.404743][T19941] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.431184][T19941] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 437.450531][T19941] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.465977][T19942] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 437.495176][T19941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.531269][T20226] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 437.542029][T19941] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.642901][T19942] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 437.662549][T19942] usb 4-1: config 0 interface 0 has no altsetting 0 [ 437.672548][T19942] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 437.682141][T19942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.694774][T19942] usb 4-1: Product: syz [ 437.698974][T19942] usb 4-1: Manufacturer: syz [ 437.706832][T19942] usb 4-1: SerialNumber: syz [ 437.714460][T19942] usb 4-1: config 0 descriptor?? [ 437.730153][T19942] usb 4-1: selecting invalid altsetting 0 [ 437.780923][T19946] usb 7-1: USB disconnect, device number 21 [ 437.936710][ T58] kernel write not supported for file /dsp1 (pid: 58 comm: kworker/1:2) [ 437.949990][T19942] usb 4-1: USB disconnect, device number 40 [ 438.409695][ T58] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 438.590187][ T58] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 438.610334][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.639322][ T58] usb 5-1: config 0 descriptor?? [ 438.886672][ T58] kaweth 5-1:0.0: Firmware present in device. [ 438.923651][T20269] vlan3: entered allmulticast mode [ 438.961326][T20269] bond0: entered allmulticast mode [ 438.966746][T20269] bond1: entered allmulticast mode [ 439.015604][T20269] syz_tun: entered allmulticast mode [ 439.041467][T20269] bond0: left allmulticast mode [ 439.046413][T20269] bond1: left allmulticast mode [ 439.063879][T20269] syz_tun: left allmulticast mode [ 439.064641][ T58] kaweth 5-1:0.0: Statistics collection: 0 [ 439.083772][ T58] kaweth 5-1:0.0: Multicast filter limit: 0 [ 439.096121][ T58] kaweth 5-1:0.0: MTU: 0 [ 439.106563][ T58] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 439.119906][T20281] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5723'. [ 439.129907][T20281] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5723'. [ 439.166588][T19942] kernel write not supported for file /snd/seq (pid: 19942 comm: kworker/0:10) [ 439.198475][T20281] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5723'. [ 439.375520][T19942] hid-generic 0000:0003:0000.0036: unknown main item tag 0x0 [ 439.400247][T19942] hid-generic 0000:0003:0000.0036: unknown main item tag 0x0 [ 439.429710][T19942] hid-generic 0000:0003:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz1 [ 439.667419][ T58] kaweth 5-1:0.0: Error setting receive filter [ 439.675118][ T58] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 439.693673][ T58] usb 5-1: USB disconnect, device number 41 [ 440.347305][T20332] input: syz1 as /devices/virtual/input/input58 [ 440.383634][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.390930][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.589509][T19942] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 440.760356][T19942] usb 3-1: Using ep0 maxpacket: 32 [ 440.771587][T19942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.807131][T19942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.819216][T19942] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 440.829804][T19941] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 440.849709][T19942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.863844][T19942] usb 3-1: config 0 descriptor?? [ 440.919963][T19940] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 440.974991][T20358] netlink: 'syz.6.5757': attribute type 1 has an invalid length. [ 441.001393][T19941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.013126][T19941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.029423][T19941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 441.044838][T19941] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 441.054749][T19941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.066327][T19941] usb 5-1: config 0 descriptor?? [ 441.081708][T19940] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 441.096834][T19940] usb 6-1: config 1 has an invalid descriptor of length 44, skipping remainder of the config [ 441.107666][T19940] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 441.116961][T19940] usb 6-1: config 1 has no interface number 1 [ 441.123313][T19940] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 441.136412][T19940] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 441.147735][T19940] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 2048, setting to 1023 [ 441.161217][T19940] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 441.170757][T19940] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.178813][T19940] usb 6-1: Product: syz [ 441.183124][T19940] usb 6-1: Manufacturer: syz [ 441.187746][T19940] usb 6-1: SerialNumber: syz [ 441.308760][T19942] savu 0003:1E7D:2D5A.0037: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 441.404474][T19940] usb 6-1: 2:1 : no or invalid class specific endpoint descriptor [ 441.436136][T19940] usb 6-1: USB disconnect, device number 41 [ 441.494031][T19941] plantronics 0003:047F:FFFF.0038: No inputs registered, leaving [ 441.513067][T19941] plantronics 0003:047F:FFFF.0038: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 441.591630][ T58] usb 3-1: USB disconnect, device number 45 [ 441.714637][T19949] usb 5-1: USB disconnect, device number 42 [ 442.402026][T20394] input: syz0 as /devices/virtual/input/input59 [ 442.419672][T19941] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 442.591496][T19941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.626170][T19941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 442.653985][T19941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 442.674949][T19941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 442.701281][T19941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 442.732333][T19941] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 442.746374][T19941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 442.760624][T19941] usb 4-1: Product: syz [ 442.766707][T19941] usb 4-1: Manufacturer: syz [ 442.779019][T19941] usb 4-1: SerialNumber: syz [ 442.793564][T19941] usb 4-1: config 0 descriptor?? [ 443.020825][T19941] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 443.035872][T19941] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 443.266834][T19941] usb 4-1: USB disconnect, device number 41 [ 443.414976][T20445] sctp: [Deprecated]: syz.5.5781 (pid 20445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 443.414976][T20445] Use struct sctp_sack_info instead [ 443.864219][T20467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5794'. [ 444.416170][T20499] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5805'. [ 444.553901][T20504] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5809'. [ 444.573656][ T58] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 444.675778][T20509] input: syz0 as /devices/virtual/input/input60 [ 444.743097][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.759954][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.771470][ T58] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 444.786020][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.799445][ T58] usb 3-1: config 0 descriptor?? [ 445.226589][ T58] arvo 0003:1E7D:30D4.0039: unknown main item tag 0x0 [ 445.268940][ T58] arvo 0003:1E7D:30D4.0039: unknown main item tag 0x0 [ 445.283092][ T58] arvo 0003:1E7D:30D4.0039: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 445.352482][T20537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5825'. [ 445.369657][T20537] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5825'. [ 445.399479][T19941] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 445.573146][T19941] usb 7-1: Using ep0 maxpacket: 16 [ 445.599996][T19941] usb 7-1: config 0 interface 0 has no altsetting 0 [ 445.615129][T19941] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c07, bcdDevice= 0.00 [ 445.636505][T19942] usb 3-1: USB disconnect, device number 46 [ 445.666907][T19941] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.678432][ T5825] Bluetooth: hci2: link tx timeout [ 445.689407][ T5825] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 445.698191][T19941] usb 7-1: config 0 descriptor?? [ 445.701939][ T5825] Bluetooth: hci2: link tx timeout [ 445.708278][ T5825] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 445.717497][ T5825] Bluetooth: hci2: link tx timeout [ 445.722697][ T5825] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 445.739111][ T5825] Bluetooth: hci2: link tx timeout [ 445.744767][ T5825] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 445.925734][T20529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.962756][T20529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.260184][T19941] hid (null): report_id 0 is invalid [ 446.272549][T19941] hid (null): global environment stack underflow [ 446.278980][T19941] hid (null): nested delimiters [ 446.293428][T19941] corsair-psu 0003:1B1C:1C07.003A: unexpected long global item [ 446.315990][T19941] corsair-psu 0003:1B1C:1C07.003A: probe with driver corsair-psu failed with error -22 [ 446.469675][T19946] usb 7-1: USB disconnect, device number 22 [ 446.740126][T20576] input input61: cannot allocate more than FF_MAX_EFFECTS effects [ 446.998744][T20585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5845'. [ 447.037778][T20585] netlink: 'syz.5.5845': attribute type 1 has an invalid length. [ 447.064316][T20585] netlink: 'syz.5.5845': attribute type 2 has an invalid length. [ 447.758220][ T5829] ------------[ cut here ]------------ [ 447.764548][ T5829] refcount_t: underflow; use-after-free. [ 447.770658][ T5829] WARNING: CPU: 0 PID: 5829 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 447.780275][ T5829] Modules linked in: [ 447.784221][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: kworker/u9:5 Not tainted 6.14.0-rc2-syzkaller #0 [ 447.793929][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 447.804280][ T5829] Workqueue: hci2 hci_cmd_sync_work [ 447.809866][ T5829] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 447.816062][ T5829] Code: 40 72 5f 8c e8 c7 0e 9f fc 90 0f 0b 90 90 eb 99 e8 5b 65 de fc c6 05 ba 6e 23 0b 01 90 48 c7 c7 a0 72 5f 8c e8 a7 0e 9f fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 38 65 de fc c6 05 94 6e 23 0b 01 90 [ 447.836101][ T5829] RSP: 0018:ffffc9000419f618 EFLAGS: 00010246 [ 447.838748][ T5825] Bluetooth: hci2: command 0x0405 tx timeout [ 447.842324][ T5829] RAX: 4352ab0487a16600 RBX: ffff888027774c78 RCX: ffff88802f468000 [ 447.842527][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 447.864935][ T5829] RBP: 0000000000000003 R08: ffffffff817ffb32 R09: fffffbfff1cfa588 [ 447.873028][ T5829] R10: dffffc0000000000 R11: fffffbfff1cfa588 R12: ffff888027774c60 [ 447.881236][ T5829] R13: ffffffff862303f0 R14: 1ffff11004eee98c R15: ffff888027774c60 [ 447.889750][ T5829] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 447.898869][ T5829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 447.905761][ T5829] CR2: 00007f885464aea2 CR3: 0000000027aa0000 CR4: 00000000003526f0 [ 447.913916][ T5829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 447.922323][ T5829] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 447.930480][ T5829] Call Trace: [ 447.933786][ T5829] [ 447.936739][ T5829] ? __warn+0x165/0x4d0 [ 447.941011][ T5829] ? refcount_warn_saturate+0x15a/0x1d0 [ 447.946590][ T5829] ? report_bug+0x2b3/0x500 [ 447.951433][ T5829] ? refcount_warn_saturate+0x15a/0x1d0 [ 447.957041][ T5829] ? handle_bug+0x60/0x90 [ 447.961433][ T5829] ? exc_invalid_op+0x1a/0x50 [ 447.966142][ T5829] ? asm_exc_invalid_op+0x1a/0x20 [ 447.971264][ T5829] ? __pfx_klist_children_put+0x10/0x10 [ 447.976996][ T5829] ? __warn_printk+0x292/0x360 [ 447.982318][ T5829] ? refcount_warn_saturate+0x15a/0x1d0 [ 447.987956][ T5829] ? refcount_warn_saturate+0x159/0x1d0 [ 447.993712][ T5829] klist_dec_and_del+0x3ec/0x3f0 [ 447.998680][ T5829] ? __pfx_klist_children_put+0x10/0x10 [ 448.004426][ T5829] ? __pfx_klist_children_put+0x10/0x10 [ 448.010213][ T5829] ? __pfx_klist_children_put+0x10/0x10 [ 448.015798][ T5829] klist_remove+0x25e/0x480 [ 448.020635][ T5829] ? __pfx_klist_remove+0x10/0x10 [ 448.025732][ T5829] ? __pfx_kobject_move+0x10/0x10 [ 448.030834][ T5829] ? get_device_parent+0x25d/0x410 [ 448.035993][ T5829] device_move+0x1b4/0x710 [ 448.040587][ T5829] ? kasan_quarantine_put+0xdc/0x230 [ 448.045910][ T5829] hci_conn_del_sysfs+0xb5/0x170 [ 448.051186][ T5829] hci_conn_del+0x8c4/0xc40 [ 448.055761][ T5829] hci_conn_failed+0x319/0x400 [ 448.060672][ T5829] ? __pfx_hci_conn_failed+0x10/0x10 [ 448.065997][ T5829] ? hci_abort_conn_sync+0x1f0/0x11f0 [ 448.071469][ T5829] hci_abort_conn_sync+0x56c/0x11f0 [ 448.076725][ T5829] ? hci_abort_conn_sync+0x1f0/0x11f0 [ 448.082591][ T5829] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 448.088278][ T5829] ? __pfx_lock_acquire+0x10/0x10 [ 448.093563][ T5829] ? hci_conn_valid+0x1f/0x210 [ 448.098370][ T5829] ? hci_conn_valid+0x1f4/0x210 [ 448.103481][ T5829] ? __pfx_abort_conn_sync+0x10/0x10 [ 448.109024][ T5829] hci_cmd_sync_work+0x22b/0x400 [ 448.114298][ T5829] ? process_scheduled_works+0x976/0x1840 [ 448.120115][ T5829] process_scheduled_works+0xa66/0x1840 [ 448.125752][ T5829] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.131806][ T5829] ? assign_work+0x364/0x3d0 [ 448.136442][ T5829] worker_thread+0x870/0xd30 [ 448.141523][ T5829] ? __kthread_parkme+0x169/0x1d0 [ 448.146595][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 448.151812][ T5829] kthread+0x7a9/0x920 [ 448.155943][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.160612][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 448.165773][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.170697][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.175359][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.180068][ T5829] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.185448][ T5829] ? lockdep_hardirqs_on+0x99/0x150 [ 448.190900][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.195531][ T5829] ret_from_fork+0x4b/0x80 [ 448.200283][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.204909][ T5829] ret_from_fork_asm+0x1a/0x30 [ 448.209947][ T5829] [ 448.213011][ T5829] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 448.220316][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: kworker/u9:5 Not tainted 6.14.0-rc2-syzkaller #0 [ 448.229448][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 448.239524][ T5829] Workqueue: hci2 hci_cmd_sync_work [ 448.244765][ T5829] Call Trace: [ 448.248065][ T5829] [ 448.251014][ T5829] dump_stack_lvl+0x241/0x360 [ 448.255728][ T5829] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.260959][ T5829] ? __pfx__printk+0x10/0x10 [ 448.265582][ T5829] ? vscnprintf+0x5d/0x90 [ 448.269928][ T5829] panic+0x349/0x880 [ 448.273831][ T5829] ? __warn+0x174/0x4d0 [ 448.277988][ T5829] ? __pfx_panic+0x10/0x10 [ 448.282407][ T5829] ? ret_from_fork_asm+0x1a/0x30 [ 448.287353][ T5829] __warn+0x344/0x4d0 [ 448.291347][ T5829] ? refcount_warn_saturate+0x15a/0x1d0 [ 448.296898][ T5829] report_bug+0x2b3/0x500 [ 448.301223][ T5829] ? refcount_warn_saturate+0x15a/0x1d0 [ 448.306770][ T5829] handle_bug+0x60/0x90 [ 448.310920][ T5829] exc_invalid_op+0x1a/0x50 [ 448.315417][ T5829] asm_exc_invalid_op+0x1a/0x20 [ 448.320352][ T5829] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 448.326497][ T5829] Code: 40 72 5f 8c e8 c7 0e 9f fc 90 0f 0b 90 90 eb 99 e8 5b 65 de fc c6 05 ba 6e 23 0b 01 90 48 c7 c7 a0 72 5f 8c e8 a7 0e 9f fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 38 65 de fc c6 05 94 6e 23 0b 01 90 [ 448.346098][ T5829] RSP: 0018:ffffc9000419f618 EFLAGS: 00010246 [ 448.352164][ T5829] RAX: 4352ab0487a16600 RBX: ffff888027774c78 RCX: ffff88802f468000 [ 448.360129][ T5829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 448.368088][ T5829] RBP: 0000000000000003 R08: ffffffff817ffb32 R09: fffffbfff1cfa588 [ 448.376058][ T5829] R10: dffffc0000000000 R11: fffffbfff1cfa588 R12: ffff888027774c60 [ 448.385332][ T5829] R13: ffffffff862303f0 R14: 1ffff11004eee98c R15: ffff888027774c60 [ 448.393316][ T5829] ? __pfx_klist_children_put+0x10/0x10 [ 448.398868][ T5829] ? __warn_printk+0x292/0x360 [ 448.403633][ T5829] ? refcount_warn_saturate+0x159/0x1d0 [ 448.409174][ T5829] klist_dec_and_del+0x3ec/0x3f0 [ 448.414116][ T5829] ? __pfx_klist_children_put+0x10/0x10 [ 448.419659][ T5829] ? __pfx_klist_children_put+0x10/0x10 [ 448.425196][ T5829] ? __pfx_klist_children_put+0x10/0x10 [ 448.430740][ T5829] klist_remove+0x25e/0x480 [ 448.435242][ T5829] ? __pfx_klist_remove+0x10/0x10 [ 448.440262][ T5829] ? __pfx_kobject_move+0x10/0x10 [ 448.445282][ T5829] ? get_device_parent+0x25d/0x410 [ 448.450388][ T5829] device_move+0x1b4/0x710 [ 448.454794][ T5829] ? kasan_quarantine_put+0xdc/0x230 [ 448.460076][ T5829] hci_conn_del_sysfs+0xb5/0x170 [ 448.465010][ T5829] hci_conn_del+0x8c4/0xc40 [ 448.469513][ T5829] hci_conn_failed+0x319/0x400 [ 448.474273][ T5829] ? __pfx_hci_conn_failed+0x10/0x10 [ 448.479554][ T5829] ? hci_abort_conn_sync+0x1f0/0x11f0 [ 448.484921][ T5829] hci_abort_conn_sync+0x56c/0x11f0 [ 448.490120][ T5829] ? hci_abort_conn_sync+0x1f0/0x11f0 [ 448.495492][ T5829] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 448.501125][ T5829] ? __pfx_lock_acquire+0x10/0x10 [ 448.506145][ T5829] ? hci_conn_valid+0x1f/0x210 [ 448.510907][ T5829] ? hci_conn_valid+0x1f4/0x210 [ 448.515751][ T5829] ? __pfx_abort_conn_sync+0x10/0x10 [ 448.521034][ T5829] hci_cmd_sync_work+0x22b/0x400 [ 448.525971][ T5829] ? process_scheduled_works+0x976/0x1840 [ 448.531682][ T5829] process_scheduled_works+0xa66/0x1840 [ 448.537244][ T5829] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.543226][ T5829] ? assign_work+0x364/0x3d0 [ 448.547834][ T5829] worker_thread+0x870/0xd30 [ 448.552525][ T5829] ? __kthread_parkme+0x169/0x1d0 [ 448.557543][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 448.562648][ T5829] kthread+0x7a9/0x920 [ 448.566708][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.571294][ T5829] ? __pfx_worker_thread+0x10/0x10 [ 448.576429][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.581031][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.585632][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.590241][ T5829] ? _raw_spin_unlock_irq+0x23/0x50 [ 448.595437][ T5829] ? lockdep_hardirqs_on+0x99/0x150 [ 448.600634][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.605229][ T5829] ret_from_fork+0x4b/0x80 [ 448.609640][ T5829] ? __pfx_kthread+0x10/0x10 [ 448.614225][ T5829] ret_from_fork_asm+0x1a/0x30 [ 448.618996][ T5829] [ 448.622241][ T5829] Kernel Offset: disabled [ 448.626786][ T5829] Rebooting in 86400 seconds..