last executing test programs: 30.331082641s ago: executing program 0 (id=2378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r1, 0x10d, 0xc5, 0x0, &(0x7f0000000000)) 30.137720618s ago: executing program 0 (id=2379): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 29.925129061s ago: executing program 0 (id=2380): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) 28.696076958s ago: executing program 0 (id=2395): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x1, 0x3, 0x404}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x0, 0x0, 0x7ff, 0xa, 0x1}) 14.581568916s ago: executing program 0 (id=2395): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x1, 0x3, 0x404}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x0, 0x0, 0x7ff, 0xa, 0x1}) 2.773306116s ago: executing program 3 (id=2623): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0x0, {0x2, 0xf0, 0x2}}, 0x18) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2, 0xffffffffffffffff, {0x0, 0x0, 0x4}}, 0x18) 2.598139237s ago: executing program 3 (id=2627): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, 0x0, &(0x7f0000000000)) 2.496946054s ago: executing program 3 (id=2630): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x5fef}, &(0x7f0000000280)=0x8) 2.402417001s ago: executing program 3 (id=2633): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x80, &(0x7f0000000580)=@string={0x80, 0x3, "7a16c6f55cebe79d8946df87700cc46f033785da2f647961ee179e5891123d126aebc23d0b18d69612d87699e02a5a3564587d18f7d9044f68b5a34d7101e29d647f0844e0e8808e8f44e2f93ce9d6ba4139b7a16f61ca03e61b43e747bdb80cf36b4a5fbebbdc9c0d05b9753eecf0449098f298aaa659792dcda9a444a0"}}]}) ioctl$EVIOCRMFF(r0, 0x41015500, &(0x7f0000000500)) 1.932107517s ago: executing program 2 (id=2641): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x4e) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 1.543723406s ago: executing program 4 (id=2645): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x3ff, 0x12) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) 1.495605681s ago: executing program 1 (id=2646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) close(r2) 1.390004179s ago: executing program 4 (id=2647): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x420004}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x0, 0x1}, 0xfffffffffffffe6c) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 1.295532199s ago: executing program 4 (id=2648): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.26514484s ago: executing program 1 (id=2649): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000300)={0x1fff, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x2) 1.158548057s ago: executing program 2 (id=2650): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) statx(r0, 0x0, 0x1000, 0x6000, 0x0) 1.149680226s ago: executing program 4 (id=2651): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000700)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r1}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=0x1, r2, 0x2f, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000080)={@map=0x1, r0, 0x2f, 0x8, 0xffffffffffffffff, @prog_fd=r0}, 0x20) 1.111711912s ago: executing program 0 (id=2395): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x1, 0x3, 0x404}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x1, r2, 0x0, 0x0, 0x7ff, 0xa, 0x1}) 768.859694ms ago: executing program 1 (id=2652): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x4}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000020000000005000000180001801400020073797a5f74756e00000000000000005a0c00038004000380040001"], 0x38}}, 0x0) 768.470573ms ago: executing program 2 (id=2653): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'netdevsim0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @random="035bf509a681"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r1, 0x1, 0x5, @random="3f00000000f7"}, 0x10) 767.436945ms ago: executing program 4 (id=2654): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe0002476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea097a75dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe2348754000000000000007642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc5a788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f01001bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bc0004c3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b4150900000000000000f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a013709003f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa0500e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d18716975c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f9836faa292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee63ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c11465fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff300"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r0, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) 644.913258ms ago: executing program 2 (id=2655): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'xfrm0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) sendto$packet(r1, &(0x7f0000000280)="3f030e00030000002b001e0089e9aaa911e0c2310f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3", 0x37, 0x0, &(0x7f0000000240)={0x11, 0x0, r2, 0x4, 0x0, 0x6, @remote}, 0x14) 539.88135ms ago: executing program 1 (id=2656): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) setresuid(0x0, r1, 0x0) utimensat(r0, 0x0, &(0x7f0000000040)={{0x0, 0x3ffffffe}, {0x0, 0x3fffffff}}, 0x0) 463.690968ms ago: executing program 3 (id=2657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000240)) 443.302101ms ago: executing program 2 (id=2658): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) 335.871644ms ago: executing program 1 (id=2659): r0 = openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x1}, 0x14}}, 0x0) 313.378034ms ago: executing program 4 (id=2660): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="b9ff03076003008cb89e08008100", 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 300.403067ms ago: executing program 2 (id=2661): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) ioctl$UFFDIO_COPY(r0, 0xc028aa03, 0x0) 98.088334ms ago: executing program 1 (id=2662): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) syz_emit_ethernet(0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) 0s ago: executing program 3 (id=2663): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r1, 0x0) bind$netrom(r0, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) kernel console output (not intermixed with test programs): .40 [ 124.618768][ T5295] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 124.637885][ T5295] usb 3-1: Product: syz [ 124.642934][ T5295] usb 3-1: Manufacturer: syz [ 124.660599][ T5295] hub 3-1:4.0: USB hub found [ 124.669304][ T7630] ./file0: Can't open blockdev [ 124.895590][ T5295] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 125.057682][ T7653] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1073'. [ 125.072760][ T7653] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1073'. [ 125.219293][ T25] usb 3-1: USB disconnect, device number 8 [ 126.326513][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1087'. [ 127.192157][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1104'. [ 127.267979][ T7729] hsr0: entered promiscuous mode [ 127.281954][ T7729] hsr0: left promiscuous mode [ 127.758613][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.861620][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 128.159249][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 129.254197][ T7787] rtc_cmos 00:00: Alarms can be up to one day in the future [ 129.296971][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 129.304210][ T25] usb 1-1: config 0 has an invalid descriptor of length 253, skipping remainder of the config [ 129.330317][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 129.358666][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.366705][ T25] usb 1-1: Product: syz [ 129.388747][ T25] usb 1-1: Manufacturer: syz [ 129.393386][ T25] usb 1-1: SerialNumber: syz [ 129.410585][ T25] usb 1-1: config 0 descriptor?? [ 129.638841][ T25] usb 1-1: USB disconnect, device number 9 [ 129.647909][ T7802] netlink: 'syz.4.1138': attribute type 1 has an invalid length. [ 129.666592][ T7802] netlink: 'syz.4.1138': attribute type 2 has an invalid length. [ 129.865098][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 129.885744][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 129.916233][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 129.921523][ T7810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1142'. [ 129.949902][ T8] rtc_cmos 00:00: Alarms can be up to one day in the future [ 129.967514][ T8] rtc rtc0: __rtc_set_alarm: err=-22 [ 130.301391][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1146'. [ 130.523278][ T7830] vxcan1: tx address claim with dest, not broadcast [ 130.899365][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.947911][ T7847] rtc_cmos 00:00: Alarms can be up to one day in the future [ 131.104525][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.126835][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.144865][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 131.166015][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.186655][ T8] usb 1-1: config 0 descriptor?? [ 131.222412][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 131.553494][ T7872] sch_tbf: burst 0 is lower than device veth0_to_team mtu (1514) ! [ 131.619760][ T8] mcp2221 0003:04D8:00DD.0007: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 131.695361][ T7876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 131.830948][ T5266] usb 1-1: USB disconnect, device number 10 [ 131.847752][ T29] audit: type=1326 audit(1724066349.920:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00ff79e79 code=0x7ffc0000 [ 131.904426][ T29] audit: type=1326 audit(1724066349.920:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00ff79e79 code=0x7ffc0000 [ 131.943599][ T29] audit: type=1326 audit(1724066349.920:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff00ff79e79 code=0x7ffc0000 [ 131.966441][ T29] audit: type=1326 audit(1724066349.920:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00ff79e79 code=0x7ffc0000 [ 131.994696][ T29] audit: type=1326 audit(1724066349.920:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00ff79e79 code=0x7ffc0000 [ 132.047763][ T29] audit: type=1326 audit(1724066349.920:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff00ff79e79 code=0x7ffc0000 [ 132.076300][ T29] audit: type=1326 audit(1724066349.950:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00ff79e79 code=0x7ffc0000 [ 132.109826][ T29] audit: type=1326 audit(1724066349.960:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff00ff70e27 code=0x7ffc0000 [ 132.167322][ T29] audit: type=1326 audit(1724066349.960:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff00ff157e9 code=0x7ffc0000 [ 132.197294][ T29] audit: type=1326 audit(1724066349.970:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7881 comm="syz.2.1175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7ff00ff79e79 code=0x7ffc0000 [ 132.731369][ T7915] netlink: 'syz.2.1191': attribute type 15 has an invalid length. [ 132.804786][ T7918] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 132.838711][ T7918] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.1192'. [ 132.858954][ T7918] netlink: 'syz.1.1192': attribute type 2 has an invalid length. [ 132.866717][ T7918] netlink: 'syz.1.1192': attribute type 1 has an invalid length. [ 132.946528][ T7924] program syz.2.1195 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.072271][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.077618][ T7927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1197'. [ 133.087748][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.667966][ T7953] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 133.711611][ T7953] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 134.075375][ T7965] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1215'. [ 134.295637][ T7977] program syz.2.1220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.367416][ T7979] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1222'. [ 134.921640][ T5266] IPVS: starting estimator thread 0... [ 134.931536][ T8010] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 134.962889][ T8013] gretap0: entered promiscuous mode [ 134.993326][ T8013] gretap0: left promiscuous mode [ 135.029128][ T8011] IPVS: using max 19 ests per chain, 45600 per kthread [ 135.659194][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 135.861145][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.882423][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.912817][ T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 135.942341][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 135.965381][ T9] usb 2-1: SerialNumber: syz [ 136.165438][ T8068] netlink: 'syz.3.1262': attribute type 1 has an invalid length. [ 136.176848][ T8068] netlink: 9344 bytes leftover after parsing attributes in process `syz.3.1262'. [ 136.183134][ T9] usb 2-1: 0:2 : does not exist [ 136.233224][ T8070] IPVS: length: 96 != 8 [ 136.240297][ T9] usb 2-1: USB disconnect, device number 7 [ 136.840636][ T8105] bridge0: port 3(vlan0) entered blocking state [ 136.847121][ T8105] bridge0: port 3(vlan0) entered disabled state [ 136.853797][ T8105] vlan0: entered allmulticast mode [ 136.861137][ T8105] vlan0: left allmulticast mode [ 137.621823][ T8128] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1290'. [ 137.633356][ T5266] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.633470][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1290'. [ 137.858870][ T5266] usb 4-1: Using ep0 maxpacket: 32 [ 137.879342][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.896013][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.920370][ T5266] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 137.942508][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.970516][ T5266] usb 4-1: config 0 descriptor?? [ 138.418386][ T5266] savu 0003:1E7D:2D5A.0008: item fetching failed at offset 4/8 [ 138.437971][ T8167] netlink: 1024 bytes leftover after parsing attributes in process `syz.1.1309'. [ 138.459157][ T5266] savu 0003:1E7D:2D5A.0008: parse failed [ 138.464902][ T5266] savu 0003:1E7D:2D5A.0008: probe with driver savu failed with error -22 [ 138.473373][ T8167] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 138.642421][ T1512] usb 4-1: USB disconnect, device number 5 [ 140.103349][ T8241] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1339'. [ 140.816268][ T8266] program syz.1.1350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.909129][ T8269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1353'. [ 140.938583][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 141.209563][ T8288] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1361'. [ 141.279069][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1365'. [ 141.294753][ T8294] netlink: 576 bytes leftover after parsing attributes in process `syz.2.1364'. [ 141.414405][ T8304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 141.869707][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'. [ 141.956988][ T8325] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 141.980275][ T8325] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.1379'. [ 142.007325][ T8325] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 143.037524][ T8368] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1398'. [ 143.056254][ T8368] netlink: 'syz.2.1398': attribute type 1 has an invalid length. [ 143.107213][ T8371] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1399'. [ 143.947113][ T8402] tipc: Started in network mode [ 143.957928][ T8402] tipc: Node identity 663a20300a74797, cluster identity 4711 [ 143.968086][ T8402] tipc: Enabling of bearer rejected, failed to enable media [ 144.140720][ T1512] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 144.338507][ T1512] usb 5-1: Using ep0 maxpacket: 16 [ 144.357057][ T1512] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.394504][ T1512] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 144.408325][ T1512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.423480][ T1512] usb 5-1: Product: syz [ 144.427743][ T1512] usb 5-1: Manufacturer: syz [ 144.435244][ T1512] usb 5-1: SerialNumber: syz [ 144.447976][ T1512] usb 5-1: config 0 descriptor?? [ 144.457398][ T1512] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 144.838771][ T25] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.860426][ T46] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 145.034134][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 145.058858][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.082511][ T46] usb 3-1: config 0 has no interfaces? [ 145.088057][ T46] usb 3-1: New USB device found, idVendor=046d, idProduct=20ee, bcdDevice= 0.00 [ 145.106448][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 145.117994][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.126195][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.143439][ T46] usb 3-1: config 0 descriptor?? [ 145.153733][ T25] usb 1-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29 [ 145.168487][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.176696][ T25] usb 1-1: Product: syz [ 145.181218][ T25] usb 1-1: Manufacturer: syz [ 145.185854][ T25] usb 1-1: SerialNumber: syz [ 145.193370][ T25] usb 1-1: config 0 descriptor?? [ 145.202610][ T25] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2304:021a, interface 0, class 0) [ 145.224154][ T25] em28xx 1-1:0.0: Video interface 0 found: isoc [ 145.286191][ T8427] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1426'. [ 145.301002][ T1512] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 145.327637][ T1512] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 145.341227][ T1512] usb 5-1: USB disconnect, device number 7 [ 145.366523][ T46] usb 3-1: USB disconnect, device number 9 [ 145.478992][ T25] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 145.563402][ T25] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 145.584404][ T25] em28xx 1-1:0.0: board has no eeprom [ 145.668500][ T25] em28xx 1-1:0.0: Identified as Pinnacle Dazzle DVC 90/100/101/107 / Kaiser Baas Video to DVD maker / Kworld DVD Maker 2 / Plextor ConvertX PX-AV100U (card=9) [ 145.691028][ T25] em28xx 1-1:0.0: analog set to isoc mode. [ 145.696969][ T46] em28xx 1-1:0.0: Registering V4L2 extension [ 145.728893][ T25] usb 1-1: USB disconnect, device number 11 [ 145.735818][ T25] em28xx 1-1:0.0: Disconnecting em28xx [ 145.774427][ T46] em28xx 1-1:0.0: Config register raw data: 0xffffffed [ 145.798598][ T46] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 145.805585][ T46] em28xx 1-1:0.0: No AC97 audio processor [ 145.831615][ T46] usb 1-1: Decoder not found [ 145.836246][ T46] em28xx 1-1:0.0: failed to create media graph [ 145.858703][ T46] em28xx 1-1:0.0: V4L2 device video71 deregistered [ 145.874494][ T46] em28xx 1-1:0.0: Remote control support is not available for this card. [ 145.916461][ T25] em28xx 1-1:0.0: Closing input extension [ 145.959603][ T25] em28xx 1-1:0.0: Freeing device [ 146.109487][ T8446] sctp: [Deprecated]: syz.4.1435 (pid 8446) Use of int in max_burst socket option deprecated. [ 146.109487][ T8446] Use struct sctp_assoc_value instead [ 146.227764][ T8446] syz.4.1435 (8446) used greatest stack depth: 17968 bytes left [ 146.340195][ T8456] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1439'. [ 146.612762][ T8466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1444'. [ 146.649201][ T8466] bond0: option ad_select: unable to set because the bond device is up [ 147.308044][ T8489] Invalid/unusable pipe [ 147.648173][ T8505] vim2m vim2m.0: vidioc_s_fmt queue busy [ 148.529216][ T8533] process 'syz.3.1474' launched '/dev/fd/3' with NULL argv: empty string added [ 148.568773][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 148.772048][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.801870][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.821980][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 148.843254][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.867698][ T25] usb 5-1: config 0 descriptor?? [ 148.936487][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 148.957946][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'. [ 148.999109][ T8548] gtp0: entered promiscuous mode [ 149.018992][ T8548] gtp0: entered allmulticast mode [ 149.185235][ T8558] ieee802154 phy0 wpan0: encryption failed: -90 [ 149.287395][ T8563] netlink: 'syz.0.1489': attribute type 32 has an invalid length. [ 149.296861][ T8563] netlink: 280 bytes leftover after parsing attributes in process `syz.0.1489'. [ 149.308262][ T8563] unsupported nla_type 8192 [ 149.322628][ T25] hid-generic 0003:05AC:4262.0009: unbalanced delimiter at end of report description [ 149.349327][ T25] hid-generic 0003:05AC:4262.0009: probe with driver hid-generic failed with error -22 [ 149.438575][ T1512] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 149.442032][ T8567] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 149.576747][ T5263] usb 5-1: USB disconnect, device number 8 [ 149.644786][ T1512] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.674078][ T1512] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.704352][ T1512] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 149.725350][ T1512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.744146][ T8575] netlink: 'syz.3.1495': attribute type 25 has an invalid length. [ 149.760576][ T1512] usb 3-1: config 0 descriptor?? [ 150.196393][ T1512] usbhid 3-1:0.0: can't add hid device: -71 [ 150.205922][ T1512] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 150.236071][ T1512] usb 3-1: USB disconnect, device number 10 [ 151.402873][ T8626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.418911][ T8626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.441448][ T8626] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 152.769391][ T8648] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.775683][ T8648] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 152.806311][ T1512] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 152.912689][ T8648] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 152.928490][ T8648] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 153.008570][ T1512] usb 5-1: Using ep0 maxpacket: 16 [ 153.010777][ T8648] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.028375][ T1512] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 153.034316][ T8648] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 153.060545][ T1512] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 153.088687][ T1512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.110200][ T1512] usb 5-1: Product: syz [ 153.119149][ T1512] usb 5-1: Manufacturer: syz [ 153.145464][ T8648] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.145577][ T1512] usb 5-1: SerialNumber: syz [ 153.178893][ T1512] usb 5-1: config 0 descriptor?? [ 153.189447][ T8648] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 153.208281][ T1512] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 153.230012][ T1512] usb 5-1: Detected FT232R [ 153.239220][ T8699] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 153.433596][ T1512] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 153.690615][ T1512] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 153.970077][ T8] usb 5-1: USB disconnect, device number 9 [ 154.002421][ T8] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 154.042724][ T8] ftdi_sio 5-1:0.0: device disconnected [ 154.202985][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.217175][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.231012][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.251254][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.261357][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.271570][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.308805][ T5213] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 154.318658][ T5213] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 154.326763][ T5213] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 154.342595][ T5213] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 154.350920][ T5213] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 154.358305][ T5213] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.528892][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1560'. [ 154.579485][ T8745] veth1_macvtap: left promiscuous mode [ 154.649190][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1560'. [ 155.161413][ T8719] chnl_net:caif_netlink_parms(): no params data found [ 155.230406][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1567'. [ 155.286676][ T8770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1567'. [ 155.704294][ T8787] netlink: 'syz.2.1571': attribute type 1 has an invalid length. [ 155.750733][ T46] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 155.895078][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.910215][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.937619][ T8719] bridge_slave_0: entered allmulticast mode [ 155.940238][ T8719] bridge_slave_0: entered promiscuous mode [ 155.942716][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.969337][ T46] usb 4-1: Using ep0 maxpacket: 8 [ 156.007837][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.020821][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.028144][ T8719] bridge_slave_1: entered allmulticast mode [ 156.048960][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.078514][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 156.097865][ T8719] bridge_slave_1: entered promiscuous mode [ 156.132066][ T46] usb 4-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 156.146987][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.175499][ T46] usb 4-1: Product: syz [ 156.185621][ T46] usb 4-1: Manufacturer: syz [ 156.195748][ T46] usb 4-1: SerialNumber: syz [ 156.206814][ T46] usb 4-1: config 0 descriptor?? [ 156.251441][ T8719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.291954][ T8719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.438995][ T5213] Bluetooth: hci5: command tx timeout [ 156.459687][ T46] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 156.478989][ T46] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 156.530606][ T8719] team0: Port device team_slave_0 added [ 156.563405][ T8719] team0: Port device team_slave_1 added [ 156.667884][ T46] radio-si470x 4-1:0.0: software version 103, hardware version 199 [ 156.693341][ T46] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 156.797459][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.829329][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.872436][ T46] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 156.916133][ T46] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 156.938870][ T46] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 156.957434][ T8719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.979744][ T46] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 156.989770][ T8719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.005800][ T8828] VFS: could not find a valid V7 on nullb0. [ 157.010737][ T8719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.036044][ T46] usb 4-1: USB disconnect, device number 6 [ 157.058095][ T8719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.083137][ T8828] hpfs: Bad magic ... probably not HPFS [ 157.251238][ T8832] netlink: 'syz.2.1583': attribute type 1 has an invalid length. [ 157.300720][ T8719] hsr_slave_0: entered promiscuous mode [ 157.325898][ T8719] hsr_slave_1: entered promiscuous mode [ 157.358659][ T8719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.386619][ T8719] Cannot create hsr debugfs directory [ 157.662215][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1588'. [ 158.156868][ T8719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.361996][ T8719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.508751][ T5213] Bluetooth: hci5: command tx timeout [ 158.636904][ T8719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.931804][ T8719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.327091][ T8719] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.353434][ T8912] tun0: tun_chr_ioctl cmd 1074025681 [ 159.385930][ T8719] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.405793][ T8719] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.454618][ T8719] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.792206][ T8719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.866090][ T8719] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.911242][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.918482][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.975001][ T8932] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 160.002633][ T8932] netlink: 9320 bytes leftover after parsing attributes in process `syz.0.1621'. [ 160.002897][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.019990][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.044410][ T8932] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 160.086194][ T8932] netlink: 'syz.0.1621': attribute type 2 has an invalid length. [ 160.181252][ T8719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.277320][ T8940] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1625'. [ 160.327681][ T8940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1625'. [ 160.385248][ T8948] netlink: 'syz.4.1628': attribute type 1 has an invalid length. [ 160.405679][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1628'. [ 160.589707][ T5213] Bluetooth: hci5: command tx timeout [ 160.608932][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 160.641308][ T8719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.706296][ T8719] veth0_vlan: entered promiscuous mode [ 160.728043][ T8719] veth1_vlan: entered promiscuous mode [ 160.800405][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 160.821507][ T8719] veth0_macvtap: entered promiscuous mode [ 160.847533][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 160.864830][ T8719] veth1_macvtap: entered promiscuous mode [ 160.888637][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 160.909374][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.931693][ T8945] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 160.944528][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.951667][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 160.967957][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.990882][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.012774][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.030943][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.046478][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.088762][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.108655][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.128778][ T8719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.155369][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.194149][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.229562][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.249123][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.277094][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.305332][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.332113][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.350240][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.360988][ T9] usb 3-1: USB disconnect, device number 11 [ 161.368678][ T8719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.390284][ T8719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.438286][ T8719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.484479][ T8719] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.501708][ T8719] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.517467][ T8719] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.530203][ T8719] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.700857][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.717609][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.839095][ T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.858886][ T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.320195][ T8993] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 162.349684][ T8993] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 162.429036][ T8993] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 162.478529][ T8993] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 162.671823][ T5213] Bluetooth: hci5: command tx timeout [ 162.778673][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 162.778691][ T29] audit: type=1326 audit(1724066380.850:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9010 comm="syz.0.1656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd80ab79e79 code=0x0 [ 163.148742][ T5266] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 163.171889][ T9027] bond0: option mode: unable to set because the bond device has slaves [ 163.339129][ T5266] usb 5-1: Using ep0 maxpacket: 16 [ 163.353231][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.376715][ T5266] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.390583][ T5266] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 163.403444][ T5266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.435503][ T5266] usb 5-1: config 0 descriptor?? [ 163.676951][ T9046] ebtables: ebtables: counters copy to user failed while replacing table [ 163.882342][ T5266] apple 0003:05AC:0247.000A: unknown main item tag 0x0 [ 163.905741][ T5266] apple 0003:05AC:0247.000A: unknown main item tag 0x0 [ 163.918676][ T5266] apple 0003:05AC:0247.000A: item fetching failed at offset 2/160 [ 163.933337][ T5266] apple 0003:05AC:0247.000A: parse failed [ 163.955653][ T5266] apple 0003:05AC:0247.000A: probe with driver apple failed with error -22 [ 164.138640][ T5295] usb 5-1: USB disconnect, device number 10 [ 164.626164][ T9083] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 164.806948][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1693'. [ 165.168578][ T5266] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 165.245166][ T9109] CUSE: unknown device info "Πju|:©ΎiΞς|Κl [ 165.245166][ T9109] ‚ο›D Ν^M’`­ESζ«ΗšΗP²2EQ¬©xΙνy;σvΨ£Ή‚+½:‰yβπGYό™2z€&ό [ 165.245166][ T9109] Z9ό,v’’Οu3~ΪcΩYΣš rΊ(‹%έΐΤΐΣoΦ)j΄†WœeΓ-€ΒΘ7΅#"j-hΘς0u  Α} ί»’oœL¬πxΟ-XzATΡ „" [ 165.288597][ T9109] CUSE: DEVNAME unspecified [ 165.378520][ T5266] usb 1-1: Using ep0 maxpacket: 16 [ 165.387431][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.414012][ T5266] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.438576][ T5266] usb 1-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 165.477448][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.504876][ T5266] usb 1-1: config 0 descriptor?? [ 165.898681][ T1512] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 165.939281][ T5266] logitech 0003:046D:CA03.000B: item fetching failed at offset 0/5 [ 165.947908][ T5266] logitech 0003:046D:CA03.000B: parse failed [ 165.975044][ T5266] logitech 0003:046D:CA03.000B: probe with driver logitech failed with error -22 [ 166.026249][ T9133] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1712'. [ 166.078584][ T1512] usb 4-1: Using ep0 maxpacket: 8 [ 166.085814][ T1512] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 166.117895][ T1512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 166.131340][ T1512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 166.146528][ T5266] usb 1-1: USB disconnect, device number 12 [ 166.168325][ T1512] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 166.177922][ T1512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.194805][ T1512] usb 4-1: Product: syz [ 166.204879][ T1512] usb 4-1: Manufacturer: syz [ 166.210145][ T1512] usb 4-1: SerialNumber: syz [ 166.221456][ T1512] usb 4-1: config 0 descriptor?? [ 166.269462][ T1512] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 166.379530][ T9138] vlan0: vlans aren't supported yet for dev_uc|mc_add() [ 166.502852][ T5266] usb 4-1: USB disconnect, device number 7 [ 166.755671][ T29] audit: type=1326 audit(1724066384.820:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9144 comm="syz.4.1718" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9979e79 code=0x0 [ 167.901800][ T9185] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1735'. [ 167.930068][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 168.102130][ T9191] loop8: detected capacity change from 0 to 6 [ 168.126521][ T9191] Dev loop8: unable to read RDB block 6 [ 168.145578][ T9191] loop8: unable to read partition table [ 168.151600][ T9] usb 2-1: config 0 has no interfaces? [ 168.172668][ T9191] loop8: partition table beyond EOD, truncated [ 168.186991][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.200382][ T9191] loop_reread_partitions: partition scan of loop8 (ώθ’«xόŸΡψ ιΪ¬§½dΖ€΄ΰ–ƒέ‘―¨β·ϋ [ 168.200382][ T9191] ) failed (rc=-5) [ 168.206440][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.223808][ T29] audit: type=1326 audit(1724066386.270:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9192 comm="syz.4.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 168.229733][ T9] usb 2-1: Product: syz [ 168.258398][ T9] usb 2-1: Manufacturer: syz [ 168.263463][ T9] usb 2-1: SerialNumber: syz [ 168.304976][ T29] audit: type=1326 audit(1724066386.270:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9192 comm="syz.4.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 168.309856][ T9] usb 2-1: config 0 descriptor?? [ 168.374688][ T29] audit: type=1326 audit(1724066386.280:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9192 comm="syz.4.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 168.374732][ T29] audit: type=1326 audit(1724066386.280:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9192 comm="syz.4.1739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 168.589704][ T9201] tun0: tun_chr_ioctl cmd 2148553947 [ 168.718820][ T5266] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 168.814168][ T9] usb 2-1: USB disconnect, device number 8 [ 168.912704][ T5266] usb 3-1: config index 0 descriptor too short (expected 106, got 36) [ 168.926766][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 168.954844][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 33295, setting to 1024 [ 168.966309][ T5266] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 168.975447][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.989582][ T5266] usb 3-1: config 0 descriptor?? [ 169.011793][ T9210] ======================================================= [ 169.011793][ T9210] WARNING: The mand mount option has been deprecated and [ 169.011793][ T9210] and is ignored by this kernel. Remove the mand [ 169.011793][ T9210] option from the mount to silence this warning. [ 169.011793][ T9210] ======================================================= [ 169.208781][ T1512] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 169.404181][ T1512] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.418471][ T1512] usb 5-1: config 0 has no interface number 0 [ 169.443757][ T1512] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 169.455784][ T5266] corsair 0003:1B1C:1B3E.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.2-1/input0 [ 169.474750][ T1512] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 40, setting to 8 [ 169.499283][ T1512] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.516646][ T1512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.539641][ T1512] usb 5-1: config 0 descriptor?? [ 169.545622][ T9207] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.579349][ T1512] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 169.592180][ T9226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 169.628809][ T54] Bluetooth: hci6: command 0xfc11 tx timeout [ 169.638530][ T5213] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 169.705500][ T1512] usb 3-1: USB disconnect, device number 12 [ 169.791039][ T5266] usb 5-1: USB disconnect, device number 11 [ 169.813120][ T5266] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 170.116657][ T9240] tun0: tun_chr_ioctl cmd 1074025677 [ 170.122724][ T9240] tun0: linktype set to 805 [ 170.466618][ T9254] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1767'. [ 170.528821][ T9259] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1767'. [ 170.542658][ T9254] Κό: entered promiscuous mode [ 170.555850][ T9259] openvswitch: Κό: Dropping previously announced user features [ 170.565526][ T9260] netlink: 'syz.2.1769': attribute type 1 has an invalid length. [ 170.576977][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1769'. [ 170.722605][ T9265] tun0: tun_chr_ioctl cmd 35108 [ 170.839262][ T5266] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 170.937046][ T29] audit: type=1326 audit(1724066389.010:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb333379e79 code=0x7ffc0000 [ 170.958896][ C1] vkms_vblank_simulate: vblank timer overrun [ 170.997731][ T29] audit: type=1326 audit(1724066389.050:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb333379e79 code=0x7ffc0000 [ 171.051928][ T29] audit: type=1326 audit(1724066389.050:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb333379e79 code=0x7ffc0000 [ 171.080003][ T5266] usb 5-1: Using ep0 maxpacket: 32 [ 171.100377][ T5266] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 171.110193][ T29] audit: type=1326 audit(1724066389.050:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb333379e79 code=0x7ffc0000 [ 171.137714][ T5266] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 171.161551][ T5266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.182271][ T29] audit: type=1326 audit(1724066389.050:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb333379e79 code=0x7ffc0000 [ 171.191926][ T5266] usb 5-1: Product: syz [ 171.244736][ T5266] usb 5-1: Manufacturer: syz [ 171.257777][ T5266] usb 5-1: SerialNumber: syz [ 171.268832][ T9281] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1778'. [ 171.291121][ T29] audit: type=1326 audit(1724066389.050:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9271 comm="syz.3.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fb333379e79 code=0x7ffc0000 [ 171.295108][ T5266] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input19 [ 171.495257][ T4653] bcm5974 5-1:1.0: could not read from device [ 171.529466][ T4653] bcm5974 5-1:1.0: could not read from device [ 171.536013][ T5266] usb 5-1: USB disconnect, device number 12 [ 171.836287][ T9298] netlink: 'syz.3.1787': attribute type 12 has an invalid length. [ 171.847386][ T9298] netlink: 'syz.3.1787': attribute type 29 has an invalid length. [ 171.866624][ T9298] netlink: 'syz.3.1787': attribute type 2 has an invalid length. [ 171.888807][ T9298] netlink: 'syz.3.1787': attribute type 2 has an invalid length. [ 171.906033][ T9298] netlink: 'syz.3.1787': attribute type 1 has an invalid length. [ 171.925207][ T9298] netlink: 'syz.3.1787': attribute type 37 has an invalid length. [ 171.943453][ T9298] netlink: 'syz.3.1787': attribute type 2 has an invalid length. [ 171.954080][ T9298] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.961335][ T9298] netlink: 59 bytes leftover after parsing attributes in process `syz.3.1787'. [ 172.049852][ T9303] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'. [ 172.328548][ T9317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1796'. [ 172.681548][ T9336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 172.709498][ T9337] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1805'. [ 172.830687][ T9341] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.810163][ T9387] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.936353][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 173.936371][ T29] audit: type=1326 audit(1724066392.010:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 173.989718][ T29] audit: type=1326 audit(1724066392.010:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 174.011184][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.066550][ T29] audit: type=1326 audit(1724066392.050:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 174.089898][ T29] audit: type=1326 audit(1724066392.050:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 174.111270][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.118257][ T29] audit: type=1326 audit(1724066392.050:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 174.161780][ T29] audit: type=1326 audit(1724066392.060:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 174.214198][ T29] audit: type=1326 audit(1724066392.060:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ea9979e79 code=0x7ffc0000 [ 174.278499][ T29] audit: type=1326 audit(1724066392.060:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ea9970e27 code=0x7ffc0000 [ 174.339613][ T29] audit: type=1326 audit(1724066392.060:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ea99157e9 code=0x7ffc0000 [ 174.360928][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.410383][ T29] audit: type=1326 audit(1724066392.060:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9391 comm="syz.4.1834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0ea9970e27 code=0x7ffc0000 [ 174.437317][ T9406] dlm: non-version read from control device 183 [ 175.398612][ T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.568938][ T9446] bridge_slave_1: left allmulticast mode [ 175.583587][ T9446] bridge_slave_1: left promiscuous mode [ 175.597898][ T9446] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.623311][ T25] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.637167][ T9446] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 175.659098][ T25] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 175.681811][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.708905][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.745102][ T9426] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 175.809237][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 176.133685][ T9468] netlink: 'syz.0.1871': attribute type 4 has an invalid length. [ 176.184558][ T5266] usb 2-1: USB disconnect, device number 9 [ 176.489752][ T9483] overlayfs: conflicting options: nfs_export=on,index=off [ 177.088594][ T5266] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 177.269824][ T9504] tipc: Started in network mode [ 177.275035][ T9504] tipc: Node identity UNC_PROT, cluster identity 4711 [ 177.282930][ T9504] tipc: Enabling of bearer rejected, failed to enable media [ 177.302715][ T5266] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 177.326431][ T5266] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 177.348134][ T5266] usb 1-1: config 0 has no interface number 0 [ 177.372573][ T5266] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.388660][ T5263] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 177.417192][ T5266] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 177.437703][ T5266] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 177.468344][ T5266] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 177.518632][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.539812][ T5266] usb 1-1: config 0 descriptor?? [ 177.545542][ T9493] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.588842][ T5263] usb 2-1: Using ep0 maxpacket: 16 [ 177.604236][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.636351][ T9514] pim6reg1: entered promiscuous mode [ 177.654360][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.664626][ T9514] pim6reg1: entered allmulticast mode [ 177.676021][ T5263] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 177.708035][ T5263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.758163][ T5263] usb 2-1: config 0 descriptor?? [ 178.018373][ T5263] usbhid 2-1:0.0: can't add hid device: -71 [ 178.047821][ T5263] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 178.072171][ T5263] usb 2-1: USB disconnect, device number 10 [ 178.201867][ T5266] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.21/input/input20 [ 178.414250][ T25] usb 1-1: USB disconnect, device number 13 [ 178.420218][ C1] keyspan_remote 1-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 178.498829][ T1512] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 178.648631][ T5263] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 178.680676][ T1512] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.699998][ T1512] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.728491][ T1512] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.748593][ T1512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.769973][ T1512] usb 5-1: config 0 descriptor?? [ 178.852844][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.881201][ T5263] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.899510][ T5263] usb 2-1: New USB device found, idVendor=07fa, idProduct=0847, bcdDevice= 0.00 [ 178.926101][ T5263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.946647][ T5263] usb 2-1: config 0 descriptor?? [ 178.964013][ T5263] HFC-S_USB 2-1:0.0: probe with driver HFC-S_USB failed with error -5 [ 179.191182][ T9558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1910'. [ 179.197273][ T1512] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 179.223395][ T9558] hsr0: entered promiscuous mode [ 179.231732][ T1512] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 179.271862][ T5263] usbhid 2-1:0.0: can't add hid device: -71 [ 179.292570][ T5263] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 179.329989][ T5263] usb 2-1: USB disconnect, device number 11 [ 179.485296][ T5266] usb 5-1: USB disconnect, device number 13 [ 180.268707][ T9589] syz.3.1924 uses obsolete (PF_INET,SOCK_PACKET) [ 181.027682][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 181.027699][ T29] audit: type=1326 audit(1724066399.100:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9608 comm="syz.3.1935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb333379e79 code=0x0 [ 182.514511][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.692906][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.926627][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.130901][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.178960][ T5295] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 183.389850][ T5295] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 183.410682][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 183.448856][ T5295] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 183.488181][ T35] bridge_slave_1: left allmulticast mode [ 183.494314][ T35] bridge_slave_1: left promiscuous mode [ 183.500957][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 183.505215][ T5295] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.512706][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.531299][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 183.541477][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 183.558722][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 183.569155][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 183.576597][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 183.587257][ T5295] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 183.647241][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.671483][ T35] bridge_slave_0: left allmulticast mode [ 183.677158][ T35] bridge_slave_0: left promiscuous mode [ 183.710923][ T5295] usb 5-1: config 0 descriptor?? [ 183.726302][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.747947][ T9645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 183.765341][ T29] audit: type=1326 audit(1724066401.840:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb333379e79 code=0x7ffc0000 [ 183.834036][ T29] audit: type=1326 audit(1724066401.840:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb333379e79 code=0x7ffc0000 [ 183.897905][ T29] audit: type=1326 audit(1724066401.860:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fb333379e79 code=0x7ffc0000 [ 183.958483][ T29] audit: type=1326 audit(1724066401.860:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9654 comm="syz.3.1957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb333379e79 code=0x7ffc0000 [ 184.205366][ T5295] plantronics 0003:047F:FFFF.000E: unknown main item tag 0xd [ 184.228023][ T5295] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 184.266687][ T5295] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 184.467243][ T46] usb 5-1: USB disconnect, device number 14 [ 184.885607][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.916313][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.942052][ T35] bond0 (unregistering): Released all slaves [ 185.184215][ T35] tipc: Left network mode [ 185.455099][ T35] IPVS: stopping master sync thread 5581 ... [ 185.638841][ T5213] Bluetooth: hci3: command tx timeout [ 185.695163][ T9650] chnl_net:caif_netlink_parms(): no params data found [ 186.162513][ T9650] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.184546][ T9650] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.202888][ T9650] bridge_slave_0: entered allmulticast mode [ 186.224536][ T9650] bridge_slave_0: entered promiscuous mode [ 186.267730][ T9650] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.302001][ T9650] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.332240][ T9650] bridge_slave_1: entered allmulticast mode [ 186.344073][ T9650] bridge_slave_1: entered promiscuous mode [ 186.705595][ T35] hsr_slave_0: left promiscuous mode [ 186.726807][ T35] hsr_slave_1: left promiscuous mode [ 186.746121][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.758850][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.856464][ T9730] netlink: 'syz.4.1985': attribute type 11 has an invalid length. [ 186.906550][ T35] veth0_macvtap: left promiscuous mode [ 186.918148][ T35] veth1_vlan: left promiscuous mode [ 186.939253][ T35] veth0_vlan: left promiscuous mode [ 187.246589][ T9741] sctp: [Deprecated]: syz.1.1990 (pid 9741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.246589][ T9741] Use struct sctp_sack_info instead [ 187.708726][ T5213] Bluetooth: hci3: command tx timeout [ 188.053220][ T35] team0 (unregistering): Port device team_slave_1 removed [ 188.125305][ T35] team0 (unregistering): Port device team_slave_0 removed [ 189.085221][ T9650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.107540][ T9650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.286075][ T9650] team0: Port device team_slave_0 added [ 189.311126][ T9650] team0: Port device team_slave_1 added [ 189.452066][ T9650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.476911][ T9650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.484828][ T9789] loop2: detected capacity change from 0 to 7 [ 189.502863][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.515481][ T9650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.571906][ T9789] Dev loop2: unable to read RDB block 7 [ 189.577664][ T9789] loop2: AHDI p1 p3 [ 189.582537][ T9789] loop2: partition table partially beyond EOD, truncated [ 189.582991][ T9650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.608715][ T9789] loop2: p1 start 2048 is beyond EOD, truncated [ 189.612935][ T9650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.640859][ C1] vkms_vblank_simulate: vblank timer overrun [ 189.663747][ T9650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.788553][ T5213] Bluetooth: hci3: command tx timeout [ 189.842961][ T9650] hsr_slave_0: entered promiscuous mode [ 189.893526][ T9650] hsr_slave_1: entered promiscuous mode [ 189.919067][ T9650] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.939864][ T9650] Cannot create hsr debugfs directory [ 190.185028][ T9807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2021'. [ 191.034854][ T9837] vivid-003: ================= START STATUS ================= [ 191.067999][ T9837] vivid-003: Radio HW Seek Mode: Bounded [ 191.079496][ T9837] vivid-003: Radio Programmable HW Seek: false [ 191.093261][ T9837] vivid-003: RDS Rx I/O Mode: Block I/O [ 191.103709][ T9650] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.123271][ T9837] vivid-003: Generate RBDS Instead of RDS: false [ 191.123444][ T9650] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.153489][ T9837] vivid-003: RDS Reception: true [ 191.176785][ T9837] vivid-003: RDS Program Type: 0 inactive [ 191.177895][ T9650] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 191.244473][ T9650] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 191.252360][ T9837] vivid-003: RDS PS Name: inactive [ 191.259646][ T9837] vivid-003: RDS Radio Text: inactive [ 191.281394][ T9837] vivid-003: RDS Traffic Announcement: false inactive [ 191.299137][ T9837] vivid-003: RDS Traffic Program: false inactive [ 191.341230][ T9837] vivid-003: RDS Music: false inactive [ 191.387861][ T9837] vivid-003: ================== END STATUS ================== [ 191.524402][ T9650] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.537136][ T9855] input: syz0 as /devices/virtual/input/input23 [ 191.595817][ T9650] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.659138][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.666293][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.705948][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.713116][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.786356][ T9859] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.873277][ T5213] Bluetooth: hci3: command tx timeout [ 192.149639][ T9880] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.182366][ T9880] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.189865][ T9880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.274560][ T9880] team0: Port device bridge0 added [ 192.724372][ T9886] team0 (unregistering): Port device team_slave_0 removed [ 192.747230][ T9886] team0 (unregistering): Port device team_slave_1 removed [ 192.764472][ T9886] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.788231][ T9886] team0 (unregistering): Port device bridge0 removed [ 192.901885][ T9650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.102900][ T9897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.151158][ T9650] veth0_vlan: entered promiscuous mode [ 193.187133][ T9650] veth1_vlan: entered promiscuous mode [ 193.284194][ T9650] veth0_macvtap: entered promiscuous mode [ 193.304096][ T9650] veth1_macvtap: entered promiscuous mode [ 193.348960][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.363483][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.382135][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.395940][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.406164][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.416913][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.427094][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.437971][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.447934][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.462133][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.490192][ T9650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.529795][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.540677][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.550877][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.561541][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.571441][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.586933][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.610464][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.631652][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.643396][ T9650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.654143][ T9650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.666725][ T9650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.688196][ T9650] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.707435][ T9650] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.729917][ T9650] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.756299][ T9650] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.844378][ T9908] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2063'. [ 194.010906][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.038540][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.114725][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.143034][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.513802][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.522169][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.577085][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 195.310343][ T9973] loop2: detected capacity change from 0 to 7 [ 195.356598][ T9650] Dev loop2: unable to read RDB block 7 [ 195.362376][ T9650] loop2: AHDI p1 p3 p4 [ 195.367825][ T9650] loop2: partition table partially beyond EOD, truncated [ 195.387053][ T9650] loop2: p1 start 2048 is beyond EOD, truncated [ 195.397755][ T9650] loop2: p3 size 16779293 extends beyond EOD, truncated [ 195.462195][ T9973] Dev loop2: unable to read RDB block 7 [ 195.478974][ T9973] loop2: AHDI p1 p3 p4 [ 195.483192][ T9973] loop2: partition table partially beyond EOD, truncated [ 195.518636][ T9973] loop2: p1 start 2048 is beyond EOD, truncated [ 195.541811][ T9973] loop2: p3 size 16779293 extends beyond EOD, truncated [ 195.637312][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 196.008611][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 196.108915][ T1512] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 196.198892][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 196.207050][ T9] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 196.229352][ T9] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 196.237992][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 196.274302][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 196.288653][ T5221] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 196.298765][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 196.316193][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 196.336520][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 196.340085][ T1512] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 196.345956][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.381917][ T1512] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.387177][ T9] usb 1-1: config 0 descriptor?? [ 196.408336][ T1512] usb 3-1: config 0 descriptor?? [ 196.485727][ T5221] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.507630][ T5221] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.540786][ T5221] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 196.566035][ T5221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 196.588561][ T5221] usb 2-1: SerialNumber: syz [ 196.629827][ T9] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 196.845719][ T5221] usb 2-1: 0:2 : does not exist [ 196.879947][ T1512] [drm:udl_init] *ERROR* Selecting channel failed [ 196.892424][ T5221] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 196.907499][ T5295] usb 1-1: USB disconnect, device number 14 [ 196.927347][ T1512] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 196.929320][ T5295] usblp0: removed [ 196.941405][ T5221] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 196.960845][ T1512] [drm] Initialized udl on minor 2 [ 196.968633][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 196.983423][ T1512] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.003853][ T5221] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 197.012082][ T1512] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 197.025243][ T5221] usb 2-1: USB disconnect, device number 12 [ 197.036664][ T5266] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.052473][ T1512] usb 3-1: USB disconnect, device number 13 [ 197.064915][ T5266] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 197.152730][ T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 197.173608][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.192207][ T25] usb 5-1: Product: syz [ 197.206622][ T25] usb 5-1: Manufacturer: syz [ 197.216224][ T25] usb 5-1: SerialNumber: syz [ 197.233796][ T25] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 197.297511][ T5266] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 197.885047][T10039] tipc: Started in network mode [ 197.897918][T10039] tipc: Node identity 5f6c656e3a20380a, cluster identity 4711 [ 197.911173][T10039] tipc: Enabling of bearer rejected, failed to enable media [ 198.085238][T10040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.115140][T10040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.350834][ T5266] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 198.373487][ T5266] ath9k_htc: Failed to initialize the device [ 198.477175][ T5266] usb 5-1: ath9k_htc: USB layer deinitialized [ 198.499686][ T1512] usb 5-1: USB disconnect, device number 15 [ 199.610097][T10091] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2145'. [ 199.935905][T10104] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 199.953254][T10104] macvlan4: entered allmulticast mode [ 199.961085][T10104] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 199.993634][T10104] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 200.734537][ T5295] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 200.876127][T10140] netlink: 'syz.2.2168': attribute type 13 has an invalid length. [ 200.890854][T10140] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.2168'. [ 200.948473][ T5295] usb 5-1: Using ep0 maxpacket: 8 [ 200.963306][ T5295] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 200.977462][ T5295] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.014646][ T5295] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.046012][ T5295] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.058981][ T5295] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.076350][ T5295] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 201.077883][T10145] loop2: detected capacity change from 0 to 7 [ 201.085958][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.167348][T10145] Dev loop2: unable to read RDB block 7 [ 201.173164][T10145] loop2: AHDI p1 p3 p4 [ 201.208682][T10145] loop2: partition table partially beyond EOD, truncated [ 201.230328][T10145] loop2: p1 start 2048 is beyond EOD, truncated [ 201.268848][T10145] loop2: p3 size 16779293 extends beyond EOD, truncated [ 201.320813][ T5295] usb 5-1: usb_control_msg returned -32 [ 201.329935][ T5295] usbtmc 5-1:16.0: can't read capabilities [ 202.306509][T10186] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2189'. [ 202.660310][T10199] Bluetooth: MGMT ver 1.23 [ 202.678552][T10199] Bluetooth: hci3: unsupported parameter 64512 [ 202.684765][T10199] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 202.718487][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 202.888515][ T5295] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 202.913790][T10201] netlink: 5300 bytes leftover after parsing attributes in process `syz.1.2196'. [ 202.951548][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 202.953039][T10201] openvswitch: netlink: IP tunnel dst address not specified [ 202.968792][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.968822][ T9] usb 1-1: Product: syz [ 202.968838][ T9] usb 1-1: Manufacturer: syz [ 202.968861][ T9] usb 1-1: SerialNumber: syz [ 202.987821][ T9] usb 1-1: config 0 descriptor?? [ 203.098480][ T5295] usb 3-1: Using ep0 maxpacket: 8 [ 203.105846][ T5295] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.121532][ T5295] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.132547][T10205] netlink: 'syz.3.2198': attribute type 3 has an invalid length. [ 203.146142][ T5295] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 203.171869][ T5295] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.427688][ T9] usb 1-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (1) [ 203.451196][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 203.484679][ T9] usb 1-1: Please update to version 0.2 or newer [ 203.501262][ T5308] usb 5-1: USB disconnect, device number 16 [ 203.548816][ T5266] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 203.609267][ T5295] uclogic 0003:28BD:0075.000F: interface is invalid, ignoring [ 203.682192][ T9] usb 1-1: USB disconnect, device number 15 [ 203.761918][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.787875][ T5266] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.807875][ T5266] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 203.821453][ T5266] usb 4-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 203.849249][T10219] sp0: Synchronizing with TNC [ 203.855980][ T5266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.887050][ T5308] usb 3-1: USB disconnect, device number 14 [ 203.894866][ T5266] usb 4-1: config 0 descriptor?? [ 204.059219][T10222] netlink: 'syz.4.2204': attribute type 1 has an invalid length. [ 204.067256][T10222] netlink: 9116 bytes leftover after parsing attributes in process `syz.4.2204'. [ 204.076500][T10222] netlink: 'syz.4.2204': attribute type 2 has an invalid length. [ 204.089417][T10222] netlink: 185 bytes leftover after parsing attributes in process `syz.4.2204'. [ 204.338828][ T5266] ntrig 0003:1B96:0013.0010: item fetching failed at offset 5/7 [ 204.360524][ T5266] ntrig 0003:1B96:0013.0010: parse failed [ 204.366474][ T5266] ntrig 0003:1B96:0013.0010: probe with driver ntrig failed with error -22 [ 204.596274][ T5266] usb 4-1: USB disconnect, device number 8 [ 204.650073][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 204.845836][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.873261][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.891536][ T25] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.905512][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.924459][ T25] usb 5-1: SerialNumber: syz [ 204.949420][ T1512] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 205.109187][T10250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2217'. [ 205.151842][ T25] usb 5-1: 0:2 : does not exist [ 205.195523][ T1512] usb 2-1: config 0 has an invalid interface number: 18 but max is 0 [ 205.208921][ T25] usb 5-1: USB disconnect, device number 17 [ 205.217196][ T1512] usb 2-1: config 0 has no interface number 0 [ 205.233275][ T1512] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.264428][ T1512] usb 2-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.298219][ T1512] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 205.327111][ T1512] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 205.361349][ T1512] usb 2-1: Manufacturer: syz [ 205.385063][ T1512] usb 2-1: config 0 descriptor?? [ 205.886154][ T1512] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.18/0003:054C:03D5.0011/input/input25 [ 205.964322][T10277] netlink: 'syz.0.2229': attribute type 9 has an invalid length. [ 205.966682][T10280] Bluetooth: hci3: unsupported parameter 64512 [ 205.992739][T10277] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.2229'. [ 205.993193][T10280] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 206.089083][ T1512] sony 0003:054C:03D5.0011: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.1-1/input18 [ 206.141952][ T1512] usb 2-1: USB disconnect, device number 13 [ 206.218826][T10286] loop0: detected capacity change from 0 to 7 [ 206.245799][ T5218] Dev loop0: unable to read RDB block 7 [ 206.268978][ T5218] loop0: AHDI p2 [ 206.272798][ T5218] loop0: partition table partially beyond EOD, truncated [ 206.295969][T10286] Dev loop0: unable to read RDB block 7 [ 206.308738][T10286] loop0: AHDI p2 [ 206.314703][T10286] loop0: partition table partially beyond EOD, truncated [ 206.408734][T10295] Bluetooth: hci3: unsupported parameter 64512 [ 206.423306][T10295] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 206.645604][T10309] input: syz0 as /devices/virtual/input/input26 [ 206.766238][ T29] audit: type=1326 audit(1724066424.840:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10310 comm="syz.4.2245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ea9979e79 code=0x0 [ 208.556436][T10387] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2277'. [ 209.229481][T10416] binder: 10415:10416 ioctl c0306201 200001c0 returned -14 [ 209.278669][ T46] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 209.398893][ T5295] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.473427][ T46] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 209.500040][ T46] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 209.509498][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 209.517647][ T46] usb 5-1: SerialNumber: syz [ 209.582594][ T5295] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 209.596471][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.615992][ T5295] usb 4-1: config 0 descriptor?? [ 209.637608][ T5295] cp210x 4-1:0.0: cp210x converter detected [ 210.036896][ T5295] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 210.037423][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.074086][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.113497][ T5295] usb 4-1: cp210x converter now attached to ttyUSB0 [ 210.174586][ T46] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 210.322072][ T46] usb 4-1: USB disconnect, device number 9 [ 210.345271][ T46] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 210.393844][ T46] cp210x 4-1:0.0: device disconnected [ 210.616977][ T5308] usb 5-1: USB disconnect, device number 18 [ 210.632049][ T5308] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 211.238769][ T5308] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 211.429539][ T5308] usb 4-1: Using ep0 maxpacket: 16 [ 211.440767][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.461119][ T5308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.477865][ T5308] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 211.489160][ T5308] usb 4-1: New USB device strings: Mfr=236, Product=255, SerialNumber=0 [ 211.497706][ T5308] usb 4-1: Product: syz [ 211.502824][ T5308] usb 4-1: Manufacturer: syz [ 211.511499][ T5308] usb 4-1: config 0 descriptor?? [ 211.950474][ T5308] kovaplus 0003:1E7D:2D50.0012: unknown main item tag 0xd [ 211.967079][ T5308] kovaplus 0003:1E7D:2D50.0012: hidraw0: USB HID v0.07 Device [syz syz] on usb-dummy_hcd.3-1/input0 [ 212.389534][ T46] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 212.545990][ T5308] kovaplus 0003:1E7D:2D50.0012: couldn't init struct kovaplus_device [ 212.558918][ T5308] kovaplus 0003:1E7D:2D50.0012: couldn't install mouse [ 212.590179][ T5308] kovaplus 0003:1E7D:2D50.0012: probe with driver kovaplus failed with error -71 [ 212.592123][ T46] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 212.622071][ T5308] usb 4-1: USB disconnect, device number 10 [ 212.638276][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.662754][ T46] usb 1-1: config 0 descriptor?? [ 213.067769][T10543] tun0: tun_chr_ioctl cmd 1074025675 [ 213.074096][T10543] tun0: persist enabled [ 213.079847][T10543] tun0: tun_chr_ioctl cmd 1074025675 [ 213.085368][T10543] tun0: persist disabled [ 213.101380][ T46] gs_usb 1-1:0.0: Configuring for 1 interfaces [ 213.179011][ T1512] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 213.381057][ T1512] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 213.398570][ T1512] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.429578][ T1512] usb 5-1: config 0 descriptor?? [ 213.669312][ T1512] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 213.678451][ T1512] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 213.706996][ T1512] [drm:udl_init] *ERROR* Selecting channel failed [ 213.745961][ T1512] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 213.772757][ T1512] [drm] Initialized udl on minor 2 [ 213.789727][ T1512] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 213.808704][ T1512] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 213.821416][ T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 213.826903][ T5308] usb 1-1: USB disconnect, device number 16 [ 213.832555][ T1512] usb 5-1: USB disconnect, device number 19 [ 213.842610][ T46] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 213.923797][T10557] netlink: 5296 bytes leftover after parsing attributes in process `syz.3.2354'. [ 214.109162][T10551] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2352'. [ 214.656473][T10573] netlink: 'syz.2.2361': attribute type 3 has an invalid length. [ 214.688489][T10573] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2361'. [ 214.892385][T10580] program syz.2.2365 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 215.091127][T10587] netlink: 'syz.2.2368': attribute type 27 has an invalid length. [ 215.438773][ T1512] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.469239][T10587] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.476932][T10587] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.638574][ T1512] usb 4-1: Using ep0 maxpacket: 8 [ 215.647451][ T1512] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 215.688770][ T1512] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 215.713104][ T1512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 215.724265][ T1512] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33936, setting to 1024 [ 215.735633][ T1512] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.769484][ T1512] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 215.793913][ T1512] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.820829][ T1512] usb 4-1: Product: syz [ 215.840774][ T1512] usb 4-1: Manufacturer: syz [ 215.856477][ T1512] usb 4-1: SerialNumber: syz [ 215.890026][ T1512] usb 4-1: config 0 descriptor?? [ 215.913364][T10590] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.966540][ T1512] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27 [ 216.120536][T10587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.215923][T10587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.358756][ T1512] rc_core: IR keymap rc-imon-pad not found [ 216.371422][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.414976][ T1512] Registered IR keymap rc-empty [ 216.439312][ T1512] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 216.475741][ T1512] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 216.479466][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.559695][ T1512] imon:send_packet: packet tx failed (-71) [ 216.586270][T10627] sctp: [Deprecated]: syz.0.2376 (pid 10627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.586270][T10627] Use struct sctp_sack_info instead [ 216.618845][ T1512] imon 4-1:0.0: remote input dev register failed [ 216.628995][ T1512] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 216.745409][ T1512] imon 4-1:0.0: unable to initialize intf0, err 0 [ 216.772820][ T1512] imon:imon_probe: failed to initialize context! [ 216.789363][ T1512] imon 4-1:0.0: unable to register, err -19 [ 216.805640][ T1512] usb 4-1: USB disconnect, device number 11 [ 216.819152][T10587] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.861632][T10587] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.908951][T10587] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.938806][T10587] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.590008][T10641] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 217.637592][T10641] overlayfs: conflicting lowerdir path [ 218.318803][T10593] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 218.437169][ T969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.508569][T10593] usb 3-1: Using ep0 maxpacket: 8 [ 218.534099][T10593] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.559310][T10593] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 218.571347][T10593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 218.582670][T10593] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 218.596357][T10593] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 218.610445][ T969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.618637][T10593] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 218.637658][T10593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 218.646177][T10593] usb 3-1: Product: syz [ 218.657387][T10593] usb 3-1: Manufacturer: syz [ 218.662156][T10593] usb 3-1: SerialNumber: syz [ 218.680015][T10593] usb 3-1: config 0 descriptor?? [ 218.760950][ T969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.912292][ T969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.936026][T10593] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 218.957071][T10593] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 219.194171][ T969] bridge_slave_0: left allmulticast mode [ 219.218473][ T969] bridge_slave_0: left promiscuous mode [ 219.230996][ T969] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.255249][T10593] usb 3-1: USB disconnect, device number 15 [ 219.297542][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.309185][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.320132][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.330081][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.342134][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 219.352724][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.056409][ T969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.073463][ T969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.092261][ T969] bond0 (unregistering): Released all slaves [ 220.207942][ T969] Κό: left promiscuous mode [ 220.802942][T10675] chnl_net:caif_netlink_parms(): no params data found [ 220.961736][ T969] hsr_slave_0: left promiscuous mode [ 221.028708][ T969] hsr_slave_1: left promiscuous mode [ 221.073801][ T969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.081405][ T969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.125247][ T969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.137482][ T969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.236347][ T969] veth1_macvtap: left promiscuous mode [ 221.278844][ T969] veth0_macvtap: left promiscuous mode [ 221.284512][ T969] veth1_vlan: left promiscuous mode [ 221.298701][ T969] veth0_vlan: left promiscuous mode [ 221.389750][ T54] Bluetooth: hci4: command tx timeout [ 222.682261][T10711] syzkaller1: entered promiscuous mode [ 222.687776][T10711] syzkaller1: entered allmulticast mode [ 222.750974][T10700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 222.805377][ T5213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 222.817685][ T5213] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 222.825756][ T5213] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 222.835144][ T5213] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 222.846124][ T5213] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 222.856548][ T5213] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.360901][T10675] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.374808][T10675] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.382278][T10675] bridge_slave_0: entered allmulticast mode [ 223.394647][T10675] bridge_slave_0: entered promiscuous mode [ 223.421315][T10675] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.435657][T10675] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.443523][T10675] bridge_slave_1: entered allmulticast mode [ 223.457951][T10675] bridge_slave_1: entered promiscuous mode [ 223.468833][ T5213] Bluetooth: hci4: command tx timeout [ 223.522343][T10593] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 223.547757][T10675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.576927][T10675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.622453][ T969] IPVS: stop unused estimator thread 0... [ 223.673718][T10675] team0: Port device team_slave_0 added [ 223.692425][T10675] team0: Port device team_slave_1 added [ 223.729357][T10593] usb 3-1: Using ep0 maxpacket: 16 [ 223.738268][T10593] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 223.758459][T10593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.766566][T10593] usb 3-1: Product: syz [ 223.788233][T10593] usb 3-1: Manufacturer: syz [ 223.792998][T10593] usb 3-1: SerialNumber: syz [ 223.795448][T10675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.812388][T10593] usb 3-1: config 0 descriptor?? [ 223.825304][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.897396][T10675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.964478][T10675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.991465][T10675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.072165][T10593] speedtch 3-1:0.0: speedtch_bind: wrong device class 68 [ 224.072193][T10593] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 224.079442][T10593] usb 3-1: USB disconnect, device number 16 [ 224.081058][T10675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.455276][T10675] hsr_slave_0: entered promiscuous mode [ 224.489198][T10675] hsr_slave_1: entered promiscuous mode [ 224.515479][T10675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.531408][T10675] Cannot create hsr debugfs directory [ 224.709907][T10718] chnl_net:caif_netlink_parms(): no params data found [ 224.909864][ T5213] Bluetooth: hci6: command tx timeout [ 225.362980][T10718] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.381834][T10718] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.406798][T10718] bridge_slave_0: entered allmulticast mode [ 225.438966][T10718] bridge_slave_0: entered promiscuous mode [ 225.460102][T10718] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.467233][T10718] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.509908][T10718] bridge_slave_1: entered allmulticast mode [ 225.517281][T10718] bridge_slave_1: entered promiscuous mode [ 225.548648][ T5213] Bluetooth: hci4: command tx timeout [ 225.650456][T10718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.691925][T10718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.856047][T10718] team0: Port device team_slave_0 added [ 225.942273][T10718] team0: Port device team_slave_1 added [ 225.995440][T10771] netlink: 3068 bytes leftover after parsing attributes in process `syz.3.2429'. [ 226.009997][T10770] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 226.028632][T10771] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2429'. [ 226.044644][T10770] macsec0: entered promiscuous mode [ 226.214499][T10718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.231880][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.301662][T10718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.321558][T10718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.329060][T10718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.388667][T10718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.520595][T10788] hpfs: Bad magic ... probably not HPFS [ 226.587341][T10718] hsr_slave_0: entered promiscuous mode [ 226.638934][T10718] hsr_slave_1: entered promiscuous mode [ 226.645514][T10718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.668974][T10718] Cannot create hsr debugfs directory [ 226.674594][T10675] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.771244][T10675] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.840575][T10675] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.949477][T10675] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.989094][ T5213] Bluetooth: hci6: command tx timeout [ 227.380949][T10718] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.532261][T10675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.568649][T10604] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 227.629163][ T5213] Bluetooth: hci4: command tx timeout [ 227.641663][T10718] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.686445][T10675] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.758653][T10604] usb 5-1: Using ep0 maxpacket: 8 [ 227.790022][T10604] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 227.802004][T10604] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.812922][T10604] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.823397][T10604] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.833699][T10604] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.846956][T10604] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.853560][T10718] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.882166][T10825] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 227.896605][T10604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.918560][T10616] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 227.929076][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.936313][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.986485][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.993887][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.049603][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2456'. [ 228.070773][T10718] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.136621][T10616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.169154][T10616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.209266][T10616] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 228.226351][T10675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.242281][T10616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.251982][T10675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.264420][T10616] usb 4-1: config 0 descriptor?? [ 228.392201][T10594] usb 5-1: USB disconnect, device number 20 [ 228.532648][T10718] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.553150][T10718] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.585641][T10718] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.625124][T10718] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.712993][T10675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.728977][T10616] cougar 0003:060B:700A.0013: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 228.866573][T10675] veth0_vlan: entered promiscuous mode [ 228.896823][T10594] usb 4-1: USB disconnect, device number 12 [ 228.945447][T10675] veth1_vlan: entered promiscuous mode [ 228.975591][T10718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.036171][T10718] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.069168][ T5213] Bluetooth: hci6: command tx timeout [ 229.082019][T10675] veth0_macvtap: entered promiscuous mode [ 229.099105][T10616] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 229.141658][ T3028] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.148856][ T3028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.171073][ T3028] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.178239][ T3028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.218337][T10675] veth1_macvtap: entered promiscuous mode [ 229.284176][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.296838][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.307403][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.327232][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.337356][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.348070][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.358346][T10616] usb 3-1: Using ep0 maxpacket: 8 [ 229.364123][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.375128][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.390459][T10616] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 229.404974][T10675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.412627][T10616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 229.445524][T10616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.467645][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.486510][T10616] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.509667][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.524222][T10616] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.539060][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.554099][T10616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.562360][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.583158][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.609548][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.634483][T10675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.649685][T10675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.675276][T10675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.713671][T10675] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.737324][T10675] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.757593][T10675] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.774752][T10675] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.798567][T10616] usb 3-1: GET_CAPABILITIES returned 0 [ 229.811496][T10616] usbtmc 3-1:16.0: can't read capabilities [ 229.970507][T10718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.046440][ T8] usb 3-1: USB disconnect, device number 17 [ 230.061590][ T3028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.093927][ T3028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.196174][T10718] veth0_vlan: entered promiscuous mode [ 230.231476][ T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.237201][T10718] veth1_vlan: entered promiscuous mode [ 230.248949][ T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.307365][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2467'. [ 230.384774][T10718] veth0_macvtap: entered promiscuous mode [ 230.424160][T10718] veth1_macvtap: entered promiscuous mode [ 230.502037][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.516127][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.526347][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.537203][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.547718][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.558338][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.569868][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.609270][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.638901][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.658694][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.680921][T10718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.717888][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.747009][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.786115][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.804853][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.817582][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.836786][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.855015][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.873062][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.883136][T10718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.904519][T10718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.930172][T10718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.954630][T10718] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.972650][T10718] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.981820][T10718] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.991672][T10718] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.148787][ T5213] Bluetooth: hci6: command tx timeout [ 231.197367][ T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.213243][ T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.248771][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.268913][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.333943][T10881] input: syz0 as /devices/virtual/input/input29 [ 231.923245][T10904] bridge0: port 3(gretap0) entered blocking state [ 231.942834][T10904] bridge0: port 3(gretap0) entered disabled state [ 231.960746][T10904] gretap0: entered allmulticast mode [ 231.985097][T10904] gretap0: entered promiscuous mode [ 232.004809][T10904] bridge0: port 3(gretap0) entered blocking state [ 232.011768][T10904] bridge0: port 3(gretap0) entered forwarding state [ 232.080313][T10905] gretap0: left allmulticast mode [ 232.106348][T10905] gretap0: left promiscuous mode [ 232.141475][T10905] bridge0: port 3(gretap0) entered disabled state [ 232.225673][T10910] trusted_key: syz.2.2488 sent an empty control message without MSG_MORE. [ 232.573624][T10926] netlink: 'syz.4.2494': attribute type 2 has an invalid length. [ 232.700596][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.231603][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.377493][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.455583][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.466606][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.490608][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.500239][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.509174][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 233.516674][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.560660][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.945768][ T35] bridge_slave_1: left allmulticast mode [ 233.973553][ T35] bridge_slave_1: left promiscuous mode [ 234.000682][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.041339][ T35] bridge_slave_0: left allmulticast mode [ 234.061454][ T35] bridge_slave_0: left promiscuous mode [ 234.073997][ T8] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 234.084187][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.273888][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.305550][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.338824][ T8] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 234.369562][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.384676][ T8] usb 3-1: config 0 descriptor?? [ 234.827294][ T8] holtek_kbd 0003:04D9:A055.0014: unknown main item tag 0x0 [ 234.841289][ T8] holtek_kbd 0003:04D9:A055.0014: item fetching failed at offset 3/5 [ 234.857739][ T8] holtek_kbd 0003:04D9:A055.0014: probe with driver holtek_kbd failed with error -22 [ 235.031369][ T8] usb 3-1: USB disconnect, device number 18 [ 235.063792][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.083830][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.110405][ T35] bond0 (unregistering): Released all slaves [ 235.549095][ T5213] Bluetooth: hci4: command tx timeout [ 235.615606][T10950] chnl_net:caif_netlink_parms(): no params data found [ 236.009099][ T35] hsr_slave_0: left promiscuous mode [ 236.081050][ T35] hsr_slave_1: left promiscuous mode [ 236.179168][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.201412][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.219495][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.226920][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.315116][ T35] veth1_macvtap: left promiscuous mode [ 236.328365][ T35] veth0_macvtap: left promiscuous mode [ 236.339561][ T35] veth1_vlan: left promiscuous mode [ 236.355380][ T35] veth0_vlan: left promiscuous mode [ 237.639525][ T5213] Bluetooth: hci4: command tx timeout [ 237.793996][ T35] team0 (unregistering): Port device team_slave_1 removed [ 237.906652][ T35] team0 (unregistering): Port device team_slave_0 removed [ 238.282682][ T29] audit: type=1326 audit(1724066712.357:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11072 comm="syz.2.2557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ea6179e79 code=0x0 [ 238.817435][T10950] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.835350][T10950] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.846349][T10950] bridge_slave_0: entered allmulticast mode [ 238.856921][T10950] bridge_slave_0: entered promiscuous mode [ 238.870002][T10950] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.877143][T10950] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.899649][T10950] bridge_slave_1: entered allmulticast mode [ 238.919969][T10950] bridge_slave_1: entered promiscuous mode [ 239.022712][T10950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.100137][T10950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.217811][T10950] team0: Port device team_slave_0 added [ 239.234798][T10950] team0: Port device team_slave_1 added [ 239.379878][T10950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.387027][T10950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.427323][T10950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.456662][T10950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.483440][T10950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.537995][T10950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.651377][T10950] hsr_slave_0: entered promiscuous mode [ 239.679548][T10950] hsr_slave_1: entered promiscuous mode [ 239.708596][ T5213] Bluetooth: hci4: command tx timeout [ 239.745695][T10950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.773943][T10950] Cannot create hsr debugfs directory [ 240.068667][ T8] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 240.131129][T11109] netlink: 'syz.4.2572': attribute type 34 has an invalid length. [ 240.266999][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.293703][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.331786][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.351749][ T8] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 240.362406][ T8] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 240.373037][ T8] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 240.385865][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.404726][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.420854][ T8] usb 3-1: Product: syz [ 240.425048][ T8] usb 3-1: Manufacturer: syz [ 240.466171][ T8] usb 3-1: SerialNumber: syz [ 240.480781][T11121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2578'. [ 240.659440][T10950] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 240.684015][T10950] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 240.732488][T10950] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 240.755474][T10950] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 240.962060][T10950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.017672][T10950] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.047716][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.055011][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.091247][ T1122] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.098504][ T1122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.476153][T10950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.559337][ T8] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 241.603803][T10950] veth0_vlan: entered promiscuous mode [ 241.607584][ T8] cdc_ncm 3-1:1.0: bind() failure [ 241.622250][ T8] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 241.652963][T10950] veth1_vlan: entered promiscuous mode [ 241.658889][ T8] cdc_ncm 3-1:1.1: bind() failure [ 241.678983][ T8] usb 3-1: USB disconnect, device number 19 [ 241.772045][T10950] veth0_macvtap: entered promiscuous mode [ 241.788674][ T5213] Bluetooth: hci4: command tx timeout [ 241.827684][T10950] veth1_macvtap: entered promiscuous mode [ 241.922059][T10950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.943421][T10950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.963961][T10950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.988674][T10950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.005744][T10950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.016393][T10950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.026991][T10950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.049176][T10950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.068606][T10950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.081775][T10950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.094405][T10950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.126054][T10950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.147520][T10950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.167073][T10950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.209201][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 242.218487][T10950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.244308][T10950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.264655][T10950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.274987][T10950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.286380][T10950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.307303][T10950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.320095][T10950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.332057][T10950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.343596][T10950] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.353686][T10950] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.365168][T10950] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.389310][T10950] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.420492][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.463202][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.495129][ T8] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.515799][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 242.532246][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.586736][ T8] usb 5-1: Product: syz [ 242.600674][ T8] usb 5-1: Manufacturer: syz [ 242.605314][ T8] usb 5-1: SerialNumber: syz [ 242.640078][ T8] cdc_ncm 5-1:1.0: skipping garbage [ 242.655495][ T8] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 242.664762][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.686223][ T8] cdc_ncm 5-1:1.0: bind() failure [ 242.697877][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.774736][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.790871][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.430262][T11199] input: syz1 as /devices/virtual/input/input30 [ 244.972821][T10594] usb 5-1: USB disconnect, device number 21 [ 245.149285][T10601] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 245.349726][T10601] usb 4-1: Using ep0 maxpacket: 8 [ 245.360517][T10601] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.378133][T10601] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.421306][T10601] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 245.439722][T10601] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 245.461232][T10601] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.478657][T10601] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 245.501126][T10601] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 245.512354][T10601] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.539884][T10601] usb 4-1: Product: syz [ 245.554317][T10601] usb 4-1: Manufacturer: syz [ 245.570127][T10601] usb 4-1: SerialNumber: syz [ 245.820794][T10601] cdc_ncm 4-1:1.0: bind() failure [ 245.836237][T10601] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 245.852283][T10601] cdc_ncm 4-1:1.1: bind() failure [ 245.884276][T10601] usb 4-1: USB disconnect, device number 13 [ 246.133418][ T969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.792247][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.802120][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.811361][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.832511][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.840330][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 246.847645][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 352.298353][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 352.305344][ C1] rcu: 0-...!: (0 ticks this GP) idle=099c/1/0x4000000000000000 softirq=26746/26746 fqs=0 [ 352.316847][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11319/1:b..l P11320/1:b..l [ 352.326093][ C1] rcu: (detected by 1, t=10506 jiffies, g=39485, q=323 ncpus=2) [ 352.333825][ C1] Sending NMI from CPU 1 to CPUs 0: [ 352.339052][ C0] NMI backtrace for cpu 0 [ 352.339082][ C0] CPU: 0 UID: 0 PID: 11324 Comm: syz.1.2662 Not tainted 6.11.0-rc4-syzkaller #0 [ 352.339100][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 352.339115][ C0] RIP: 0010:validate_chain+0x108/0x5900 [ 352.339140][ C0] Code: b6 04 20 84 c0 0f 85 fc 4c 00 00 41 8b 5d 00 89 d8 25 00 80 04 00 3d 00 00 04 00 0f 85 7b 04 00 00 81 e3 ff 1f 00 00 48 89 d8 <48> c1 e8 06 48 8d 3c c5 40 48 4f 93 be 08 00 00 00 e8 52 27 87 00 [ 352.339153][ C0] RSP: 0018:ffffc90000007720 EFLAGS: 00000006 [ 352.339167][ C0] RAX: 000000000000096f RBX: 000000000000096f RCX: 1ffff92000000f04 [ 352.339179][ C0] RDX: 0000000000000001 RSI: ffff88806a8728e0 RDI: ffff88806a871e00 [ 352.339190][ C0] RBP: ffffc90000007a20 R08: ffffffff934f496f R09: 1ffffffff269e92d [ 352.339203][ C0] R10: dffffc0000000000 R11: fffffbfff269e92e R12: dffffc0000000000 [ 352.339215][ C0] R13: ffff88806a872900 R14: b1bd3135ec09def9 R15: ffff88806a872900 [ 352.339227][ C0] FS: 00007f7c1ecf66c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 352.339242][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 352.339254][ C0] CR2: 0000001b31e1eff8 CR3: 000000002ecd0000 CR4: 00000000003506f0 [ 352.339278][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 352.339287][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 352.339298][ C0] Call Trace: [ 352.339306][ C0] [ 352.339316][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 352.339339][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 352.339362][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 352.339389][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 352.339409][ C0] ? nmi_handle+0x14f/0x5a0 [ 352.339424][ C0] ? nmi_handle+0x2a/0x5a0 [ 352.339440][ C0] ? validate_chain+0x108/0x5900 [ 352.339455][ C0] ? default_do_nmi+0x63/0x160 [ 352.339475][ C0] ? exc_nmi+0x123/0x1f0 [ 352.339494][ C0] ? end_repeat_nmi+0xf/0x53 [ 352.339518][ C0] ? validate_chain+0x108/0x5900 [ 352.339534][ C0] ? validate_chain+0x108/0x5900 [ 352.339550][ C0] ? validate_chain+0x108/0x5900 [ 352.339565][ C0] [ 352.339570][ C0] [ 352.339577][ C0] ? __pfx_validate_chain+0x10/0x10 [ 352.339592][ C0] ? validate_chain+0x11e/0x5900 [ 352.339611][ C0] ? __lock_acquire+0x137a/0x2040 [ 352.339634][ C0] ? __pfx_validate_chain+0x10/0x10 [ 352.339654][ C0] ? mark_lock+0x9a/0x350 [ 352.339677][ C0] ? mark_lock+0x9a/0x350 [ 352.339701][ C0] ? __lock_acquire+0x137a/0x2040 [ 352.339727][ C0] ? mark_lock+0x9a/0x350 [ 352.339750][ C0] __lock_acquire+0x137a/0x2040 [ 352.339779][ C0] lock_acquire+0x1ed/0x550 [ 352.339799][ C0] ? advance_sched+0xab/0xca0 [ 352.339821][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 352.339843][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 352.339866][ C0] ? __hrtimer_run_queues+0x477/0xd50 [ 352.339883][ C0] ? __pfx_lock_release+0x10/0x10 [ 352.339907][ C0] ? __pfx_advance_sched+0x10/0x10 [ 352.339924][ C0] _raw_spin_lock+0x2e/0x40 [ 352.339944][ C0] ? advance_sched+0xab/0xca0 [ 352.339961][ C0] advance_sched+0xab/0xca0 [ 352.339979][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 352.340001][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 352.340026][ C0] ? __pfx_advance_sched+0x10/0x10 [ 352.340043][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 352.340060][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 352.340089][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 352.340106][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 352.340131][ C0] hrtimer_interrupt+0x396/0x990 [ 352.340158][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 352.340184][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 352.340207][ C0] [ 352.340212][ C0] [ 352.340218][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.340237][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 352.340258][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 5a c2 b7 f5 48 89 df e8 32 05 b9 f5 e8 dd bc e2 f5 fb bf 01 00 00 00 42 d0 aa f5 65 8b 05 b3 a4 4b 74 85 c0 74 06 5b c3 cc cc cc cc [ 352.340276][ C0] RSP: 0018:ffffc900038f7d00 EFLAGS: 00000286 [ 352.340289][ C0] RAX: ab1cce28b4954e00 RBX: ffff8880605e7088 RCX: ffffffff94cec903 [ 352.340302][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead540 RDI: 0000000000000001 [ 352.340313][ C0] RBP: 00000000ffffff83 R08: ffffffff8ff6c4ef R09: 1ffffffff1fed89d [ 352.340325][ C0] R10: dffffc0000000000 R11: fffffbfff1fed89e R12: ffff8880605e7000 [ 352.340337][ C0] R13: 7fffffffffffffff R14: ffff8880605e7080 R15: 0000000000000003 [ 352.340357][ C0] do_timerfd_settime+0xd33/0x1020 [ 352.340384][ C0] __x64_sys_timerfd_settime+0x16f/0x220 [ 352.340403][ C0] ? __pfx___x64_sys_timerfd_settime+0x10/0x10 [ 352.340426][ C0] ? do_syscall_64+0x100/0x230 [ 352.340443][ C0] ? do_syscall_64+0xb6/0x230 [ 352.340460][ C0] do_syscall_64+0xf3/0x230 [ 352.340476][ C0] ? clear_bhb_loop+0x35/0x90 [ 352.340495][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.340513][ C0] RIP: 0033:0x7f7c1df79e79 [ 352.340535][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.340548][ C0] RSP: 002b:00007f7c1ecf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011e [ 352.340563][ C0] RAX: ffffffffffffffda RBX: 00007f7c1e115f80 RCX: 00007f7c1df79e79 [ 352.340576][ C0] RDX: 0000000020000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 352.340586][ C0] RBP: 00007f7c1dfe7916 R08: 0000000000000000 R09: 0000000000000000 [ 352.340596][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.340606][ C0] R13: 0000000000000000 R14: 00007f7c1e115f80 R15: 00007ffe9c95cf18 [ 352.340624][ C0] [ 352.341055][ C1] task:syz.3.2663 state:R running task stack:23376 pid:11320 tgid:11320 ppid:5216 flags:0x00004000 [ 352.910713][ C1] Call Trace: [ 352.913996][ C1] [ 352.916937][ C1] __schedule+0x17ae/0x4a10 [ 352.921494][ C1] ? __pfx___schedule+0x10/0x10 [ 352.926364][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.932359][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.938702][ C1] ? preempt_schedule+0xe1/0xf0 [ 352.943568][ C1] preempt_schedule_common+0x84/0xd0 [ 352.948870][ C1] preempt_schedule+0xe1/0xf0 [ 352.953558][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 352.958959][ C1] preempt_schedule_thunk+0x1a/0x30 [ 352.964161][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 352.969456][ C1] ? unwind_next_frame+0x1e75/0x2a00 [ 352.974750][ C1] ? unwind_next_frame+0x211f/0x2a00 [ 352.980053][ C1] unwind_next_frame+0x2124/0x2a00 [ 352.985190][ C1] ? do_syscall_64+0xf3/0x230 [ 352.989877][ C1] ? do_syscall_64+0xf3/0x230 [ 352.994562][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 353.000726][ C1] arch_stack_walk+0x151/0x1b0 [ 353.005508][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.011588][ C1] stack_trace_save+0x118/0x1d0 [ 353.016450][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 353.021843][ C1] save_stack+0xfb/0x1f0 [ 353.026113][ C1] ? __pfx_save_stack+0x10/0x10 [ 353.030970][ C1] ? free_unref_folios+0x100f/0x1ac0 [ 353.036346][ C1] ? folios_put_refs+0x76e/0x860 [ 353.041378][ C1] ? free_pages_and_swap_cache+0x2ea/0x690 [ 353.047185][ C1] ? tlb_flush_mmu+0x3a3/0x680 [ 353.051971][ C1] ? tlb_finish_mmu+0xd4/0x200 [ 353.056744][ C1] ? exit_mmap+0x44f/0xc80 [ 353.061166][ C1] ? __mmput+0x115/0x380 [ 353.065412][ C1] ? exit_mm+0x220/0x310 [ 353.069654][ C1] ? do_exit+0x9b2/0x27f0 [ 353.073983][ C1] ? do_group_exit+0x207/0x2c0 [ 353.078747][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 353.083952][ C1] ? x64_sys_call+0x2634/0x2640 [ 353.088810][ C1] ? do_syscall_64+0xf3/0x230 [ 353.093506][ C1] ? page_ext_get+0x20/0x2a0 [ 353.098112][ C1] __reset_page_owner+0x76/0x430 [ 353.103056][ C1] ? page_ext_get+0x1d6/0x2a0 [ 353.107926][ C1] free_unref_folios+0x100f/0x1ac0 [ 353.113064][ C1] folios_put_refs+0x76e/0x860 [ 353.117850][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 353.123152][ C1] ? free_swap_cache+0xb3/0x880 [ 353.128008][ C1] free_pages_and_swap_cache+0x2ea/0x690 [ 353.133651][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 353.139855][ C1] ? tlb_table_flush+0x143/0x410 [ 353.144811][ C1] tlb_flush_mmu+0x3a3/0x680 [ 353.149522][ C1] ? __pfx_down_write+0x10/0x10 [ 353.154489][ C1] tlb_finish_mmu+0xd4/0x200 [ 353.159108][ C1] exit_mmap+0x44f/0xc80 [ 353.163380][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 353.168159][ C1] ? __asan_memset+0x23/0x50 [ 353.172784][ C1] ? uprobe_clear_state+0x277/0x290 [ 353.178086][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 353.183377][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 353.188588][ C1] __mmput+0x115/0x380 [ 353.192670][ C1] exit_mm+0x220/0x310 [ 353.196745][ C1] ? __pfx_exit_mm+0x10/0x10 [ 353.201339][ C1] ? taskstats_exit+0x326/0xa60 [ 353.206209][ C1] do_exit+0x9b2/0x27f0 [ 353.210371][ C1] ? preempt_schedule_common+0x84/0xd0 [ 353.215851][ C1] ? __pfx_do_exit+0x10/0x10 [ 353.220440][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 353.226432][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.232771][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 353.238157][ C1] do_group_exit+0x207/0x2c0 [ 353.242755][ C1] __x64_sys_exit_group+0x3f/0x40 [ 353.247790][ C1] x64_sys_call+0x2634/0x2640 [ 353.252476][ C1] do_syscall_64+0xf3/0x230 [ 353.256984][ C1] ? clear_bhb_loop+0x35/0x90 [ 353.261668][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.267574][ C1] RIP: 0033:0x7fb333379e79 [ 353.271991][ C1] RSP: 002b:00007fff07af1d48 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 353.280413][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb333379e79 [ 353.288385][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 353.296357][ C1] RBP: 00007fff07af1d9c R08: 00007fff07af1e2f R09: 000000000003c3b6 [ 353.304336][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 353.312310][ C1] R13: 000000000003c3b6 R14: 000000000003c343 R15: 00007fff07af1df0 [ 353.320310][ C1] [ 353.323341][ C1] task:syz.4.2660 state:R running task stack:23800 pid:11319 tgid:11314 ppid:5214 flags:0x00004002 [ 353.335086][ C1] Call Trace: [ 353.338366][ C1] [ 353.341306][ C1] __schedule+0x17ae/0x4a10 [ 353.345848][ C1] ? __pfx___schedule+0x10/0x10 [ 353.350711][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 353.356712][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 353.362016][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 353.367141][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 353.372894][ C1] irqentry_exit+0x5e/0x90 [ 353.377318][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 353.382785][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x1e0/0x220 [ 353.389644][ C1] Code: 00 4d 85 ed 75 16 e8 df 6b 12 00 eb 15 e8 d8 6b 12 00 e8 33 fc 2c 0a 4d 85 ed 74 ea e8 c9 6b 12 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 353.409257][ C1] RSP: 0018:ffffc90003e9f760 EFLAGS: 00000246 [ 353.415334][ C1] RAX: ffffffff81811e97 RBX: 0000000000000000 RCX: 0000000000040000 [ 353.423321][ C1] RDX: ffffc9000aa95000 RSI: 000000000003ffff RDI: 0000000000040000 [ 353.431296][ C1] RBP: ffffc90003e9f818 R08: ffffffff81811e6d R09: 1ffffffff1fed89d [ 353.439279][ C1] R10: dffffc0000000000 R11: fffffbfff1fed89e R12: dffffc0000000000 [ 353.447257][ C1] R13: 0000000000000200 R14: 0000000000000046 R15: 1ffff920007d3eec [ 353.455238][ C1] ? seqcount_lockdep_reader_access+0x1ad/0x220 [ 353.461490][ C1] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 353.467751][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 353.474352][ C1] ? ktime_get+0x3c/0xb0 [ 353.478605][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 353.483822][ C1] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 353.490092][ C1] timekeeping_get_ns+0x5c/0x420 [ 353.495044][ C1] ? bpf_test_run+0x370/0xa90 [ 353.499729][ C1] ktime_get+0x89/0xb0 [ 353.503805][ C1] bpf_test_timer_continue+0x20f/0x350 [ 353.509275][ C1] bpf_test_run+0x594/0xa90 [ 353.513784][ C1] ? do_syscall_64+0xf3/0x230 [ 353.518463][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.524540][ C1] ? bpf_test_run+0x370/0xa90 [ 353.529236][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 353.534279][ C1] ? eth_type_trans+0x3d1/0x7a0 [ 353.539152][ C1] ? __pfx_eth_type_trans+0x10/0x10 [ 353.544454][ C1] ? convert___skb_to_skb+0x41/0x620 [ 353.549749][ C1] bpf_prog_test_run_skb+0xc97/0x1820 [ 353.555202][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 353.561027][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 353.566849][ C1] bpf_prog_test_run+0x33a/0x3b0 [ 353.571804][ C1] __sys_bpf+0x48d/0x810 [ 353.576058][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 353.580845][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 353.586843][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.593189][ C1] ? do_syscall_64+0x100/0x230 [ 353.598050][ C1] __x64_sys_bpf+0x7c/0x90 [ 353.602473][ C1] do_syscall_64+0xf3/0x230 [ 353.606989][ C1] ? clear_bhb_loop+0x35/0x90 [ 353.611676][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.617575][ C1] RIP: 0033:0x7f0ea9979e79 [ 353.621992][ C1] RSP: 002b:00007f0eaa70b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.630412][ C1] RAX: ffffffffffffffda RBX: 00007f0ea9b16058 RCX: 00007f0ea9979e79 [ 353.638392][ C1] RDX: 0000000000000050 RSI: 0000000020000080 RDI: 000000000000000a [ 353.646368][ C1] RBP: 00007f0ea99e7916 R08: 0000000000000000 R09: 0000000000000000 [ 353.654343][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.662415][ C1] R13: 0000000000000000 R14: 00007f0ea9b16058 R15: 00007ffdb2655da8 [ 353.670407][ C1] [ 353.673428][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g39485 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 353.685752][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=19325 [ 353.693639][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g39485 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 353.705004][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 353.714973][ C1] rcu: RCU grace-period kthread stack dump: [ 353.720857][ C1] task:rcu_preempt state:I stack:25816 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 353.731038][ C1] Call Trace: [ 353.734321][ C1] [ 353.737258][ C1] __schedule+0x17ae/0x4a10 [ 353.741798][ C1] ? __pfx___schedule+0x10/0x10 [ 353.746661][ C1] ? __pfx_lock_release+0x10/0x10 [ 353.751697][ C1] ? __asan_memset+0x23/0x50 [ 353.756300][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 353.762115][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.768452][ C1] ? schedule+0x90/0x320 [ 353.772705][ C1] schedule+0x14b/0x320 [ 353.776879][ C1] schedule_timeout+0x1be/0x310 [ 353.781742][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 353.787122][ C1] ? __pfx_process_timeout+0x10/0x10 [ 353.792425][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 353.797989][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 353.802847][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 353.808070][ C1] ? rcu_gp_init+0x1256/0x1630 [ 353.812857][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 353.817809][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 353.824322][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 353.829616][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 353.835525][ C1] ? finish_swait+0xd4/0x1e0 [ 353.840126][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 353.844727][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 353.849931][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 353.855837][ C1] ? __kthread_parkme+0x169/0x1d0 [ 353.860885][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 353.866091][ C1] kthread+0x2f0/0x390 [ 353.870177][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 353.875385][ C1] ? __pfx_kthread+0x10/0x10 [ 353.879991][ C1] ret_from_fork+0x4b/0x80 [ 353.884418][ C1] ? __pfx_kthread+0x10/0x10 [ 353.889019][ C1] ret_from_fork_asm+0x1a/0x30 [ 353.893809][ C1]